@cosmicdrift/kumiko-bundled-features 0.361.0 → 0.363.0

package/dist/admin-shell/feature.d.ts

@@ -12,6 +12,9 @@ export type CreateAdminShellOptions = {
      *  Requires cap-overview mounted. Default false — apps that don't mount cap-overview
      *  must not get a nav entry pointing at a screen that doesn't exist. */
     readonly includeCapOverview?: boolean;
+    /** Tenant nav → document-designer:nav:templates, platform nav → document-designer:nav:platform-templates.
+     *  Requires document-designer mounted (a separate package, so no import here). Default false. */
+    readonly includeDocumentDesigner?: boolean;
     /** When false, only overview screens + nav are registered — app owns r.workspace(). Default true. */
     readonly registerWorkspaces?: boolean;
     /** Metric list the overview panels are built from — pass the SAME list to

package/dist/admin-shell/feature.js

@@ -11,10 +11,11 @@ export function createAdminShellFeature(options = {}) {
     const platformWsId = options.workspaceIds?.platform ?? DEFAULT_PLATFORM_WORKSPACE_ID;
     const includeTierAdmin = options.includeTierAdmin ?? true;
     const includeCapOverview = options.includeCapOverview ?? false;
+    const includeDocumentDesigner = options.includeDocumentDesigner ?? false;
     const registerWorkspaces = options.registerWorkspaces ?? true;
     const metrics = options.metrics ?? DEFAULT_METRICS;
     return defineFeature(ADMIN_SHELL_FEATURE, (r) => {
-        r.describe("Registers tenant-admin and platform-admin workspaces with provider nav into owner-feature screens (`tenant:screen:members`, `audit:screen:audit-log`, `tenant:screen:tenant-list`, `jobs:screen:job-runs`, optional `tier-engine:screen:tier-admin`, optional `cap-overview:screen:my-caps`/`cap-overview:screen:tenant-cap-list`) and the two overview dashboards, built from the metrics list (`metrics` option, default DEFAULT_METRICS). Mount after user, tenant, audit, jobs, metrics and metrics-system; pass `workspaceIds` to match app URL conventions (e.g. Studio `d`/`s`, PublicStatus `admin`/`sysadmin`). Client: `adminShellClient()`, `tenantClient()`, `auditClient()`, `jobsClient()`, optional `tierEngineClient()`.");
+        r.describe("Registers tenant-admin and platform-admin workspaces with provider nav into owner-feature screens (`tenant:screen:members`, `audit:screen:audit-log`, `tenant:screen:tenant-list`, `jobs:screen:job-runs`, optional `tier-engine:screen:tier-admin`, optional `cap-overview:screen:my-caps`/`cap-overview:screen:tenant-cap-list`, optional `document-designer` template navs) and the two overview dashboards, built from the metrics list (`metrics` option, default DEFAULT_METRICS). Mount after user, tenant, audit, jobs, metrics and metrics-system; pass `workspaceIds` to match app URL conventions (e.g. Studio `d`/`s`, PublicStatus `admin`/`sysadmin`). Client: `adminShellClient()`, `tenantClient()`, `auditClient()`, `jobsClient()`, optional `tierEngineClient()`.");
         r.uiHints({
             displayLabel: "Admin Shell",
             category: "operations",
@@ -30,18 +31,22 @@ export function createAdminShellFeature(options = {}) {
             r.requires("tier-engine");
         if (includeCapOverview)
             r.requires("cap-overview");
+        if (includeDocumentDesigner)
+            r.requires("document-designer");
         r.translations({ keys: ADMIN_SHELL_I18N });
         const tenantNav = [
             "admin-shell:nav:tenant-overview",
             "tenant:nav:members",
             "audit:nav:audit-log",
             ...(includeCapOverview ? ["admin-shell:nav:my-caps"] : []),
+            ...(includeDocumentDesigner ? ["document-designer:nav:templates"] : []),
         ];
         const platformNav = [
             "admin-shell:nav:platform-overview",
             "admin-shell:nav:tenants",
             ...(includeCapOverview ? ["admin-shell:nav:tenant-caps"] : []),
             "jobs:nav:job-runs",
+            ...(includeDocumentDesigner ? ["document-designer:nav:platform-templates"] : []),
             ...(includeTierAdmin ? ["admin-shell:nav:tier-admin"] : []),
         ];
         r.screen({

package/dist/agent-tools/agent-manifest.js

@@ -1,5 +1,6 @@
 import { hasAccess, isAgentVisibleScreen, resolveAgentExposure, SYSTEM_ONLY_JSON_SCHEMA_KEY, } from "@cosmicdrift/kumiko-framework/engine";
 import { translationValueOtherText } from "@cosmicdrift/kumiko-framework/ui-types";
+import { isPlainObject } from "@cosmicdrift/kumiko-types/type-guards";
 import * as z from "zod";
 import { recordManifestDenyQns } from "./manifest-deny-qns.js";
 /** The manifest surfaces one string per locale — a plural entry reads as its
@@ -124,7 +125,7 @@ export function systemOnlyPropertyNames(jsonSchema) {
     if (typeof properties !== "object" || properties === null)
         return [];
     return Object.entries(properties)
-        .filter(([, property]) => property[SYSTEM_ONLY_JSON_SCHEMA_KEY] === true)
+        .filter(([, property]) => isPlainObject(property) && property[SYSTEM_ONLY_JSON_SCHEMA_KEY] === true)
         .map(([name]) => name);
 }
 function withoutSystemOnlyProperties(jsonSchema) {

package/dist/agent-tools/filter-ops.d.ts

@@ -1,2 +1,2 @@
 export declare const FILTER_OPS: readonly ["eq", "ne", "lt", "gt", "lte", "gte", "in"];
-export declare function isRecord(value: unknown): value is Record<string, unknown>;
+export { isPlainObject as isRecord } from "@cosmicdrift/kumiko-types/type-guards";

package/dist/agent-tools/filter-ops.js

@@ -1,4 +1,2 @@
 export const FILTER_OPS = ["eq", "ne", "lt", "gt", "lte", "gte", "in"];
-export function isRecord(value) {
-    return typeof value === "object" && value !== null && !Array.isArray(value);
-}
+export { isPlainObject as isRecord } from "@cosmicdrift/kumiko-types/type-guards";

package/dist/agent-tools/tool-dispatch.js

@@ -1,10 +1,11 @@
 import { runAsDirectCallEntry } from "@cosmicdrift/kumiko-framework/internal/request-context";
+import { isOneOf } from "@cosmicdrift/kumiko-types/type-guards";
 import { FILTER_OPS, isRecord } from "./filter-ops.js";
 const SEARCH_RESULT_LIMIT = 10;
 const DEFAULT_LIST_LIMIT = 10;
 const MAX_LIST_LIMIT = 200;
 function isFilterOp(value) {
-    return typeof value === "string" && FILTER_OPS.includes(value);
+    return isOneOf(FILTER_OPS, value);
 }
 function buildSearchPayload(toolName, toolInput) {
     const query = toolInput["query"];

package/dist/auth-email-password/email-templates.d.ts

@@ -1,35 +1,13 @@
 export type AuthMailLocale = string;
 export declare const AUTH_MAIL_EN: Readonly<Record<string, string>>;
-export type RenderTokenContentArgs = {
-    readonly url: string;
+export type TokenMailTiming = {
     readonly expiresAt: string;
-    readonly locale?: AuthMailLocale;
-    /** Optional app name for subject + intro. Default from auth.mail.appNameDefault. */
-    readonly appName?: string;
     /** ISO instant the token was issued; the validity duration is measured from it. Default: now. */
     readonly issuedAt?: string;
     /** IANA zone the expiry time is shown in. Default "UTC"; an invalid zone falls back to "UTC". */
     readonly timeZone?: string;
 };
-export type RenderInviteEmailArgs = RenderTokenContentArgs & {
-    readonly role: string;
+export declare function tokenMailExpiry(args: TokenMailTiming, locale: string): {
+    readonly validFor: string;
+    readonly validUntil: string;
 };
-export type AuthMailSection = {
-    readonly text: string;
-} | {
-    readonly button: {
-        readonly label: string;
-        readonly url: string;
-    };
-};
-export type AuthMailContent = {
-    readonly subject: string;
-    readonly header: string;
-    readonly sections: readonly AuthMailSection[];
-    readonly footer: string;
-};
-export declare function renderResetPasswordEmail(args: RenderTokenContentArgs): AuthMailContent;
-export declare function renderUnlockAccountEmail(args: RenderTokenContentArgs): AuthMailContent;
-export declare function renderVerifyEmail(args: RenderTokenContentArgs): AuthMailContent;
-export declare function renderActivationEmail(args: RenderTokenContentArgs): AuthMailContent;
-export declare function renderInviteEmail(args: RenderInviteEmailArgs): AuthMailContent;

package/dist/auth-email-password/email-templates.js

@@ -1,13 +1,10 @@
-// Default renderers for the transactional auth mails. All four magic-link flows
-// (password-reset, email-verification, signup-activation, invite) emit
-// structured AuthMailContent that the handler hands to delivery (ctx.notify) —
-// renderer-simple turns it into HTML. Apps wanting their own branding swap the
-// renderer; these templates are deliberately plain so the renderer (and the
-// operator reading the mailer log) can rely on them.
+// English texts and expiry formatting for the transactional auth mails. The
+// mail bodies are built from these keys into stored templates (see
+// mail-notifications.ts).
 //
 // English ships here. Other languages register via @cosmicdrift/kumiko-locale-*
 // (localeDe() / localeEs() call registerMailTranslations).
-import { mailT, registerMailTranslations } from "@cosmicdrift/kumiko-framework/i18n";
+import { registerMailTranslations } from "@cosmicdrift/kumiko-framework/i18n";
 import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 export const AUTH_MAIL_EN = {
     "auth.mail.appNameDefault": "Account",
@@ -43,96 +40,6 @@ export const AUTH_MAIL_EN = {
     "auth.mail.unlock.ignore": "If you didn't trigger this lock, you can ignore this email — the lock expires on its own.",
 };
 registerMailTranslations("en", AUTH_MAIL_EN);
-function tokenMailContent(spec) {
-    return {
-        subject: spec.subject,
-        header: spec.header,
-        sections: [
-            { text: spec.greeting },
-            { text: spec.intro },
-            { button: { label: spec.buttonLabel, url: spec.buttonUrl } },
-            { text: spec.expiry },
-        ],
-        footer: spec.ignore,
-    };
-}
-function t(locale, key, params) {
-    return mailT(locale, key, params);
-}
-function appNameFor(args) {
-    const locale = args.locale ?? "en";
-    return args.appName ?? t(locale, "auth.mail.appNameDefault");
-}
-export function renderResetPasswordEmail(args) {
-    const locale = args.locale ?? "en";
-    const app = appNameFor(args);
-    return tokenMailContent({
-        subject: t(locale, "auth.mail.reset.subject", { app }),
-        header: t(locale, "auth.mail.reset.button"),
-        greeting: t(locale, "auth.mail.reset.greeting"),
-        intro: t(locale, "auth.mail.reset.intro", { app }),
-        buttonLabel: t(locale, "auth.mail.reset.button"),
-        buttonUrl: args.url,
-        expiry: t(locale, "auth.mail.reset.expiry", expiryParams(args, locale)),
-        ignore: t(locale, "auth.mail.reset.ignore"),
-    });
-}
-export function renderUnlockAccountEmail(args) {
-    const locale = args.locale ?? "en";
-    const app = appNameFor(args);
-    return tokenMailContent({
-        subject: t(locale, "auth.mail.unlock.subject", { app }),
-        header: t(locale, "auth.mail.unlock.button"),
-        greeting: t(locale, "auth.mail.unlock.greeting"),
-        intro: t(locale, "auth.mail.unlock.intro", { app }),
-        buttonLabel: t(locale, "auth.mail.unlock.button"),
-        buttonUrl: args.url,
-        expiry: t(locale, "auth.mail.unlock.expiry", expiryParams(args, locale)),
-        ignore: t(locale, "auth.mail.unlock.ignore"),
-    });
-}
-export function renderVerifyEmail(args) {
-    const locale = args.locale ?? "en";
-    const app = appNameFor(args);
-    return tokenMailContent({
-        subject: t(locale, "auth.mail.verify.subject", { app }),
-        header: t(locale, "auth.mail.verify.button"),
-        greeting: t(locale, "auth.mail.verify.greeting"),
-        intro: t(locale, "auth.mail.verify.intro", { app }),
-        buttonLabel: t(locale, "auth.mail.verify.button"),
-        buttonUrl: args.url,
-        expiry: t(locale, "auth.mail.verify.expiry", expiryParams(args, locale)),
-        ignore: t(locale, "auth.mail.verify.ignore"),
-    });
-}
-export function renderActivationEmail(args) {
-    const locale = args.locale ?? "en";
-    const app = appNameFor(args);
-    return tokenMailContent({
-        subject: t(locale, "auth.mail.activation.subject", { app }),
-        header: t(locale, "auth.mail.activation.button"),
-        greeting: t(locale, "auth.mail.activation.greeting"),
-        intro: t(locale, "auth.mail.activation.intro", { app }),
-        buttonLabel: t(locale, "auth.mail.activation.button"),
-        buttonUrl: args.url,
-        expiry: t(locale, "auth.mail.activation.expiry", expiryParams(args, locale)),
-        ignore: t(locale, "auth.mail.activation.ignore"),
-    });
-}
-export function renderInviteEmail(args) {
-    const locale = args.locale ?? "en";
-    const app = args.appName ?? "Workspace";
-    return tokenMailContent({
-        subject: t(locale, "auth.mail.invite.subject", { app }),
-        header: t(locale, "auth.mail.invite.button"),
-        greeting: t(locale, "auth.mail.invite.greeting"),
-        intro: t(locale, "auth.mail.invite.intro", { app, role: args.role }),
-        buttonLabel: t(locale, "auth.mail.invite.button"),
-        buttonUrl: args.url,
-        expiry: t(locale, "auth.mail.invite.expiry", expiryParams(args, locale)),
-        ignore: t(locale, "auth.mail.invite.ignore"),
-    });
-}
 const MS_PER_MINUTE = 60_000;
 const MS_PER_HOUR = 60 * MS_PER_MINUTE;
 const MS_PER_DAY = 24 * MS_PER_HOUR;
@@ -185,16 +92,17 @@ function formatWhen(expiresAt, locale, timeZone) {
         }
     }
 }
-function expiryParams(args, locale) {
+// Formatted as text here because the stored template only knows plain variables.
+export function tokenMailExpiry(args, locale) {
     try {
         const expiresAt = Temporal.Instant.from(args.expiresAt);
         const issuedAt = args.issuedAt ? Temporal.Instant.from(args.issuedAt) : Temporal.Now.instant();
         return {
-            duration: formatDuration(expiresAt.epochMilliseconds - issuedAt.epochMilliseconds, locale),
-            when: formatWhen(expiresAt, locale, args.timeZone ?? "UTC"),
+            validFor: formatDuration(expiresAt.epochMilliseconds - issuedAt.epochMilliseconds, locale),
+            validUntil: formatWhen(expiresAt, locale, args.timeZone ?? "UTC"),
         };
     }
     catch {
-        return { duration: args.expiresAt, when: args.expiresAt };
+        return { validFor: args.expiresAt, validUntil: args.expiresAt };
     }
 }

package/dist/auth-email-password/feature.js

@@ -19,6 +19,7 @@ import { createSignupConfirmHandler } from "./handlers/signup-confirm.write.js";
 import { createSignupRequestHandler, } from "./handlers/signup-request.write.js";
 import { createSwitchTenantMfaGateHandler } from "./handlers/switch-tenant-mfa-gate.write.js";
 import { createVerifyEmailHandler } from "./handlers/verify-email.write.js";
+import { AUTH_MAIL_VARIABLES, authMailLocalizedTemplate, INVITE_MAIL_VARIABLES, sendsMagicLinkMail, } from "./mail-notifications.js";
 /**
  * Env-vars contract for the `auth-email-password` feature.
  *
@@ -85,14 +86,31 @@ export function createAuthEmailPasswordFeature(opts = {}) {
         // All five magic-link flows (reset/verify/signup/invite/unlock) dispatch
         // via ctx.notify → delivery must be mounted. Fail closed at boot instead
         // of silently dropping the mail.
-        if (opts.passwordReset ||
-            opts.emailVerification ||
-            opts.signup ||
-            opts.invite ||
-            opts.accountUnlock) {
+        if (sendsMagicLinkMail(opts))
             r.requires("delivery");
-        }
         r.envSchema(authEmailPasswordEnvSchema);
+        // Declared unconditionally: apps also issue the activation link from their
+        // own flows (issueSignupActivation) without enabling the signup option.
+        r.notification("password-reset", {
+            variables: AUTH_MAIL_VARIABLES,
+            localizedTemplate: authMailLocalizedTemplate("passwordReset"),
+        });
+        r.notification("account-unlock", {
+            variables: AUTH_MAIL_VARIABLES,
+            localizedTemplate: authMailLocalizedTemplate("accountUnlock"),
+        });
+        r.notification("email-verification", {
+            variables: AUTH_MAIL_VARIABLES,
+            localizedTemplate: authMailLocalizedTemplate("emailVerification"),
+        });
+        r.notification("signup-activation", {
+            variables: AUTH_MAIL_VARIABLES,
+            localizedTemplate: authMailLocalizedTemplate("signupActivation"),
+        });
+        r.notification("invite", {
+            variables: INVITE_MAIL_VARIABLES,
+            localizedTemplate: authMailLocalizedTemplate("invite"),
+        });
         const handlers = {
             login: r.writeHandler(createLoginHandler({
                 strictEmailVerification: strictVerification,

package/dist/auth-email-password/handlers/invite-create.write.js

@@ -33,11 +33,10 @@ import { GLOBAL_ROLE_OPTIONS } from "../../user/constants.js";
 // kumiko-lint-ignore cross-feature-import invitee lookup by email reads the user row
 import { userTable } from "../../user/schema/user.js";
 import { AUTH_INVITE_DEFAULT_TTL_MINUTES } from "../constants.js";
-import { renderInviteEmail } from "../email-templates.js";
 import { inviteAlreadyAccepted } from "../errors.js";
 import { invalidateExistingInviteToken, storeInviteToken } from "../invite-token-store.js";
 import { dispatchMagicLinkMail, resolveHandlerMailLocale } from "../magic-link-mail.js";
-const INVITE_NOTIFICATION_TYPE = "auth-email-password:invite";
+import { AuthMailNotificationTypes } from "../mail-notifications.js";
 const InviteCreateSchema = z.object({
     email: z.email(),
     role: z.string().min(1).max(50),
@@ -137,8 +136,8 @@ async function issueInvitation(opts, ttlSeconds, request, inviter, ctx, refuseAc
     const locale = resolveHandlerMailLocale(ctx, opts.locale);
     await dispatchMagicLinkMail(ctx.notify, {
         handlerName: "invite-create",
-        notificationType: INVITE_NOTIFICATION_TYPE,
-        renderContent: (renderArgs) => renderInviteEmail({ ...renderArgs, role: request.role }),
+        notificationType: AuthMailNotificationTypes.invite,
+        fallbackAppName: "Workspace",
     }, {
         email,
         appUrl: opts.appUrl,
@@ -146,6 +145,7 @@ async function issueInvitation(opts, ttlSeconds, request, inviter, ctx, refuseAc
         expiresAt: expiresAt.toString(),
         issuedAt: issuedAt.toString(),
         timeZone: ctx.tz.user,
+        role: request.role,
         ...(opts.appName !== undefined && { appName: opts.appName }),
         locale,
     });

package/dist/auth-email-password/handlers/request-account-unlock.write.js

@@ -1,8 +1,7 @@
 import { AUTH_UNLOCK_DEFAULT_TTL_MINUTES, AuthErrors } from "../constants.js";
-import { renderUnlockAccountEmail } from "../email-templates.js";
+import { AuthMailNotificationTypes } from "../mail-notifications.js";
 import { signUnlockToken } from "../unlock-token.js";
 import { createTokenRequestHandler, } from "./token-request-handler.js";
-const UNLOCK_NOTIFICATION_TYPE = "auth-email-password:account-unlock";
 // @wrapper-known semantic-alias
 export function createRequestAccountUnlockHandler(opts) {
     return createTokenRequestHandler({
@@ -18,7 +17,6 @@ export function createRequestAccountUnlockHandler(opts) {
         // locked right now. Confirming just clears the (possibly already
         // empty) lockout state — harmless no-op if they weren't locked.
         extraSilentSkip: () => false,
-        notificationType: UNLOCK_NOTIFICATION_TYPE,
-        renderContent: renderUnlockAccountEmail,
+        notificationType: AuthMailNotificationTypes.accountUnlock,
     }, opts);
 }

package/dist/auth-email-password/handlers/request-email-verification.write.js

@@ -1,8 +1,7 @@
 import { AUTH_VERIFY_DEFAULT_TTL_MINUTES, AuthErrors } from "../constants.js";
-import { renderVerifyEmail } from "../email-templates.js";
+import { AuthMailNotificationTypes } from "../mail-notifications.js";
 import { signVerificationToken } from "../verification-token.js";
 import { createTokenRequestHandler, } from "./token-request-handler.js";
-const VERIFY_NOTIFICATION_TYPE = "auth-email-password:email-verification";
 // @wrapper-known semantic-alias
 export function createRequestEmailVerificationHandler(opts) {
     return createTokenRequestHandler({
@@ -17,7 +16,6 @@ export function createRequestEmailVerificationHandler(opts) {
         // unknown/deleted to keep the enumeration surface symmetric — the
         // caller sees the same 200 regardless of whether a token was minted.
         extraSilentSkip: (user) => user.emailVerified === true,
-        notificationType: VERIFY_NOTIFICATION_TYPE,
-        renderContent: renderVerifyEmail,
+        notificationType: AuthMailNotificationTypes.emailVerification,
     }, opts);
 }

package/dist/auth-email-password/handlers/request-password-reset.write.js

@@ -1,8 +1,7 @@
 import { AUTH_RESET_DEFAULT_TTL_MINUTES, AuthErrors } from "../constants.js";
-import { renderResetPasswordEmail } from "../email-templates.js";
+import { AuthMailNotificationTypes } from "../mail-notifications.js";
 import { signResetToken } from "../reset-token.js";
 import { createTokenRequestHandler, } from "./token-request-handler.js";
-const RESET_NOTIFICATION_TYPE = "auth-email-password:password-reset";
 // @wrapper-known semantic-alias
 export function createRequestPasswordResetHandler(opts) {
     return createTokenRequestHandler({
@@ -17,7 +16,6 @@ export function createRequestPasswordResetHandler(opts) {
         // non-deleted user can initiate a reset regardless of verification
         // state. The sessions feature handles the post-change revocation.
         extraSilentSkip: () => false,
-        notificationType: RESET_NOTIFICATION_TYPE,
-        renderContent: renderResetPasswordEmail,
+        notificationType: AuthMailNotificationTypes.passwordReset,
     }, opts);
 }

package/dist/auth-email-password/handlers/signup-confirm.write.js

@@ -23,6 +23,7 @@ import { defineWriteHandler, } from "@cosmicdrift/kumiko-framework/engine";
 import { ConflictError, InternalError, reraiseAsKumikoError, writeFailure, } from "@cosmicdrift/kumiko-framework/errors";
 import { generateUniqueName } from "@cosmicdrift/kumiko-framework/random";
 import { generateId } from "@cosmicdrift/kumiko-framework/utils";
+import { isPlainObject } from "@cosmicdrift/kumiko-types/type-guards";
 import * as z from "zod";
 import { findSignupHandoverProvider, registrationLocaleFromRequest, SIGNUP_HANDOVER_BENIGN_CLAIM_REJECTION_CODE, } from "../../shared/index.js";
 // kumiko-lint-ignore cross-feature-import signup-confirm reads tenants.key for slug-uniqueness check (TOCTOU + DB-unique-index zusammen)
@@ -44,10 +45,8 @@ const SIGNUP_CONFIRM_PROVISION_REASON = "provisions a new tenant, its first user
 // directly against SIGNUP_HANDOVER_BENIGN_CLAIM_REJECTION_CODE would never
 // match; this reads the same field the framework itself uses.
 function isBenignClaimRejection(error) {
-    return (typeof error.details === "object" &&
-        error.details !== null &&
-        error.details["reason"] ===
-            SIGNUP_HANDOVER_BENIGN_CLAIM_REJECTION_CODE);
+    return (isPlainObject(error.details) &&
+        error.details["reason"] === SIGNUP_HANDOVER_BENIGN_CLAIM_REJECTION_CODE);
 }
 // Rides the caller's tx. A benign claim rejection (nothing was written) logs
 // and yields undefined; any other failure — including a real DB error, which

package/dist/auth-email-password/handlers/token-request-handler.d.ts

@@ -1,7 +1,7 @@
 import type { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import * as z from "zod";
 import { type AuthUserRow } from "../auth-user-row.js";
-import type { AuthMailContent, AuthMailLocale, RenderTokenContentArgs } from "../email-templates.js";
+import type { AuthMailLocale } from "../email-templates.js";
 export type TokenRequestSuccess<K extends string> = {
     readonly kind: K;
     readonly email: string;
@@ -25,7 +25,6 @@ export type TokenRequestSpec<TName extends string, TSuccessKind extends string>
     readonly notConfiguredI18nKey: string;
     readonly extraSilentSkip: (user: AuthUserRow) => boolean;
     readonly notificationType: string;
-    readonly renderContent: (args: RenderTokenContentArgs) => AuthMailContent;
 };
 export type TokenRequestOptions = {
     readonly hmacSecret: string;

package/dist/auth-email-password/handlers/token-request-handler.js

@@ -67,7 +67,6 @@ export function createTokenRequestHandler(spec, opts) {
             await dispatchMagicLinkMail(ctx.notify, {
                 handlerName: spec.handlerName,
                 notificationType: spec.notificationType,
-                renderContent: spec.renderContent,
             }, {
                 // Row value is ciphertext with an active KMS; the byte-exact
                 // lookup above guarantees the payload IS the stored plaintext.

package/dist/auth-email-password/index.d.ts

@@ -3,10 +3,10 @@ export { type AuthPath, type AuthPaths, DEFAULT_AUTH_PATHS, makeAuthPaths } from
 export type { BootstrapConfigValue, BootstrapDeps, BootstrapInvite, BootstrapInviteOutcome, BootstrapPlan, BootstrapReport, BootstrapSeedDeps, BootstrapSystemAdmin, BootstrapTenant, BootstrapTenantOutcome, } from "./bootstrap.js";
 export { BootstrapPlanError, BootstrapWriteError, bootstrapTenants } from "./bootstrap.js";
 export { AUTH_EMAIL_PASSWORD_FEATURE, AuthErrors, AuthHandlers, AuthQueries } from "./constants.js";
-export type { AuthMailContent, AuthMailLocale, AuthMailSection, RenderInviteEmailArgs, RenderTokenContentArgs, } from "./email-templates.js";
-export { renderActivationEmail, renderInviteEmail, renderResetPasswordEmail, renderUnlockAccountEmail, renderVerifyEmail, } from "./email-templates.js";
+export type { AuthMailLocale } from "./email-templates.js";
 export type { AccountLockoutOptions, AccountUnlockOptions, AuthEmailPasswordOptions, EmailVerificationOptions, InviteOptions, PasswordResetOptions, SignupOptions, } from "./feature.js";
 export { authEmailPasswordEnvSchema, createAuthEmailPasswordFeature } from "./feature.js";
+export { AuthMailNotificationTypes } from "./mail-notifications.js";
 export { AUTH_SELF_REGISTRATION_FEATURE, createAuthSelfRegistrationToggleFeature, } from "./self-registration-toggle.js";
 export { signToken, TokenPurpose, type VerifyResult, verifyToken } from "./signed-token.js";
 export { type IssuedSignupActivation, type IssueSignupActivationArgs, issueSignupActivation, SIGNUP_ACTIVATION_NOTIFICATION_TYPE, } from "./signup-activation.js";

package/dist/auth-email-password/index.js

@@ -8,8 +8,8 @@ export { hashPassword, verifyPassword } from "../shared/password-hashing.js";
 export { DEFAULT_AUTH_PATHS, makeAuthPaths } from "./auth-paths.js";
 export { BootstrapPlanError, BootstrapWriteError, bootstrapTenants } from "./bootstrap.js";
 export { AUTH_EMAIL_PASSWORD_FEATURE, AuthErrors, AuthHandlers, AuthQueries } from "./constants.js";
-export { renderActivationEmail, renderInviteEmail, renderResetPasswordEmail, renderUnlockAccountEmail, renderVerifyEmail, } from "./email-templates.js";
 export { authEmailPasswordEnvSchema, createAuthEmailPasswordFeature } from "./feature.js";
+export { AuthMailNotificationTypes } from "./mail-notifications.js";
 export { AUTH_SELF_REGISTRATION_FEATURE, createAuthSelfRegistrationToggleFeature, } from "./self-registration-toggle.js";
 // Generic HMAC-signed single-purpose token helpers. Re-exported damit
 // app-spezifische out-of-band-Flows (subscriber-confirm, magic-links,

package/dist/auth-email-password/magic-link-mail.d.ts

@@ -1,9 +1,9 @@
 import type { NotifyFn } from "@cosmicdrift/kumiko-framework/engine";
-import type { AuthMailContent, AuthMailLocale, RenderTokenContentArgs } from "./email-templates.js";
+import { type AuthMailLocale } from "./email-templates.js";
 export type MagicLinkMailSpec = {
     readonly handlerName: string;
     readonly notificationType: string;
-    readonly renderContent: (args: RenderTokenContentArgs) => AuthMailContent;
+    readonly fallbackAppName?: string;
 };
 export type MagicLinkMailParams = {
     readonly email: string;
@@ -14,6 +14,7 @@ export type MagicLinkMailParams = {
     readonly locale?: AuthMailLocale;
     readonly issuedAt?: string;
     readonly timeZone?: string;
+    readonly role?: string;
 };
 export declare function resolveHandlerMailLocale(ctx: {
     readonly locale?: string;

package/dist/auth-email-password/magic-link-mail.js

@@ -1,13 +1,15 @@
 // Shared dispatch for the magic-link mails (password-reset, email-verification,
-// signup-activation). All three follow the same delivery shape: append the
-// token to the app page, render structured content, and notify the recipient
-// email directly (route:{email} skips preferences — the recipient may not have
-// a user account yet — and critical priority keeps a security mail
-// non-unsubscribable). No r.notification is declared; buildMessage falls back
-// to the structured `data` for the renderer.
+// account-unlock, signup-activation, invite). All follow the same delivery
+// shape: append the token to the app page and notify the recipient email
+// directly (route:{email} skips preferences — the recipient may not have a user
+// account yet — and critical priority keeps a security mail non-unsubscribable).
+// Each mail type is a trigger-less r.notification whose stored template renders
+// from the variables passed here.
 import { requestContext } from "@cosmicdrift/kumiko-framework/api";
 import { InternalError } from "@cosmicdrift/kumiko-framework/errors";
-import { resolveMailLocale } from "@cosmicdrift/kumiko-framework/i18n";
+import { mailT, resolveMailLocale } from "@cosmicdrift/kumiko-framework/i18n";
+import { tokenMailExpiry } from "./email-templates.js";
+import { authMailTemplateLocale } from "./mail-notifications.js";
 function resolveAppUrl(appUrl, locale) {
     return typeof appUrl === "function" ? appUrl(locale) : appUrl;
 }
@@ -35,18 +37,21 @@ export async function dispatchMagicLinkMail(notify, spec, params) {
     // mailT already root-falls-back; appUrl must use the same negotiated tag
     // or language-in-path apps 404 on e.g. /de-AT/activate.
     const urlLocale = resolveMailLocale(locale);
-    const content = spec.renderContent({
-        url: appendToken(resolveAppUrl(params.appUrl, urlLocale), params.token),
+    const { validFor, validUntil } = tokenMailExpiry({
         expiresAt: params.expiresAt,
-        ...(params.locale !== undefined && { locale: params.locale }),
-        ...(params.appName !== undefined && { appName: params.appName }),
         ...(params.issuedAt !== undefined && { issuedAt: params.issuedAt }),
         ...(params.timeZone !== undefined && { timeZone: params.timeZone }),
-    });
+    }, locale);
     await notify(spec.notificationType, {
         route: { email: params.email },
-        data: content,
-        locale,
+        data: {
+            appName: params.appName ?? spec.fallbackAppName ?? mailT(locale, "auth.mail.appNameDefault"),
+            actionUrl: appendToken(resolveAppUrl(params.appUrl, urlLocale), params.token),
+            validFor,
+            validUntil,
+            ...(params.role !== undefined && { role: params.role }),
+        },
+        locale: authMailTemplateLocale(spec.notificationType, locale),
         priority: "critical",
     });
 }

package/dist/auth-email-password/mail-notifications.d.ts

@@ -0,0 +1,32 @@
+import { type NotificationLocalizedTemplate, type TemplateVariables } from "@cosmicdrift/kumiko-framework/engine";
+export declare const AUTH_MAIL_KINDS: {
+    readonly passwordReset: {
+        readonly name: "password-reset";
+        readonly translationKey: "reset";
+    };
+    readonly accountUnlock: {
+        readonly name: "account-unlock";
+        readonly translationKey: "unlock";
+    };
+    readonly emailVerification: {
+        readonly name: "email-verification";
+        readonly translationKey: "verify";
+    };
+    readonly signupActivation: {
+        readonly name: "signup-activation";
+        readonly translationKey: "activation";
+    };
+    readonly invite: {
+        readonly name: "invite";
+        readonly translationKey: "invite";
+    };
+};
+export type AuthMailKind = keyof typeof AUTH_MAIL_KINDS;
+type MagicLinkFlowOptions = Partial<Record<"passwordReset" | "emailVerification" | "signup" | "invite" | "accountUnlock", unknown>>;
+export declare function sendsMagicLinkMail(flows: MagicLinkFlowOptions): boolean;
+export declare const AuthMailNotificationTypes: Readonly<Record<AuthMailKind, string>>;
+export declare function authMailTemplateLocale(notificationType: string, requestedLocale: string): string;
+export declare const AUTH_MAIL_VARIABLES: TemplateVariables;
+export declare const INVITE_MAIL_VARIABLES: TemplateVariables;
+export declare function authMailLocalizedTemplate(kind: AuthMailKind): () => NotificationLocalizedTemplate;
+export {};