@cosmicdrift/kumiko-bundled-features 0.362.0 → 0.363.0

package/dist/template-resolver/web/placeholder-line-editor.js

@@ -0,0 +1,94 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+// @runtime client
+//
+// Single-line editor for plain-text fields that carry {{placeholders}}
+// (subject, preheader). The stored value stays plain text; placeholders show
+// as chips while editing. Lives in the same lazy chunk as the document editor.
+import { cn } from "@cosmicdrift/kumiko-renderer-web";
+import { Extension, Node } from "@tiptap/core";
+import { UndoRedo } from "@tiptap/extensions";
+import { EditorContent, useEditor } from "@tiptap/react";
+import StarterKit from "@tiptap/starter-kit";
+import { useMemo, useState } from "react";
+import { DocumentVariable } from "../document-schema.js";
+import { createVariableView } from "./document-editor-extensions.js";
+import { createEditorHandle } from "./editor-handle.js";
+import { contentToLine, lineToContent, singleLine } from "./placeholder-text.js";
+import { useStableByKey } from "./use-stable-by-key.js";
+const LineDocument = Node.create({ name: "doc", topNode: true, content: "paragraph" });
+// One line only: Enter must not split the paragraph.
+const BlockLineBreaks = Extension.create({
+    name: "blockLineBreaks",
+    addKeyboardShortcuts() {
+        return { Enter: () => true, "Shift-Enter": () => true, "Mod-Enter": () => true };
+    },
+});
+const NO_LABELS = {};
+const NO_NAMES = [];
+function LineEditorBody({ id, initialValue, onChange, variableLabels, systemVariables, readOnly, onEditorReady, ariaLabel, }) {
+    const extensions = useMemo(() => [
+        LineDocument,
+        StarterKit.configure({
+            document: false,
+            blockquote: false,
+            bold: false,
+            bulletList: false,
+            code: false,
+            codeBlock: false,
+            dropcursor: false,
+            gapcursor: false,
+            hardBreak: false,
+            heading: false,
+            horizontalRule: false,
+            italic: false,
+            link: false,
+            listItem: false,
+            listKeymap: false,
+            orderedList: false,
+            strike: false,
+            trailingNode: false,
+            underline: false,
+            undoRedo: false,
+        }),
+        DocumentVariable.extend({
+            addNodeView: () => createVariableView(variableLabels, systemVariables),
+        }),
+        UndoRedo,
+        BlockLineBreaks,
+    ], [variableLabels, systemVariables]);
+    const editor = useEditor({
+        extensions,
+        content: {
+            type: "doc",
+            content: [{ type: "paragraph", content: lineToContent(initialValue) }],
+        },
+        editable: !readOnly,
+        immediatelyRender: false,
+        editorProps: {
+            attributes: { id, role: "textbox", "aria-label": ariaLabel, "aria-multiline": "false" },
+            transformPastedText: singleLine,
+            // Rich pastes would bring several paragraphs; only their text is kept.
+            transformPastedHTML: (html) => singleLine(html.replace(/<[^>]*>/g, " ")),
+        },
+        onCreate: ({ editor: created }) => onEditorReady?.(createEditorHandle(created)),
+        onUpdate: ({ editor: e }) => onChange(contentToLine(e.getJSON().content?.[0]?.content)),
+    });
+    return (_jsx(EditorContent, { editor: editor, className: cn("flex min-h-9 items-center rounded-md border border-input bg-transparent px-3 text-base md:text-sm", "[&_.ProseMirror]:w-full [&_.ProseMirror]:whitespace-nowrap [&_.ProseMirror]:outline-none", "[&_p]:m-0", readOnly && "opacity-60") }));
+}
+export default function PlaceholderLineEditor({ id, value, onChange, variableLabels = NO_LABELS, systemVariables = NO_NAMES, readOnly = false, onEditorReady, "aria-label": ariaLabel, }) {
+    const stableLabels = useStableByKey(variableLabels, JSON.stringify(variableLabels));
+    const stableSystem = useStableByKey(systemVariables, systemVariables.join("\n"));
+    // The text is the source of truth. Typing reports it through onChange and
+    // keeps `emitted` equal to `value`; any other value (async load, reset)
+    // remounts the editor body on the new text.
+    const [emitted, setEmitted] = useState(value);
+    const [epoch, setEpoch] = useState(0);
+    if (value !== emitted) {
+        setEmitted(value);
+        setEpoch((current) => current + 1);
+    }
+    return (_jsx(LineEditorBody, { id: id, initialValue: value, onChange: (next) => {
+            setEmitted(next);
+            onChange(next);
+        }, variableLabels: stableLabels, systemVariables: stableSystem, readOnly: readOnly, onEditorReady: onEditorReady, ariaLabel: ariaLabel }, `${epoch}-${readOnly}-${JSON.stringify(stableLabels)}`));
+}

package/dist/template-resolver/web/placeholder-text.d.ts

@@ -0,0 +1,4 @@
+import type { JSONContent } from "@tiptap/core";
+export declare function lineToContent(text: string): JSONContent[];
+export declare function contentToLine(nodes: readonly JSONContent[] | undefined): string;
+export declare function singleLine(text: string): string;

package/dist/template-resolver/web/placeholder-text.js

@@ -0,0 +1,34 @@
+import { isDocumentReferenceName } from "../document-schema.js";
+const PLACEHOLDER_TOKEN = /\{\{([^{}]*)\}\}/g;
+// Names the schema refuses stay plain text, so a typo never becomes a chip
+// that the server would reject.
+export function lineToContent(text) {
+    const content = [];
+    let cursor = 0;
+    const pushText = (value) => {
+        if (value !== "")
+            content.push({ type: "text", text: value });
+    };
+    for (const match of text.matchAll(PLACEHOLDER_TOKEN)) {
+        const name = match[1] ?? "";
+        if (!isDocumentReferenceName(name))
+            continue;
+        pushText(text.slice(cursor, match.index));
+        content.push({ type: "variable", attrs: { name } });
+        cursor = match.index + match[0].length;
+    }
+    pushText(text.slice(cursor));
+    return content;
+}
+export function contentToLine(nodes) {
+    return (nodes ?? [])
+        .map((node) => {
+        if (node.type === "variable")
+            return `{{${String(node.attrs?.["name"])}}}`;
+        return node.type === "text" ? (node.text ?? "") : "";
+    })
+        .join("");
+}
+export function singleLine(text) {
+    return text.replace(/\s*[\r\n]+\s*/g, " ");
+}

package/dist/template-resolver/web/use-stable-by-key.d.ts

@@ -0,0 +1 @@
+export declare function useStableByKey<T>(value: T, key: string): T;

package/dist/template-resolver/web/use-stable-by-key.js

@@ -0,0 +1,13 @@
+// @runtime client
+import { useState } from "react";
+// Callers often pass fresh object literals every render; this keeps the first
+// value for as long as the content key is unchanged, so memoized extension
+// lists (and the editor built from them) are not rebuilt on every render.
+export function useStableByKey(value, key) {
+    const [stored, setStored] = useState({ key, value });
+    if (stored.key !== key) {
+        setStored({ key, value });
+        return value;
+    }
+    return stored.value;
+}

package/dist/tenant/handlers/team-list.query.js

@@ -3,6 +3,7 @@ import { access, definePagedQueryHandler, MAX_LIST_LIMIT, } from "@cosmicdrift/k
 import { InternalError } from "@cosmicdrift/kumiko-framework/errors";
 import { parseRoles } from "@cosmicdrift/kumiko-framework/utils";
 import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
+import { errorCodeOf, isOneOf } from "@cosmicdrift/kumiko-types/type-guards";
 import * as z from "zod";
 import { userSessionTable } from "../../sessions/index.js";
 import { decryptStoredPii, mapWithConcurrency } from "../../shared/index.js";
@@ -15,7 +16,7 @@ const KMS_POOL_CONCURRENCY = 4;
 // the wire already names a TeamRow field directly.
 const SORT_FIELDS = ["email", "status", "createdAt", "lastSeenAt"];
 function isSortField(value) {
-    return SORT_FIELDS.includes(value);
+    return isOneOf(SORT_FIELDS, value);
 }
 // Nulls (no session yet, invitation rows) sort last regardless of
 // direction — "unknown" reads as "least recent", not as a magic minimum
@@ -109,7 +110,7 @@ export const teamListQuery = definePagedQueryHandler({
                 // ponytail: lean sample apps (admin-console) mount auth without
                 // sessions — store_user_sessions never gets pushed. Integration tests
                 // may seed the table without mounting the feature; prod mounts both.
-                if (err.code !== "42P01")
+                if (errorCodeOf(err) !== "42P01")
                     throw err;
             }
         }

package/dist/tenant/seeding.js

@@ -31,7 +31,7 @@ import { fetchOne } from "@cosmicdrift/kumiko-framework/bun-db";
 import { createEventStoreExecutor, createTenantDb, } from "@cosmicdrift/kumiko-framework/db";
 import { createSystemUser, HookPhases, } from "@cosmicdrift/kumiko-framework/engine";
 import { getUnscopedAggregateStreamMaxVersion } from "@cosmicdrift/kumiko-framework/event-store";
-import { createLifecycleHooks } from "@cosmicdrift/kumiko-framework/pipeline";
+import { createDeferringNotify, createLifecycleHooks, } from "@cosmicdrift/kumiko-framework/pipeline";
 import { TestUsers } from "@cosmicdrift/kumiko-framework/stack";
 import { assertAssignableMembershipRoles } from "./membership-roles.js";
 import { tenantMembershipEntity, tenantMembershipsTable } from "./membership-table.js";
@@ -62,9 +62,31 @@ const executor = createEventStoreExecutor(tenantMembershipsTable, tenantMembersh
 // dispatcher's sink and flush post-commit. Without a sink (fixture / plain
 // Connection) they still fire immediately — there is no outer TX to wait for.
 //
+function buildSeedHookNotify(context, scopedUser, targetTenantId, notifyTiming) {
+    const notifyFactory = context._notifyFactory;
+    if (!notifyFactory)
+        return context.notify;
+    if (notifyTiming === "inline")
+        return notifyFactory(scopedUser, targetTenantId);
+    // Still inside the caller's write tx: delivery DB work must not wait for an app-pool slot.
+    const notifyInsideTransaction = (context._notifyInTransactionFactory ?? notifyFactory)(scopedUser, targetTenantId);
+    const scheduleAfterCommit = context.scheduleAfterCommit;
+    if (!scheduleAfterCommit)
+        return notifyInsideTransaction;
+    return createDeferringNotify({
+        registry: context.registry,
+        tenantId: targetTenantId,
+        notifyAfterCommit: notifyFactory(scopedUser, targetTenantId),
+        notifyNow: notifyInsideTransaction,
+        scheduleAfterCommit,
+    });
+}
 // `runner` comes from the caller, which already holds a declared DbRunner —
 // a TenantDb exposes no runner back out to feature code.
-function scopeSeedHookContext(context, targetTenantId, runner) {
+function scopeSeedHookContext(context, targetTenantId, runner, 
+// The afterCommit sink is snapshotted when it flushes, so a hook scheduled from inside an
+// afterCommit-phase hook would be dropped: that phase must notify inline.
+notifyTiming) {
     const db = createTenantDb(runner, targetTenantId, "system", context.tracer, context.meter, context.signal);
     // HandlerContext carries `user`; AppContext only `systemUser`. Prefer the
     // live handler user when present so notify/hasFeature keep a real SessionUser.
@@ -73,8 +95,8 @@ function scopeSeedHookContext(context, targetTenantId, runner) {
     const scopedUser = baseUser
         ? { ...baseUser, tenantId: targetTenantId }
         : undefined;
-    const notify = context._notifyFactory && scopedUser
-        ? context._notifyFactory(scopedUser, targetTenantId)
+    const notify = scopedUser
+        ? buildSeedHookNotify(context, scopedUser, targetTenantId, notifyTiming)
         : context.notify;
     const features = context.effectiveFeatures;
     const hasFeature = features
@@ -109,9 +131,12 @@ target) {
     const lifecycle = createLifecycleHooks(hooks.registry);
     const scopedContext = target === undefined
         ? hooks.context
-        : scopeSeedHookContext(hooks.context, target.tenantId, target.db);
+        : scopeSeedHookContext(hooks.context, target.tenantId, target.db, "deferUntilCommit");
+    const afterCommitContext = target === undefined
+        ? hooks.context
+        : scopeSeedHookContext(hooks.context, target.tenantId, target.db, "inline");
     await lifecycle.runPostSave(pseudoType, entityData, scopedContext, HookPhases.inTransaction);
-    const runAfterCommit = () => lifecycle.runPostSave(pseudoType, entityData, scopedContext, HookPhases.afterCommit);
+    const runAfterCommit = () => lifecycle.runPostSave(pseudoType, entityData, afterCommitContext, HookPhases.afterCommit);
     if (scopedContext.scheduleAfterCommit) {
         scopedContext.scheduleAfterCommit(runAfterCommit);
     }

package/dist/tenant-lifecycle/handlers/cancel-destruction.write.d.ts

@@ -2,5 +2,5 @@ import * as z from "zod";
 export declare const cancelDestructionWrite: import("@cosmicdrift/kumiko-types/define-handler").WriteHandlerDefinition<"cancel-destruction", z.ZodObject<{}, z.core.$strip>, {
     tenantId: string;
     status: "active";
-    gracePeriodEnd: string | null;
+    gracePeriodEnd: null;
 }, import("@cosmicdrift/kumiko-types/event-type-map").KumikoEventTypeMap>;

package/dist/tenant-lifecycle/handlers/cancel-destruction.write.js

@@ -52,12 +52,13 @@ export const cancelDestructionWrite = defineWriteHandler({
             type: DESTRUCTION_CANCELLED_EVENT_QN,
             payload: { cancelledBy: event.user.id },
         });
+        const gracePeriodEnd = null;
         return {
             isSuccess: true,
             data: {
                 tenantId,
                 status: "active",
-                gracePeriodEnd: null,
+                gracePeriodEnd,
             },
         };
     },

package/dist/user/db/queries/stream-tenant-backfill.js

@@ -26,8 +26,8 @@
 import { asRawClient, transaction, unsafeReadRetrying } from "@cosmicdrift/kumiko-framework/bun-db";
 import { SYSTEM_TENANT_ID } from "@cosmicdrift/kumiko-framework/engine";
 export async function backfillUserStreamTenants(db) {
-    const candidates = (await unsafeReadRetrying(db, `SELECT DISTINCT "aggregate_id" FROM "kumiko_events"
-      WHERE "aggregate_type" = 'user' AND "tenant_id" <> $1::uuid`, [SYSTEM_TENANT_ID]));
+    const candidates = await unsafeReadRetrying(db, `SELECT DISTINCT "aggregate_id" FROM "kumiko_events"
+      WHERE "aggregate_type" = 'user' AND "tenant_id" <> $1::uuid`, [SYSTEM_TENANT_ID]);
     let aggregatesMigrated = 0;
     let eventsMigrated = 0;
     const failed = [];
@@ -50,10 +50,10 @@ async function migrateAggregate(db, aggregateId) {
         const raw = asRawClient(tx);
         // Global id order = commit-adjacent replay order; merges a split stream
         // (legacy tenant + SYSTEM) into one consistent version sequence.
-        const events = (await raw.unsafe(`SELECT "id" FROM "kumiko_events"
+        const events = await raw.unsafe(`SELECT "id" FROM "kumiko_events"
         WHERE "aggregate_type" = 'user' AND "aggregate_id" = $1::uuid
         ORDER BY "id" ASC
-        FOR UPDATE`, [aggregateId]));
+        FOR UPDATE`, [aggregateId]);
         // Phase 1: negative interim versions — real versions are always >= 1, so
         // nothing can collide with events_aggregate_version_uq mid-migration.
         for (const [i, ev] of events.entries()) {

package/dist/user/handlers/detail.query.js

@@ -1,4 +1,5 @@
 import { access, defineEntityDetailHandler, } from "@cosmicdrift/kumiko-framework/engine";
+import { isPlainObject } from "@cosmicdrift/kumiko-types/type-guards";
 import { userEntity } from "../schema/user.js";
 import { attachTenantLabels, dbForList } from "./list.query.js";
 // Only SystemAdmins can read arbitrary users. Tenant-level "Admin" does NOT
@@ -14,7 +15,7 @@ export const detailQuery = {
     ...baseDetail,
     handler: async (query, ctx) => {
         const result = await baseDetail.handler?.(query, ctx);
-        if (result === null || typeof result !== "object")
+        if (!isPlainObject(result))
             return result;
         if (!ctx.registry.features.has("tenant"))
             return result;

package/dist/user-data-rights/db/queries/forget-cleanup.d.ts

@@ -1,5 +1,5 @@
-import type { DbConnection } from "@cosmicdrift/kumiko-framework/db";
+import type { DbRunner } from "@cosmicdrift/kumiko-framework/db";
 import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
-export declare function selectUsersDueForForgetCleanup(db: DbConnection, status: string, gracePeriodEndCutoff: Temporal.Instant | string): Promise<readonly {
+export declare function selectUsersDueForForgetCleanup(db: DbRunner, status: string, gracePeriodEndCutoff: Temporal.Instant | string): Promise<readonly {
     id: string;
 }[]>;

package/dist/user-data-rights/email-templates.d.ts

@@ -1,32 +1,4 @@
 export type GdprMailLocale = string;
 export declare function normalizeGdprMailLocale(raw: string | null | undefined): GdprMailLocale | undefined;
 export declare const GDPR_MAIL_EN: Readonly<Record<string, string>>;
-export type RenderedEmail = {
-    readonly subject: string;
-    readonly html: string;
-    readonly text: string;
-};
-export type RenderExportReadyEmailArgs = {
-    readonly downloadUrl: string;
-    readonly expiresAt: string;
-    readonly locale?: GdprMailLocale;
-    readonly appName?: string;
-};
-export type RenderExportFailedEmailArgs = {
-    readonly locale?: GdprMailLocale;
-    readonly appName?: string;
-};
-export type RenderDeletionRequestedEmailArgs = {
-    readonly gracePeriodEnd: string;
-    readonly locale?: GdprMailLocale;
-    readonly appName?: string;
-};
-export type RenderDeletionExecutedEmailArgs = {
-    readonly executedAt: string;
-    readonly locale?: GdprMailLocale;
-    readonly appName?: string;
-};
-export declare function renderExportReadyEmail(args: RenderExportReadyEmailArgs): RenderedEmail;
-export declare function renderExportFailedEmail(args: RenderExportFailedEmailArgs): RenderedEmail;
-export declare function renderDeletionRequestedEmail(args: RenderDeletionRequestedEmailArgs): RenderedEmail;
-export declare function renderDeletionExecutedEmail(args: RenderDeletionExecutedEmailArgs): RenderedEmail;
+export declare function formatGdprMailTimestamp(iso: string): string;

package/dist/user-data-rights/email-templates.js

@@ -1,9 +1,9 @@
-// Default HTML renderers for GDPR notification mails. English ships here;
-// other languages register via @cosmicdrift/kumiko-locale-* (localeDe() /
+// Translations for the GDPR notification mails (the templates in
+// mail-notifications.ts are built from them). English ships here; other
+// languages register via @cosmicdrift/kumiko-locale-* (localeDe() /
 // localeEs() call registerMailTranslations). Apps that want their own
 // branding pass send*Email callbacks and these defaults do not run.
-import { mailT, registerMailTranslations } from "@cosmicdrift/kumiko-framework/i18n";
-import { escapeHtml, escapeHtmlAttr } from "@cosmicdrift/kumiko-headless";
+import { registerMailTranslations } from "@cosmicdrift/kumiko-framework/i18n";
 import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 export function normalizeGdprMailLocale(raw) {
     if (!raw)
@@ -28,108 +28,7 @@ export const GDPR_MAIL_EN = {
     "gdpr.mail.fallbackUrl": "If the button doesn't work, copy this link into your browser:",
 };
 registerMailTranslations("en", GDPR_MAIL_EN);
-function t(locale, key, params) {
-    return mailT(locale, key, params);
-}
-function appNameFor(args) {
-    const locale = args.locale ?? "en";
-    return args.appName ?? t(locale, "gdpr.mail.appNameDefault");
-}
-export function renderExportReadyEmail(args) {
-    const locale = args.locale ?? "en";
-    const app = appNameFor(args);
-    const subject = t(locale, "gdpr.mail.exportReady.subject", { app });
-    const body = `
-    <p style="margin: 0 0 16px; font-size: 16px;">${escapeHtml(t(locale, "gdpr.mail.greeting"))}</p>
-    <p style="margin: 0 0 24px; font-size: 14px; line-height: 1.5;">${escapeHtml(t(locale, "gdpr.mail.exportReady.intro", { app }))}</p>
-    <p style="margin: 0 0 24px;">${renderButton({ url: args.downloadUrl, label: t(locale, "gdpr.mail.exportReady.button") })}</p>
-    <p style="margin: 0 0 8px; font-size: 13px; color: #555;">${escapeHtml(t(locale, "gdpr.mail.exportReady.expiry", { when: formatTimestamp(args.expiresAt) }))}</p>
-    ${renderFallbackUrl({ url: args.downloadUrl, label: t(locale, "gdpr.mail.fallbackUrl") })}`;
-    const text = plainTextBody([
-        t(locale, "gdpr.mail.greeting"),
-        t(locale, "gdpr.mail.exportReady.intro", { app }),
-        `${t(locale, "gdpr.mail.exportReady.button")}: ${args.downloadUrl}`,
-        t(locale, "gdpr.mail.exportReady.expiry", { when: formatTimestamp(args.expiresAt) }),
-    ]);
-    return { subject, html: renderShell({ title: subject, bodyHtml: wrapCell(body), locale }), text };
-}
-export function renderExportFailedEmail(args) {
-    const locale = args.locale ?? "en";
-    const app = appNameFor(args);
-    const subject = t(locale, "gdpr.mail.exportFailed.subject", { app });
-    const body = `
-    <p style="margin: 0 0 16px; font-size: 16px;">${escapeHtml(t(locale, "gdpr.mail.greeting"))}</p>
-    <p style="margin: 0; font-size: 14px; line-height: 1.5;">${escapeHtml(t(locale, "gdpr.mail.exportFailed.intro", { app }))}</p>`;
-    const text = plainTextBody([
-        t(locale, "gdpr.mail.greeting"),
-        t(locale, "gdpr.mail.exportFailed.intro", { app }),
-    ]);
-    return { subject, html: renderShell({ title: subject, bodyHtml: wrapCell(body), locale }), text };
-}
-export function renderDeletionRequestedEmail(args) {
-    const locale = args.locale ?? "en";
-    const app = appNameFor(args);
-    const when = formatTimestamp(args.gracePeriodEnd);
-    const subject = t(locale, "gdpr.mail.deletionRequested.subject", { app });
-    const body = `
-    <p style="margin: 0 0 16px; font-size: 16px;">${escapeHtml(t(locale, "gdpr.mail.greeting"))}</p>
-    <p style="margin: 0 0 16px; font-size: 14px; line-height: 1.5;">${escapeHtml(t(locale, "gdpr.mail.deletionRequested.intro", { app, when }))}</p>
-    <p style="margin: 0; font-size: 13px; color: #555;">${escapeHtml(t(locale, "gdpr.mail.deletionRequested.cancel"))}</p>`;
-    const text = plainTextBody([
-        t(locale, "gdpr.mail.greeting"),
-        t(locale, "gdpr.mail.deletionRequested.intro", { app, when }),
-        t(locale, "gdpr.mail.deletionRequested.cancel"),
-    ]);
-    return { subject, html: renderShell({ title: subject, bodyHtml: wrapCell(body), locale }), text };
-}
-export function renderDeletionExecutedEmail(args) {
-    const locale = args.locale ?? "en";
-    const app = appNameFor(args);
-    const when = formatTimestamp(args.executedAt);
-    const subject = t(locale, "gdpr.mail.deletionExecuted.subject", { app });
-    const body = `
-    <p style="margin: 0 0 16px; font-size: 16px;">${escapeHtml(t(locale, "gdpr.mail.greeting"))}</p>
-    <p style="margin: 0; font-size: 14px; line-height: 1.5;">${escapeHtml(t(locale, "gdpr.mail.deletionExecuted.intro", { app, when }))}</p>`;
-    const text = plainTextBody([
-        t(locale, "gdpr.mail.greeting"),
-        t(locale, "gdpr.mail.deletionExecuted.intro", { app, when }),
-    ]);
-    return { subject, html: renderShell({ title: subject, bodyHtml: wrapCell(body), locale }), text };
-}
-function plainTextBody(paragraphs) {
-    return paragraphs.join("\n\n");
-}
-function wrapCell(bodyHtml) {
-    return `<tr><td>${bodyHtml}</td></tr>`;
-}
-function renderShell(args) {
-    return `<!DOCTYPE html>
-<html lang="${escapeHtmlAttr(args.locale)}">
-  <head>
-    <meta charset="utf-8" />
-    <meta name="viewport" content="width=device-width, initial-scale=1" />
-    <title>${escapeHtml(args.title)}</title>
-  </head>
-  <body style="margin: 0; padding: 0; background: #f7f7f7; font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif; color: #1a1a1a;">
-    <table width="100%" cellpadding="0" cellspacing="0" style="padding: 24px 0;">
-      <tr>
-        <td align="center">
-          <table width="560" cellpadding="0" cellspacing="0" style="max-width: 560px; background: #ffffff; border-radius: 8px; padding: 32px;">
-            ${args.bodyHtml}
-          </table>
-        </td>
-      </tr>
-    </table>
-  </body>
-</html>`;
-}
-function renderButton(args) {
-    return `<a href="${escapeHtmlAttr(args.url)}" style="display: inline-block; background: #1a1a1a; color: #ffffff; padding: 12px 24px; border-radius: 6px; text-decoration: none; font-weight: 500;">${escapeHtml(args.label)}</a>`;
-}
-function renderFallbackUrl(args) {
-    return `<p style="margin: 24px 0 0; font-size: 12px; color: #666;">${escapeHtml(args.label)}<br /><a href="${escapeHtmlAttr(args.url)}" style="color: #1a1a1a; word-break: break-all;">${escapeHtml(args.url)}</a></p>`;
-}
-function formatTimestamp(iso) {
+export function formatGdprMailTimestamp(iso) {
     try {
         const z = Temporal.Instant.from(iso).toZonedDateTimeISO("UTC");
         return `${z.year}-${pad2(z.month)}-${pad2(z.day)} ${pad2(z.hour)}:${pad2(z.minute)} UTC`;