@cosmicdrift/kumiko-bundled-features 0.362.0 → 0.363.0

package/dist/auth-email-password/mail-notifications.js

@@ -0,0 +1,116 @@
+import { QnTypes, qn, templateVariable, } from "@cosmicdrift/kumiko-framework/engine";
+import { hasMailTranslationKey, listMailLocales, mailT, resolveMailLocale, } from "@cosmicdrift/kumiko-framework/i18n";
+import { escapeHtml, escapeHtmlAttr } from "@cosmicdrift/kumiko-headless";
+import { AUTH_EMAIL_PASSWORD_FEATURE } from "./constants.js";
+export const AUTH_MAIL_KINDS = {
+    passwordReset: { name: "password-reset", translationKey: "reset" },
+    accountUnlock: { name: "account-unlock", translationKey: "unlock" },
+    emailVerification: { name: "email-verification", translationKey: "verify" },
+    signupActivation: { name: "signup-activation", translationKey: "activation" },
+    invite: { name: "invite", translationKey: "invite" },
+};
+export function sendsMagicLinkMail(flows) {
+    return Boolean(flows.passwordReset ||
+        flows.emailVerification ||
+        flows.signup ||
+        flows.invite ||
+        flows.accountUnlock);
+}
+function authMailType(kind) {
+    return qn(AUTH_EMAIL_PASSWORD_FEATURE, QnTypes.notify, AUTH_MAIL_KINDS[kind].name);
+}
+export const AuthMailNotificationTypes = {
+    passwordReset: authMailType("passwordReset"),
+    accountUnlock: authMailType("accountUnlock"),
+    emailVerification: authMailType("emailVerification"),
+    signupActivation: authMailType("signupActivation"),
+    invite: authMailType("invite"),
+};
+function subjectKey(kind) {
+    return `auth.mail.${AUTH_MAIL_KINDS[kind].translationKey}.subject`;
+}
+const ALL_AUTH_MAIL_KINDS = [
+    "passwordReset",
+    "accountUnlock",
+    "emailVerification",
+    "signupActivation",
+    "invite",
+];
+const SUBJECT_KEY_BY_TYPE = new Map(ALL_AUTH_MAIL_KINDS.map((kind) => [AuthMailNotificationTypes[kind], subjectKey(kind)]));
+// A registered locale whose bundle lacks the subject key has no template (see
+// authMailLocalizedTemplate); the renderer has no locale fallback, so the
+// sender must pick a locale that has one or the mail would not go out at all.
+export function authMailTemplateLocale(notificationType, requestedLocale) {
+    const locale = resolveMailLocale(requestedLocale);
+    const key = SUBJECT_KEY_BY_TYPE.get(notificationType);
+    return key !== undefined && hasMailTranslationKey(locale, key) ? locale : "en";
+}
+export const AUTH_MAIL_VARIABLES = {
+    appName: templateVariable.text({ required: true }),
+    actionUrl: templateVariable.link({ required: true }),
+    validFor: templateVariable.text({ required: true }),
+    validUntil: templateVariable.text({ required: true }),
+};
+export const INVITE_MAIL_VARIABLES = {
+    ...AUTH_MAIL_VARIABLES,
+    role: templateVariable.text({ required: true }),
+};
+// Translation placeholder -> template variable. The markers survive HTML
+// escaping, so only the translated text is escaped, never the placeholders.
+const PLACEHOLDER_VARIABLES = {
+    app: "appName",
+    duration: "validFor",
+    when: "validUntil",
+    role: "role",
+};
+const MARKER_OPEN = "\uE000";
+const MARKER_CLOSE = "\uE001";
+const MARKER_PATTERN = new RegExp(`${MARKER_OPEN}(\\w+)${MARKER_CLOSE}`, "g");
+function markers() {
+    return Object.fromEntries(Object.keys(PLACEHOLDER_VARIABLES).map((name) => [
+        name,
+        `${MARKER_OPEN}${name}${MARKER_CLOSE}`,
+    ]));
+}
+function translatedHtml(locale, key) {
+    return escapeHtml(mailT(locale, key, markers())).replace(MARKER_PATTERN, (_, name) => {
+        const variable = PLACEHOLDER_VARIABLES[name];
+        return variable === undefined
+            ? ""
+            : `<span data-variable="${escapeHtmlAttr(variable)}"></span>`;
+    });
+}
+function mailBody(locale, translationKey) {
+    const html = (part) => translatedHtml(locale, `auth.mail.${translationKey}.${part}`);
+    return [
+        `<p>${html("greeting")}</p>`,
+        `<p>${html("intro")}</p>`,
+        `<p><a data-button href="{{actionUrl}}">${html("button")}</a></p>`,
+        `<p>${html("expiry")}</p>`,
+        `<p>${html("ignore")}</p>`,
+    ].join("");
+}
+// Evaluated when the registry is built, after every locale feature has
+// registered its mail translations. English always ships; another locale only
+// gets a template when it has its own subject, so a missing translation never
+// silently becomes an English mail in that locale's slot.
+export function authMailLocalizedTemplate(kind) {
+    const { translationKey } = AUTH_MAIL_KINDS[kind];
+    const kindSubjectKey = subjectKey(kind);
+    return () => {
+        const locales = [
+            "en",
+            ...listMailLocales().filter((locale) => locale !== "en" && hasMailTranslationKey(locale, kindSubjectKey)),
+        ];
+        return Object.fromEntries(locales.map((locale) => [
+            locale,
+            {
+                body: mailBody(locale, translationKey),
+                meta: {
+                    subject: mailT(locale, kindSubjectKey, { app: "{{appName}}" }),
+                    category: "transactional",
+                },
+            },
+        ]));
+    };
+}

package/dist/auth-email-password/signup-activation.d.ts

@@ -1,6 +1,6 @@
 import type { NotifyFn } from "@cosmicdrift/kumiko-framework/engine";
 import type { Redis } from "ioredis";
-export declare const SIGNUP_ACTIVATION_NOTIFICATION_TYPE = "auth-email-password:signup-activation";
+export declare const SIGNUP_ACTIVATION_NOTIFICATION_TYPE: string;
 export type IssueSignupActivationArgs = {
     readonly redis: Redis;
     readonly notify: NotifyFn | undefined;

package/dist/auth-email-password/signup-activation.js

@@ -6,10 +6,10 @@
 import { generateToken } from "@cosmicdrift/kumiko-framework/api";
 import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import { AUTH_SIGNUP_DEFAULT_TTL_MINUTES } from "./constants.js";
-import { renderActivationEmail } from "./email-templates.js";
 import { dispatchMagicLinkMail } from "./magic-link-mail.js";
+import { AuthMailNotificationTypes } from "./mail-notifications.js";
 import { invalidateExistingSignupToken, normalizeEmail, storeSignupToken, } from "./signup-token-store.js";
-export const SIGNUP_ACTIVATION_NOTIFICATION_TYPE = "auth-email-password:signup-activation";
+export const SIGNUP_ACTIVATION_NOTIFICATION_TYPE = AuthMailNotificationTypes.signupActivation;
 export async function issueSignupActivation(args) {
     const ttlSeconds = (args.tokenTtlMinutes ?? AUTH_SIGNUP_DEFAULT_TTL_MINUTES) * 60;
     // At most one live signup token per email.
@@ -26,7 +26,6 @@ export async function issueSignupActivation(args) {
     await dispatchMagicLinkMail(args.notify, {
         handlerName: "signup-request",
         notificationType: SIGNUP_ACTIVATION_NOTIFICATION_TYPE,
-        renderContent: renderActivationEmail,
     }, {
         email,
         appUrl: args.appUrl,

package/dist/auth-foundation/types.js

@@ -47,10 +47,7 @@ export function tokenShapeKey(shape) {
 // exactly one implementation must be registered (boot-fails on 0 or ≥2).
 export const EXT_SESSION_STORE = "sessionStore";
 export function isSessionStoreProvider(o) {
-    return (typeof o === "object" &&
-        o !== null &&
-        "build" in o &&
-        typeof o.build === "function");
+    return typeof o === "object" && o !== null && "build" in o && typeof o.build === "function";
 }
 // Tenant-resolution extension points (#1373). Both are single-provider and
 // optional — zero registered means today's single-tenant / header-cookie
@@ -69,8 +66,5 @@ export function isTenantResolverProvider(o) {
         isTenantResolverTrust(o.trust));
 }
 export function isTenantExistenceProvider(o) {
-    return (typeof o === "object" &&
-        o !== null &&
-        "build" in o &&
-        typeof o.build === "function");
+    return typeof o === "object" && o !== null && "build" in o && typeof o.build === "function";
 }

package/dist/auth-mfa/feature.js

@@ -25,7 +25,7 @@ export function bindMfaRevokeAllOtherSessionsFromFeature(feature) {
     if (exports && typeof exports === "object" && "bindRevokeAllOtherSessions" in exports) {
         const { bindRevokeAllOtherSessions } = exports;
         if (typeof bindRevokeAllOtherSessions === "function") {
-            // @cast-boundary exports-walk — feature.exports is untyped by design
+            // @cast-boundary feature-exports — feature.exports is untyped by design
             return bindRevokeAllOtherSessions;
         }
     }
@@ -38,7 +38,7 @@ export function mfaStatusCheckerFromFeature(feature) {
     if (exports && typeof exports === "object" && "checkMfaStatus" in exports) {
         const { checkMfaStatus } = exports;
         if (typeof checkMfaStatus === "function") {
-            // @cast-boundary exports-walk — feature.exports is untyped by design
+            // @cast-boundary feature-exports — feature.exports is untyped by design
             return checkMfaStatus;
         }
     }
@@ -53,7 +53,7 @@ export function mfaVerifierFromFeature(feature) {
     if (exports && typeof exports === "object" && "verifyMfaCode" in exports) {
         const { verifyMfaCode } = exports;
         if (typeof verifyMfaCode === "function") {
-            // @cast-boundary exports-walk — feature.exports is untyped by design
+            // @cast-boundary feature-exports — feature.exports is untyped by design
             return verifyMfaCode;
         }
     }
@@ -68,7 +68,7 @@ export function bindRevokeAllPatTokensFromFeature(feature) {
     if (exports && typeof exports === "object" && "bindRevokeAllPatTokens" in exports) {
         const { bindRevokeAllPatTokens } = exports;
         if (typeof bindRevokeAllPatTokens === "function") {
-            // @cast-boundary exports-walk — feature.exports is untyped by design
+            // @cast-boundary feature-exports — feature.exports is untyped by design
             return bindRevokeAllPatTokens;
         }
     }

package/dist/auth-mfa/hmac-token-codec.js

@@ -1,5 +1,6 @@
 import { createHmac, timingSafeEqual } from "node:crypto";
 import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
+import { isPlainObject } from "@cosmicdrift/kumiko-types/type-guards";
 function hmacSign(input, secret) {
     return createHmac("sha256", secret).update(input).digest("base64url");
 }
@@ -8,13 +9,12 @@ function hmacSign(input, secret) {
 // replayed as a challenge token), since both share the same secret and payload shape.
 export function createHmacTokenCodec(domain, isPayload) {
     function splitEncodedBody(value) {
-        if (typeof value !== "object" || value === null)
+        if (!isPlainObject(value))
             return null;
-        const v = value;
-        const expiresAtMs = v["expiresAtMs"];
+        const expiresAtMs = value["expiresAtMs"];
         if (typeof expiresAtMs !== "number")
             return null;
-        const { expiresAtMs: _drop, ...rest } = v;
+        const { expiresAtMs: _drop, ...rest } = value;
         return isPayload(rest) ? { payload: rest, expiresAtMs } : null;
     }
     return {

package/dist/auth-mfa/mfa-challenge-token.js

@@ -1,10 +1,10 @@
 import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
+import { isPlainObject } from "@cosmicdrift/kumiko-types/type-guards";
 import { createHmacTokenCodec } from "./hmac-token-codec.js";
 function isPayload(value) {
-    if (typeof value !== "object" || value === null)
+    if (!isPlainObject(value))
         return false;
-    const v = value;
-    return typeof v["userId"] === "string" && typeof v["tenantId"] === "string";
+    return typeof value["userId"] === "string" && typeof value["tenantId"] === "string";
 }
 // Domain-separated from mfa-preauth-setup (see hmac-token-codec). Single-use is
 // enforced by the consumer via burnToken (purpose "mfa-challenge"); this codec

package/dist/auth-mfa/mfa-preauth-setup-token.js

@@ -1,10 +1,10 @@
 import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
+import { isPlainObject } from "@cosmicdrift/kumiko-types/type-guards";
 import { createHmacTokenCodec } from "./hmac-token-codec.js";
 function isPayload(value) {
-    if (typeof value !== "object" || value === null)
+    if (!isPlainObject(value))
         return false;
-    const v = value;
-    return typeof v["userId"] === "string" && typeof v["tenantId"] === "string";
+    return typeof value["userId"] === "string" && typeof value["tenantId"] === "string";
 }
 // Domain "mfa-preauth-setup" must never equal the challenge domain: a setup
 // token has to fail verification as a challenge token and vice versa. The

package/dist/auth-mfa/mfa-setup-token.js

@@ -11,6 +11,7 @@
 // generated secret material, not just re-derive it from a lookup.
 import { createHmac, timingSafeEqual } from "node:crypto";
 import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
+import { isPlainObject } from "@cosmicdrift/kumiko-types/type-guards";
 function sign(input, secret) {
     return createHmac("sha256", secret).update(input).digest("base64url");
 }
@@ -22,15 +23,14 @@ export function signMfaSetupToken(payload, ttlMinutes, secret, now = Temporal.No
     return { token: `${bodyB64}.${signature}`, expiresAt };
 }
 function isEncodedBody(value) {
-    if (typeof value !== "object" || value === null)
+    if (!isPlainObject(value))
         return false;
-    const v = value;
-    return (typeof v["userId"] === "string" &&
-        typeof v["totpSecretBase32"] === "string" &&
-        Array.isArray(v["recoveryCodeHashes"]) &&
-        v["recoveryCodeHashes"].every((h) => typeof h === "string") &&
-        typeof v["expiresAtMs"] === "number" &&
-        (v["tenantId"] === undefined || typeof v["tenantId"] === "string"));
+    return (typeof value["userId"] === "string" &&
+        typeof value["totpSecretBase32"] === "string" &&
+        Array.isArray(value["recoveryCodeHashes"]) &&
+        value["recoveryCodeHashes"].every((h) => typeof h === "string") &&
+        typeof value["expiresAtMs"] === "number" &&
+        (value["tenantId"] === undefined || typeof value["tenantId"] === "string"));
 }
 export function verifyMfaSetupToken(token, secret, now = Temporal.Now.instant()) {
     const parts = token.split(".");

package/dist/billing-foundation/constants.d.ts

@@ -3,11 +3,11 @@ import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 export declare const BILLING_FOUNDATION_FEATURE: "billing-foundation";
 export declare const SUBSCRIPTION_PROVIDER_EXTENSION: "subscriptionProvider";
 /** delivery notification type of the § 312f contract confirmation mail. */
-export declare const CONTRACT_CONFIRMATION_NOTIFICATION_TYPE: "billing-foundation:contract-confirmation";
+export declare const CONTRACT_CONFIRMATION_NOTIFICATION_TYPE: "billing-foundation:notify:contract-confirmation";
 /** delivery notification types of the § 312k termination receipt and the
  *  operator notice. */
-export declare const CONTRACT_TERMINATION_RECEIPT_NOTIFICATION_TYPE: "billing-foundation:contract-termination-receipt";
-export declare const CONTRACT_TERMINATION_OPERATOR_NOTIFICATION_TYPE: "billing-foundation:contract-termination-operator-notice";
+export declare const CONTRACT_TERMINATION_RECEIPT_NOTIFICATION_TYPE: "billing-foundation:notify:contract-termination-receipt";
+export declare const CONTRACT_TERMINATION_OPERATOR_NOTIFICATION_TYPE: "billing-foundation:notify:contract-termination-operator-notice";
 export declare const SubscriptionFoundationHandlers: {
     /** Programmatic entry-point für den webhook-handler. Receives the
      *  parsed SubscriptionEvent (vom Plugin schon verifiziert) + macht

package/dist/billing-foundation/constants.js

@@ -1,17 +1,18 @@
 /// <reference types="temporal-polyfill/global" preserve="true" />
 // @runtime client
 import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
+import { isOneOf } from "@cosmicdrift/kumiko-types/type-guards";
 // Feature name
 export const BILLING_FOUNDATION_FEATURE = "billing-foundation";
 // Extension-point name fuer Provider-Plugins (subscription-stripe,
 // subscription-mollie, ...).
 export const SUBSCRIPTION_PROVIDER_EXTENSION = "subscriptionProvider";
 /** delivery notification type of the § 312f contract confirmation mail. */
-export const CONTRACT_CONFIRMATION_NOTIFICATION_TYPE = "billing-foundation:contract-confirmation";
+export const CONTRACT_CONFIRMATION_NOTIFICATION_TYPE = "billing-foundation:notify:contract-confirmation";
 /** delivery notification types of the § 312k termination receipt and the
  *  operator notice. */
-export const CONTRACT_TERMINATION_RECEIPT_NOTIFICATION_TYPE = "billing-foundation:contract-termination-receipt";
-export const CONTRACT_TERMINATION_OPERATOR_NOTIFICATION_TYPE = "billing-foundation:contract-termination-operator-notice";
+export const CONTRACT_TERMINATION_RECEIPT_NOTIFICATION_TYPE = "billing-foundation:notify:contract-termination-receipt";
+export const CONTRACT_TERMINATION_OPERATOR_NOTIFICATION_TYPE = "billing-foundation:notify:contract-termination-operator-notice";
 // Qualified write handler names (QN format: scope:type:name).
 export const SubscriptionFoundationHandlers = {
     /** Programmatic entry-point für den webhook-handler. Receives the
@@ -195,5 +196,5 @@ export const DEFAULT_PURCHASE_ROLES = ["TenantAdmin", "SystemAdmin"];
 // `<plugin-name>:config:price-to-tier`-Key.
 export const TERMINATION_SCOPES = ["tenant-host", "platform"];
 export function isTerminationScope(value) {
-    return TERMINATION_SCOPES.includes(value);
+    return isOneOf(TERMINATION_SCOPES, value);
 }

package/dist/billing-foundation/consumer-protection/confirmation-mail.d.ts

@@ -1,18 +1,37 @@
 import type { CheckoutConsentRecordedPayload } from "../events.js";
-export type ContractConfirmationSection = {
+import { type ConsentLocale } from "./consent-text.js";
+type ConfirmationLabels = {
+    readonly subject: string;
+    readonly intro: string;
+    readonly plan: string;
+    readonly item: string;
+    readonly oneOffPayment: string;
+    readonly price: string;
+    readonly oneOff: string;
+    readonly contractStart: string;
+    readonly currentPeriodEnd: string;
+    readonly consentHeading: string;
+    readonly consentGivenAt: string;
+    readonly termsHeading: string;
+    readonly contact: string;
+    readonly intervals: Readonly<Record<string, {
+        one: string;
+        many: string;
+    }>>;
+    readonly every: string;
+};
+export declare const CONFIRMATION_LABELS: Readonly<Record<ConsentLocale, ConfirmationLabels>>;
+type TextRow = {
     readonly text: string;
-} | {
-    readonly heading: string;
-} | {
-    readonly markdown: string;
 };
-export type ContractConfirmationContent = {
-    readonly subject: string;
-    readonly header: string;
-    readonly sections: readonly ContractConfirmationSection[];
-    readonly footer: string;
+/** Variables of the contract confirmation template. */
+export type ContractConfirmationVariables = {
+    readonly contractLines: readonly TextRow[];
+    readonly consentGivenAt: string;
+    readonly termsParagraphs: readonly TextRow[];
+    readonly operatorEmail: string;
 };
-export type RenderContractConfirmationArgs = {
+export type ContractConfirmationArgs = {
     readonly consent: CheckoutConsentRecordedPayload;
     readonly timeZone: string;
     /** Translated plan name; falls back to the raw tier. */
@@ -26,6 +45,5 @@ export type RenderContractConfirmationArgs = {
     readonly operatorEmail: string;
     readonly termsContent: string;
 };
-/** Structured mail content (header/sections/footer) for the email channel's
- *  renderer; the renderer owns HTML escaping, this only builds plain text. */
-export declare function renderContractConfirmation(args: RenderContractConfirmationArgs): ContractConfirmationContent;
+export declare function contractConfirmationVariables(args: ContractConfirmationArgs): ContractConfirmationVariables;
+export {};

package/dist/billing-foundation/consumer-protection/confirmation-mail.js

@@ -1,6 +1,6 @@
 import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
-import { CONSENT_TEXTS, resolveConsentLocale } from "./consent-text.js";
-const LABELS = {
+import { resolveConsentLocale } from "./consent-text.js";
+export const CONFIRMATION_LABELS = {
     de: {
         subject: "Vertragsbestätigung",
         intro: "Vielen Dank für deine Bestellung. Hiermit bestätigen wir den Vertragsschluss mit folgendem Inhalt.",
@@ -47,7 +47,7 @@ const LABELS = {
     },
 };
 function formatPrice(consent, locale) {
-    const labels = LABELS[locale];
+    const labels = CONFIRMATION_LABELS[locale];
     if (consent.unitAmount === null || consent.currency === null)
         return "-";
     let amount;
@@ -89,40 +89,35 @@ function formatDate(iso, locale, timeZone) {
         timeZoneName: "short",
     }).format(epochMilliseconds);
 }
-/** Structured mail content (header/sections/footer) for the email channel's
- *  renderer; the renderer owns HTML escaping, this only builds plain text. */
-export function renderContractConfirmation(args) {
+// The mail template only knows plain text variables, so the Markdown terms
+// become one row per paragraph; heading markers are dropped.
+function termsParagraphsOf(markdown) {
+    return markdown
+        .split(/\n\s*\n/)
+        .map((paragraph) => paragraph.replace(/^#{1,6}\s+/gm, "").trim())
+        .filter((paragraph) => paragraph.length > 0)
+        .map((text) => ({ text }));
+}
+export function contractConfirmationVariables(args) {
     const locale = resolveConsentLocale(args.consent.locale);
-    const labels = LABELS[locale];
-    const texts = CONSENT_TEXTS[locale];
-    const { consent } = args;
-    const { timeZone } = args;
+    const labels = CONFIRMATION_LABELS[locale];
+    const { consent, timeZone } = args;
     const subjectLine = consent.mode === "payment"
         ? `${labels.item}: ${args.itemLabel ?? labels.oneOffPayment}`
         : `${labels.plan}: ${args.tierLabel ?? consent.tier ?? labels.oneOffPayment}`;
-    const contractLines = [
-        subjectLine,
-        `${labels.price}: ${formatPrice(consent, locale)}`,
-        `${labels.contractStart}: ${formatDate(args.contractStartIso, locale, timeZone)}`,
-        ...(args.currentPeriodEndIso !== undefined
-            ? [`${labels.currentPeriodEnd}: ${formatDate(args.currentPeriodEndIso, locale, timeZone)}`]
-            : []),
-    ];
     const vatNote = args.vatNote[locale] ?? args.vatNote[resolveConsentLocale()];
     return {
-        subject: labels.subject,
-        header: labels.subject,
-        sections: [
-            { text: labels.intro },
-            ...contractLines.map((text) => ({ text })),
-            ...(vatNote !== undefined ? [{ text: vatNote }] : []),
-            { heading: labels.consentHeading },
-            { text: texts.earlyPerformance },
-            { text: texts.withdrawalLoss },
-            { text: `${labels.consentGivenAt}: ${formatDate(args.consentGivenAtIso, locale, timeZone)}` },
-            { heading: labels.termsHeading },
-            { markdown: args.termsContent },
-        ],
-        footer: `${labels.contact} ${args.operatorEmail}`,
+        contractLines: [
+            subjectLine,
+            `${labels.price}: ${formatPrice(consent, locale)}`,
+            `${labels.contractStart}: ${formatDate(args.contractStartIso, locale, timeZone)}`,
+            ...(args.currentPeriodEndIso !== undefined
+                ? [`${labels.currentPeriodEnd}: ${formatDate(args.currentPeriodEndIso, locale, timeZone)}`]
+                : []),
+            ...(vatNote !== undefined ? [vatNote] : []),
+        ].map((text) => ({ text })),
+        consentGivenAt: formatDate(args.consentGivenAtIso, locale, timeZone),
+        termsParagraphs: termsParagraphsOf(args.termsContent),
+        operatorEmail: args.operatorEmail,
     };
 }

package/dist/billing-foundation/consumer-protection/issue-confirmation.js

@@ -11,7 +11,7 @@ import { UserQueries } from "../../user/index.js";
 import { paymentAggregateId, subscriptionAggregateId } from "../aggregate-id.js";
 import { CONTRACT_CONFIRMATION_NOTIFICATION_TYPE } from "../constants.js";
 import { CHECKOUT_CONSENT_RECORDED_EVENT_QN, CONTRACT_CONFIRMATION_ISSUED_EVENT_QN, checkoutConsentRecordedPayloadSchema, contractConfirmationIssuedPayloadSchema, PAYMENT_AGGREGATE_TYPE, SUBSCRIPTION_AGGREGATE_TYPE, } from "../events.js";
-import { renderContractConfirmation } from "./confirmation-mail.js";
+import { contractConfirmationVariables } from "./confirmation-mail.js";
 import { resolveConsentLocale } from "./consent-text.js";
 export const issueContractConfirmationSchema = z
     .object({
@@ -128,7 +128,7 @@ export function createIssueContractConfirmationHandler(options, consumerProtecti
                 ? translatedOrUndefined(i18n.t(consent.itemLabelKey, locale, consent.itemLabelParams), consent.itemLabelKey)
                 : undefined;
             const issuedAtIso = options.now().toString();
-            const content = renderContractConfirmation({
+            const variables = contractConfirmationVariables({
                 consent,
                 timeZone: pickTimeZone(recipient.data.timezone, ctx.tz.tenant),
                 ...(tierLabel !== undefined && { tierLabel }),
@@ -159,7 +159,7 @@ export function createIssueContractConfirmationHandler(options, consumerProtecti
             await stream.appendOne({ type: CONTRACT_CONFIRMATION_ISSUED_EVENT_QN, payload: issued });
             await ctx.notify(CONTRACT_CONFIRMATION_NOTIFICATION_TYPE, {
                 route: { email: recipient.data.email },
-                data: content,
+                data: variables,
                 locale,
                 priority: "critical",
             });

package/dist/billing-foundation/consumer-protection/mail-notifications.d.ts

@@ -0,0 +1,8 @@
+import { type FeatureRegistrar, type NotificationLocalizedTemplate, type TemplateVariables } from "@cosmicdrift/kumiko-framework/engine";
+export declare const TERMINATION_RECEIPT_VARIABLES: TemplateVariables;
+export declare const OPERATOR_NOTICE_VARIABLES: TemplateVariables;
+export declare const CONTRACT_CONFIRMATION_VARIABLES: TemplateVariables;
+export declare function terminationReceiptTemplate(): NotificationLocalizedTemplate;
+export declare function operatorNoticeTemplate(): NotificationLocalizedTemplate;
+export declare function contractConfirmationTemplate(): NotificationLocalizedTemplate;
+export declare function registerConsumerProtectionMails(r: FeatureRegistrar): void;

package/dist/billing-foundation/consumer-protection/mail-notifications.js

@@ -0,0 +1,95 @@
+import { templateVariable, } from "@cosmicdrift/kumiko-framework/engine";
+import { mailHeading, mailParagraph, mailRepeatedRows } from "../../shared/index.js";
+import { CONFIRMATION_LABELS } from "./confirmation-mail.js";
+import { CONSENT_LOCALES, CONSENT_TEXTS } from "./consent-text.js";
+import { TERMINATION_TEXTS } from "./termination-texts.js";
+// Slot syntax for the translated texts: `{name}` becomes a template variable.
+const OPERATOR_EMAIL_SLOT = "{operatorEmail}";
+const textRows = () => templateVariable.list({ text: templateVariable.text({ required: true }) }, { required: true });
+export const TERMINATION_RECEIPT_VARIABLES = {
+    subject: templateVariable.text({ required: true }),
+    receivedAt: templateVariable.text({ required: true }),
+    requestId: templateVariable.text({ required: true }),
+    details: textRows(),
+    operatorEmail: templateVariable.text({ required: true }),
+};
+export const OPERATOR_NOTICE_VARIABLES = {
+    subject: templateVariable.text({ required: true }),
+    lines: textRows(),
+    operatorEmail: templateVariable.text({ required: true }),
+};
+export const CONTRACT_CONFIRMATION_VARIABLES = {
+    contractLines: textRows(),
+    consentGivenAt: templateVariable.text({ required: true }),
+    termsParagraphs: textRows(),
+    operatorEmail: templateVariable.text({ required: true }),
+};
+function perLocale(build) {
+    return Object.fromEntries(CONSENT_LOCALES.map((locale) => {
+        const { body, subject } = build(locale);
+        return [locale, { body, meta: { subject, category: "transactional" } }];
+    }));
+}
+export function terminationReceiptTemplate() {
+    return perLocale((locale) => {
+        const texts = TERMINATION_TEXTS[locale];
+        return {
+            subject: "{{subject}}",
+            body: [
+                mailParagraph(texts.receiptGreeting),
+                mailParagraph(texts.receiptIntro),
+                mailParagraph(`${texts.receivedAt}: {receivedAt}`),
+                mailParagraph(`${texts.requestId}: {requestId}`),
+                mailRepeatedRows("details", "text"),
+                mailParagraph(texts.receiptNextSteps),
+                mailParagraph(texts.receiptRevoke(OPERATOR_EMAIL_SLOT)),
+                mailParagraph(`${texts.contact} {operatorEmail}`),
+            ].join(""),
+        };
+    });
+}
+export function operatorNoticeTemplate() {
+    return perLocale((locale) => ({
+        subject: "{{subject}}",
+        body: [
+            mailParagraph(TERMINATION_TEXTS[locale].operatorIntro),
+            mailRepeatedRows("lines", "text"),
+            mailParagraph("{operatorEmail}"),
+        ].join(""),
+    }));
+}
+export function contractConfirmationTemplate() {
+    return perLocale((locale) => {
+        const labels = CONFIRMATION_LABELS[locale];
+        const consent = CONSENT_TEXTS[locale];
+        return {
+            subject: labels.subject,
+            body: [
+                mailParagraph(labels.intro),
+                mailRepeatedRows("contractLines", "text"),
+                mailHeading(labels.consentHeading),
+                mailParagraph(consent.earlyPerformance),
+                mailParagraph(consent.withdrawalLoss),
+                mailParagraph(`${labels.consentGivenAt}: {consentGivenAt}`),
+                mailHeading(labels.termsHeading),
+                mailRepeatedRows("termsParagraphs", "text"),
+                mailParagraph(`${labels.contact} {operatorEmail}`),
+            ].join(""),
+        };
+    });
+}
+// The registered notification names are the tail of the QN types in constants.ts.
+export function registerConsumerProtectionMails(r) {
+    r.notification("contract-confirmation", {
+        variables: CONTRACT_CONFIRMATION_VARIABLES,
+        localizedTemplate: contractConfirmationTemplate,
+    });
+    r.notification("contract-termination-receipt", {
+        variables: TERMINATION_RECEIPT_VARIABLES,
+        localizedTemplate: terminationReceiptTemplate,
+    });
+    r.notification("contract-termination-operator-notice", {
+        variables: OPERATOR_NOTICE_VARIABLES,
+        localizedTemplate: operatorNoticeTemplate,
+    });
+}

package/dist/billing-foundation/consumer-protection/register-consent.js

@@ -2,6 +2,7 @@ import { paymentAggregateId, subscriptionAggregateId } from "../aggregate-id.js"
 import { SubscriptionFoundationHandlers, SubscriptionStatuses } from "../constants.js";
 import { CHECKOUT_CONSENT_RECORDED_EVENT_SHORT, CONTRACT_CONFIRMATION_ISSUED_EVENT_SHORT, checkoutConsentRecordedPayloadSchema, contractConfirmationIssuedPayloadSchema, INVOICE_PAID_EVENT_QN, PAYMENT_RECEIVED_EVENT_QN, SUBSCRIPTION_CREATED_EVENT_QN, SUBSCRIPTION_UPDATED_EVENT_QN, } from "../events.js";
 import { createIssueContractConfirmationHandler } from "./issue-confirmation.js";
+import { registerConsumerProtectionMails } from "./mail-notifications.js";
 import { registerContractTermination } from "./register-termination.js";
 const CONFIRMATION_TRIGGERS = [
     {
@@ -22,6 +23,7 @@ function isConfirmableSubscriptionStatus(status) {
 }
 export function registerConsumerProtection(r, options, consumerProtection) {
     r.requires("template-resolver", "delivery", "user", "tenant");
+    registerConsumerProtectionMails(r);
     registerContractTermination(r, options, consumerProtection);
     r.defineEvent(CHECKOUT_CONSENT_RECORDED_EVENT_SHORT, checkoutConsentRecordedPayloadSchema, {
         piiFields: "none",