@cosmicdrift/kumiko-bundled-features 0.365.1 → 0.367.0

package/dist/template-resolver/document-schema.js

@@ -284,6 +284,36 @@ export const DocumentTextSize = Extension.create({
         ];
     },
 });
+// A block shown only when the named variable has a value (data-if, the
+// conditional counterpart of data-each). Table rows qualify so an invoice can
+// drop a discount line; tiptap merges the attribute into paragraph, heading
+// and row markup only.
+export const DOCUMENT_CONDITION_ATTRIBUTE = "data-if";
+export const DocumentCondition = Extension.create({
+    name: "documentCondition",
+    addGlobalAttributes() {
+        return [
+            {
+                types: ["paragraph", "heading", "tableRow"],
+                attributes: {
+                    showIf: {
+                        default: null,
+                        parseHTML: (element) => {
+                            const name = element.getAttribute(DOCUMENT_CONDITION_ATTRIBUTE);
+                            return name !== null && isDocumentReferenceName(name) ? name : null;
+                        },
+                        renderHTML: (attributes) => {
+                            const name = attributes["showIf"];
+                            return typeof name === "string" && isDocumentReferenceName(name)
+                                ? { [DOCUMENT_CONDITION_ATTRIBUTE]: name }
+                                : {};
+                        },
+                    },
+                },
+            },
+        ];
+    },
+});
 export const documentExtensions = [
     StarterKit.configure({
         blockquote: false,
@@ -318,4 +348,5 @@ export const documentExtensions = [
     DocumentSteps,
     DocumentTextAlign,
     DocumentTextSize,
+    DocumentCondition,
 ];

package/dist/template-resolver/feature.js

@@ -63,13 +63,13 @@ export function createTemplateResolverFeature(opts = {}) {
                 resourceMaxBytes: createSystemConfig("number", { default: 2_097_152, bounds: { min: 1 } }),
             },
         });
-        r.entity("template-resource", templateResourceEntity);
+        r.entity({ name: "template-resource", ...templateResourceEntity });
         // Only when the app actually mounts a user-owned collection: the entity's
         // `content` is `userOwned`, which makes it subject data — the boot guard
         // then requires an EXT_USER_DATA hook (mount `template-resolver-user-data`).
         // Registering it unconditionally would impose that on every app.
         if (hasUserOwned)
-            r.entity("user-content-entry", userContentEntryEntity);
+            r.entity({ name: "user-content-entry", ...userContentEntryEntity });
         const handlers = {
             upsertSystem: r.writeHandler(upsertSystemWrite),
             upsertTenant: r.writeHandler(upsertTenantWrite),

package/dist/template-resolver/handlers/bundle-import.js

@@ -7,7 +7,7 @@ import { attachTemplateResources } from "../template-resources.js";
 import { resolveTemplateVariables } from "../template-validation.js";
 import { MAX_FILE_ATTACHMENTS_PER_TEMPLATE } from "./resource-shared.js";
 import { evaluateTemplateWrite } from "./template-gates.js";
-import { refuseTenantScopeUnderSystemTenant, writeTemplateRow, } from "./template-write.js";
+import { refuseSystemOnlyTenantOverride, refuseTenantScopeUnderSystemTenant, writeTemplateRow, } from "./template-write.js";
 export function targetExistsIssue(locale) {
     return {
         path: "locale",
@@ -61,7 +61,8 @@ function checkBundleAttachments(bundle) {
 // beforeTransaction half: validates the bundle and uploads every resource file to the target
 // tenant's storage. A failed or throwing upload releases the ones before it.
 export async function prepareTemplateBundleBeforeTransaction(args) {
-    const refused = refuseTenantScopeUnderSystemTenant(args.scope, args.tenantId);
+    const refused = refuseTenantScopeUnderSystemTenant(args.scope, args.tenantId) ??
+        refuseSystemOnlyTenantOverride(args.ctx.registry, args.scope, args.bundle.slug, args.bundle.kind);
     if (refused !== null)
         return refused;
     const issues = await collectBundleIssues(args, args.status);

package/dist/template-resolver/handlers/copy-locale.write.js

@@ -15,7 +15,7 @@ import { resolveTemplateVariables } from "../template-validation.js";
 import { targetExistsIssue } from "./bundle-import.js";
 import { kindSchema, localeSchema, templateSlugSchema } from "./shared.js";
 import { parseStoredJson, storedRecord } from "./template-gates.js";
-import { refuseTenantScopeUnderSystemTenant, writeTemplateRow } from "./template-write.js";
+import { refuseSystemOnlyTenantOverride, refuseTenantScopeUnderSystemTenant, writeTemplateRow, } from "./template-write.js";
 function readDbFor(ctx, scope) {
     return scope === "system" ? requireForTenant(ctx, SYSTEM_TENANT_ID).db : ctx.db;
 }
@@ -59,7 +59,8 @@ async function checkCopyRequest(ctx, event) {
         }));
     }
     const tenantId = scope === "system" ? SYSTEM_TENANT_ID : event.user.tenantId;
-    const refused = refuseTenantScopeUnderSystemTenant(scope, tenantId);
+    const refused = refuseTenantScopeUnderSystemTenant(scope, tenantId) ??
+        refuseSystemOnlyTenantOverride(ctx.registry, scope, slug, kind);
     if (refused !== null)
         return refused;
     const readDb = readDbFor(ctx, scope);

package/dist/template-resolver/handlers/find-by-id.query.js

@@ -3,6 +3,7 @@ import { defineQueryHandler } from "@cosmicdrift/kumiko-framework/engine";
 import * as z from "zod";
 import { templateResourcesTable } from "../table.js";
 import { draftViewerTenantId, isHiddenSystemDraft, toWorkingRow } from "../template-draft.js";
+import { isSystemOnlyTemplateHiddenFrom } from "../template-system-only.js";
 // Admin-Lookup für UI-Edit-Flow. Returnt das raw Template inkl. draft/
 // archived Status. Tenant-Isolation: User sieht nur Templates des
 // eigenen Tenants oder SYSTEM_TENANT (system-defaults sind public-
@@ -17,8 +18,11 @@ export const findByIdQuery = defineQueryHandler({
         const stored = await fetchOne(ctx.db, templateResourcesTable, {
             id: query.payload.id,
         });
-        if (!stored || isHiddenSystemDraft(query.user, stored))
+        if (!stored ||
+            isHiddenSystemDraft(query.user, stored) ||
+            isSystemOnlyTemplateHiddenFrom(query.user, ctx.registry, stored)) {
             return null;
+        }
         const row = toWorkingRow(stored, draftViewerTenantId(query.user, stored));
         const isOwnTenant = row.tenantId === query.user.tenantId;
         const isSystemTemplate = row.scope === "system";

package/dist/template-resolver/handlers/list.query.js

@@ -4,6 +4,7 @@ import * as z from "zod";
 import { TEMPLATE_KINDS, TEMPLATE_STATUSES } from "../constants.js";
 import { templateResourcesTable } from "../table.js";
 import { isHiddenSystemDraft } from "../template-draft.js";
+import { isSystemOnlyTemplateHiddenFrom } from "../template-system-only.js";
 // ctx.db is tenant-scoped even for SystemAdmin: every caller sees its own
 // tenant's rows plus the system defaults, never another tenant's rows.
 export const listQuery = defineQueryHandler({
@@ -39,7 +40,8 @@ export const listQuery = defineQueryHandler({
             limit: 500,
         }));
         return rows
-            .filter((row) => !isHiddenSystemDraft(query.user, row))
+            .filter((row) => !isHiddenSystemDraft(query.user, row) &&
+            !isSystemOnlyTemplateHiddenFrom(query.user, ctx.registry, row))
             .map((row) => ({
             id: String(row.id),
             tenantId: row.tenantId,

package/dist/template-resolver/handlers/overview.query.js

@@ -4,6 +4,7 @@ import * as z from "zod";
 import { DEFAULT_MAIL_LAYOUT_SLUG, FALLBACK_LOCALE } from "../constants.js";
 import { templateResourcesTable } from "../table.js";
 import { activeSinceOf, activeVersionOf, draftViewerTenantId, isHiddenSystemDraft, parseTemplateDraft, servedVersionOf, } from "../template-draft.js";
+import { isSystemOnlyTemplateHiddenFrom } from "../template-system-only.js";
 import { collectTemplateUsage } from "../template-usage.js";
 import { storedRecord } from "./template-gates.js";
 const OVERVIEW_KINDS = ["mail", "document-pdf", "mail-layout", "pdf-layout"];
@@ -183,7 +184,7 @@ export const overviewQuery = defineQueryHandler({
         totalCount: z.boolean().optional(),
     }),
     access: { roles: ["TenantAdmin", "SystemAdmin"] },
-    description: "Lists mail, PDF and layout templates as one row per slug and kind for the caller's tenant (optionally only the mails and PDFs using one layout slug): where the effective version comes from (own override or system), its locales, status and version (the served one; `draftVersion` is set when an unpublished draft waits beside it, `activeSince` says since when the served version applies), the system version it overrides, the layout it uses and which notifications or templates use it; use it to browse and filter all templates at a glance.",
+    description: "Lists mail, PDF and layout templates as one row per slug and kind for the caller's tenant (optionally only the mails and PDFs using one layout slug): where the effective version comes from (own override or system), its locales, status and version (the served one; `draftVersion` is set when an unpublished draft waits beside it, `activeSince` says since when the served version applies), the system version it overrides, the layout it uses and which notifications or templates use it; templates of notifications registered with `systemOnly` are listed for SystemAdmins only; use it to browse and filter all templates at a glance.",
     handler: async (query, ctx) => {
         const payload = query.payload;
         const fetchedRows = await selectMany(ctx.db, templateResourcesTable, { kind: { in: [...OVERVIEW_KINDS] } }, { orderBy: { col: "id", direction: "asc" }, limit: OVERVIEW_ROW_LIMIT + 1 });
@@ -194,7 +195,8 @@ export const overviewQuery = defineQueryHandler({
                 limit: OVERVIEW_ROW_LIMIT,
             });
         }
-        const visibleRows = rows.filter((row) => !isHiddenSystemDraft(query.user, row));
+        const visibleRows = rows.filter((row) => !isHiddenSystemDraft(query.user, row) &&
+            !isSystemOnlyTemplateHiddenFrom(query.user, ctx.registry, row));
         const { drafts, layoutSlugByDocument } = buildDrafts(groupBySlugAndKind(visibleRows), query.user);
         const effectiveLayouts = effectiveMailLayoutSlugs(visibleRows);
         const overviewRows = drafts.map((draft) => withUsage(draft, layoutSlugByDocument, ctx.registry, effectiveLayouts));

package/dist/template-resolver/handlers/template-write.d.ts

@@ -1,4 +1,4 @@
-import { type HandlerContext, type SessionUser, type TemplateVariables, type TenantId, type WriteResult } from "@cosmicdrift/kumiko-framework/engine";
+import { type HandlerContext, type Registry, type SessionUser, type TemplateVariables, type TenantId, type WriteResult } from "@cosmicdrift/kumiko-framework/engine";
 import { type WriteFailure } from "@cosmicdrift/kumiko-framework/errors";
 import type { ContentFormat, TemplateKind } from "../constants.js";
 import type { TemplateWriteScope } from "../layout-regions.js";
@@ -32,6 +32,7 @@ export type TemplateRowWrite = {
     readonly payload: TemplateRowPayload;
 };
 export declare function refuseTenantScopeUnderSystemTenant(scope: TemplateWriteScope, tenantId: string): WriteResult<never> | null;
+export declare function refuseSystemOnlyTenantOverride(registry: Registry, scope: TemplateWriteScope, slug: string, kind: string): WriteFailure | null;
 export type GatedTemplateWrite = {
     readonly ok: true;
     readonly evaluated: Extract<TemplateWriteResult, {

package/dist/template-resolver/handlers/template-write.js

@@ -2,8 +2,10 @@ import { fetchOne } from "@cosmicdrift/kumiko-framework/bun-db";
 import { SYSTEM_TENANT_ID, } from "@cosmicdrift/kumiko-framework/engine";
 import { AccessDeniedError, ValidationError, writeFailure, } from "@cosmicdrift/kumiko-framework/errors";
 import { requireForTenant } from "../../shared/index.js";
+import { TemplateResolverErrors } from "../qualified-names.js";
 import { templateResourcesTable } from "../table.js";
 import { activationChanges, serializeTemplateDraft } from "../template-draft.js";
+import { isSystemOnlyTemplate } from "../template-system-only.js";
 import { executor } from "./shared.js";
 import { evaluateTemplateWrite, } from "./template-gates.js";
 // The tenant-scope-under-system-tenant ban lives here so no write path can
@@ -16,6 +18,14 @@ export function refuseTenantScopeUnderSystemTenant(scope, tenantId) {
         details: { reason: "system_tenant_override_not_allowed_use_upsert_system" },
     }));
 }
+export function refuseSystemOnlyTenantOverride(registry, scope, slug, kind) {
+    if (scope !== "tenant" || !isSystemOnlyTemplate(registry, slug, kind))
+        return null;
+    return writeFailure(new AccessDeniedError({
+        i18nKey: "templateResolver.errors.systemOnlyTemplate",
+        details: { reason: TemplateResolverErrors.systemOnlyTemplate },
+    }));
+}
 // Evaluation plus the publish rule: a row that goes active must not carry
 // publish issues, a draft may.
 export function gateTemplateWrite(input, status) {
@@ -63,7 +73,8 @@ function updateChanges(existing, status, fields) {
 // separately.
 export async function writeTemplateRow(args) {
     const { ctx, user, tenantId, scope, status, payload } = args;
-    const refused = refuseTenantScopeUnderSystemTenant(scope, tenantId);
+    const refused = refuseTenantScopeUnderSystemTenant(scope, tenantId) ??
+        refuseSystemOnlyTenantOverride(ctx.registry, scope, payload.slug, payload.kind);
     if (refused !== null)
         return refused;
     const { db, streamTenantId } = requireForTenant(ctx, tenantId);

package/dist/template-resolver/index.d.ts

@@ -1,8 +1,8 @@
 export { createTemplateResolverApi, type ResolveRequest, requireTemplateResolver, TemplateNotFoundError, type TemplateResolverApi, type TemplateResource, } from "./api.js";
 export { type CompileDocumentBodyOptions, collectDocumentResourceKeys, compileDocumentBodyToHandlebars, toResourceDataUri, } from "./compile-document-body.js";
 export { CONTENT_FORMATS, type ContentFormat, DEFAULT_MAIL_LAYOUT_SLUG, DEFAULT_PDF_LAYOUT_SLUG, DOCUMENT_HTML_KINDS, type DocumentHtmlKind, FALLBACK_LOCALE, NON_RENDER_KINDS, type NonRenderKind, PDF_DEFAULT_MARGIN_MM, PDF_FOOTER_MARGIN_MM, PDF_HEADER_MARGIN_MM, PDF_ORIENTATIONS, PDF_PAGE_FORMATS, type PdfOrientation, type PdfPageFormat, RENDER_KINDS, type RenderKind, SYSTEM_TENANT_ID, TEMPLATE_KINDS, TEMPLATE_SCOPES, TEMPLATE_STATUSES, TEXT_BLOCK_KIND, type TemplateKind, type TemplateScope, type TemplateStatus, UPSERT_KINDS, type UpsertKind, } from "./constants.js";
-export { type DocumentViolation, type DocumentViolationCode, documentViolationsToFieldIssues, type SanitizeBodyResult, type SanitizeHtmlResult, sanitizeDocumentHtml, sanitizeTemplateBody, } from "./document-sanitizer.js";
-export { DOCUMENT_NODE_NAMES, DOCUMENT_TEXT_ALIGNMENTS, DocumentButton, DocumentDivider, DocumentLink, DocumentPageBreak, DocumentResource, DocumentTable, DocumentTableCell, DocumentTableHeader, DocumentTableRow, DocumentTextAlign, type DocumentTextAlignment, DocumentVariable, documentExtensions, isAllowedDocumentLinkHref, isDocumentPlaceholderHref, isDocumentReferenceName, isDocumentResourceKey, } from "./document-schema.js";
+export { type DocumentViolation, type DocumentViolationCode, documentViolationsToFieldIssues, flattenParagraphsToLineBreaks, type SanitizeBodyResult, type SanitizeHtmlResult, sanitizeDocumentHtml, sanitizeTemplateBody, } from "./document-sanitizer.js";
+export { DOCUMENT_CONDITION_ATTRIBUTE, DOCUMENT_NODE_NAMES, DOCUMENT_TEXT_ALIGNMENTS, DocumentButton, DocumentCondition, DocumentDivider, DocumentLink, DocumentPageBreak, DocumentResource, DocumentTable, DocumentTableCell, DocumentTableHeader, DocumentTableRow, DocumentTextAlign, type DocumentTextAlignment, DocumentVariable, documentExtensions, isAllowedDocumentLinkHref, isDocumentPlaceholderHref, isDocumentReferenceName, isDocumentResourceKey, } from "./document-schema.js";
 export { createTemplateResolverFeature } from "./feature.js";
 export type { LayoutSourceResponse, LayoutSourceRow } from "./handlers/layout-source.query.js";
 export type { OverviewKindGroup, OverviewOrigin, OverviewResponse, OverviewRow, OverviewUsage, } from "./handlers/overview.query.js";
@@ -19,6 +19,7 @@ export { type TemplateBundle, templateBundleSchema } from "./template-bundle.js"
 export { isMailTemplateMeta, type LayoutTemplateMeta, MAIL_CATEGORIES, MAIL_TONES, type MailCategory, type MailLayoutMeta, type MailTemplateMeta, type MailTone, type PdfTemplateMeta, parseTemplateMeta, pdfAttachmentFileNamePatternSchema, readMailLayoutMeta, readPdfTemplateMeta, type TemplateMeta, type TemplateMetaIssue, type TemplateMetaResult, templateSlugSchema, } from "./template-meta.js";
 export { type DocumentDraftOutcome, evaluateDocumentDraft } from "./template-preview.js";
 export { readTemplateResource, type TemplateResourceFile } from "./template-resources.js";
+export { isSystemOnlyTemplate } from "./template-system-only.js";
 export { collectTemplateUsage, type TemplateUsageEntry } from "./template-usage.js";
 export { hasPlaceholderProblems, resolveTemplateVariables, SYSTEM_PLACEHOLDERS, systemPlaceholdersFor, type TemplateValidation, validateTemplatePlaceholders, } from "./template-validation.js";
 export { type UserContentEntryRow, userContentEntriesTable, userContentEntryEntity, } from "./user-content-table.js";

package/dist/template-resolver/index.js

@@ -1,8 +1,8 @@
 export { createTemplateResolverApi, requireTemplateResolver, TemplateNotFoundError, } from "./api.js";
 export { collectDocumentResourceKeys, compileDocumentBodyToHandlebars, toResourceDataUri, } from "./compile-document-body.js";
 export { CONTENT_FORMATS, DEFAULT_MAIL_LAYOUT_SLUG, DEFAULT_PDF_LAYOUT_SLUG, DOCUMENT_HTML_KINDS, FALLBACK_LOCALE, NON_RENDER_KINDS, PDF_DEFAULT_MARGIN_MM, PDF_FOOTER_MARGIN_MM, PDF_HEADER_MARGIN_MM, PDF_ORIENTATIONS, PDF_PAGE_FORMATS, RENDER_KINDS, SYSTEM_TENANT_ID, TEMPLATE_KINDS, TEMPLATE_SCOPES, TEMPLATE_STATUSES, TEXT_BLOCK_KIND, UPSERT_KINDS, } from "./constants.js";
-export { documentViolationsToFieldIssues, sanitizeDocumentHtml, sanitizeTemplateBody, } from "./document-sanitizer.js";
-export { DOCUMENT_NODE_NAMES, DOCUMENT_TEXT_ALIGNMENTS, DocumentButton, DocumentDivider, DocumentLink, DocumentPageBreak, DocumentResource, DocumentTable, DocumentTableCell, DocumentTableHeader, DocumentTableRow, DocumentTextAlign, DocumentVariable, documentExtensions, isAllowedDocumentLinkHref, isDocumentPlaceholderHref, isDocumentReferenceName, isDocumentResourceKey, } from "./document-schema.js";
+export { documentViolationsToFieldIssues, flattenParagraphsToLineBreaks, sanitizeDocumentHtml, sanitizeTemplateBody, } from "./document-sanitizer.js";
+export { DOCUMENT_CONDITION_ATTRIBUTE, DOCUMENT_NODE_NAMES, DOCUMENT_TEXT_ALIGNMENTS, DocumentButton, DocumentCondition, DocumentDivider, DocumentLink, DocumentPageBreak, DocumentResource, DocumentTable, DocumentTableCell, DocumentTableHeader, DocumentTableRow, DocumentTextAlign, DocumentVariable, documentExtensions, isAllowedDocumentLinkHref, isDocumentPlaceholderHref, isDocumentReferenceName, isDocumentResourceKey, } from "./document-schema.js";
 export { createTemplateResolverFeature } from "./feature.js";
 export { localeSchema } from "./handlers/shared.js";
 export { isHexColor, mailLayoutAppearance, } from "./layout-appearance.js";
@@ -17,6 +17,7 @@ export { templateBundleSchema } from "./template-bundle.js";
 export { isMailTemplateMeta, MAIL_CATEGORIES, MAIL_TONES, parseTemplateMeta, pdfAttachmentFileNamePatternSchema, readMailLayoutMeta, readPdfTemplateMeta, templateSlugSchema, } from "./template-meta.js";
 export { evaluateDocumentDraft } from "./template-preview.js";
 export { readTemplateResource } from "./template-resources.js";
+export { isSystemOnlyTemplate } from "./template-system-only.js";
 export { collectTemplateUsage } from "./template-usage.js";
 export { hasPlaceholderProblems, resolveTemplateVariables, SYSTEM_PLACEHOLDERS, systemPlaceholdersFor, validateTemplatePlaceholders, } from "./template-validation.js";
 export { userContentEntriesTable, userContentEntryEntity, } from "./user-content-table.js";

package/dist/template-resolver/qualified-names.d.ts

@@ -44,6 +44,7 @@ export declare const TemplateResolverErrors: {
     readonly alreadyArchived: "template_already_archived";
     readonly targetExists: "target_exists";
     readonly systemResourcesNeedSystemTenant: "system_resources_need_system_tenant";
+    readonly systemOnlyTemplate: "system_only_template";
     readonly bundleLocalesDiffer: "bundle_locales_differ";
     readonly resourceTooLarge: "template_resource_too_large";
     readonly resourceUnsupportedImage: "template_resource_unsupported_image";

package/dist/template-resolver/qualified-names.js

@@ -55,6 +55,7 @@ export const TemplateResolverErrors = {
     alreadyArchived: "template_already_archived",
     targetExists: "target_exists",
     systemResourcesNeedSystemTenant: "system_resources_need_system_tenant",
+    systemOnlyTemplate: "system_only_template",
     bundleLocalesDiffer: "bundle_locales_differ",
     resourceTooLarge: "template_resource_too_large",
     resourceUnsupportedImage: "template_resource_unsupported_image",

package/dist/template-resolver/seeding.d.ts

@@ -1,5 +1,6 @@
 import { type DbConnection } from "@cosmicdrift/kumiko-framework/db";
 import { type Registry, type SessionUser, type TenantId } from "@cosmicdrift/kumiko-framework/engine";
+import type { Dispatcher } from "@cosmicdrift/kumiko-framework/pipeline";
 import { type SeedIfExists } from "@cosmicdrift/kumiko-framework/seeding";
 import { type ContentFormat, type UpsertKind } from "./constants.js";
 import type { TemplateBundle } from "./template-bundle.js";
@@ -24,6 +25,9 @@ export declare function seedSystemTemplate(db: DbConnection, opts: SeedSystemTem
 export type SeedSystemTemplateBundleOptions = {
     readonly by?: SessionUser;
     readonly ifExists?: SeedIfExists;
+    /** Required for bundles with resources (e.g. a `logo`): the files go through the
+     *  import-bundle-system write, which needs the file provider of the system tenant. */
+    readonly dispatcher?: Dispatcher;
 };
 export declare function seedSystemTemplateBundle(db: DbConnection, bundle: TemplateBundle, opts?: SeedSystemTemplateBundleOptions): Promise<{
     ids: Record<string, string>;

package/dist/template-resolver/seeding.js

@@ -13,10 +13,11 @@ import { createTenantDb, deleteMany, } from "@cosmicdrift/kumiko-framework/db";
 import { createSystemUser, SYSTEM_TENANT_ID, } from "@cosmicdrift/kumiko-framework/engine";
 import { getStreamVersion, getUnscopedStreamMaxVersionForSeed, } from "@cosmicdrift/kumiko-framework/event-store";
 import { runEventStoreSeed } from "@cosmicdrift/kumiko-framework/seeding";
+import { isPlainObject } from "@cosmicdrift/kumiko-types/type-guards";
 import { TEXT_BLOCK_KIND } from "./constants.js";
 import { executor } from "./handlers/shared.js";
 import { evaluateTemplateWrite } from "./handlers/template-gates.js";
-import { TEMPLATE_RESOLVER_FEATURE } from "./qualified-names.js";
+import { TEMPLATE_RESOLVER_FEATURE, TemplateResolverHandlers } from "./qualified-names.js";
 import { templateResourcesTable } from "./table.js";
 import { activeStampChanges, servedStampChanges } from "./template-draft.js";
 import { templateSlugSchema } from "./template-meta.js";
@@ -154,12 +155,12 @@ export async function seedSystemTemplate(db, opts) {
         update: (row) => applyUpdate(row, existingRow),
     });
 }
-// Seeds one system row per bundle locale. Bundled resources need a file
-// provider and the system tenant's file space, which a boot seed does not
-// have, so those go through the import-bundle-system write instead.
+// Seeds one system row per bundle locale. Bundled resources need a file provider and
+// the system tenant's file space, so those bundles are written through the
+// import-bundle-system handler on the seed dispatcher instead of directly.
 export async function seedSystemTemplateBundle(db, bundle, opts = {}) {
     if (Object.keys(bundle.resources).length > 0) {
-        throw new Error(`seedSystemTemplateBundle ${bundle.slug}/${bundle.kind}: bundles with resources cannot be seeded; use the import-bundle-system write`);
+        return seedSystemTemplateBundleWithResources(db, bundle, opts);
     }
     const ids = {};
     for (const [locale, entry] of Object.entries(bundle.locales)) {
@@ -178,6 +179,40 @@ export async function seedSystemTemplateBundle(db, bundle, opts = {}) {
     }
     return { ids };
 }
+async function seedSystemTemplateBundleWithResources(db, bundle, opts) {
+    const label = `seedSystemTemplateBundle ${bundle.slug}/${bundle.kind}`;
+    const { dispatcher } = opts;
+    if (!dispatcher) {
+        throw new Error(`${label}: bundles with resources need a file provider; pass opts.dispatcher (the dispatcher of the seed deps) so the files are stored through the import-bundle-system write`);
+    }
+    if ((opts.ifExists ?? "skip") === "skip") {
+        const existingIds = {};
+        for (const locale of Object.keys(bundle.locales)) {
+            const row = await fetchOne(db, templateResourcesTable, {
+                tenantId: SYSTEM_TENANT_ID,
+                slug: bundle.slug,
+                kind: bundle.kind,
+                locale,
+            });
+            if (row)
+                existingIds[locale] = String(row.id);
+        }
+        if (Object.keys(existingIds).length === Object.keys(bundle.locales).length) {
+            return { ids: existingIds };
+        }
+    }
+    const result = await dispatcher.write(TemplateResolverHandlers.importBundleSystem, { bundle }, opts.by ?? createSystemUser(SYSTEM_TENANT_ID, ["SystemAdmin"]));
+    if (!result.isSuccess) {
+        throw new Error(`${label} failed: ${result.error.code}: ${result.error.message}`);
+    }
+    return { ids: importedIds(result.data) };
+}
+function importedIds(data) {
+    const ids = isPlainObject(data) ? data["ids"] : undefined;
+    if (!isPlainObject(ids))
+        throw new Error("seedSystemTemplateBundle: import returned no ids");
+    return Object.fromEntries(Object.entries(ids).map(([locale, id]) => [locale, String(id)]));
+}
 export function hasNotificationTemplates(registry) {
     return Array.from(registry.getAllNotifications().values()).some((notification) => notification.template !== undefined);
 }

package/dist/template-resolver/template-preview.js

@@ -33,6 +33,8 @@ function sampleScalar(name, def) {
             return 0;
         case "date":
             return SAMPLE_DATE;
+        case "percent":
+            return 0;
     }
 }
 function sampleRow(item, given = {}) {

package/dist/template-resolver/template-system-only.d.ts

@@ -0,0 +1,8 @@
+import type { Registry } from "@cosmicdrift/kumiko-framework/engine";
+export declare function isSystemOnlyTemplate(registry: Registry, slug: string, kind: string): boolean;
+export declare function isSystemOnlyTemplateHiddenFrom(user: {
+    readonly roles: readonly string[];
+}, registry: Registry, row: {
+    readonly slug: string;
+    readonly kind: string;
+}): boolean;

package/dist/template-resolver/template-system-only.js

@@ -0,0 +1,11 @@
+import { isSystemAdmin } from "./template-draft.js";
+const NOTIFICATION_TEMPLATE_KIND = "mail";
+// A notification registered with systemOnly keeps its mail template as the system default:
+// tenants neither list nor override it, and overrides stored before the flag are ignored.
+export function isSystemOnlyTemplate(registry, slug, kind) {
+    return (kind === NOTIFICATION_TEMPLATE_KIND &&
+        registry.getAllNotifications().get(slug)?.systemOnly === true);
+}
+export function isSystemOnlyTemplateHiddenFrom(user, registry, row) {
+    return !isSystemAdmin(user) && isSystemOnlyTemplate(registry, row.slug, row.kind);
+}

package/dist/template-resolver/template-validation.js

@@ -1,6 +1,6 @@
 import * as z from "zod";
-import { withParsedDocument } from "./document-sanitizer.js";
-import { isDocumentPlaceholderHref, isDocumentReferenceName } from "./document-schema.js";
+import { conditionScopeElement, withParsedDocument } from "./document-sanitizer.js";
+import { DOCUMENT_CONDITION_ATTRIBUTE, isDocumentPlaceholderHref, isDocumentReferenceName, } from "./document-schema.js";
 export const SYSTEM_PLACEHOLDERS = new Set([
     "tenantName",
     "signature",
@@ -34,6 +34,7 @@ const scalarVariableSchema = z.discriminatedUnion("type", [
             .optional(),
     }),
     z.object({ ...variableCommon, type: z.literal("date"), example: textLikeExample }),
+    z.object({ ...variableCommon, type: z.literal("percent"), example: z.number().optional() }),
 ]);
 const variableDefSchema = z.union([
     scalarVariableSchema,
@@ -99,34 +100,47 @@ const NAME_ATTRIBUTE_BY_TAG = {
     span: "data-variable",
     div: "data-steps",
 };
-function scanBodyPlaceholders(body, scope) {
-    withParsedDocument(body, (root) => {
-        for (const element of Array.from(root.querySelectorAll("tr[data-each]"))) {
-            const listName = element.getAttribute("data-each") ?? "";
-            const def = Object.hasOwn(scope.variables, listName) ? scope.variables[listName] : undefined;
-            if (def?.type === "list")
-                scope.used.add(listName);
-            else
-                scope.unknown.add(listName);
+function scanRepeatRows(root, scope) {
+    for (const element of Array.from(root.querySelectorAll("tr[data-each]"))) {
+        const listName = element.getAttribute("data-each") ?? "";
+        const def = Object.hasOwn(scope.variables, listName) ? scope.variables[listName] : undefined;
+        if (def?.type === "list")
+            scope.used.add(listName);
+        else
+            scope.unknown.add(listName);
+    }
+}
+function scanConditions(root, scope) {
+    for (const element of Array.from(root.querySelectorAll(`[${DOCUMENT_CONDITION_ATTRIBUTE}]`))) {
+        const itemFields = listItemFields(scope.variables, enclosingEachName(conditionScopeElement(element)));
+        recordName(element.getAttribute(DOCUMENT_CONDITION_ATTRIBUTE) ?? "", itemFields, scope);
+    }
+}
+function scanReferences(root, scope) {
+    for (const element of Array.from(root.querySelectorAll("span[data-variable], div[data-steps], a[href], img[data-resource]"))) {
+        const itemFields = listItemFields(scope.variables, enclosingEachName(element));
+        const tag = element.tagName.toLowerCase();
+        const nameAttribute = NAME_ATTRIBUTE_BY_TAG[tag];
+        if (nameAttribute !== undefined) {
+            recordName(element.getAttribute(nameAttribute) ?? "", itemFields, scope);
+        }
+        else if (tag === "a") {
+            const href = element.getAttribute("href") ?? "";
+            if (isDocumentPlaceholderHref(href))
+                recordName(href.slice(2, -2), itemFields, scope);
         }
-        for (const element of Array.from(root.querySelectorAll("span[data-variable], div[data-steps], a[href], img[data-resource]"))) {
-            const itemFields = listItemFields(scope.variables, enclosingEachName(element));
-            const tag = element.tagName.toLowerCase();
-            const nameAttribute = NAME_ATTRIBUTE_BY_TAG[tag];
-            if (nameAttribute !== undefined) {
-                recordName(element.getAttribute(nameAttribute) ?? "", itemFields, scope);
-            }
-            else if (tag === "a") {
-                const href = element.getAttribute("href") ?? "";
-                if (isDocumentPlaceholderHref(href))
-                    recordName(href.slice(2, -2), itemFields, scope);
-            }
-            else {
-                const key = element.getAttribute("data-resource") ?? "";
-                if (!scope.resourceKeys.has(key))
-                    scope.unknownResources.add(key);
-            }
+        else {
+            const key = element.getAttribute("data-resource") ?? "";
+            if (!scope.resourceKeys.has(key))
+                scope.unknownResources.add(key);
         }
+    }
+}
+function scanBodyPlaceholders(body, scope) {
+    withParsedDocument(body, (root) => {
+        scanRepeatRows(root, scope);
+        scanConditions(root, scope);
+        scanReferences(root, scope);
     });
 }
 const HANDLEBARS_EXPRESSION = /\{\{([^{}]*)\}\}/g;

package/dist/template-resolver/web/i18n.js

@@ -76,6 +76,7 @@ export const defaultTranslations = {
         "templateResolver.errors.collection.kindNotAllowed": "“{detail}” templates are written through their own editor, not through a collection.",
         "templateResolver.errors.noSystemTemplate": "There is no active system template to reset to.",
         "templateResolver.errors.noDraft": "There is no draft to discard.",
+        "templateResolver.errors.systemOnlyTemplate": "Only the platform maintains this template; it cannot be overridden per tenant.",
         "templateResolver.errors.template.invalidMeta": "The template settings are invalid.",
         "templateResolver.errors.template.meta.subject.required": "The subject is missing.",
         "templateResolver.errors.template.meta.subject.invalid": "The subject is invalid (at most 200 characters, no line breaks).",

package/dist/template-resolver-user-data/index.js

@@ -12,7 +12,7 @@ export const templateResolverUserDataFeature = defineFeature("template-resolver-
     // template-resolver is optional for the same reason as in
     // notes-history-user-data: a toggleable mount would otherwise trip the
     // "effectively disabled" boot warning even though the entity is there.
-    r.requires("user-data-rights");
+    r.requires({ features: ["user-data-rights"] });
     r.optionalRequires("template-resolver");
     r.useExtension(EXT_USER_DATA, "user-content-entry", {
         export: userContentExportHook,

package/dist/tenant/feature.js

@@ -38,7 +38,7 @@ export function createTenantFeature(options) {
             recommended: true,
         });
         r.systemScope();
-        r.requires("config");
+        r.requires({ features: ["config"] });
         r.extendsRegistrar(EXT_ASSIGNABLE_ROLE, {});
         // The elevation guards read the registry, the screens only these options: a role the
         // server accepts but the screen omits is silently stripped on the next member-roles save.
@@ -49,9 +49,9 @@ export function createTenantFeature(options) {
                 throw new Error(`[tenant] assignable app role "${role}" (assignableFrom "${assignableFrom}") is declared but missing from the tenant screens' options; pass assignableAppRoles: collectAssignableAppRoles(appFeatures) to createTenantFeature.`);
             }
         });
-        r.entity("tenant", tenantEntity);
-        r.entity("tenant-membership", tenantMembershipEntity);
-        r.entity("tenant-invitation", tenantInvitationEntity);
+        r.entity({ name: "tenant", ...tenantEntity });
+        r.entity({ name: "tenant-membership", ...tenantMembershipEntity });
+        r.entity({ name: "tenant-invitation", ...tenantInvitationEntity });
         r.config({
             keys: {
                 // Stammdaten-Settings — Tenant-Admin darf ändern, alle dürfen lesen.

package/dist/tenant/seeding.js

@@ -185,7 +185,7 @@ export async function seedTenant(db, options, hooks) {
     }
     // "tenant:seed" matches no handler-scoped hook, only entity-scoped ones
     // (keyed by result.entityName === "tenant") — that's exactly what
-    // tier-engine's `r.hook("postSave", { allOf: "tenant" }, ...)` needs.
+    // tier-engine's `r.hook({ type: "postSave", target: { allOf: "tenant" }, ... })` needs.
     await fireEntityPostSave(hooks, "tenant:seed", result.data, { tenantId: options.id, db });
     return { id: options.id };
 }

package/dist/tenant-lifecycle/feature.js

@@ -19,7 +19,7 @@ export function createTenantLifecycleFeature() {
             category: "compliance",
             recommended: false,
         });
-        r.requires("tenant", "compliance-profiles");
+        r.requires({ features: ["tenant", "compliance-profiles"] });
         r.optionalRequires("sessions");
         r.usesApi("compliance.forTenant");
         r.extendsRegistrar(EXT_TENANT_DATA, {});
@@ -74,8 +74,7 @@ export function createTenantLifecycleFeature() {
                 if (!ctx.registry) {
                     throw new Error("run-tenant-destruction: ctx.registry required (JobContext incomplete)");
                 }
-                const T = (await import("@cosmicdrift/kumiko-framework/time")).getTemporal();
-                const now = T.Now.instant();
+                const now = ctx.tz.now();
                 // Without crossTenantReads (undeclared hatch) fall through to the sweep.
                 if (ctx.crossTenantReads && !(await hasTenantDestructionWork(ctx.crossTenantReads, now))) {
                     // skip: no tenant is due, so the sweep would not touch anything

package/dist/tenant-settings/feature.js

@@ -16,7 +16,7 @@ import { buildTenantSettingsKeys } from "./config.js";
 import { TENANT_SETTINGS_FEATURE_NAME } from "./constants.js";
 export function createTenantSettingsFeature(opts = {}) {
     return defineFeature(TENANT_SETTINGS_FEATURE_NAME, (r) => {
-        r.requires("config");
+        r.requires({ features: ["config"] });
         r.describe("Per-tenant Currency + Locale defaults, exposed as two config keys (tenant-settings:config:currency, tenant-settings:config:locale) that surface in the self-populating Settings-Hub via `mask`. Pair with defineCreateWithTenantDefaults to auto-fill a money field's currency or a locale field on create instead of hard-coding a literal per entity.");
         r.config({ keys: buildTenantSettingsKeys(opts) });
         r.translations({