@cosmicdrift/kumiko-bundled-features 0.368.0 → 0.370.0

package/dist/custom-fields/web/index.d.ts

@@ -1,3 +1,3 @@
-export { CUSTOM_FIELDS_FORM_EXTENSION_NAME, CustomFieldsHandlers, CustomFieldsQueries, } from "../constants.js";
-export { customFieldsClient } from "./client-plugin.js";
-export { CustomFieldsFormSection } from "./custom-fields-form-section.js";
+export { CUSTOM_FIELDS_FORM_EXTENSION_NAME, CustomFieldsHandlers, CustomFieldsQueries, } from "../constants.ts";
+export { customFieldsClient } from "./client-plugin.tsx";
+export { CustomFieldsFormSection } from "./custom-fields-form-section.tsx";

package/dist/data-retention/_internal/parse-override.d.ts

@@ -1,2 +1,2 @@
-import type { RetentionOverride } from "../resolver.js";
+import type { RetentionOverride } from "../resolver.ts";
 export declare function parseRetentionOverrideOrNull(raw: string | null, tenantId: string, callerLabel: string): RetentionOverride | null;

package/dist/data-retention/feature.d.ts

@@ -1,9 +1,9 @@
 import { type FeatureDefinition } from "@cosmicdrift/kumiko-framework/engine";
-export { retentionOverrideSchema } from "./override-schema.js";
-export { RETENTION_PRESETS, type RetentionPreset, type RetentionPresetKey, SELECTABLE_RETENTION_PRESETS, } from "./presets.js";
-export { type ResolveForTenantArgs, resolveRetentionPolicyForTenant, } from "./resolve-for-tenant.js";
-export { type ResolveTenantPresetArgs, resolveTenantRetentionPreset, } from "./resolve-tenant-preset.js";
-export { type EffectiveRetentionPolicy, type ResolveRetentionPolicyArgs, type RetentionOverride, resolveRetentionPolicy, } from "./resolver.js";
-export { type RetentionCleanupSkip, type RunRetentionCleanupArgs, type RunRetentionCleanupResult, runRetentionCleanup, } from "./run-retention-cleanup.js";
-export { tenantRetentionOverrideEntity, tenantRetentionOverrideTable, } from "./schema/tenant-retention-override.js";
+export { retentionOverrideSchema } from "./override-schema.ts";
+export { RETENTION_PRESETS, type RetentionPreset, type RetentionPresetKey, SELECTABLE_RETENTION_PRESETS, } from "./presets.ts";
+export { type ResolveForTenantArgs, resolveRetentionPolicyForTenant, } from "./resolve-for-tenant.ts";
+export { type ResolveTenantPresetArgs, resolveTenantRetentionPreset, } from "./resolve-tenant-preset.ts";
+export { type EffectiveRetentionPolicy, type ResolveRetentionPolicyArgs, type RetentionOverride, resolveRetentionPolicy, } from "./resolver.ts";
+export { type RetentionCleanupSkip, type RunRetentionCleanupArgs, type RunRetentionCleanupResult, runRetentionCleanup, } from "./run-retention-cleanup.ts";
+export { tenantRetentionOverrideEntity, tenantRetentionOverrideTable, } from "./schema/tenant-retention-override.ts";
 export declare function createDataRetentionFeature(): FeatureDefinition;

package/dist/data-retention/handlers/policy-for.query.d.ts

@@ -1,5 +1,5 @@
 import * as z from "zod";
-import type { EffectiveRetentionPolicy } from "../resolver.js";
+import type { EffectiveRetentionPolicy } from "../resolver.ts";
 export declare const policyForQuery: import("@cosmicdrift/kumiko-types/define-handler").QueryHandlerDefinition<"policy-for", z.ZodObject<{
     entityName: z.ZodString;
 }, z.core.$strip>, EffectiveRetentionPolicy, import("@cosmicdrift/kumiko-types/event-type-map").KumikoEventTypeMap>;

package/dist/data-retention/index.d.ts

@@ -1,3 +1,3 @@
-export type { EffectiveRetentionPolicy, ResolveForTenantArgs, ResolveRetentionPolicyArgs, ResolveTenantPresetArgs, RetentionOverride, RetentionPreset, RetentionPresetKey, } from "./feature.js";
-export { createDataRetentionFeature, RETENTION_PRESETS, resolveRetentionPolicy, resolveRetentionPolicyForTenant, resolveTenantRetentionPreset, retentionOverrideSchema, SELECTABLE_RETENTION_PRESETS, tenantRetentionOverrideEntity, tenantRetentionOverrideTable, } from "./feature.js";
-export { computeCutoff, type Instant } from "./keep-for.js";
+export type { EffectiveRetentionPolicy, ResolveForTenantArgs, ResolveRetentionPolicyArgs, ResolveTenantPresetArgs, RetentionOverride, RetentionPreset, RetentionPresetKey, } from "./feature.ts";
+export { createDataRetentionFeature, RETENTION_PRESETS, resolveRetentionPolicy, resolveRetentionPolicyForTenant, resolveTenantRetentionPreset, retentionOverrideSchema, SELECTABLE_RETENTION_PRESETS, tenantRetentionOverrideEntity, tenantRetentionOverrideTable, } from "./feature.ts";
+export { computeCutoff, type Instant } from "./keep-for.ts";

package/dist/data-retention/resolve-for-tenant.d.ts

@@ -1,7 +1,7 @@
 import type { DbRunner, TenantDb } from "@cosmicdrift/kumiko-framework/db";
 import type { Registry, TenantId } from "@cosmicdrift/kumiko-framework/engine";
-import type { RetentionPresetKey } from "./presets.js";
-import { type EffectiveRetentionPolicy } from "./resolver.js";
+import type { RetentionPresetKey } from "./presets.ts";
+import { type EffectiveRetentionPolicy } from "./resolver.ts";
 export interface ResolveForTenantArgs {
     readonly db: DbRunner | TenantDb;
     readonly registry: Registry;

package/dist/data-retention/resolve-tenant-preset.d.ts

@@ -1,7 +1,7 @@
 import type { ComplianceProfileKey } from "@cosmicdrift/kumiko-framework/compliance";
 import type { DbRunner, TenantDb } from "@cosmicdrift/kumiko-framework/db";
 import type { Registry, TenantId } from "@cosmicdrift/kumiko-framework/engine";
-import type { RetentionPresetKey } from "./presets.js";
+import type { RetentionPresetKey } from "./presets.ts";
 declare const PROFILE_TO_PRESET: Readonly<Record<ComplianceProfileKey, RetentionPresetKey>>;
 export interface ResolveTenantPresetArgs {
     readonly db: DbRunner | TenantDb;

package/dist/data-retention/resolver.d.ts

@@ -1,5 +1,5 @@
 import type { EntityDefinition, RetentionDef } from "@cosmicdrift/kumiko-framework/engine";
-import { type RetentionPresetKey } from "./presets.js";
+import { type RetentionPresetKey } from "./presets.ts";
 /**
  * Roh-Override aus der DB-Tabelle (config-Spalte als JSON-String).
  * Nicht das gleiche wie RetentionDef weil hier alles optional ist —

package/dist/data-retention/run-retention-cleanup.d.ts

@@ -2,8 +2,8 @@ import { type KmsAdapter } from "@cosmicdrift/kumiko-framework/crypto";
 import { type DbRunner } from "@cosmicdrift/kumiko-framework/db";
 import { type Registry, type TenantId } from "@cosmicdrift/kumiko-framework/engine";
 import { type FileContext } from "@cosmicdrift/kumiko-framework/files";
-import { type Instant } from "./keep-for.js";
-import type { RetentionPresetKey } from "./presets.js";
+import { type Instant } from "./keep-for.ts";
+import type { RetentionPresetKey } from "./presets.ts";
 export interface RunRetentionCleanupArgs {
     readonly db: DbRunner;
     readonly registry: Registry;

package/dist/delivery/attachment-ref.d.ts

@@ -1,5 +1,5 @@
 import * as z from "zod";
-import type { FileAttachmentRef, InlineAttachmentRef, RenderedPdfAttachmentRef } from "../renderer-foundation/index.js";
+import type { FileAttachmentRef, InlineAttachmentRef, RenderedPdfAttachmentRef } from "../renderer-foundation/index.ts";
 export type { FileAttachmentRef, InlineAttachmentRef, RenderedPdfAttachmentRef };
 export type EmailAttachmentRef = InlineAttachmentRef | FileAttachmentRef | RenderedPdfAttachmentRef;
 export declare const MAX_EMAIL_ATTACHMENTS = 20;

package/dist/delivery/attempt-log.d.ts

@@ -1,5 +1,5 @@
 import type { DbConnection } from "@cosmicdrift/kumiko-framework/db";
 import type { Registry } from "@cosmicdrift/kumiko-framework/engine";
-import { type DeliveryLogEntry } from "./types.js";
+import { type DeliveryLogEntry } from "./types.ts";
 export declare function appendAttemptEvent(db: DbConnection, registry: Registry, attemptId: string, entry: DeliveryLogEntry): Promise<void>;
 export declare function logAttempt(db: DbConnection, registry: Registry, entry: DeliveryLogEntry): Promise<string>;

package/dist/delivery/channel-context.d.ts

@@ -3,8 +3,8 @@ import { type DbConnection, type TenantDb } from "@cosmicdrift/kumiko-framework/
 import type { ConfigAccessor, Registry, TenantId } from "@cosmicdrift/kumiko-framework/engine";
 import type { FileContext } from "@cosmicdrift/kumiko-framework/files";
 import type { SecretsContext } from "@cosmicdrift/kumiko-framework/secrets";
-import { type MailPayload } from "../renderer-foundation/index.js";
-import type { ChannelContext, RenderedMail } from "./types.js";
+import { type MailPayload } from "../renderer-foundation/index.ts";
+import type { ChannelContext, RenderedMail } from "./types.ts";
 export declare function createTemplateMailRenderer(db: DbConnection | TenantDb, registry: Registry, tenantId: TenantId, config: ConfigAccessor | undefined): (payload: MailPayload) => Promise<RenderedMail>;
 export declare function createEmailAttachmentReader(db: DbConnection | TenantDb, registry: Registry, tenantId: TenantId, config: ConfigAccessor | undefined, filesForTenant: (tenantId: string) => FileContext | undefined): NonNullable<ChannelContext["readAttachment"]>;
 export declare function buildChannelContext(db: DbConnection, registry: Registry, sseBroker: SseBroker | undefined, tenantId: TenantId, secrets?: SecretsContext, tenantConfig?: ConfigAccessor, filesForTenant?: (tenantId: string) => FileContext | undefined): ChannelContext;

package/dist/delivery/chat-webhook-channel.d.ts

@@ -1,5 +1,5 @@
-import { type ChatSendResult, type ChatWebhookRequest, type ChatWebhookTarget } from "./chat-webhook-sender.js";
-import type { ChannelMessage, ChannelResult, DeliveryChannel } from "./types.js";
+import { type ChatSendResult, type ChatWebhookRequest, type ChatWebhookTarget } from "./chat-webhook-sender.ts";
+import type { ChannelMessage, ChannelResult, DeliveryChannel } from "./types.ts";
 export type ChatWebhookChannelOptions = {
     readonly allowedHosts?: readonly string[];
     readonly requireHttps?: boolean;

package/dist/delivery/constants.d.ts

@@ -1,7 +1,7 @@
 import type { NotifyPriority } from "@cosmicdrift/kumiko-framework/engine";
 export declare const DELIVERY_CHANNEL_EXTENSION: "deliveryChannel";
 export declare const EMAIL_CHANNEL_NAME: "email";
-export { DELIVERY_ATTEMPT_ADDRESS_ERASED_EVENT, DELIVERY_ATTEMPT_EVENT, DELIVERY_CHANNEL_CELL_COMPONENT, DELIVERY_ERROR_CELL_COMPONENT, DELIVERY_FEATURE, DELIVERY_LOG_SCREEN_ID, DELIVERY_RESUBSCRIBE_PATH, DELIVERY_STATUS_CELL_COMPONENT, DELIVERY_TIME_CELL_COMPONENT, DELIVERY_TYPE_CELL_COMPONENT, DELIVERY_UNSUBSCRIBE_PATH, DeliveryErrors, DeliveryHandlers, DeliveryJobNames, DeliveryQueries, DeliveryStatus, type DeliveryStatusValue, } from "./public-names.js";
+export { DELIVERY_ATTEMPT_ADDRESS_ERASED_EVENT, DELIVERY_ATTEMPT_EVENT, DELIVERY_CHANNEL_CELL_COMPONENT, DELIVERY_ERROR_CELL_COMPONENT, DELIVERY_FEATURE, DELIVERY_LOG_SCREEN_ID, DELIVERY_RESUBSCRIBE_PATH, DELIVERY_STATUS_CELL_COMPONENT, DELIVERY_TIME_CELL_COMPONENT, DELIVERY_TYPE_CELL_COMPONENT, DELIVERY_UNSUBSCRIBE_PATH, DeliveryErrors, DeliveryHandlers, DeliveryJobNames, DeliveryQueries, DeliveryStatus, type DeliveryStatusValue, } from "./public-names.ts";
 export declare function deliveryIdempotencyRedisKey(tenantId: string, key: string): string;
 export declare const deliveryPriorityRank: Record<NotifyPriority, number>;
 export declare const DeliveryJobs: {

package/dist/delivery/delivery-service.d.ts

@@ -5,8 +5,8 @@ import type { FileContext } from "@cosmicdrift/kumiko-framework/files";
 import { type Logger } from "@cosmicdrift/kumiko-framework/logging";
 import type { SecretsContext } from "@cosmicdrift/kumiko-framework/secrets";
 import type { Redis } from "ioredis";
-import { type DeliveryChannel, type DeliveryService } from "./types.js";
-import { type UnsubscribeLinkConfig } from "./unsubscribe-link.js";
+import { type DeliveryChannel, type DeliveryService } from "./types.ts";
+import { type UnsubscribeLinkConfig } from "./unsubscribe-link.ts";
 export declare function redactedMessageOf(err: unknown): string;
 export type RateLimitConfig = {
     readonly redis: Redis;

package/dist/delivery/feature.js

@@ -10,6 +10,7 @@ import { resubscribeAddressWrite } from "./handlers/resubscribe-address.write.js
 import { resubscribeUserWrite } from "./handlers/resubscribe-user.write.js";
 import { setPreferenceWrite } from "./handlers/set-preference.write.js";
 import { unsubscribeAddressWrite } from "./handlers/unsubscribe-address.write.js";
+import { unsubscribePageChromeQuery } from "./handlers/unsubscribe-page-chrome.query.js";
 import { unsubscribeUserWrite } from "./handlers/unsubscribe-user.write.js";
 import { DELIVERY_I18N } from "./i18n.js";
 import { deliveryRenderJob, deliverySendJob } from "./jobs.js";
@@ -19,7 +20,7 @@ export function createDeliveryFeature(options) {
     const resolvedAccess = options?.access ?? access.admin;
     const attemptLogRetentionDays = resolveAttemptLogRetentionDays(options?.attemptLogRetentionDays);
     return defineFeature("delivery", (r) => {
-        r.describe("The notification dispatch core: call `ctx.notify(notificationType, { to, route, data, priority, idempotencyKey })` from any handler to fan out a notification across all registered channels (email, in-app, push). Inside a write handler the delivery runs after the write has committed (the call returns `{ kind: \"deferred\" }`, a rolled-back write sends nothing); `immediate: true` delivers synchronously and returns `{ kind: \"dispatched\", deliveries }`. It stores per-user channel preferences in the `notification-preference` entity, opt-outs for no-account recipient addresses in `notification-address-opt-out` (keyed by a blind-index hash, never the plaintext address), logs every attempt to `store_delivery_attempts`, and enforces idempotency and rate-limiting \u2014 add `channel-email`, `channel-in-app`, or `channel-push` on top to actually send anything. Unsubscribe/resubscribe links are served by `createUnsubscribeRoutes({ secret })` mounted via the app's `extraRoutes` at `/api/delivery/unsubscribe` and `/api/delivery/resubscribe`: `GET /unsubscribe?token=` renders a confirmation page (no write), `POST /unsubscribe` performs the opt-out (RFC 8058 one-click, token from the form body or query), `POST /resubscribe` undoes it (JSON `{token}` or form body only, never the query — reachable by a mail-client link prefetcher) — sign links with `signUnsubscribeToken` / `signAddressUnsubscribeToken` using the same secret. `channel-email` sets `List-Unsubscribe` / `List-Unsubscribe-Post` automatically when a message's `data.unsubscribeUrl` points at the unsubscribe route. A notification declared with `unsubscribe: true` gets that link from delivery itself when the service has `unsubscribeLinks` (`runProdApp` option `unsubscribe: { secret }` mounts the routes and wires it; base URL from `auth.publicOrigin`, `auth.mail.baseUrl` or `APP_BASE_URL`): user recipients get a user token, `route` recipients an address token (needs a blind-index key, otherwise no link); a `data.unsubscribeUrl` from the caller wins. `unsubscribe.tenantOrigin: (ctx) => origin | null` points the link at the tenant's own host (subdomain or custom domain, must serve this app's `/api`); null, a throw or a non-https value fall back to the app origin. The token carries the mail's locale, so the confirmation and result pages render in the mail's language. To react to a no-account opt-out (e.g. remove the app's own subscriber row), declare `r.job(name, { trigger: { on: DeliveryHandlers.unsubscribeAddress } }, handler)` on a lane the app consumes: it runs after each committed opt-out, also an idempotent repeat, with `unsubscribeAddressPayloadSchema` (`addressHash`, `notificationType`, `channel`) as payload and the tenant in `ctx.triggeredBy.tenantId`; match the subscriber via `hashUnsubscribeAddress(email)`. Declare `unsubscribeUrl` as an optional template variable if the mail body shows it.");
+        r.describe("The notification dispatch core: call `ctx.notify(notificationType, { to, route, data, priority, idempotencyKey })` from any handler to fan out a notification across all registered channels (email, in-app, push). Inside a write handler the delivery runs after the write has committed (the call returns `{ kind: \"deferred\" }`, a rolled-back write sends nothing); `immediate: true` delivers synchronously and returns `{ kind: \"dispatched\", deliveries }`. It stores per-user channel preferences in the `notification-preference` entity, opt-outs for no-account recipient addresses in `notification-address-opt-out` (keyed by a blind-index hash, never the plaintext address), logs every attempt to `store_delivery_attempts`, and enforces idempotency and rate-limiting \u2014 add `channel-email`, `channel-in-app`, or `channel-push` on top to actually send anything. Unsubscribe/resubscribe links are served by `createUnsubscribeRoutes({ secret })` mounted via the app's `extraRoutes` at `/api/delivery/unsubscribe` and `/api/delivery/resubscribe`: `GET /unsubscribe?token=` renders a confirmation page (no write), `POST /unsubscribe` performs the opt-out (RFC 8058 one-click, token from the form body or query), `POST /resubscribe` undoes it (JSON `{token}` or form body only, never the query — reachable by a mail-client link prefetcher) — sign links with `signUnsubscribeToken` / `signAddressUnsubscribeToken` using the same secret. `channel-email` sets `List-Unsubscribe` / `List-Unsubscribe-Post` automatically when a message's `data.unsubscribeUrl` points at the unsubscribe route. A notification declared with `unsubscribe: true` gets that link from delivery itself when the service has `unsubscribeLinks` (the `runProdApp` and `runDevApp` option `unsubscribe: { secret }` mounts the routes and wires it; base URL from `auth.publicOrigin`, `auth.mail.baseUrl` or `APP_BASE_URL`): user recipients get a user token, `route` recipients an address token (needs a blind-index key, otherwise no link); a `data.unsubscribeUrl` from the caller wins. `unsubscribe.tenantOrigin: (ctx) => origin | null` points the link at the tenant's own host (subdomain or custom domain, must serve this app's `/api`); null, a throw or a non-https value fall back to the app origin. The token carries the mail's locale, so the confirmation and result pages render in the mail's language. An app serving its own (e.g. legacy) unsubscribe links renders the same result page with `renderUnsubscribeResultPage({ kind, locale })`. To react to a no-account opt-out (e.g. remove the app's own subscriber row), declare `r.job(name, { trigger: { on: DeliveryHandlers.unsubscribeAddress } }, handler)` on a lane the app consumes: it runs after each committed opt-out, also an idempotent repeat, with `unsubscribeAddressPayloadSchema` (`addressHash`, `notificationType`, `channel`) as payload and the tenant in `ctx.triggeredBy.tenantId`; match the subscriber via `hashUnsubscribeAddress(email)`. Declare `unsubscribeUrl` as an optional template variable if the mail body shows it.");
         r.uiHints({
             displayLabel: "Notifications \u00b7 Dispatch Core",
             category: "notifications",
@@ -156,6 +157,7 @@ export function createDeliveryFeature(options) {
         const queries = {
             log: r.queryHandler({ ...logQuery, access: { roles: resolvedAccess } }),
             preferences: r.queryHandler(preferencesQuery),
+            unsubscribePageChrome: r.queryHandler(unsubscribePageChromeQuery),
         };
         r.screen({
             id: DELIVERY_LOG_SCREEN_ID,

package/dist/delivery/handlers/log.query.d.ts

@@ -1,6 +1,6 @@
 import { type DeliveryErrorCode, type NotifyPriority } from "@cosmicdrift/kumiko-framework/engine";
 import * as z from "zod";
-import type { DeliveryStatusValue } from "../constants.js";
+import type { DeliveryStatusValue } from "../constants.ts";
 export declare const logQuery: import("@cosmicdrift/kumiko-framework/engine").PagedQueryHandlerDefinition<"log", z.ZodObject<{
     cursor: z.ZodOptional<z.ZodString>;
     limit: z.ZodDefault<z.ZodNumber>;

package/dist/delivery/handlers/unsubscribe-page-chrome.query.d.ts

@@ -0,0 +1,5 @@
+import * as z from "zod";
+import { type MailChrome } from "../../renderer-foundation/index.ts";
+export declare const unsubscribePageChromeQuery: import("@cosmicdrift/kumiko-types/define-handler").QueryHandlerDefinition<"unsubscribePageChrome", z.ZodObject<{
+    locale: z.ZodString;
+}, z.core.$strip>, MailChrome | null, import("@cosmicdrift/kumiko-types/event-type-map").KumikoEventTypeMap>;

package/dist/delivery/handlers/unsubscribe-page-chrome.query.js

@@ -0,0 +1,44 @@
+import { access, defineQueryHandler } from "@cosmicdrift/kumiko-framework/engine";
+import { InternalError } from "@cosmicdrift/kumiko-framework/errors";
+import * as z from "zod";
+import { collectRendererPlugins, createRendererFoundationApi, RendererError, } from "../../renderer-foundation/index.js";
+function mailChromePlugin(plugins, tenantId) {
+    try {
+        const plugin = createRendererFoundationApi(plugins).createRendererForTenant({
+            tenantId,
+            kind: "mail",
+        });
+        return plugin.readMailChrome === undefined ? null : plugin;
+    }
+    catch (e) {
+        if (e instanceof RendererError && e.code === "no_plugin_for_kind")
+            return null;
+        throw e;
+    }
+}
+export const unsubscribePageChromeQuery = defineQueryHandler({
+    name: "unsubscribePageChrome",
+    schema: z.object({ locale: z.string().min(2).max(35) }),
+    access: { roles: access.systemAdmin },
+    // Only reachable via createUnsubscribeRoutes' dispatchSystemQuery once verify()
+    // proved the token signature.
+    agent: { expose: false },
+    description: "Returns the tenant's mail brand row and footer resolved for one locale, or null without a mail renderer; dispatched by the signed unsubscribe route to dress its pages like the mail, not meant for UI callers.",
+    handler: async (query, ctx) => {
+        const { tenantId } = query.user;
+        if (!ctx.systemDb) {
+            throw new InternalError({
+                message: "unsubscribePageChrome: ctx.systemDb missing on a system-scoped handler",
+            });
+        }
+        const plugin = mailChromePlugin(collectRendererPlugins(ctx.registry), tenantId);
+        if (plugin?.readMailChrome === undefined)
+            return null;
+        return plugin.readMailChrome({ locale: query.payload.locale }, {
+            db: ctx.systemDb.assertTenantMatch(tenantId),
+            registry: ctx.registry,
+            tenantId,
+            ...(ctx.config !== undefined && { config: ctx.config }),
+        });
+    },
+});

package/dist/delivery/index.d.ts

@@ -1,19 +1,20 @@
-export { sanitizePdfAttachmentFileName } from "../shared/index.js";
-export { hashUnsubscribeAddress } from "./address-opt-out.js";
-export { DELIVERY_ENVELOPE_DATA_KEYS, type EmailAttachmentRef, emailAttachmentRefSchema, type FileAttachmentRef, fileAttachmentRefSchema, type InlineAttachmentRef, inlineAttachmentRefSchema, MAX_EMAIL_ATTACHMENTS, MAX_RENDERED_PDF_VARIABLES_BYTES, type RenderedPdfAttachmentRef, renderedPdfAttachmentRefSchema, toAttachmentRef, withoutDeliveryEnvelopeKeys, } from "./attachment-ref.js";
-export { type AttemptLogRetentionOptions, DEFAULT_ATTEMPT_LOG_RETENTION_DAYS, runAttemptLogRetention, } from "./attempt-log-retention.js";
-export { createEmailAttachmentReader, createTemplateMailRenderer } from "./channel-context.js";
-export { type ChatWebhookChannelOptions, chatMessageText, createChatWebhookChannel, resolveChatWebhookTarget, toChannelResult, } from "./chat-webhook-channel.js";
-export { type ChatSendFailureCode, type ChatSendResult, type ChatWebhookRequest, type ChatWebhookResponse, type ChatWebhookTarget, chatConnectionNameSchema, chatWebhookUrlSchema, checkChatWebhookTarget, DEFAULT_CHAT_TIMEOUT_MS, postChatWebhook, truncateChars, } from "./chat-webhook-sender.js";
-export type { DeliveryStatusValue } from "./constants.js";
-export { DELIVERY_ATTEMPT_ADDRESS_ERASED_EVENT, DELIVERY_CHANNEL_EXTENSION, DELIVERY_FEATURE, DELIVERY_LOG_SCREEN_ID, DELIVERY_UNSUBSCRIBE_PATH, DeliveryErrors, DeliveryHandlers, DeliveryJobs, DeliveryQueries, DeliveryStatus, EMAIL_CHANNEL_NAME, } from "./constants.js";
-export { collectChannels, createDeliveryService, type DeliveryServiceOptions, type KillSwitchResolver, type RateLimitConfig, } from "./delivery-service.js";
-export { createDeliveryFeature, type DeliveryFeatureOptions } from "./feature.js";
-export { type UnsubscribeAddressPayload, unsubscribeAddressPayloadSchema, } from "./handlers/unsubscribe-address.write.js";
-export { createDeliveryNotifyFactory } from "./notify-factory.js";
-export { deliveryAttemptsTable, notificationAddressOptOutEntity, notificationAddressOptOutsTable, notificationPreferenceEntity, notificationPreferencesTable, } from "./tables.js";
-export { type CreateDeliveryTestContextOptions, createDeliveryTestContext } from "./testing.js";
-export { type AttachmentOrigin, type ChannelContext, type ChannelMessage, type ChannelResult, type DeliveryChannel, type DeliveryChannelMode, type DeliveryChannelPlugin, type DeliveryLogEntry, type DeliveryService, isDeliveryChannelPlugin, type RenderedMessage, } from "./types.js";
-export { type AddressUnsubscribeTokenPayload, createUnsubscribeRoutes, DELIVERY_UNSUBSCRIBE_ONE_CLICK_HEADER_VALUE, signAddressUnsubscribeToken, signUnsubscribeToken, type UnsubscribeRouteOptions, type UnsubscribeTokenPayload, } from "./unsubscribe.js";
-export type { UnsubscribeLinkConfig } from "./unsubscribe-link.js";
-export { UNSUBSCRIBE_PAGE_EN } from "./unsubscribe-page-strings.js";
+export { sanitizePdfAttachmentFileName } from "../shared/index.ts";
+export { hashUnsubscribeAddress } from "./address-opt-out.ts";
+export { DELIVERY_ENVELOPE_DATA_KEYS, type EmailAttachmentRef, emailAttachmentRefSchema, type FileAttachmentRef, fileAttachmentRefSchema, type InlineAttachmentRef, inlineAttachmentRefSchema, MAX_EMAIL_ATTACHMENTS, MAX_RENDERED_PDF_VARIABLES_BYTES, type RenderedPdfAttachmentRef, renderedPdfAttachmentRefSchema, toAttachmentRef, withoutDeliveryEnvelopeKeys, } from "./attachment-ref.ts";
+export { type AttemptLogRetentionOptions, DEFAULT_ATTEMPT_LOG_RETENTION_DAYS, runAttemptLogRetention, } from "./attempt-log-retention.ts";
+export { buildChannelContext, createEmailAttachmentReader, createTemplateMailRenderer, } from "./channel-context.ts";
+export { type ChatWebhookChannelOptions, chatMessageText, createChatWebhookChannel, resolveChatWebhookTarget, toChannelResult, } from "./chat-webhook-channel.ts";
+export { type ChatSendFailureCode, type ChatSendResult, type ChatWebhookRequest, type ChatWebhookResponse, type ChatWebhookTarget, chatConnectionNameSchema, chatWebhookUrlSchema, checkChatWebhookTarget, DEFAULT_CHAT_TIMEOUT_MS, postChatWebhook, truncateChars, } from "./chat-webhook-sender.ts";
+export type { DeliveryStatusValue } from "./constants.ts";
+export { DELIVERY_ATTEMPT_ADDRESS_ERASED_EVENT, DELIVERY_CHANNEL_EXTENSION, DELIVERY_FEATURE, DELIVERY_LOG_SCREEN_ID, DELIVERY_UNSUBSCRIBE_PATH, DeliveryErrors, DeliveryHandlers, DeliveryJobs, DeliveryQueries, DeliveryStatus, EMAIL_CHANNEL_NAME, } from "./constants.ts";
+export { collectChannels, createDeliveryService, type DeliveryServiceOptions, type KillSwitchResolver, type RateLimitConfig, } from "./delivery-service.ts";
+export { createDeliveryFeature, type DeliveryFeatureOptions } from "./feature.ts";
+export { type UnsubscribeAddressPayload, unsubscribeAddressPayloadSchema, } from "./handlers/unsubscribe-address.write.ts";
+export { currentNotificationType } from "./notification-type-aliases.ts";
+export { createDeliveryNotifyFactory } from "./notify-factory.ts";
+export { deliveryAttemptsTable, notificationAddressOptOutEntity, notificationAddressOptOutsTable, notificationPreferenceEntity, notificationPreferencesTable, } from "./tables.ts";
+export { type CreateDeliveryTestContextOptions, createDeliveryTestContext } from "./testing.ts";
+export { type AttachmentOrigin, type ChannelContext, type ChannelMessage, type ChannelResult, type DeliveryChannel, type DeliveryChannelMode, type DeliveryChannelPlugin, type DeliveryLogEntry, type DeliveryService, isDeliveryChannelPlugin, type RenderedMessage, } from "./types.ts";
+export { type AddressUnsubscribeTokenPayload, createUnsubscribeRoutes, DELIVERY_UNSUBSCRIBE_ONE_CLICK_HEADER_VALUE, renderUnsubscribeResultPage, signAddressUnsubscribeToken, signUnsubscribeToken, type UnsubscribeResultPage, type UnsubscribeRouteOptions, type UnsubscribeTokenPayload, } from "./unsubscribe.ts";
+export type { UnsubscribeLinkConfig } from "./unsubscribe-link.ts";
+export { UNSUBSCRIBE_PAGE_EN } from "./unsubscribe-page-strings.ts";

package/dist/delivery/index.js

@@ -2,16 +2,17 @@ export { sanitizePdfAttachmentFileName } from "../shared/index.js";
 export { hashUnsubscribeAddress } from "./address-opt-out.js";
 export { DELIVERY_ENVELOPE_DATA_KEYS, emailAttachmentRefSchema, fileAttachmentRefSchema, inlineAttachmentRefSchema, MAX_EMAIL_ATTACHMENTS, MAX_RENDERED_PDF_VARIABLES_BYTES, renderedPdfAttachmentRefSchema, toAttachmentRef, withoutDeliveryEnvelopeKeys, } from "./attachment-ref.js";
 export { DEFAULT_ATTEMPT_LOG_RETENTION_DAYS, runAttemptLogRetention, } from "./attempt-log-retention.js";
-export { createEmailAttachmentReader, createTemplateMailRenderer } from "./channel-context.js";
+export { buildChannelContext, createEmailAttachmentReader, createTemplateMailRenderer, } from "./channel-context.js";
 export { chatMessageText, createChatWebhookChannel, resolveChatWebhookTarget, toChannelResult, } from "./chat-webhook-channel.js";
 export { chatConnectionNameSchema, chatWebhookUrlSchema, checkChatWebhookTarget, DEFAULT_CHAT_TIMEOUT_MS, postChatWebhook, truncateChars, } from "./chat-webhook-sender.js";
 export { DELIVERY_ATTEMPT_ADDRESS_ERASED_EVENT, DELIVERY_CHANNEL_EXTENSION, DELIVERY_FEATURE, DELIVERY_LOG_SCREEN_ID, DELIVERY_UNSUBSCRIBE_PATH, DeliveryErrors, DeliveryHandlers, DeliveryJobs, DeliveryQueries, DeliveryStatus, EMAIL_CHANNEL_NAME, } from "./constants.js";
 export { collectChannels, createDeliveryService, } from "./delivery-service.js";
 export { createDeliveryFeature } from "./feature.js";
 export { unsubscribeAddressPayloadSchema, } from "./handlers/unsubscribe-address.write.js";
+export { currentNotificationType } from "./notification-type-aliases.js";
 export { createDeliveryNotifyFactory } from "./notify-factory.js";
 export { deliveryAttemptsTable, notificationAddressOptOutEntity, notificationAddressOptOutsTable, notificationPreferenceEntity, notificationPreferencesTable, } from "./tables.js";
 export { createDeliveryTestContext } from "./testing.js";
 export { isDeliveryChannelPlugin, } from "./types.js";
-export { createUnsubscribeRoutes, DELIVERY_UNSUBSCRIBE_ONE_CLICK_HEADER_VALUE, signAddressUnsubscribeToken, signUnsubscribeToken, } from "./unsubscribe.js";
+export { createUnsubscribeRoutes, DELIVERY_UNSUBSCRIBE_ONE_CLICK_HEADER_VALUE, renderUnsubscribeResultPage, signAddressUnsubscribeToken, signUnsubscribeToken, } from "./unsubscribe.js";
 export { UNSUBSCRIBE_PAGE_EN } from "./unsubscribe-page-strings.js";

package/dist/delivery/notify-factory.d.ts

@@ -1,5 +1,5 @@
 import type { NotifyFactory } from "@cosmicdrift/kumiko-framework/engine";
-import type { DeliveryService } from "./types.js";
+import type { DeliveryService } from "./types.ts";
 export declare function createDeliveryNotifyFactory(deliveryService: Pick<DeliveryService, "notify">, options?: {
     readonly deliverQueuedInline?: boolean;
 }): NotifyFactory;

package/dist/delivery/public-names.d.ts

@@ -11,6 +11,7 @@ export declare const DELIVERY_RESUBSCRIBE_PATH: "/api/delivery/resubscribe";
 export declare const DeliveryQueries: {
     readonly log: "delivery:query:log";
     readonly preferences: "delivery:query:preferences";
+    readonly unsubscribePageChrome: "delivery:query:unsubscribe-page-chrome";
 };
 export declare const DELIVERY_LOG_SCREEN_ID: "delivery-log";
 export declare const DELIVERY_STATUS_CELL_COMPONENT: "DeliveryStatusCell";

package/dist/delivery/public-names.js

@@ -20,6 +20,7 @@ export const DELIVERY_RESUBSCRIBE_PATH = "/api/delivery/resubscribe";
 export const DeliveryQueries = {
     log: "delivery:query:log",
     preferences: "delivery:query:preferences",
+    unsubscribePageChrome: "delivery:query:unsubscribe-page-chrome",
 };
 export const DELIVERY_LOG_SCREEN_ID = "delivery-log";
 // Client column-renderer registered for the delivery-log screen's status

package/dist/delivery/testing.d.ts

@@ -6,9 +6,9 @@ import type { JobRunner } from "@cosmicdrift/kumiko-framework/jobs";
 import type { Logger } from "@cosmicdrift/kumiko-framework/logging";
 import type { SecretsContext } from "@cosmicdrift/kumiko-framework/secrets";
 import type { Redis } from "ioredis";
-import type { KillSwitchResolver, RateLimitConfig } from "./delivery-service.js";
-import type { DeliveryService } from "./types.js";
-import type { UnsubscribeLinkConfig } from "./unsubscribe-link.js";
+import type { KillSwitchResolver, RateLimitConfig } from "./delivery-service.ts";
+import type { DeliveryService } from "./types.ts";
+import type { UnsubscribeLinkConfig } from "./unsubscribe-link.ts";
 export type CreateDeliveryTestContextOptions = {
     readonly tenantUserIdsQuery?: string;
     readonly rateLimit?: RateLimitConfig;

package/dist/delivery/types.d.ts

@@ -3,9 +3,9 @@ import type { DbConnection, TenantDb } from "@cosmicdrift/kumiko-framework/db";
 import type { ConfigAccessor, DeliveryErrorCode, NotifyDeliveryStatus, NotifyDispatched, NotifyJobDispatcher, NotifyOptions, NotifyPriority, Registry, SessionUser, TenantId } from "@cosmicdrift/kumiko-framework/engine";
 import type { FileProviderResolver } from "@cosmicdrift/kumiko-framework/files";
 import type { SecretsContext } from "@cosmicdrift/kumiko-framework/secrets";
-import type { MailPayload, RenderedTemplateRef } from "../renderer-foundation/index.js";
-import type { EmailAttachmentRef } from "./attachment-ref.js";
-import { DELIVERY_CHANNEL_EXTENSION } from "./constants.js";
+import type { MailPayload, RenderedTemplateRef } from "../renderer-foundation/index.ts";
+import type { EmailAttachmentRef } from "./attachment-ref.ts";
+import { DELIVERY_CHANNEL_EXTENSION } from "./constants.ts";
 export type RenderedMail = {
     readonly subject: string;
     readonly html: string;

package/dist/delivery/unsubscribe-link.d.ts

@@ -1,5 +1,5 @@
 import type { TenantId } from "@cosmicdrift/kumiko-framework/engine";
-import type { ChannelContext } from "./types.js";
+import type { ChannelContext } from "./types.ts";
 /** Secret shared with `createUnsubscribeRoutes` plus the public origin the links point at. */
 export type UnsubscribeLinkConfig = {
     readonly secret: string;

package/dist/delivery/unsubscribe-page-strings.d.ts

@@ -5,7 +5,11 @@ export declare const UNSUBSCRIBE_PAGE_EN: {
     readonly "mail.unsubscribe.doneTitle": "Unsubscribed";
     readonly "mail.unsubscribe.doneMessage": "You have been unsubscribed.";
     readonly "mail.unsubscribe.undoButton": "Undo";
+    readonly "mail.unsubscribe.undoHint": "Unsubscribed by mistake? You can undo it within the next hour.";
     readonly "mail.unsubscribe.resubscribedTitle": "Subscribed again";
     readonly "mail.unsubscribe.resubscribedMessage": "You have been subscribed again.";
     readonly "mail.unsubscribe.failed": "That did not work. Please try again later.";
+    readonly "mail.unsubscribe.failedTitle": "Something went wrong";
+    readonly "mail.unsubscribe.invalidTitle": "Link no longer valid";
+    readonly "mail.unsubscribe.invalidMessage": "This link is invalid or has expired. Please use the unsubscribe link in a more recent email.";
 };

package/dist/delivery/unsubscribe-page-strings.js

@@ -8,8 +8,12 @@ export const UNSUBSCRIBE_PAGE_EN = {
     "mail.unsubscribe.doneTitle": "Unsubscribed",
     "mail.unsubscribe.doneMessage": "You have been unsubscribed.",
     "mail.unsubscribe.undoButton": "Undo",
+    "mail.unsubscribe.undoHint": "Unsubscribed by mistake? You can undo it within the next hour.",
     "mail.unsubscribe.resubscribedTitle": "Subscribed again",
     "mail.unsubscribe.resubscribedMessage": "You have been subscribed again.",
     "mail.unsubscribe.failed": "That did not work. Please try again later.",
+    "mail.unsubscribe.failedTitle": "Something went wrong",
+    "mail.unsubscribe.invalidTitle": "Link no longer valid",
+    "mail.unsubscribe.invalidMessage": "This link is invalid or has expired. Please use the unsubscribe link in a more recent email.",
 };
 registerMailTranslations("en", UNSUBSCRIBE_PAGE_EN);

package/dist/delivery/unsubscribe-page.d.ts

@@ -0,0 +1,27 @@
+import type { MailChrome } from "../renderer-foundation/index.ts";
+import "./unsubscribe-page-strings.ts";
+export type UnsubscribePageState = {
+    readonly kind: "confirm";
+    readonly token: string;
+} | {
+    readonly kind: "unsubscribed";
+    readonly resubscribeToken?: string;
+} | {
+    readonly kind: "resubscribed";
+} | {
+    readonly kind: "failed";
+} | {
+    readonly kind: "invalid";
+};
+export type UnsubscribePageInput = {
+    readonly state: UnsubscribePageState;
+    /** A locale with registered mail translations (see resolveMailLocale). */
+    readonly locale: string;
+    /** The tenant's mail look; without it the page shows the plain card. */
+    readonly chrome?: MailChrome | null | undefined;
+};
+export type RenderedUnsubscribePage = {
+    readonly html: string;
+    readonly contentSecurityPolicy: string;
+};
+export declare function renderUnsubscribePage(input: UnsubscribePageInput): RenderedUnsubscribePage;