@cosmicdrift/kumiko-bundled-features 0.369.0 → 0.371.0

package/dist/custom-fields/feature.d.ts

@@ -45,21 +45,4 @@ export type CustomFieldsFeatureOptions = {
 };
 export declare function resolveFieldDefinitionListRoles(opts: Pick<CustomFieldsFeatureOptions, "valueWriteRoles" | "fieldDefinitionListRoles" | "fieldDefinitionWriteRoles">): readonly string[];
 export declare function createCustomFieldsFeature(opts?: CustomFieldsFeatureOptions): typeof defaultCustomFieldsFeature;
-/** @deprecated Use createCustomFieldsFeature(). Run `bun kumiko-upgrade --apply`. Removed in the first release after 2026-10-29. */
-export declare const customFieldsFeature: import("@cosmicdrift/kumiko-types/feature").FeatureDefinition & {
-    readonly exports: {
-        setEvent: import("@cosmicdrift/kumiko-types/handlers").EventDef<{
-            fieldKey: string;
-            value?: unknown;
-        }, "custom-fields:event:custom-field-set">;
-        clearedEvent: import("@cosmicdrift/kumiko-types/handlers").EventDef<{
-            fieldKey: string;
-        }, "custom-fields:event:custom-field-cleared">;
-        fieldDefinitionDeletedEvent: import("@cosmicdrift/kumiko-types/handlers").EventDef<{
-            entityName: string;
-            fieldKey: string;
-            tenantId?: string | undefined;
-        }, "custom-fields:event:field-definition-deleted">;
-    };
-};
 export {};

package/dist/custom-fields/feature.js

@@ -173,5 +173,3 @@ export function createCustomFieldsFeature(opts = {}) {
         fieldDefinitionListRoles: resolveFieldDefinitionListRoles(opts),
     }));
 }
-/** @deprecated Use createCustomFieldsFeature(). Run `bun kumiko-upgrade --apply`. Removed in the first release after 2026-10-29. */
-export const customFieldsFeature = createCustomFieldsFeature();

package/dist/custom-fields/index.d.ts

@@ -1,10 +1,10 @@
-export { fieldDefinitionAggregateId } from "./aggregate-id.js";
-export { CUSTOM_FIELDS_EXTENSION, CUSTOM_FIELDS_FEATURE_NAME, FIELD_DEFINITION_CREATED_EVENT, FIELD_DEFINITION_UPDATED_EVENT, SUPPORTED_FIELD_TYPES, type SupportedFieldType, } from "./constants.js";
-export { fieldDefinitionEntity } from "./entity.js";
-export { type CustomFieldClearedPayload, type CustomFieldSetPayload, customFieldClearedSchema, customFieldSetSchema, } from "./events.js";
-export { type CustomFieldsFeatureOptions, createCustomFieldsFeature, customFieldsFeature, } from "./feature.js";
-export { type ClearCustomFieldPayload, clearCustomFieldPayloadSchema, } from "./handlers/clear-custom-field.write.js";
-export { type SetCustomFieldPayload, setCustomFieldPayloadSchema, } from "./handlers/set-custom-field.write.js";
-export { isFieldDefinitionRow, parseSerializedField, } from "./lib/parse-serialized-field.js";
-export { type DefineFieldPayload, type DeleteFieldPayload, defineFieldPayloadSchema, deleteFieldPayloadSchema, } from "./schemas.js";
-export { customFieldsField, wireCustomFieldsFor } from "./wire-for-entity.js";
+export { fieldDefinitionAggregateId } from "./aggregate-id.ts";
+export { CUSTOM_FIELDS_EXTENSION, CUSTOM_FIELDS_FEATURE_NAME, FIELD_DEFINITION_CREATED_EVENT, FIELD_DEFINITION_UPDATED_EVENT, SUPPORTED_FIELD_TYPES, type SupportedFieldType, } from "./constants.ts";
+export { fieldDefinitionEntity } from "./entity.ts";
+export { type CustomFieldClearedPayload, type CustomFieldSetPayload, customFieldClearedSchema, customFieldSetSchema, } from "./events.ts";
+export { type CustomFieldsFeatureOptions, createCustomFieldsFeature, } from "./feature.ts";
+export { type ClearCustomFieldPayload, clearCustomFieldPayloadSchema, } from "./handlers/clear-custom-field.write.ts";
+export { type SetCustomFieldPayload, setCustomFieldPayloadSchema, } from "./handlers/set-custom-field.write.ts";
+export { isFieldDefinitionRow, parseSerializedField, } from "./lib/parse-serialized-field.ts";
+export { type DefineFieldPayload, type DeleteFieldPayload, defineFieldPayloadSchema, deleteFieldPayloadSchema, } from "./schemas.ts";
+export { customFieldsField, wireCustomFieldsFor } from "./wire-for-entity.ts";

package/dist/custom-fields/index.js

@@ -2,7 +2,7 @@ export { fieldDefinitionAggregateId } from "./aggregate-id.js";
 export { CUSTOM_FIELDS_EXTENSION, CUSTOM_FIELDS_FEATURE_NAME, FIELD_DEFINITION_CREATED_EVENT, FIELD_DEFINITION_UPDATED_EVENT, SUPPORTED_FIELD_TYPES, } from "./constants.js";
 export { fieldDefinitionEntity } from "./entity.js";
 export { customFieldClearedSchema, customFieldSetSchema, } from "./events.js";
-export { createCustomFieldsFeature, customFieldsFeature, } from "./feature.js";
+export { createCustomFieldsFeature, } from "./feature.js";
 export { clearCustomFieldPayloadSchema, } from "./handlers/clear-custom-field.write.js";
 export { setCustomFieldPayloadSchema, } from "./handlers/set-custom-field.write.js";
 export { isFieldDefinitionRow, parseSerializedField, } from "./lib/parse-serialized-field.js";

package/dist/custom-fields/lib/define-or-resurrect.d.ts

@@ -1,6 +1,6 @@
 import type { TenantId } from "@cosmicdrift/kumiko-framework/engine";
-import { fieldDefinitionExecutor } from "../executor.js";
-import type { FieldDefinitionColumns } from "./field-definition-row.js";
+import { fieldDefinitionExecutor } from "../executor.ts";
+import type { FieldDefinitionColumns } from "./field-definition-row.ts";
 type DefineUser = Parameters<typeof fieldDefinitionExecutor.create>[1];
 type DefineDb = Parameters<typeof fieldDefinitionExecutor.create>[2];
 type WriteResult = Awaited<ReturnType<typeof fieldDefinitionExecutor.create>>;

package/dist/custom-fields/lib/field-access.d.ts

@@ -1,6 +1,6 @@
 import type { DbRunner } from "@cosmicdrift/kumiko-framework/db";
 import type { TenantId } from "@cosmicdrift/kumiko-framework/engine";
-import { type SerializedFieldShape } from "./parse-serialized-field.js";
+import { type SerializedFieldShape } from "./parse-serialized-field.ts";
 export type FieldAccessCheckResult = {
     ok: true;
 } | {

package/dist/custom-fields/lib/field-definition-row.d.ts

@@ -1,4 +1,4 @@
-import type { DefineFieldPayload } from "../schemas.js";
+import type { DefineFieldPayload } from "../schemas.ts";
 export interface FieldDefinitionColumns {
     readonly entityName: string;
     readonly fieldKey: string;

package/dist/custom-fields/lib/quota.d.ts

@@ -1 +1 @@
-export { countTenantFieldDefinitions } from "../db/queries/quota.js";
+export { countTenantFieldDefinitions } from "../db/queries/quota.ts";

package/dist/custom-fields/web/index.d.ts

@@ -1,3 +1,3 @@
-export { CUSTOM_FIELDS_FORM_EXTENSION_NAME, CustomFieldsHandlers, CustomFieldsQueries, } from "../constants.js";
-export { customFieldsClient } from "./client-plugin.js";
-export { CustomFieldsFormSection } from "./custom-fields-form-section.js";
+export { CUSTOM_FIELDS_FORM_EXTENSION_NAME, CustomFieldsHandlers, CustomFieldsQueries, } from "../constants.ts";
+export { customFieldsClient } from "./client-plugin.tsx";
+export { CustomFieldsFormSection } from "./custom-fields-form-section.tsx";

package/dist/data-retention/_internal/parse-override.d.ts

@@ -1,2 +1,2 @@
-import type { RetentionOverride } from "../resolver.js";
+import type { RetentionOverride } from "../resolver.ts";
 export declare function parseRetentionOverrideOrNull(raw: string | null, tenantId: string, callerLabel: string): RetentionOverride | null;

package/dist/data-retention/feature.d.ts

@@ -1,9 +1,9 @@
 import { type FeatureDefinition } from "@cosmicdrift/kumiko-framework/engine";
-export { retentionOverrideSchema } from "./override-schema.js";
-export { RETENTION_PRESETS, type RetentionPreset, type RetentionPresetKey, SELECTABLE_RETENTION_PRESETS, } from "./presets.js";
-export { type ResolveForTenantArgs, resolveRetentionPolicyForTenant, } from "./resolve-for-tenant.js";
-export { type ResolveTenantPresetArgs, resolveTenantRetentionPreset, } from "./resolve-tenant-preset.js";
-export { type EffectiveRetentionPolicy, type ResolveRetentionPolicyArgs, type RetentionOverride, resolveRetentionPolicy, } from "./resolver.js";
-export { type RetentionCleanupSkip, type RunRetentionCleanupArgs, type RunRetentionCleanupResult, runRetentionCleanup, } from "./run-retention-cleanup.js";
-export { tenantRetentionOverrideEntity, tenantRetentionOverrideTable, } from "./schema/tenant-retention-override.js";
+export { retentionOverrideSchema } from "./override-schema.ts";
+export { RETENTION_PRESETS, type RetentionPreset, type RetentionPresetKey, SELECTABLE_RETENTION_PRESETS, } from "./presets.ts";
+export { type ResolveForTenantArgs, resolveRetentionPolicyForTenant, } from "./resolve-for-tenant.ts";
+export { type ResolveTenantPresetArgs, resolveTenantRetentionPreset, } from "./resolve-tenant-preset.ts";
+export { type EffectiveRetentionPolicy, type ResolveRetentionPolicyArgs, type RetentionOverride, resolveRetentionPolicy, } from "./resolver.ts";
+export { type RetentionCleanupSkip, type RunRetentionCleanupArgs, type RunRetentionCleanupResult, runRetentionCleanup, } from "./run-retention-cleanup.ts";
+export { tenantRetentionOverrideEntity, tenantRetentionOverrideTable, } from "./schema/tenant-retention-override.ts";
 export declare function createDataRetentionFeature(): FeatureDefinition;

package/dist/data-retention/handlers/policy-for.query.d.ts

@@ -1,5 +1,5 @@
 import * as z from "zod";
-import type { EffectiveRetentionPolicy } from "../resolver.js";
+import type { EffectiveRetentionPolicy } from "../resolver.ts";
 export declare const policyForQuery: import("@cosmicdrift/kumiko-types/define-handler").QueryHandlerDefinition<"policy-for", z.ZodObject<{
     entityName: z.ZodString;
 }, z.core.$strip>, EffectiveRetentionPolicy, import("@cosmicdrift/kumiko-types/event-type-map").KumikoEventTypeMap>;

package/dist/data-retention/index.d.ts

@@ -1,3 +1,3 @@
-export type { EffectiveRetentionPolicy, ResolveForTenantArgs, ResolveRetentionPolicyArgs, ResolveTenantPresetArgs, RetentionOverride, RetentionPreset, RetentionPresetKey, } from "./feature.js";
-export { createDataRetentionFeature, RETENTION_PRESETS, resolveRetentionPolicy, resolveRetentionPolicyForTenant, resolveTenantRetentionPreset, retentionOverrideSchema, SELECTABLE_RETENTION_PRESETS, tenantRetentionOverrideEntity, tenantRetentionOverrideTable, } from "./feature.js";
-export { computeCutoff, type Instant } from "./keep-for.js";
+export type { EffectiveRetentionPolicy, ResolveForTenantArgs, ResolveRetentionPolicyArgs, ResolveTenantPresetArgs, RetentionOverride, RetentionPreset, RetentionPresetKey, } from "./feature.ts";
+export { createDataRetentionFeature, RETENTION_PRESETS, resolveRetentionPolicy, resolveRetentionPolicyForTenant, resolveTenantRetentionPreset, retentionOverrideSchema, SELECTABLE_RETENTION_PRESETS, tenantRetentionOverrideEntity, tenantRetentionOverrideTable, } from "./feature.ts";
+export { computeCutoff, type Instant } from "./keep-for.ts";

package/dist/data-retention/resolve-for-tenant.d.ts

@@ -1,7 +1,7 @@
 import type { DbRunner, TenantDb } from "@cosmicdrift/kumiko-framework/db";
 import type { Registry, TenantId } from "@cosmicdrift/kumiko-framework/engine";
-import type { RetentionPresetKey } from "./presets.js";
-import { type EffectiveRetentionPolicy } from "./resolver.js";
+import type { RetentionPresetKey } from "./presets.ts";
+import { type EffectiveRetentionPolicy } from "./resolver.ts";
 export interface ResolveForTenantArgs {
     readonly db: DbRunner | TenantDb;
     readonly registry: Registry;

package/dist/data-retention/resolve-tenant-preset.d.ts

@@ -1,7 +1,7 @@
 import type { ComplianceProfileKey } from "@cosmicdrift/kumiko-framework/compliance";
 import type { DbRunner, TenantDb } from "@cosmicdrift/kumiko-framework/db";
 import type { Registry, TenantId } from "@cosmicdrift/kumiko-framework/engine";
-import type { RetentionPresetKey } from "./presets.js";
+import type { RetentionPresetKey } from "./presets.ts";
 declare const PROFILE_TO_PRESET: Readonly<Record<ComplianceProfileKey, RetentionPresetKey>>;
 export interface ResolveTenantPresetArgs {
     readonly db: DbRunner | TenantDb;

package/dist/data-retention/resolver.d.ts

@@ -1,5 +1,5 @@
 import type { EntityDefinition, RetentionDef } from "@cosmicdrift/kumiko-framework/engine";
-import { type RetentionPresetKey } from "./presets.js";
+import { type RetentionPresetKey } from "./presets.ts";
 /**
  * Roh-Override aus der DB-Tabelle (config-Spalte als JSON-String).
  * Nicht das gleiche wie RetentionDef weil hier alles optional ist —

package/dist/data-retention/run-retention-cleanup.d.ts

@@ -2,8 +2,8 @@ import { type KmsAdapter } from "@cosmicdrift/kumiko-framework/crypto";
 import { type DbRunner } from "@cosmicdrift/kumiko-framework/db";
 import { type Registry, type TenantId } from "@cosmicdrift/kumiko-framework/engine";
 import { type FileContext } from "@cosmicdrift/kumiko-framework/files";
-import { type Instant } from "./keep-for.js";
-import type { RetentionPresetKey } from "./presets.js";
+import { type Instant } from "./keep-for.ts";
+import type { RetentionPresetKey } from "./presets.ts";
 export interface RunRetentionCleanupArgs {
     readonly db: DbRunner;
     readonly registry: Registry;

package/dist/delivery/attachment-ref.d.ts

@@ -1,5 +1,5 @@
 import * as z from "zod";
-import type { FileAttachmentRef, InlineAttachmentRef, RenderedPdfAttachmentRef } from "../renderer-foundation/index.js";
+import type { FileAttachmentRef, InlineAttachmentRef, RenderedPdfAttachmentRef } from "../renderer-foundation/index.ts";
 export type { FileAttachmentRef, InlineAttachmentRef, RenderedPdfAttachmentRef };
 export type EmailAttachmentRef = InlineAttachmentRef | FileAttachmentRef | RenderedPdfAttachmentRef;
 export declare const MAX_EMAIL_ATTACHMENTS = 20;

package/dist/delivery/attempt-log.d.ts

@@ -1,5 +1,5 @@
 import type { DbConnection } from "@cosmicdrift/kumiko-framework/db";
 import type { Registry } from "@cosmicdrift/kumiko-framework/engine";
-import { type DeliveryLogEntry } from "./types.js";
+import { type DeliveryLogEntry } from "./types.ts";
 export declare function appendAttemptEvent(db: DbConnection, registry: Registry, attemptId: string, entry: DeliveryLogEntry): Promise<void>;
 export declare function logAttempt(db: DbConnection, registry: Registry, entry: DeliveryLogEntry): Promise<string>;

package/dist/delivery/channel-context.d.ts

@@ -3,8 +3,8 @@ import { type DbConnection, type TenantDb } from "@cosmicdrift/kumiko-framework/
 import type { ConfigAccessor, Registry, TenantId } from "@cosmicdrift/kumiko-framework/engine";
 import type { FileContext } from "@cosmicdrift/kumiko-framework/files";
 import type { SecretsContext } from "@cosmicdrift/kumiko-framework/secrets";
-import { type MailPayload } from "../renderer-foundation/index.js";
-import type { ChannelContext, RenderedMail } from "./types.js";
+import { type MailPayload } from "../renderer-foundation/index.ts";
+import type { ChannelContext, RenderedMail } from "./types.ts";
 export declare function createTemplateMailRenderer(db: DbConnection | TenantDb, registry: Registry, tenantId: TenantId, config: ConfigAccessor | undefined): (payload: MailPayload) => Promise<RenderedMail>;
 export declare function createEmailAttachmentReader(db: DbConnection | TenantDb, registry: Registry, tenantId: TenantId, config: ConfigAccessor | undefined, filesForTenant: (tenantId: string) => FileContext | undefined): NonNullable<ChannelContext["readAttachment"]>;
 export declare function buildChannelContext(db: DbConnection, registry: Registry, sseBroker: SseBroker | undefined, tenantId: TenantId, secrets?: SecretsContext, tenantConfig?: ConfigAccessor, filesForTenant?: (tenantId: string) => FileContext | undefined): ChannelContext;

package/dist/delivery/chat-webhook-channel.d.ts

@@ -1,5 +1,5 @@
-import { type ChatSendResult, type ChatWebhookRequest, type ChatWebhookTarget } from "./chat-webhook-sender.js";
-import type { ChannelMessage, ChannelResult, DeliveryChannel } from "./types.js";
+import { type ChatSendResult, type ChatWebhookRequest, type ChatWebhookTarget } from "./chat-webhook-sender.ts";
+import type { ChannelMessage, ChannelResult, DeliveryChannel } from "./types.ts";
 export type ChatWebhookChannelOptions = {
     readonly allowedHosts?: readonly string[];
     readonly requireHttps?: boolean;

package/dist/delivery/constants.d.ts

@@ -1,7 +1,7 @@
 import type { NotifyPriority } from "@cosmicdrift/kumiko-framework/engine";
 export declare const DELIVERY_CHANNEL_EXTENSION: "deliveryChannel";
 export declare const EMAIL_CHANNEL_NAME: "email";
-export { DELIVERY_ATTEMPT_ADDRESS_ERASED_EVENT, DELIVERY_ATTEMPT_EVENT, DELIVERY_CHANNEL_CELL_COMPONENT, DELIVERY_ERROR_CELL_COMPONENT, DELIVERY_FEATURE, DELIVERY_LOG_SCREEN_ID, DELIVERY_RESUBSCRIBE_PATH, DELIVERY_STATUS_CELL_COMPONENT, DELIVERY_TIME_CELL_COMPONENT, DELIVERY_TYPE_CELL_COMPONENT, DELIVERY_UNSUBSCRIBE_PATH, DeliveryErrors, DeliveryHandlers, DeliveryJobNames, DeliveryQueries, DeliveryStatus, type DeliveryStatusValue, } from "./public-names.js";
+export { DELIVERY_ATTEMPT_ADDRESS_ERASED_EVENT, DELIVERY_ATTEMPT_EVENT, DELIVERY_CHANNEL_CELL_COMPONENT, DELIVERY_ERROR_CELL_COMPONENT, DELIVERY_FEATURE, DELIVERY_LOG_SCREEN_ID, DELIVERY_RESUBSCRIBE_PATH, DELIVERY_STATUS_CELL_COMPONENT, DELIVERY_TIME_CELL_COMPONENT, DELIVERY_TYPE_CELL_COMPONENT, DELIVERY_UNSUBSCRIBE_PATH, DeliveryErrors, DeliveryHandlers, DeliveryJobNames, DeliveryQueries, DeliveryStatus, type DeliveryStatusValue, } from "./public-names.ts";
 export declare function deliveryIdempotencyRedisKey(tenantId: string, key: string): string;
 export declare const deliveryPriorityRank: Record<NotifyPriority, number>;
 export declare const DeliveryJobs: {

package/dist/delivery/delivery-service.d.ts

@@ -5,8 +5,8 @@ import type { FileContext } from "@cosmicdrift/kumiko-framework/files";
 import { type Logger } from "@cosmicdrift/kumiko-framework/logging";
 import type { SecretsContext } from "@cosmicdrift/kumiko-framework/secrets";
 import type { Redis } from "ioredis";
-import { type DeliveryChannel, type DeliveryService } from "./types.js";
-import { type UnsubscribeLinkConfig } from "./unsubscribe-link.js";
+import { type DeliveryChannel, type DeliveryService } from "./types.ts";
+import { type UnsubscribeLinkConfig } from "./unsubscribe-link.ts";
 export declare function redactedMessageOf(err: unknown): string;
 export type RateLimitConfig = {
     readonly redis: Redis;

package/dist/delivery/feature.js

@@ -10,6 +10,7 @@ import { resubscribeAddressWrite } from "./handlers/resubscribe-address.write.js
 import { resubscribeUserWrite } from "./handlers/resubscribe-user.write.js";
 import { setPreferenceWrite } from "./handlers/set-preference.write.js";
 import { unsubscribeAddressWrite } from "./handlers/unsubscribe-address.write.js";
+import { unsubscribePageChromeQuery } from "./handlers/unsubscribe-page-chrome.query.js";
 import { unsubscribeUserWrite } from "./handlers/unsubscribe-user.write.js";
 import { DELIVERY_I18N } from "./i18n.js";
 import { deliveryRenderJob, deliverySendJob } from "./jobs.js";
@@ -156,6 +157,7 @@ export function createDeliveryFeature(options) {
         const queries = {
             log: r.queryHandler({ ...logQuery, access: { roles: resolvedAccess } }),
             preferences: r.queryHandler(preferencesQuery),
+            unsubscribePageChrome: r.queryHandler(unsubscribePageChromeQuery),
         };
         r.screen({
             id: DELIVERY_LOG_SCREEN_ID,

package/dist/delivery/handlers/log.query.d.ts

@@ -1,6 +1,6 @@
 import { type DeliveryErrorCode, type NotifyPriority } from "@cosmicdrift/kumiko-framework/engine";
 import * as z from "zod";
-import type { DeliveryStatusValue } from "../constants.js";
+import type { DeliveryStatusValue } from "../constants.ts";
 export declare const logQuery: import("@cosmicdrift/kumiko-framework/engine").PagedQueryHandlerDefinition<"log", z.ZodObject<{
     cursor: z.ZodOptional<z.ZodString>;
     limit: z.ZodDefault<z.ZodNumber>;

package/dist/delivery/handlers/unsubscribe-page-chrome.query.d.ts

@@ -0,0 +1,5 @@
+import * as z from "zod";
+import { type MailChrome } from "../../renderer-foundation/index.ts";
+export declare const unsubscribePageChromeQuery: import("@cosmicdrift/kumiko-types/define-handler").QueryHandlerDefinition<"unsubscribePageChrome", z.ZodObject<{
+    locale: z.ZodString;
+}, z.core.$strip>, MailChrome | null, import("@cosmicdrift/kumiko-types/event-type-map").KumikoEventTypeMap>;

package/dist/delivery/handlers/unsubscribe-page-chrome.query.js

@@ -0,0 +1,44 @@
+import { access, defineQueryHandler } from "@cosmicdrift/kumiko-framework/engine";
+import { InternalError } from "@cosmicdrift/kumiko-framework/errors";
+import * as z from "zod";
+import { collectRendererPlugins, createRendererFoundationApi, RendererError, } from "../../renderer-foundation/index.js";
+function mailChromePlugin(plugins, tenantId) {
+    try {
+        const plugin = createRendererFoundationApi(plugins).createRendererForTenant({
+            tenantId,
+            kind: "mail",
+        });
+        return plugin.readMailChrome === undefined ? null : plugin;
+    }
+    catch (e) {
+        if (e instanceof RendererError && e.code === "no_plugin_for_kind")
+            return null;
+        throw e;
+    }
+}
+export const unsubscribePageChromeQuery = defineQueryHandler({
+    name: "unsubscribePageChrome",
+    schema: z.object({ locale: z.string().min(2).max(35) }),
+    access: { roles: access.systemAdmin },
+    // Only reachable via createUnsubscribeRoutes' dispatchSystemQuery once verify()
+    // proved the token signature.
+    agent: { expose: false },
+    description: "Returns the tenant's mail brand row and footer resolved for one locale, or null without a mail renderer; dispatched by the signed unsubscribe route to dress its pages like the mail, not meant for UI callers.",
+    handler: async (query, ctx) => {
+        const { tenantId } = query.user;
+        if (!ctx.systemDb) {
+            throw new InternalError({
+                message: "unsubscribePageChrome: ctx.systemDb missing on a system-scoped handler",
+            });
+        }
+        const plugin = mailChromePlugin(collectRendererPlugins(ctx.registry), tenantId);
+        if (plugin?.readMailChrome === undefined)
+            return null;
+        return plugin.readMailChrome({ locale: query.payload.locale }, {
+            db: ctx.systemDb.assertTenantMatch(tenantId),
+            registry: ctx.registry,
+            tenantId,
+            ...(ctx.config !== undefined && { config: ctx.config }),
+        });
+    },
+});

package/dist/delivery/index.d.ts

@@ -1,20 +1,20 @@
-export { sanitizePdfAttachmentFileName } from "../shared/index.js";
-export { hashUnsubscribeAddress } from "./address-opt-out.js";
-export { DELIVERY_ENVELOPE_DATA_KEYS, type EmailAttachmentRef, emailAttachmentRefSchema, type FileAttachmentRef, fileAttachmentRefSchema, type InlineAttachmentRef, inlineAttachmentRefSchema, MAX_EMAIL_ATTACHMENTS, MAX_RENDERED_PDF_VARIABLES_BYTES, type RenderedPdfAttachmentRef, renderedPdfAttachmentRefSchema, toAttachmentRef, withoutDeliveryEnvelopeKeys, } from "./attachment-ref.js";
-export { type AttemptLogRetentionOptions, DEFAULT_ATTEMPT_LOG_RETENTION_DAYS, runAttemptLogRetention, } from "./attempt-log-retention.js";
-export { buildChannelContext, createEmailAttachmentReader, createTemplateMailRenderer, } from "./channel-context.js";
-export { type ChatWebhookChannelOptions, chatMessageText, createChatWebhookChannel, resolveChatWebhookTarget, toChannelResult, } from "./chat-webhook-channel.js";
-export { type ChatSendFailureCode, type ChatSendResult, type ChatWebhookRequest, type ChatWebhookResponse, type ChatWebhookTarget, chatConnectionNameSchema, chatWebhookUrlSchema, checkChatWebhookTarget, DEFAULT_CHAT_TIMEOUT_MS, postChatWebhook, truncateChars, } from "./chat-webhook-sender.js";
-export type { DeliveryStatusValue } from "./constants.js";
-export { DELIVERY_ATTEMPT_ADDRESS_ERASED_EVENT, DELIVERY_CHANNEL_EXTENSION, DELIVERY_FEATURE, DELIVERY_LOG_SCREEN_ID, DELIVERY_UNSUBSCRIBE_PATH, DeliveryErrors, DeliveryHandlers, DeliveryJobs, DeliveryQueries, DeliveryStatus, EMAIL_CHANNEL_NAME, } from "./constants.js";
-export { collectChannels, createDeliveryService, type DeliveryServiceOptions, type KillSwitchResolver, type RateLimitConfig, } from "./delivery-service.js";
-export { createDeliveryFeature, type DeliveryFeatureOptions } from "./feature.js";
-export { type UnsubscribeAddressPayload, unsubscribeAddressPayloadSchema, } from "./handlers/unsubscribe-address.write.js";
-export { currentNotificationType } from "./notification-type-aliases.js";
-export { createDeliveryNotifyFactory } from "./notify-factory.js";
-export { deliveryAttemptsTable, notificationAddressOptOutEntity, notificationAddressOptOutsTable, notificationPreferenceEntity, notificationPreferencesTable, } from "./tables.js";
-export { type CreateDeliveryTestContextOptions, createDeliveryTestContext } from "./testing.js";
-export { type AttachmentOrigin, type ChannelContext, type ChannelMessage, type ChannelResult, type DeliveryChannel, type DeliveryChannelMode, type DeliveryChannelPlugin, type DeliveryLogEntry, type DeliveryService, isDeliveryChannelPlugin, type RenderedMessage, } from "./types.js";
-export { type AddressUnsubscribeTokenPayload, createUnsubscribeRoutes, DELIVERY_UNSUBSCRIBE_ONE_CLICK_HEADER_VALUE, renderUnsubscribeResultPage, signAddressUnsubscribeToken, signUnsubscribeToken, type UnsubscribeResultPage, type UnsubscribeRouteOptions, type UnsubscribeTokenPayload, } from "./unsubscribe.js";
-export type { UnsubscribeLinkConfig } from "./unsubscribe-link.js";
-export { UNSUBSCRIBE_PAGE_EN } from "./unsubscribe-page-strings.js";
+export { sanitizePdfAttachmentFileName } from "../shared/index.ts";
+export { hashUnsubscribeAddress } from "./address-opt-out.ts";
+export { DELIVERY_ENVELOPE_DATA_KEYS, type EmailAttachmentRef, emailAttachmentRefSchema, type FileAttachmentRef, fileAttachmentRefSchema, type InlineAttachmentRef, inlineAttachmentRefSchema, MAX_EMAIL_ATTACHMENTS, MAX_RENDERED_PDF_VARIABLES_BYTES, type RenderedPdfAttachmentRef, renderedPdfAttachmentRefSchema, toAttachmentRef, withoutDeliveryEnvelopeKeys, } from "./attachment-ref.ts";
+export { type AttemptLogRetentionOptions, DEFAULT_ATTEMPT_LOG_RETENTION_DAYS, runAttemptLogRetention, } from "./attempt-log-retention.ts";
+export { buildChannelContext, createEmailAttachmentReader, createTemplateMailRenderer, } from "./channel-context.ts";
+export { type ChatWebhookChannelOptions, chatMessageText, createChatWebhookChannel, resolveChatWebhookTarget, toChannelResult, } from "./chat-webhook-channel.ts";
+export { type ChatSendFailureCode, type ChatSendResult, type ChatWebhookRequest, type ChatWebhookResponse, type ChatWebhookTarget, chatConnectionNameSchema, chatWebhookUrlSchema, checkChatWebhookTarget, DEFAULT_CHAT_TIMEOUT_MS, postChatWebhook, truncateChars, } from "./chat-webhook-sender.ts";
+export type { DeliveryStatusValue } from "./constants.ts";
+export { DELIVERY_ATTEMPT_ADDRESS_ERASED_EVENT, DELIVERY_CHANNEL_EXTENSION, DELIVERY_FEATURE, DELIVERY_LOG_SCREEN_ID, DELIVERY_UNSUBSCRIBE_PATH, DeliveryErrors, DeliveryHandlers, DeliveryJobs, DeliveryQueries, DeliveryStatus, EMAIL_CHANNEL_NAME, } from "./constants.ts";
+export { collectChannels, createDeliveryService, type DeliveryServiceOptions, type KillSwitchResolver, type RateLimitConfig, } from "./delivery-service.ts";
+export { createDeliveryFeature, type DeliveryFeatureOptions } from "./feature.ts";
+export { type UnsubscribeAddressPayload, unsubscribeAddressPayloadSchema, } from "./handlers/unsubscribe-address.write.ts";
+export { currentNotificationType } from "./notification-type-aliases.ts";
+export { createDeliveryNotifyFactory } from "./notify-factory.ts";
+export { deliveryAttemptsTable, notificationAddressOptOutEntity, notificationAddressOptOutsTable, notificationPreferenceEntity, notificationPreferencesTable, } from "./tables.ts";
+export { type CreateDeliveryTestContextOptions, createDeliveryTestContext } from "./testing.ts";
+export { type AttachmentOrigin, type ChannelContext, type ChannelMessage, type ChannelResult, type DeliveryChannel, type DeliveryChannelMode, type DeliveryChannelPlugin, type DeliveryLogEntry, type DeliveryService, isDeliveryChannelPlugin, type RenderedMessage, } from "./types.ts";
+export { type AddressUnsubscribeTokenPayload, createUnsubscribeRoutes, DELIVERY_UNSUBSCRIBE_ONE_CLICK_HEADER_VALUE, renderUnsubscribeResultPage, signAddressUnsubscribeToken, signUnsubscribeToken, type UnsubscribeResultPage, type UnsubscribeRouteOptions, type UnsubscribeTokenPayload, } from "./unsubscribe.ts";
+export type { UnsubscribeLinkConfig } from "./unsubscribe-link.ts";
+export { UNSUBSCRIBE_PAGE_EN } from "./unsubscribe-page-strings.ts";

package/dist/delivery/notify-factory.d.ts

@@ -1,5 +1,5 @@
 import type { NotifyFactory } from "@cosmicdrift/kumiko-framework/engine";
-import type { DeliveryService } from "./types.js";
+import type { DeliveryService } from "./types.ts";
 export declare function createDeliveryNotifyFactory(deliveryService: Pick<DeliveryService, "notify">, options?: {
     readonly deliverQueuedInline?: boolean;
 }): NotifyFactory;

package/dist/delivery/public-names.d.ts

@@ -11,6 +11,7 @@ export declare const DELIVERY_RESUBSCRIBE_PATH: "/api/delivery/resubscribe";
 export declare const DeliveryQueries: {
     readonly log: "delivery:query:log";
     readonly preferences: "delivery:query:preferences";
+    readonly unsubscribePageChrome: "delivery:query:unsubscribe-page-chrome";
 };
 export declare const DELIVERY_LOG_SCREEN_ID: "delivery-log";
 export declare const DELIVERY_STATUS_CELL_COMPONENT: "DeliveryStatusCell";

package/dist/delivery/public-names.js

@@ -20,6 +20,7 @@ export const DELIVERY_RESUBSCRIBE_PATH = "/api/delivery/resubscribe";
 export const DeliveryQueries = {
     log: "delivery:query:log",
     preferences: "delivery:query:preferences",
+    unsubscribePageChrome: "delivery:query:unsubscribe-page-chrome",
 };
 export const DELIVERY_LOG_SCREEN_ID = "delivery-log";
 // Client column-renderer registered for the delivery-log screen's status

package/dist/delivery/testing.d.ts

@@ -6,9 +6,9 @@ import type { JobRunner } from "@cosmicdrift/kumiko-framework/jobs";
 import type { Logger } from "@cosmicdrift/kumiko-framework/logging";
 import type { SecretsContext } from "@cosmicdrift/kumiko-framework/secrets";
 import type { Redis } from "ioredis";
-import type { KillSwitchResolver, RateLimitConfig } from "./delivery-service.js";
-import type { DeliveryService } from "./types.js";
-import type { UnsubscribeLinkConfig } from "./unsubscribe-link.js";
+import type { KillSwitchResolver, RateLimitConfig } from "./delivery-service.ts";
+import type { DeliveryService } from "./types.ts";
+import type { UnsubscribeLinkConfig } from "./unsubscribe-link.ts";
 export type CreateDeliveryTestContextOptions = {
     readonly tenantUserIdsQuery?: string;
     readonly rateLimit?: RateLimitConfig;

package/dist/delivery/types.d.ts

@@ -3,9 +3,9 @@ import type { DbConnection, TenantDb } from "@cosmicdrift/kumiko-framework/db";
 import type { ConfigAccessor, DeliveryErrorCode, NotifyDeliveryStatus, NotifyDispatched, NotifyJobDispatcher, NotifyOptions, NotifyPriority, Registry, SessionUser, TenantId } from "@cosmicdrift/kumiko-framework/engine";
 import type { FileProviderResolver } from "@cosmicdrift/kumiko-framework/files";
 import type { SecretsContext } from "@cosmicdrift/kumiko-framework/secrets";
-import type { MailPayload, RenderedTemplateRef } from "../renderer-foundation/index.js";
-import type { EmailAttachmentRef } from "./attachment-ref.js";
-import { DELIVERY_CHANNEL_EXTENSION } from "./constants.js";
+import type { MailPayload, RenderedTemplateRef } from "../renderer-foundation/index.ts";
+import type { EmailAttachmentRef } from "./attachment-ref.ts";
+import { DELIVERY_CHANNEL_EXTENSION } from "./constants.ts";
 export type RenderedMail = {
     readonly subject: string;
     readonly html: string;

package/dist/delivery/unsubscribe-link.d.ts

@@ -1,5 +1,5 @@
 import type { TenantId } from "@cosmicdrift/kumiko-framework/engine";
-import type { ChannelContext } from "./types.js";
+import type { ChannelContext } from "./types.ts";
 /** Secret shared with `createUnsubscribeRoutes` plus the public origin the links point at. */
 export type UnsubscribeLinkConfig = {
     readonly secret: string;

package/dist/delivery/unsubscribe-page-strings.d.ts

@@ -5,7 +5,11 @@ export declare const UNSUBSCRIBE_PAGE_EN: {
     readonly "mail.unsubscribe.doneTitle": "Unsubscribed";
     readonly "mail.unsubscribe.doneMessage": "You have been unsubscribed.";
     readonly "mail.unsubscribe.undoButton": "Undo";
+    readonly "mail.unsubscribe.undoHint": "Unsubscribed by mistake? You can undo it within the next hour.";
     readonly "mail.unsubscribe.resubscribedTitle": "Subscribed again";
     readonly "mail.unsubscribe.resubscribedMessage": "You have been subscribed again.";
     readonly "mail.unsubscribe.failed": "That did not work. Please try again later.";
+    readonly "mail.unsubscribe.failedTitle": "Something went wrong";
+    readonly "mail.unsubscribe.invalidTitle": "Link no longer valid";
+    readonly "mail.unsubscribe.invalidMessage": "This link is invalid or has expired. Please use the unsubscribe link in a more recent email.";
 };

package/dist/delivery/unsubscribe-page-strings.js

@@ -8,8 +8,12 @@ export const UNSUBSCRIBE_PAGE_EN = {
     "mail.unsubscribe.doneTitle": "Unsubscribed",
     "mail.unsubscribe.doneMessage": "You have been unsubscribed.",
     "mail.unsubscribe.undoButton": "Undo",
+    "mail.unsubscribe.undoHint": "Unsubscribed by mistake? You can undo it within the next hour.",
     "mail.unsubscribe.resubscribedTitle": "Subscribed again",
     "mail.unsubscribe.resubscribedMessage": "You have been subscribed again.",
     "mail.unsubscribe.failed": "That did not work. Please try again later.",
+    "mail.unsubscribe.failedTitle": "Something went wrong",
+    "mail.unsubscribe.invalidTitle": "Link no longer valid",
+    "mail.unsubscribe.invalidMessage": "This link is invalid or has expired. Please use the unsubscribe link in a more recent email.",
 };
 registerMailTranslations("en", UNSUBSCRIBE_PAGE_EN);

package/dist/delivery/unsubscribe-page.d.ts

@@ -0,0 +1,27 @@
+import type { MailChrome } from "../renderer-foundation/index.ts";
+import "./unsubscribe-page-strings.ts";
+export type UnsubscribePageState = {
+    readonly kind: "confirm";
+    readonly token: string;
+} | {
+    readonly kind: "unsubscribed";
+    readonly resubscribeToken?: string;
+} | {
+    readonly kind: "resubscribed";
+} | {
+    readonly kind: "failed";
+} | {
+    readonly kind: "invalid";
+};
+export type UnsubscribePageInput = {
+    readonly state: UnsubscribePageState;
+    /** A locale with registered mail translations (see resolveMailLocale). */
+    readonly locale: string;
+    /** The tenant's mail look; without it the page shows the plain card. */
+    readonly chrome?: MailChrome | null | undefined;
+};
+export type RenderedUnsubscribePage = {
+    readonly html: string;
+    readonly contentSecurityPolicy: string;
+};
+export declare function renderUnsubscribePage(input: UnsubscribePageInput): RenderedUnsubscribePage;