@cosmicdrift/kumiko-bundled-features 0.377.0 → 0.378.0

package/dist/template-resolver/template-validation.js

@@ -38,6 +38,7 @@ const scalarVariableSchema = z.discriminatedUnion("type", [
 ]);
 const variableDefSchema = z.union([
     scalarVariableSchema,
+    z.object({ ...variableCommon, type: z.literal("images") }),
     z.object({
         ...variableCommon,
         type: z.literal("list"),
@@ -74,7 +75,9 @@ function listItemFields(variables, listName) {
     const def = listName !== null && Object.hasOwn(variables, listName) ? variables[listName] : undefined;
     return def?.type === "list" ? def.item : {};
 }
-function isKnownName(name, scope, itemFields) {
+// An images variable holds file ids: as text it would leak them, so only an images block
+// (and a condition on its presence) may name it.
+function isKnownName(name, scope, itemFields, allowImages = false) {
     const { variables } = scope;
     const root = rootName(name);
     // Declared variables and item fields are scalars: a dotted path under one never renders a value.
@@ -82,12 +85,15 @@ function isKnownName(name, scope, itemFields) {
         return { known: true, used: "" };
     if (scope.systemPlaceholders.has(root))
         return { known: true, used: "" };
-    if (Object.hasOwn(variables, name))
-        return { known: true, used: name };
+    if (Object.hasOwn(variables, name)) {
+        return variables[name]?.type === "images" && !allowImages
+            ? { known: false, used: "" }
+            : { known: true, used: name };
+    }
     return { known: false, used: "" };
 }
-function recordName(name, itemFields, scope) {
-    const resolution = isKnownName(name, scope, itemFields);
+function recordName(name, itemFields, scope, allowImages = false) {
+    const resolution = isKnownName(name, scope, itemFields, allowImages);
     if (!resolution.known)
         scope.unknown.add(name);
     else if (resolution.used !== "")
@@ -96,10 +102,21 @@ function recordName(name, itemFields, scope) {
 function enclosingEachName(element) {
     return element.closest("tr[data-each]")?.getAttribute("data-each") ?? null;
 }
-const NAME_ATTRIBUTE_BY_TAG = {
-    span: "data-variable",
-    div: "data-steps",
-};
+function nameAttributeOf(element) {
+    const tag = element.tagName.toLowerCase();
+    if (tag === "span")
+        return "data-variable";
+    if (tag !== "div")
+        return undefined;
+    return element.hasAttribute("data-images") ? "data-images" : "data-steps";
+}
+function recordImagesName(name, scope) {
+    const def = Object.hasOwn(scope.variables, name) ? scope.variables[name] : undefined;
+    if (def?.type === "images")
+        scope.used.add(name);
+    else
+        scope.unknown.add(name);
+}
 function scanRepeatRows(root, scope) {
     for (const element of Array.from(root.querySelectorAll("tr[data-each]"))) {
         const listName = element.getAttribute("data-each") ?? "";
@@ -113,15 +130,18 @@ function scanRepeatRows(root, scope) {
 function scanConditions(root, scope) {
     for (const element of Array.from(root.querySelectorAll(`[${DOCUMENT_CONDITION_ATTRIBUTE}]`))) {
         const itemFields = listItemFields(scope.variables, enclosingEachName(conditionScopeElement(element)));
-        recordName(element.getAttribute(DOCUMENT_CONDITION_ATTRIBUTE) ?? "", itemFields, scope);
+        recordName(element.getAttribute(DOCUMENT_CONDITION_ATTRIBUTE) ?? "", itemFields, scope, true);
     }
 }
 function scanReferences(root, scope) {
-    for (const element of Array.from(root.querySelectorAll("span[data-variable], div[data-steps], a[href], img[data-resource]"))) {
+    for (const element of Array.from(root.querySelectorAll("span[data-variable], div[data-steps], div[data-images], a[href], img[data-resource]"))) {
         const itemFields = listItemFields(scope.variables, enclosingEachName(element));
         const tag = element.tagName.toLowerCase();
-        const nameAttribute = NAME_ATTRIBUTE_BY_TAG[tag];
-        if (nameAttribute !== undefined) {
+        const nameAttribute = nameAttributeOf(element);
+        if (nameAttribute === "data-images") {
+            recordImagesName(element.getAttribute(nameAttribute) ?? "", scope);
+        }
+        else if (nameAttribute !== undefined) {
             recordName(element.getAttribute(nameAttribute) ?? "", itemFields, scope);
         }
         else if (tag === "a") {

package/dist/template-resolver/web/document-editor-extensions.d.ts

@@ -7,6 +7,7 @@ export type DocumentEditorLabels = {
     readonly pageBreak: string;
     readonly button?: string;
     readonly steps?: string;
+    readonly images?: string;
     /** Canvas block label of an image, e.g. "Image · inline". */
     readonly imageBlock?: string;
     readonly variableLabels?: Readonly<Record<string, string>>;

package/dist/template-resolver/web/document-editor-extensions.js

@@ -1,6 +1,6 @@
 import { ListKeymap } from "@tiptap/extension-list";
 import { Dropcursor, Gapcursor, Placeholder, UndoRedo } from "@tiptap/extensions";
-import { DocumentButton, DocumentPageBreak, DocumentResource, DocumentSteps, DocumentVariable, documentExtensions, } from "../document-schema.js";
+import { DocumentButton, DocumentImages, DocumentPageBreak, DocumentResource, DocumentSteps, DocumentVariable, documentExtensions, } from "../document-schema.js";
 import { readDocumentStepsAttribute } from "../document-steps.js";
 const DOCUMENT_RESOURCE_SIZE_TOKEN = "{size}";
 export const DOCUMENT_BLOCK_ATTRIBUTE = "data-document-block";
@@ -134,6 +134,24 @@ function createStepsView(labels) {
         return { dom };
     };
 }
+// A sketch only: the photos are record data, known at render time.
+function createImagesView(labels) {
+    return ({ node }) => {
+        const dom = createElementWithClass("div", "relative my-3 rounded border border-dashed border-input px-3 pb-3 pt-4");
+        dom.setAttribute(DOCUMENT_BLOCK_ATTRIBUTE, "");
+        dom.contentEditable = "false";
+        const variable = String(node.attrs["variable"]);
+        const variableLabels = labels.variableLabels ?? {};
+        const variableLabel = Object.hasOwn(variableLabels, variable)
+            ? variableLabels[variable]
+            : undefined;
+        dom.append(createBlockLabel(`${labels.images ?? "Photos"} · ${variableLabel ?? variable}`));
+        const grid = createElementWithClass("div", "grid grid-cols-2 gap-1.5");
+        grid.append(createElementWithClass("div", "h-12 rounded bg-muted"), createElementWithClass("div", "h-12 rounded bg-muted"));
+        dom.append(grid);
+        return { dom };
+    };
+}
 // Replaced by name, not appended: the schema must keep exactly one node per
 // name, and only the editor view differs from the shared document schema.
 export function createDocumentEditorExtensions(labels) {
@@ -151,6 +169,8 @@ export function createDocumentEditorExtensions(labels) {
                     : extension;
             case DocumentSteps.name:
                 return DocumentSteps.extend({ addNodeView: () => createStepsView(labels) });
+            case DocumentImages.name:
+                return DocumentImages.extend({ addNodeView: () => createImagesView(labels) });
             case DocumentPageBreak.name:
                 return DocumentPageBreak.extend({
                     addNodeView: () => createPageBreakView(labels.pageBreak),

package/dist/template-resolver/web/document-tiptap-editor.d.ts

@@ -1,3 +1,3 @@
 import { type ReactNode } from "react";
 import { type DocumentEditorProps } from "./document-toolbar-blocks.ts";
-export default function DocumentTiptapEditor({ id, value, onChange, variables, readOnly, blocks, variableLabels, systemVariables, resourcePreviews, chrome, toolbar, renderPaper, toolbarHost, onEditorReady, }: DocumentEditorProps): ReactNode;
+export default function DocumentTiptapEditor({ id, value, onChange, variables, readOnly, blocks: configuredBlocks, imageVariables, variableLabels, systemVariables, resourcePreviews, chrome, toolbar, renderPaper, toolbarHost, onEditorReady, }: DocumentEditorProps): ReactNode;

package/dist/template-resolver/web/document-tiptap-editor.js

@@ -10,7 +10,7 @@ import { cn } from "@cosmicdrift/kumiko-renderer/web";
 import { isOneOf } from "@cosmicdrift/kumiko-types/type-guards";
 import { EditorContent, useEditor, useEditorState } from "@tiptap/react";
 import { BubbleMenu } from "@tiptap/react/menus";
-import { AlignCenter, AlignJustify, AlignLeft, AlignRight, Bold as BoldIcon, Braces, ChevronDown, Image as ImageIcon, Italic as ItalicIcon, Link as LinkIcon, List, ListChecks, ListOrdered, Minus, MousePointerClick, Repeat, Scissors, Table as TableIcon, Underline as UnderlineIcon, } from "lucide-react";
+import { AlignCenter, AlignJustify, AlignLeft, AlignRight, Bold as BoldIcon, Braces, ChevronDown, GalleryThumbnails, Image as ImageIcon, Italic as ItalicIcon, Link as LinkIcon, List, ListChecks, ListOrdered, Minus, MousePointerClick, Repeat, Scissors, Table as TableIcon, Underline as UnderlineIcon, } from "lucide-react";
 import { Fragment, useEffect, useMemo, useState } from "react";
 import { createPortal } from "react-dom";
 import { DOCUMENT_TEXT_ALIGNMENTS, isAllowedDocumentLinkHref, isDocumentPlaceholderHref, isDocumentReferenceName, isDocumentResourceKey, } from "../document-schema.js";
@@ -35,6 +35,7 @@ const BLOCK_PANEL = {
     repeat: "repeat",
     align: "align",
     steps: "steps",
+    images: "images",
 };
 const ALIGNMENT_ICONS = {
     left: _jsx(AlignLeft, { size: 16 }),
@@ -243,7 +244,11 @@ function InsertPanel({ editor, editorId, kind, variables, variableLabels, onClos
         }
         insertAndClose({ type: "steps", attrs: { variable: selectedName, steps } });
     };
-    const needsVariables = kind === "button" || kind === "repeat" || kind === "placeholder" || kind === "steps";
+    const needsVariables = kind === "button" ||
+        kind === "repeat" ||
+        kind === "placeholder" ||
+        kind === "steps" ||
+        kind === "images";
     const noVariables = needsVariables && selectable.length === 0;
     const idPrefix = `${editorId}-panel`;
     return (_jsxs("div", { className: "flex flex-col gap-2 border-b border-input bg-muted/40 p-2", children: [noVariables && (_jsx("p", { className: "text-sm text-muted-foreground", children: t("template-resolver.documentEditor.noVariables") })), kind === "link" && (_jsx(Field, { id: `${idPrefix}-href`, label: t("template-resolver.documentEditor.linkHref"), children: _jsx(Input, { kind: "text", id: `${idPrefix}-href`, name: "href", value: href, onChange: setHref, placeholder: t("template-resolver.documentEditor.linkHrefPlaceholder") }) })), kind === "placeholder" && !noVariables && (_jsx("div", { className: "flex flex-wrap gap-1", children: _jsx(VariableChips, { variables: selectable, labels: variableLabels, onInsert: (name) => insertAndClose({ type: "variable", attrs: { name } }) }) })), kind === "align" && (_jsx("div", { className: "flex flex-wrap gap-1", children: DOCUMENT_TEXT_ALIGNMENTS.map((alignment) => (_jsxs(Button, { type: "button", variant: "secondary", size: "sm", onClick: () => {
@@ -254,7 +259,7 @@ function InsertPanel({ editor, editorId, kind, variables, variableLabels, onClos
                             .updateAttributes("heading", { textAlign: alignment })
                             .run();
                         onClose();
-                    }, children: [ALIGNMENT_ICONS[alignment], t(ALIGNMENT_LABEL_KEYS[alignment])] }, alignment))) })), kind === "image" && (_jsxs(_Fragment, { children: [_jsx(Field, { id: `${idPrefix}-resource`, label: t("template-resolver.documentEditor.resourceKey"), children: _jsx(Input, { kind: "text", id: `${idPrefix}-resource`, name: "resource", value: resource, onChange: setResource }) }), _jsx(Field, { id: `${idPrefix}-alt`, label: t("template-resolver.documentEditor.imageAlt"), children: _jsx(Input, { kind: "text", id: `${idPrefix}-alt`, name: "alt", value: alt, onChange: setAlt }) })] })), kind === "button" && !noVariables && (_jsxs(_Fragment, { children: [_jsx(NameSelect, { id: `${idPrefix}-target`, label: t("template-resolver.documentEditor.buttonTarget"), names: selectable, labels: variableLabels, value: selectedName, onChange: setChosenName }), _jsx(Field, { id: `${idPrefix}-text`, label: t("template-resolver.documentEditor.buttonText"), children: _jsx(Input, { kind: "text", id: `${idPrefix}-text`, name: "text", value: buttonText, onChange: setButtonText }) })] })), kind === "repeat" && !noVariables && (_jsx(NameSelect, { id: `${idPrefix}-list`, label: t("template-resolver.documentEditor.repeatList"), names: selectable, labels: variableLabels, value: selectedName, onChange: setChosenName })), kind === "steps" && !noVariables && (_jsxs(_Fragment, { children: [_jsx(NameSelect, { id: `${idPrefix}-steps-variable`, label: t("template-resolver.documentEditor.stepsVariable"), names: selectable, labels: variableLabels, value: selectedName, onChange: setChosenName }), _jsx(Field, { id: `${idPrefix}-steps-list`, label: t("template-resolver.documentEditor.stepsList"), children: _jsx(Input, { kind: "text", id: `${idPrefix}-steps-list`, name: "steps", value: stepsText, onChange: setStepsText }) })] })), error !== null && (_jsx("p", { role: "alert", className: "text-sm text-destructive", children: error })), _jsx("div", { className: "flex flex-wrap gap-2", children: _jsx(PanelActions, { onCancel: onClose, ...(kind === "link" && { onInsert: submitLink }), ...(kind === "link" &&
+                    }, children: [ALIGNMENT_ICONS[alignment], t(ALIGNMENT_LABEL_KEYS[alignment])] }, alignment))) })), kind === "image" && (_jsxs(_Fragment, { children: [_jsx(Field, { id: `${idPrefix}-resource`, label: t("template-resolver.documentEditor.resourceKey"), children: _jsx(Input, { kind: "text", id: `${idPrefix}-resource`, name: "resource", value: resource, onChange: setResource }) }), _jsx(Field, { id: `${idPrefix}-alt`, label: t("template-resolver.documentEditor.imageAlt"), children: _jsx(Input, { kind: "text", id: `${idPrefix}-alt`, name: "alt", value: alt, onChange: setAlt }) })] })), kind === "button" && !noVariables && (_jsxs(_Fragment, { children: [_jsx(NameSelect, { id: `${idPrefix}-target`, label: t("template-resolver.documentEditor.buttonTarget"), names: selectable, labels: variableLabels, value: selectedName, onChange: setChosenName }), _jsx(Field, { id: `${idPrefix}-text`, label: t("template-resolver.documentEditor.buttonText"), children: _jsx(Input, { kind: "text", id: `${idPrefix}-text`, name: "text", value: buttonText, onChange: setButtonText }) })] })), kind === "repeat" && !noVariables && (_jsx(NameSelect, { id: `${idPrefix}-list`, label: t("template-resolver.documentEditor.repeatList"), names: selectable, labels: variableLabels, value: selectedName, onChange: setChosenName })), kind === "images" && !noVariables && (_jsx(NameSelect, { id: `${idPrefix}-images-variable`, label: t("template-resolver.documentEditor.imagesVariable"), names: selectable, labels: variableLabels, value: selectedName, onChange: setChosenName })), kind === "steps" && !noVariables && (_jsxs(_Fragment, { children: [_jsx(NameSelect, { id: `${idPrefix}-steps-variable`, label: t("template-resolver.documentEditor.stepsVariable"), names: selectable, labels: variableLabels, value: selectedName, onChange: setChosenName }), _jsx(Field, { id: `${idPrefix}-steps-list`, label: t("template-resolver.documentEditor.stepsList"), children: _jsx(Input, { kind: "text", id: `${idPrefix}-steps-list`, name: "steps", value: stepsText, onChange: setStepsText }) })] })), error !== null && (_jsx("p", { role: "alert", className: "text-sm text-destructive", children: error })), _jsx("div", { className: "flex flex-wrap gap-2", children: _jsx(PanelActions, { onCancel: onClose, ...(kind === "link" && { onInsert: submitLink }), ...(kind === "link" &&
                         editor.isActive("link") && {
                         onRemoveLink: () => {
                             editor.chain().focus().extendMarkRange("link").unsetLink().run();
@@ -268,9 +273,12 @@ function InsertPanel({ editor, editorId, kind, variables, variableLabels, onClos
                             content: buttonText ? [{ type: "text", text: buttonText }] : [],
                         }),
                     }), ...(kind === "repeat" &&
-                        !noVariables && { onInsert: () => insertAndClose(repeatTableContent(selectedName)) }), ...(kind === "steps" && !noVariables && { onInsert: submitSteps }) }) })] }));
+                        !noVariables && { onInsert: () => insertAndClose(repeatTableContent(selectedName)) }), ...(kind === "steps" && !noVariables && { onInsert: submitSteps }), ...(kind === "images" &&
+                        !noVariables && {
+                        onInsert: () => insertAndClose({ type: "images", attrs: { variable: selectedName } }),
+                    }) }) })] }));
 }
-export default function DocumentTiptapEditor({ id, value, onChange, variables, readOnly, blocks = MAIL_DOCUMENT_BLOCKS, variableLabels = NO_LABELS, systemVariables = NO_NAMES, resourcePreviews = NO_PREVIEWS, chrome = "default", toolbar = "full", renderPaper, toolbarHost, onEditorReady, }) {
+export default function DocumentTiptapEditor({ id, value, onChange, variables, readOnly, blocks: configuredBlocks = MAIL_DOCUMENT_BLOCKS, imageVariables = NO_NAMES, variableLabels = NO_LABELS, systemVariables = NO_NAMES, resourcePreviews = NO_PREVIEWS, chrome = "default", toolbar = "full", renderPaper, toolbarHost, onEditorReady, }) {
     const t = useTranslation();
     const { ActionOverflowMenu, Button, Field, Input } = usePrimitives();
     const [openPanel, setOpenPanel] = useState(null);
@@ -279,12 +287,17 @@ export default function DocumentTiptapEditor({ id, value, onChange, variables, r
     const canvas = chrome === "canvas";
     const compact = toolbar === "compact" && !canvas;
     const hosted = toolbarHost !== undefined;
+    // A photo block needs an images variable to bind to; without one the button would open an empty panel.
+    const blocks = imageVariables.length === 0
+        ? configuredBlocks.filter((block) => block !== "images")
+        : configuredBlocks;
     const placeholderLabel = t("template-resolver.documentEditor.placeholder");
     const imageLabel = t("template-resolver.documentEditor.image");
     const imageBlockLabel = t("template-resolver.documentEditor.imageBlock");
     const pageBreakLabel = t("template-resolver.documentEditor.pageBreak");
     const buttonLabel = t("template-resolver.documentEditor.button");
     const stepsLabel = t("template-resolver.documentEditor.steps");
+    const imagesLabel = t("template-resolver.documentEditor.images");
     const stableLabels = useStableByKey(variableLabels, JSON.stringify(variableLabels));
     const stableSystem = useStableByKey(systemVariables, systemVariables.join("\n"));
     const stablePreviews = useStableByKey(resourcePreviews, previewsKey(resourcePreviews));
@@ -294,6 +307,7 @@ export default function DocumentTiptapEditor({ id, value, onChange, variables, r
         pageBreak: pageBreakLabel,
         button: buttonLabel,
         steps: stepsLabel,
+        images: imagesLabel,
         imageBlock: imageBlockLabel,
         variableLabels: stableLabels,
         systemVariables: stableSystem,
@@ -306,6 +320,7 @@ export default function DocumentTiptapEditor({ id, value, onChange, variables, r
         pageBreakLabel,
         buttonLabel,
         stepsLabel,
+        imagesLabel,
         stableLabels,
         stableSystem,
         stablePreviews,
@@ -415,6 +430,7 @@ export default function DocumentTiptapEditor({ id, value, onChange, variables, r
         pageBreak: { label: pageBreakLabel, icon: _jsx(Scissors, { size: 16 }) },
         align: { label: t("template-resolver.documentEditor.align"), icon: _jsx(AlignLeft, { size: 16 }) },
         steps: { label: stepsLabel, icon: _jsx(ListChecks, { size: 16 }) },
+        images: { label: imagesLabel, icon: _jsx(GalleryThumbnails, { size: 16 }) },
     };
     const repeatTable = activeState?.repeatTable ?? null;
     const repeatListLabel = repeatTable !== null && repeatTable.lists.length === 1
@@ -507,7 +523,7 @@ export default function DocumentTiptapEditor({ id, value, onChange, variables, r
                             : t("template-resolver.documentEditor.buttonTarget"), ": ", selectedBlock.type === "button" ? (_jsx("strong", { children: buttonTargetLabel(selectedBlock.detail, variableLabels) })) : (_jsx("code", { children: selectedBlock.detail }))] }), _jsx(Button, { type: "button", size: "sm", variant: "danger-ghost", onClick: () => {
                         editor.chain().focus().deleteNode(selectedBlock.type).run();
                     }, children: t("template-resolver.documentEditor.removeBlock") })] })) : (repeatTable !== null && (_jsxs("div", { "data-testid": "document-repeat-bar", className: BUBBLE_BAR_CLASS, children: [_jsx("span", { className: "px-1.5 text-[10px] uppercase tracking-wide text-muted-foreground", children: repeatBarLabel }), _jsx(Button, { type: "button", variant: "secondary", size: "sm", pressed: repeatTable.headerRepeats, onClick: () => toggleRepeatHeader(editor), children: t("template-resolver.documentEditor.repeatHeader") })] }))) }, mountKeyOf(editor)));
-    const insertPanel = openPanel !== null && !readOnly && (_jsx(InsertPanel, { editor: editor, editorId: id, kind: openPanel, variables: variables, variableLabels: stableLabels, onClose: () => setOpenPanel(null) }, openPanel));
+    const insertPanel = openPanel !== null && !readOnly && (_jsx(InsertPanel, { editor: editor, editorId: id, kind: openPanel, variables: openPanel === "images" ? imageVariables : variables, variableLabels: stableLabels, onClose: () => setOpenPanel(null) }, openPanel));
     if (hosted) {
         return (_jsxs(_Fragment, { children: [toolbarHost !== null &&
                     createPortal(_jsxs(_Fragment, { children: [toolbarBar, insertPanel] }), toolbarHost), !readOnly && bubbleMenu, editorContent] }));

package/dist/template-resolver/web/document-toolbar-blocks.d.ts

@@ -17,6 +17,8 @@ export type DocumentResourcePreview = {
 export type DocumentEditorChrome = "default" | "canvas";
 export type DocumentEditorProps = ContentEditorProps & {
     readonly blocks?: readonly DocumentToolbarBlock[];
+    /** Names of the template's images variables; the photo block offers exactly these and is hidden without any. */
+    readonly imageVariables?: readonly string[];
     /** Display label per variable name, as inserted (list item fields use the
      *  dotted form, e.g. "lines.description"). A chip shows label and name. */
     readonly variableLabels?: Readonly<Record<string, string>>;

package/dist/template-resolver/web/i18n.js

@@ -39,6 +39,8 @@ export const defaultTranslations = {
         "template-resolver.documentEditor.removeLink": "Remove link",
         "template-resolver.documentEditor.repeat": "Repeat",
         "template-resolver.documentEditor.repeatList": "List to repeat",
+        "template-resolver.documentEditor.images": "Photos",
+        "template-resolver.documentEditor.imagesVariable": "Photos from",
         "template-resolver.documentEditor.steps": "Steps",
         "template-resolver.documentEditor.stepsVariable": "Current step from",
         "template-resolver.documentEditor.stepsList": "Steps, separated by commas (value=label)",
@@ -52,6 +54,7 @@ export const defaultTranslations = {
         "template-resolver.editor.saving": "Saving…",
         "template-resolver.editor.created": "Created.",
         "template-resolver.editor.saved": "Saved.",
+        "templateResolver.errors.document.imagesBlockPdfOnly": "Photo blocks are only allowed in PDF documents.",
         "templateResolver.errors.document.buttonHrefNotPlaceholder": "The button target “{detail}” must be a placeholder.",
         "templateResolver.errors.document.disallowedLinkHref": "Link target “{detail}” is not allowed; use https, http, mailto, tel or a placeholder.",
         "templateResolver.errors.document.documentRequiresHtmlFormat": "This template kind requires the html format, got “{detail}”.",
@@ -91,6 +94,7 @@ export const defaultTranslations = {
         "templateResolver.errors.noSystemTemplate": "There is no active system template to reset to.",
         "templateResolver.errors.noDraft": "There is no draft to discard.",
         "templateResolver.errors.systemOnlyTemplate": "Only the platform maintains this template; it cannot be overridden per tenant.",
+        "templateResolver.errors.templateNotTenantEditable": "Only the platform may edit this template.",
         "templateResolver.errors.template.invalidMeta": "The template settings are invalid.",
         "templateResolver.errors.template.meta.subject.required": "The subject is missing.",
         "templateResolver.errors.template.meta.subject.invalid": "The subject is invalid (at most 200 characters, no line breaks).",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-bundled-features",
-  "version": "0.377.0",
+  "version": "0.378.0",
   "description": "Built-in features — tenant, user, auth, delivery. The stuff you'd rewrite anyway, already typed.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -540,9 +540,9 @@
     }
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-framework": "0.377.0",
-    "@cosmicdrift/kumiko-renderer": "0.377.0",
-    "@cosmicdrift/kumiko-types": "0.377.0",
+    "@cosmicdrift/kumiko-framework": "0.378.0",
+    "@cosmicdrift/kumiko-renderer": "0.378.0",
+    "@cosmicdrift/kumiko-types": "0.378.0",
     "@mollie/api-client": "^4.5.0",
     "@node-rs/argon2": "^2.0.2",
     "@tiptap/core": "3.31.3",
@@ -1107,12 +1107,12 @@
   ],
   "devDependencies": {
     "@testing-library/user-event": "^14.6.1",
-    "@cosmicdrift/kumiko-locale-de": "0.377.0",
-    "@cosmicdrift/kumiko-locale-es": "0.377.0",
-    "@cosmicdrift/kumiko-renderer-mail-html": "0.377.0",
+    "@cosmicdrift/kumiko-locale-de": "0.378.0",
+    "@cosmicdrift/kumiko-locale-es": "0.378.0",
+    "@cosmicdrift/kumiko-renderer-mail-html": "0.378.0",
     "jsqr": "^1.4.0",
     "unpdf": "^1.8.1",
-    "@cosmicdrift/kumiko-testing": "0.377.0"
+    "@cosmicdrift/kumiko-testing": "0.378.0"
   },
   "peerDependencies": {
     "@cosmicdrift/kumiko-testing": ">=0.366.0 <1.0.0"

package/src/cap-counter/changes.json

@@ -1,4 +1,16 @@
 [
+  {
+    "version": "0.378.0",
+    "type": "fix",
+    "title": "Stock caps are atomic under parallel writes",
+    "detail": "withStockCap now takes a transaction-scoped advisory lock per tenant and cap, so concurrent creates cannot both pass the check and exceed the cap."
+  },
+  {
+    "version": "0.378.0",
+    "type": "improvement",
+    "title": "withStockCap no longer widens the handler's grants",
+    "detail": "withStockCap serialises through TenantDb.advisoryXactLock instead of ctx.db.unsafeRaw(), so wrapped handlers no longer receive an implicit unsafeRaw grant."
+  },
   {
     "version": "0.370.0",
     "type": "breaking",

package/src/inbound-mail-foundation/changes.json

@@ -1,4 +1,10 @@
 [
+  {
+    "version": "0.378.0",
+    "type": "fix",
+    "title": "Mailbox list accepts the screen's limit",
+    "detail": "account:list accepted an empty payload only, so the projectionList screen's limit was rejected. It now takes limit up to MAX_LIST_LIMIT and returns the visible mailboxes ordered by id."
+  },
   {
     "version": "0.377.0",
     "type": "improvement",

package/src/mail-foundation/changes.json

@@ -1,4 +1,10 @@
 [
+  {
+    "version": "0.378.0",
+    "type": "improvement",
+    "title": "Email sending offers a platform default and an own SMTP server",
+    "detail": "The provider field is labelled \"Send via\" with the options \"Platform sending (default)\" (empty, saved as \"\") and \"Own SMTP server\"; the SMTP fields show only while the own server is picked."
+  },
   {
     "version": "0.370.0",
     "type": "breaking",

package/src/template-resolver/changes.json

@@ -1,4 +1,24 @@
 [
+  {
+    "version": "0.378.0",
+    "type": "improvement",
+    "title": "Document PDFs embed the images of a record",
+    "detail": "A template variable of type images (templateVariable.images()) holds FileRef ids of the record. The new Images block (div[data-images], PDF templates only, rejected for mail kinds) renders them as data-URI images in the real PDF render. Only files of the rendering tenant are read, only png, jpeg, gif and webp, at most 24 images and 20 MB per document; missing, foreign, oversized or non-image ids are dropped silently. Previews and draft PDFs never read files and show one placeholder box per block. An images variable never renders as inline text. i18n keys template-resolver.documentEditor.images, template-resolver.documentEditor.imagesVariable and templateResolver.errors.document.imagesBlockPdfOnly ship in de, es, fr and it.",
+    "migration": "Declare a template variable with type `images`, place the Images block, and pass FileRef ids of the record in `variables`. Images resolve only in the real PDF render, previews show placeholders. The ids must come from the record on the server, never from client input: a resolved id is read for the whole tenant without an entity access check."
+  },
+  {
+    "version": "0.378.0",
+    "type": "breaking",
+    "title": "Template editing is SystemAdmin-only unless the app unlocks it",
+    "detail": "Every tenant write handler, the overview and resource upload accept SystemAdmin only, plus the roles of the tenantEditable entries. A write on a template that is not unlocked fails with templateNotTenantEditable. The test send follows the same rule. For a non-SystemAdmin an unknown template id answers 403 like a locked one, so the response does not reveal whether it exists. Collections without an access rule default to SystemAdmin.",
+    "migration": "Where TenantAdmins must keep editing a template, pass tenantEditable to createTemplateResolverFeature, for example tenantEditable: [{ kind: \"mail\", slug: \"billing:notify:invoice-issued\", access: { roles: [\"TenantAdmin\"] } }]. Give template collections an explicit access rule if tenants should manage them."
+  },
+  {
+    "version": "0.378.0",
+    "type": "improvement",
+    "title": "send-test-status query for the template test mail",
+    "detail": "template-resolver:query:send-test-status answers whether a test mail can be sent (canSend) and, if not, why (no_channel or no_address), so clients can disable the action instead of failing on send."
+  },
   {
     "version": "0.377.0",
     "type": "improvement",