@cosmicdrift/kumiko-bundled-features 0.378.0 → 0.379.0

package/dist/template-resolver/handlers/export-bundle.query.js

@@ -3,10 +3,12 @@ import { selectMany } from "@cosmicdrift/kumiko-framework/db";
 import { defineQueryHandler, SYSTEM_TENANT_ID } from "@cosmicdrift/kumiko-framework/engine";
 import { NotFoundError, ValidationError } from "@cosmicdrift/kumiko-framework/errors";
 import * as z from "zod";
+import { filterDeliveredTo } from "../api.js";
 import { isFileAttachmentEntry, isPdfAttachmentLink, parseLinkedResourceEntries, } from "../linked-resources.js";
-import { TemplateResolverErrors } from "../qualified-names.js";
 import { templateResourcesTable } from "../table.js";
+import { deliveryPolicyOf } from "../template-delivery-policy.js";
 import { readTemplateResource } from "../template-resources.js";
+import { TemplateResolverErrors } from "../web/qualified-names.js";
 import { kindSchema, templateSlugSchema } from "./shared.js";
 import { parseStoredJson, storedRecord } from "./template-gates.js";
 // The files live in the system tenant's key space; readTemplateResource only
@@ -77,7 +79,8 @@ export const exportBundleQuery = defineQueryHandler({
         const found = await selectMany(ctx.db, templateResourcesTable, scope === "system"
             ? { tenantId: SYSTEM_TENANT_ID, slug, kind, scope: "system", status: "active" }
             : { tenantId: query.user.tenantId, slug, kind, scope: "tenant" });
-        const rows = found
+        const policy = deliveryPolicyOf(ctx.registry);
+        const rows = (await filterDeliveredTo(ctx.db, policy, query.user, found))
             .filter((row) => row.status !== "archived")
             .sort((a, b) => a.locale.localeCompare(b.locale));
         const first = rows[0];

package/dist/template-resolver/handlers/find-by-id.query.js

@@ -2,6 +2,7 @@ import { fetchOne } from "@cosmicdrift/kumiko-framework/db";
 import { defineQueryHandler } from "@cosmicdrift/kumiko-framework/engine";
 import * as z from "zod";
 import { templateResourcesTable } from "../table.js";
+import { deliveryPolicyOf, isRowServedTo } from "../template-delivery-policy.js";
 import { draftViewerTenantId, isHiddenSystemDraft, toWorkingRow } from "../template-draft.js";
 import { isSystemOnlyTemplateHiddenFrom } from "../template-system-only.js";
 // Admin-Lookup für UI-Edit-Flow. Returnt das raw Template inkl. draft/
@@ -13,14 +14,15 @@ export const findByIdQuery = defineQueryHandler({
     name: "find-by-id",
     schema: z.object({ id: z.string().min(1) }),
     access: { roles: ["TenantAdmin", "SystemAdmin", "User"] },
-    description: "Reads the version of one template resource an editor works on, by row id: the open draft if there is one (status draft), else the stored version, with content, variable schema and scope, but only when it belongs to the caller's tenant or is a served system default (a never-served system draft is visible to a SystemAdmin only); `active` is the version number and since-time the resolver serves, null when none is served. Use it to load a template into the admin editor.",
+    description: "Reads the version of one template resource an editor works on, by row id: the open draft if there is one (status draft), else the stored version, with content, variable schema and scope, but only when it belongs to the caller's tenant or is a served system default (an override of a template that is not tenantEditable is not delivered and is visible to a SystemAdmin only) (a never-served system draft is visible to a SystemAdmin only); `active` is the version number and since-time the resolver serves, null when none is served. Use it to load a template into the admin editor.",
     handler: async (query, ctx) => {
         const stored = await fetchOne(ctx.db, templateResourcesTable, {
             id: query.payload.id,
         });
         if (!stored ||
             isHiddenSystemDraft(query.user, stored) ||
-            isSystemOnlyTemplateHiddenFrom(query.user, ctx.registry, stored)) {
+            isSystemOnlyTemplateHiddenFrom(query.user, ctx.registry, stored) ||
+            !isRowServedTo(deliveryPolicyOf(ctx.registry), query.user, stored)) {
             return null;
         }
         const row = toWorkingRow(stored, draftViewerTenantId(query.user, stored));

package/dist/template-resolver/handlers/layout-source.query.js

@@ -1,11 +1,13 @@
 import { selectMany } from "@cosmicdrift/kumiko-framework/db";
 import { defineQueryHandler } from "@cosmicdrift/kumiko-framework/engine";
 import * as z from "zod";
-import { FALLBACK_LOCALE } from "../constants.js";
+import { filterDeliveredTo } from "../api.js";
 import { readLayoutRegions } from "../layout-regions.js";
 import { templateResourcesTable } from "../table.js";
+import { deliveryPolicyOf } from "../template-delivery-policy.js";
 import { draftViewerTenantId, isHiddenSystemDraft, toWorkingRow, } from "../template-draft.js";
 import { readMailLayoutMeta } from "../template-meta.js";
+import { FALLBACK_LOCALE } from "../web/constants.js";
 import { localeSchema, templateSlugSchema } from "./shared.js";
 import { parseStoredJson } from "./template-gates.js";
 const EMPTY_REGIONS = { header: "", signature: "", footer: "" };
@@ -77,10 +79,8 @@ export const layoutSourceQuery = defineQueryHandler({
     handler: async (query, ctx) => {
         const { kind, slug, locale } = query.payload;
         const isSystemAdmin = query.user.roles.includes("SystemAdmin");
-        const rows = await selectMany(ctx.db, templateResourcesTable, {
-            kind,
-            slug,
-        });
+        const policy = deliveryPolicyOf(ctx.registry);
+        const rows = await filterDeliveredTo(ctx.db, policy, query.user, await selectMany(ctx.db, templateResourcesTable, { kind, slug }));
         const { tenantRow, systemRow } = pickEditedRows(rows, query.user, locale);
         return buildLayoutSource({ kind, locale, isSystemAdmin, tenantRow, systemRow });
     },

package/dist/template-resolver/handlers/list.query.js

@@ -1,10 +1,11 @@
 import { selectMany } from "@cosmicdrift/kumiko-framework/db";
 import { defineQueryHandler } from "@cosmicdrift/kumiko-framework/engine";
 import * as z from "zod";
-import { TEMPLATE_KINDS, TEMPLATE_STATUSES } from "../constants.js";
 import { templateResourcesTable } from "../table.js";
+import { deliveryPolicyOf, isRowServedTo } from "../template-delivery-policy.js";
 import { isHiddenSystemDraft } from "../template-draft.js";
 import { isSystemOnlyTemplateHiddenFrom } from "../template-system-only.js";
+import { TEMPLATE_KINDS, TEMPLATE_STATUSES } from "../web/constants.js";
 // ctx.db is tenant-scoped even for SystemAdmin: every caller sees its own
 // tenant's rows plus the system defaults, never another tenant's rows.
 export const listQuery = defineQueryHandler({
@@ -39,9 +40,11 @@ export const listQuery = defineQueryHandler({
         const rows = (await selectMany(ctx.db, templateResourcesTable, where, {
             limit: 500,
         }));
+        const deliveryPolicy = deliveryPolicyOf(ctx.registry);
         return rows
             .filter((row) => !isHiddenSystemDraft(query.user, row) &&
-            !isSystemOnlyTemplateHiddenFrom(query.user, ctx.registry, row))
+            !isSystemOnlyTemplateHiddenFrom(query.user, ctx.registry, row) &&
+            isRowServedTo(deliveryPolicy, query.user, row))
             .map((row) => ({
             id: String(row.id),
             tenantId: row.tenantId,

package/dist/template-resolver/handlers/overview.query.d.ts

@@ -1,8 +1,9 @@
 import * as z from "zod";
-import { type TemplateStatus } from "../constants.ts";
 import { type TemplateResourceRow } from "../table.ts";
+import { type TemplateDeliveryPolicy } from "../template-delivery-policy.ts";
 import { type TemplateEditPolicy } from "../template-edit-policy.ts";
 import { type EffectiveMailLayoutSlugs } from "../template-usage.ts";
+import { type TemplateStatus } from "../web/constants.ts";
 declare const OVERVIEW_KINDS: readonly ["mail", "document-pdf", "mail-layout", "pdf-layout"];
 type OverviewKind = (typeof OVERVIEW_KINDS)[number];
 export type OverviewOrigin = "tenant" | "system";
@@ -27,6 +28,13 @@ export type OverviewRow = {
     readonly activeSince: string | null;
     readonly systemVersion: number | null;
     readonly layoutSlug: string | null;
+    /** SystemAdmin only: a tenant override is stored but not delivered because the template is not unlocked for tenants. */
+    readonly lockedOverride: boolean;
+    readonly lockedOverrideI18nKey: string | null;
+    /** Tenant row a reset acts on (resetToSystem takes a row id, the overview row is a slug group); set only while a system version exists to fall back to. */
+    readonly lockedOverrideId: string | null;
+    /** False when a locked override has no system version to fall back to, so a reset would be refused. */
+    readonly canResetLockedOverride: boolean;
     readonly modifiedAt: string;
     readonly usedBy: readonly OverviewUsage[];
     readonly usedByCount: number;
@@ -38,7 +46,7 @@ export type OverviewResponse = {
     /** True when the tenant has more template rows than the overview reads; rows and total are then incomplete. */
     readonly truncated: boolean;
 };
-export declare function effectiveMailLayoutSlugs(rows: readonly TemplateResourceRow[]): EffectiveMailLayoutSlugs;
+export declare function effectiveMailLayoutSlugs(rows: readonly TemplateResourceRow[], policy: TemplateDeliveryPolicy): EffectiveMailLayoutSlugs;
 export declare function makeOverviewQuery(policy: TemplateEditPolicy): import("@cosmicdrift/kumiko-types/define-handler").QueryHandlerDefinition<"overview", z.ZodObject<{
     search: z.ZodOptional<z.ZodString>;
     filters: z.ZodOptional<z.ZodArray<z.ZodObject<{

package/dist/template-resolver/handlers/overview.query.js

@@ -1,15 +1,17 @@
 import { selectMany } from "@cosmicdrift/kumiko-framework/db";
 import { defineQueryHandler } from "@cosmicdrift/kumiko-framework/engine";
 import * as z from "zod";
-import { DEFAULT_MAIL_LAYOUT_SLUG, FALLBACK_LOCALE } from "../constants.js";
 import { templateResourcesTable } from "../table.js";
+import { deliveryPolicyOf, isTenantOverrideServed, } from "../template-delivery-policy.js";
 import { activeSinceOf, activeVersionOf, draftViewerTenantId, isHiddenSystemDraft, parseTemplateDraft, servedVersionOf, } from "../template-draft.js";
 import { mayEditTemplate } from "../template-edit-policy.js";
 import { isSystemOnlyTemplateHiddenFrom } from "../template-system-only.js";
 import { collectTemplateUsage } from "../template-usage.js";
+import { DEFAULT_MAIL_LAYOUT_SLUG, FALLBACK_LOCALE, } from "../web/constants.js";
 import { storedRecord } from "./template-gates.js";
 const OVERVIEW_KINDS = ["mail", "document-pdf", "mail-layout", "pdf-layout"];
 const OVERVIEW_ROW_LIMIT = 5000;
+const LOCKED_OVERRIDE_I18N_KEY = "templateResolver.overview.lockedOverride";
 const SORT_FIELDS = ["title", "slug", "kind", "origin", "status", "modifiedAt"];
 const KIND_GROUP = {
     mail: "mail",
@@ -31,20 +33,41 @@ function preferredRow(rows) {
     return (rows.find((row) => row.locale === FALLBACK_LOCALE) ??
         [...rows].sort((a, b) => a.locale.localeCompare(b.locale))[0]);
 }
-function effectiveRowsOf(rows) {
+// A tenant row of a template that is not unlocked is not delivered, so the system version is the effective one.
+function effectiveRowsOf(rows, policy) {
     const tenantRows = rows.filter((row) => row.scope === "tenant");
     const systemRows = rows.filter((row) => row.scope === "system");
     const live = (list) => list.filter((row) => row.status !== "archived");
     const liveTenant = live(tenantRows);
+    const tenantServed = tenantRows.every((row) => isTenantOverrideServed(policy, row));
+    if (!tenantServed && liveTenant.length > 0) {
+        const liveSystem = live(systemRows);
+        if (systemRows.length === 0)
+            return { origin: "tenant", rows: liveTenant, lockedOverride: true, lockedOverrideId: null };
+        const lockedRow = preferredRow(liveTenant);
+        return {
+            origin: "system",
+            rows: liveSystem.length > 0 ? liveSystem : systemRows,
+            lockedOverride: true,
+            lockedOverrideId: lockedRow === undefined ? null : String(lockedRow.id),
+        };
+    }
     if (liveTenant.length > 0)
-        return { origin: "tenant", rows: liveTenant };
+        return { origin: "tenant", rows: liveTenant, lockedOverride: false, lockedOverrideId: null };
     if (systemRows.length > 0) {
         const liveSystem = live(systemRows);
-        return { origin: "system", rows: liveSystem.length > 0 ? liveSystem : systemRows };
+        return {
+            origin: "system",
+            rows: liveSystem.length > 0 ? liveSystem : systemRows,
+            lockedOverride: false,
+            lockedOverrideId: null,
+        };
     }
-    return tenantRows.length > 0 ? { origin: "tenant", rows: tenantRows } : null;
+    return tenantRows.length > 0
+        ? { origin: "tenant", rows: tenantRows, lockedOverride: false, lockedOverrideId: null }
+        : null;
 }
-export function effectiveMailLayoutSlugs(rows) {
+export function effectiveMailLayoutSlugs(rows, policy) {
     const byLocale = new Map();
     for (const row of rows) {
         if (row.kind !== "mail")
@@ -54,7 +77,11 @@ export function effectiveMailLayoutSlugs(rows) {
     }
     const bySlug = new Map();
     for (const group of byLocale.values()) {
-        const effective = effectiveRowsOf(group)?.rows[0];
+        const effectiveRows = effectiveRowsOf(group, policy);
+        // A locked tenant row without a system row is not delivered, so it names no layout.
+        if (effectiveRows?.lockedOverride && effectiveRows.origin === "tenant")
+            continue;
+        const effective = effectiveRows?.rows[0];
         // All-archived: the renderer falls back to the code-registered template.
         if (effective === undefined || effective.status === "archived")
             continue;
@@ -105,11 +132,11 @@ function versionFieldsOf(user, preferred, groupRows) {
         systemVersion: systemSameLocale === undefined ? null : activeVersionOf(systemSameLocale),
     };
 }
-function buildDrafts(groups, user) {
+function buildDrafts(groups, user, policy) {
     const layoutSlugByDocument = new Map();
     const drafts = [];
     for (const [id, groupRows] of groups) {
-        const effective = effectiveRowsOf(groupRows);
+        const effective = effectiveRowsOf(groupRows, policy);
         const preferred = effective === null ? undefined : preferredRow(effective.rows);
         if (effective === null || preferred === undefined)
             continue;
@@ -131,6 +158,10 @@ function buildDrafts(groups, user) {
             status: preferred.status,
             ...versionFieldsOf(user, preferred, groupRows),
             layoutSlug,
+            lockedOverride: effective.lockedOverride,
+            lockedOverrideI18nKey: effective.lockedOverride ? LOCKED_OVERRIDE_I18N_KEY : null,
+            lockedOverrideId: effective.lockedOverrideId,
+            canResetLockedOverride: effective.lockedOverrideId !== null,
             modifiedAt: modifiedAtOf(preferred),
         });
     }
@@ -186,7 +217,7 @@ export function makeOverviewQuery(policy) {
             totalCount: z.boolean().optional(),
         }),
         access: { roles: ["TenantAdmin", "SystemAdmin"] },
-        description: "Lists mail, PDF and layout templates as one row per slug and kind for the caller's tenant (optionally only the mails and PDFs using one layout slug): where the effective version comes from (own override or system), its locales, status and version (the served one; `draftVersion` is set when an unpublished draft waits beside it, `activeSince` says since when the served version applies), the system version it overrides, the layout it uses and which notifications or templates use it; templates of notifications registered with `systemOnly` are listed for SystemAdmins only, and a TenantAdmin sees only the templates the app lists in tenantEditable; use it to browse and filter all templates at a glance.",
+        description: "Lists mail, PDF and layout templates as one row per slug and kind for the caller's tenant (optionally only the mails and PDFs using one layout slug): where the effective version comes from (own override or system), its locales, status and version (the served one; `draftVersion` is set when an unpublished draft waits beside it, `activeSince` says since when the served version applies), the system version it overrides, the layout it uses and which notifications or templates use it; templates of notifications registered with `systemOnly` are listed for SystemAdmins only, and a TenantAdmin sees only the templates the app lists in tenantEditable; a tenant override of a template that is not listed is not delivered, so the row shows the system version with `lockedOverride` true (SystemAdmin only); use it to browse and filter all templates at a glance.",
         handler: async (query, ctx) => {
             const payload = query.payload;
             const fetchedRows = await selectMany(ctx.db, templateResourcesTable, { kind: { in: [...OVERVIEW_KINDS] } }, { orderBy: { col: "id", direction: "asc" }, limit: OVERVIEW_ROW_LIMIT + 1 });
@@ -200,8 +231,9 @@ export function makeOverviewQuery(policy) {
             const visibleRows = rows.filter((row) => !isHiddenSystemDraft(query.user, row) &&
                 !isSystemOnlyTemplateHiddenFrom(query.user, ctx.registry, row) &&
                 mayEditTemplate(policy, query.user, row));
-            const { drafts, layoutSlugByDocument } = buildDrafts(groupBySlugAndKind(visibleRows), query.user);
-            const effectiveLayouts = effectiveMailLayoutSlugs(visibleRows);
+            const deliveryPolicy = deliveryPolicyOf(ctx.registry);
+            const { drafts, layoutSlugByDocument } = buildDrafts(groupBySlugAndKind(visibleRows), query.user, deliveryPolicy);
+            const effectiveLayouts = effectiveMailLayoutSlugs(visibleRows, deliveryPolicy);
             const overviewRows = drafts.map((draft) => withUsage(draft, layoutSlugByDocument, ctx.registry, effectiveLayouts));
             const filtered = filterRows(overviewRows, payload.search, payload.filters ?? [], payload.layoutSlug);
             const sortField = payload.sort !== undefined && isSortField(payload.sort) ? payload.sort : "modifiedAt";

package/dist/template-resolver/handlers/patch-draft.write.js

@@ -1,11 +1,11 @@
 import { defineWriteHandler } from "@cosmicdrift/kumiko-framework/engine";
 import { NotFoundError, ValidationError, VersionConflictError, writeFailure, } from "@cosmicdrift/kumiko-framework/errors";
 import * as z from "zod";
-import { DOCUMENT_HTML_KINDS } from "../constants.js";
 import { applyDocumentOps, documentOpsSchema } from "../document-ops.js";
 import { parseDocumentJson, serializeDocumentJson } from "../document-sanitizer.js";
 import { refuseTemplateEdit, templateEditAccess, } from "../template-edit-policy.js";
 import { resolveTemplateVariables } from "../template-validation.js";
+import { DOCUMENT_HTML_KINDS } from "../web/constants.js";
 import { loadDocumentBase } from "./document-base.js";
 import { localeSchema, templateSlugSchema } from "./shared.js";
 import { writeTemplateRow } from "./template-write.js";

package/dist/template-resolver/handlers/resource-shared.js

@@ -1,5 +1,5 @@
 import * as z from "zod";
-import { isDocumentResourceKey } from "../document-schema.js";
+import { isDocumentResourceKey } from "../web/document-schema.js";
 export const RESOURCE_MAX_BYTES_CONFIG_KEY = "template-resolver:config:resource-max-bytes";
 export const DEFAULT_RESOURCE_MAX_BYTES = 2 * 1024 * 1024;
 export const resourceKeySchema = z.string().min(1).max(64).refine(isDocumentResourceKey, {

package/dist/template-resolver/handlers/resource-upload.write.js

@@ -3,9 +3,9 @@ import { NotFoundError, UnprocessableError, writeFailure, } from "@cosmicdrift/k
 import * as z from "zod";
 import { FileRefTooLargeError, fileContextForTenant, readFileRefContent, } from "../../file-foundation/index.js";
 import { attachmentFileNameSchema } from "../../shared/index.js";
-import { TemplateResolverErrors } from "../qualified-names.js";
 import { prepareTemplateAttachmentBeforeTransaction, prepareTemplateResourceBeforeTransaction, readTemplateResourceMaxBytes, storePreparedTemplateAttachment, storePreparedTemplateResource, } from "../store-template-resource.js";
 import { refuseTemplateEditById, templateEditAccess, } from "../template-edit-policy.js";
+import { TemplateResolverErrors } from "../web/qualified-names.js";
 import { RESOURCE_PURPOSES, resourceKeySchema, resourceTargetTenantId } from "./resource-shared.js";
 function attachmentTargetOf(input) {
     const { templateId, key, fileName } = input;

package/dist/template-resolver/handlers/send-test.write.js

@@ -1,10 +1,10 @@
 import { defineWriteHandler } from "@cosmicdrift/kumiko-framework/engine";
 import { UnprocessableError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
 import * as z from "zod";
-import { TEST_MAIL_SUBJECT_PREFIX } from "../constants.js";
-import { TemplateResolverErrors } from "../qualified-names.js";
 import { refuseTemplateEdit, templateEditAccess, } from "../template-edit-policy.js";
 import { renderTemplatePreview } from "../template-preview.js";
+import { TEST_MAIL_SUBJECT_PREFIX } from "../web/constants.js";
+import { TemplateResolverErrors } from "../web/qualified-names.js";
 import { emailChannelOf, resolveTestMailAddress, testMailChannelContext, } from "./send-test-shared.js";
 import { localeSchema, templateSlugSchema } from "./shared.js";
 const TEST_MAIL_RATE_LIMIT = { limit: 10, windowSeconds: 3600 };

package/dist/template-resolver/handlers/set.write.js

@@ -3,10 +3,10 @@ import { defineWriteHandler, SYSTEM_TENANT_ID, } from "@cosmicdrift/kumiko-frame
 import { isOneOf } from "@cosmicdrift/kumiko-types/type-guards";
 import * as z from "zod";
 import { requireForTenant } from "../../shared/index.js";
-import { TEMPLATE_KINDS, TEXT_BLOCK_KIND, UPSERT_KINDS } from "../constants.js";
 import { templateResourcesTable } from "../table.js";
 import { refuseTemplateEdit, templateEditAccess, } from "../template-edit-policy.js";
 import { resolveTemplateVariables } from "../template-validation.js";
+import { TEMPLATE_KINDS, TEXT_BLOCK_KIND, UPSERT_KINDS } from "../web/constants.js";
 import { contentFormatSchema, executor, folderSchema, localeSchema, slugSchema } from "./shared.js";
 import { parseStoredJson, storedRecord } from "./template-gates.js";
 import { gateTemplateWrite } from "./template-write.js";

package/dist/template-resolver/handlers/shared.js

@@ -1,8 +1,8 @@
 import { createEventStoreExecutor } from "@cosmicdrift/kumiko-framework/db";
 import * as z from "zod";
-import { CONTENT_FORMATS, TEMPLATE_STATUSES, UPSERT_KINDS } from "../constants.js";
 import { templateResourceEntity, templateResourcesTable } from "../table.js";
 import { templateSlugSchema } from "../template-meta.js";
+import { CONTENT_FORMATS, TEMPLATE_STATUSES, UPSERT_KINDS } from "../web/constants.js";
 // One executor per bundle, shared by all four handlers for create/update via
 // event store + optimistic lock.
 export const executor = createEventStoreExecutor(templateResourcesTable, templateResourceEntity, {

package/dist/template-resolver/handlers/template-gates.d.ts

@@ -1,9 +1,9 @@
 import type { Registry, TemplateVariables } from "@cosmicdrift/kumiko-framework/engine";
 import type { FieldIssue } from "@cosmicdrift/kumiko-framework/errors";
-import { type ContentFormat, type TemplateKind } from "../constants.ts";
 import { type TemplateWriteScope } from "../layout-regions.ts";
 import type { TemplateResourceRow } from "../table.ts";
 import { type TemplateValidation } from "../template-validation.ts";
+import { type ContentFormat, type TemplateKind } from "../web/constants.ts";
 export declare function placeholderIssues(validation: TemplateValidation, opts: {
     readonly requireAllRequired: boolean;
 }): FieldIssue[];

package/dist/template-resolver/handlers/template-gates.js

@@ -1,10 +1,10 @@
 import { isOneOf } from "@cosmicdrift/kumiko-types/type-guards";
-import { CONTENT_FORMATS, TEMPLATE_KINDS, } from "../constants.js";
 import { documentViolationsToFieldIssues } from "../document-sanitizer.js";
 import { sanitizeTemplateWriteBody } from "../layout-regions.js";
 import { imageResourceKeysOf } from "../linked-resources.js";
 import { parseTemplateMeta } from "../template-meta.js";
 import { resolveTemplateVariables, validateTemplatePlaceholders, } from "../template-validation.js";
+import { CONTENT_FORMATS, TEMPLATE_KINDS, } from "../web/constants.js";
 const PLACEHOLDER_VALIDATED_KINDS = new Set([
     "mail",
     "document-pdf",

package/dist/template-resolver/handlers/template-write.d.ts

@@ -1,8 +1,8 @@
 import { type HandlerContext, type Registry, type SessionUser, type TemplateVariables, type TenantId, type WriteResult } from "@cosmicdrift/kumiko-framework/engine";
 import { type WriteFailure } from "@cosmicdrift/kumiko-framework/errors";
-import type { ContentFormat, TemplateKind } from "../constants.ts";
 import type { TemplateWriteScope } from "../layout-regions.ts";
 import type { TemplateValidation } from "../template-validation.ts";
+import type { ContentFormat, TemplateKind } from "../web/constants.ts";
 import { type TemplateWriteInput, type TemplateWriteResult } from "./template-gates.ts";
 export type TemplateRowPayload = {
     readonly slug: string;

package/dist/template-resolver/handlers/template-write.js

@@ -2,10 +2,10 @@ import { fetchOne } from "@cosmicdrift/kumiko-framework/db";
 import { SYSTEM_TENANT_ID, } from "@cosmicdrift/kumiko-framework/engine";
 import { AccessDeniedError, ValidationError, VersionConflictError, writeFailure, } from "@cosmicdrift/kumiko-framework/errors";
 import { requireForTenant } from "../../shared/index.js";
-import { TemplateResolverErrors } from "../qualified-names.js";
 import { templateResourcesTable } from "../table.js";
 import { activationChanges, serializeTemplateDraft } from "../template-draft.js";
 import { isSystemOnlyTemplate } from "../template-system-only.js";
+import { TemplateResolverErrors } from "../web/qualified-names.js";
 import { executor } from "./shared.js";
 import { evaluateTemplateWrite, } from "./template-gates.js";
 // The tenant-scope-under-system-tenant ban lives here so no write path can

package/dist/template-resolver/handlers/usage.query.js

@@ -1,10 +1,11 @@
 import { selectMany } from "@cosmicdrift/kumiko-framework/db";
 import { defineQueryHandler } from "@cosmicdrift/kumiko-framework/engine";
 import * as z from "zod";
-import { TEMPLATE_KINDS } from "../constants.js";
 import { templateResourcesTable } from "../table.js";
+import { deliveryPolicyOf } from "../template-delivery-policy.js";
 import { templateSlugSchema } from "../template-meta.js";
 import { collectTemplateUsage } from "../template-usage.js";
+import { TEMPLATE_KINDS } from "../web/constants.js";
 import { effectiveMailLayoutSlugs } from "./overview.query.js";
 const MAIL_ROW_LIMIT = 5000;
 export const usageQuery = defineQueryHandler({
@@ -18,7 +19,7 @@ export const usageQuery = defineQueryHandler({
             return { usedBy: collectTemplateUsage(ctx.registry, slug, kind) };
         const mailRows = await selectMany(ctx.db, templateResourcesTable, { kind: "mail" }, { limit: MAIL_ROW_LIMIT });
         return {
-            usedBy: collectTemplateUsage(ctx.registry, slug, kind, effectiveMailLayoutSlugs(mailRows)),
+            usedBy: collectTemplateUsage(ctx.registry, slug, kind, effectiveMailLayoutSlugs(mailRows, deliveryPolicyOf(ctx.registry))),
         };
     },
 });

package/dist/template-resolver/handlers/validate.query.d.ts

@@ -1,7 +1,7 @@
 import { type HandlerContext, type SessionUser } from "@cosmicdrift/kumiko-framework/engine";
 import * as z from "zod";
-import type { ContentFormat, UpsertKind } from "../constants.ts";
 import type { TemplateWriteScope } from "../layout-regions.ts";
+import type { ContentFormat, UpsertKind } from "../web/constants.ts";
 type TemplateDraftInput = {
     readonly slug: string;
     readonly kind: UpsertKind;

package/dist/template-resolver/handlers/validate.query.js

@@ -3,6 +3,7 @@ import { defineQueryHandler, SYSTEM_TENANT_ID, } from "@cosmicdrift/kumiko-frame
 import * as z from "zod";
 import { imageResourceKeysOf } from "../linked-resources.js";
 import { templateResourcesTable } from "../table.js";
+import { deliveryPolicyOf, isRowServedTo } from "../template-delivery-policy.js";
 import { isSystemAdmin } from "../template-draft.js";
 import { resolveTemplateVariables, systemPlaceholdersFor } from "../template-validation.js";
 import { contentFormatSchema, kindSchema, localeSchema, templateSlugSchema } from "./shared.js";
@@ -29,7 +30,8 @@ export async function knownResourceKeysFor(ctx, user, where) {
             scope: "system",
             locale,
         })),
-        ...(scope === "tenant"
+        ...(scope === "tenant" &&
+            isRowServedTo(deliveryPolicyOf(ctx.registry), user, { tenantId: user.tenantId, kind, slug })
             ? await knownResourceKeys(ctx.db, { tenantId: user.tenantId, slug, kind, scope, locale })
             : []),
     ];

package/dist/template-resolver/i18n.d.ts

@@ -0,0 +1,3 @@
+export declare const TEMPLATE_RESOLVER_I18N: Readonly<Record<string, {
+    readonly en: string;
+}>>;

package/dist/template-resolver/i18n.js

@@ -0,0 +1,24 @@
+import { handlerTitleKey } from "@cosmicdrift/kumiko-framework/engine";
+import { TemplateResolverHandlers as H } from "./web/qualified-names.js";
+// The AI assistant and its approval prompts name a handler by its title key; without
+// one the user reads the raw handler name. de/es/fr/it live in the locale packages.
+export const TEMPLATE_RESOLVER_I18N = {
+    [handlerTitleKey(H.upsertSystem)]: { en: "Save system template" },
+    [handlerTitleKey(H.upsertTenant)]: { en: "Save template" },
+    [handlerTitleKey(H.publish)]: { en: "Publish template" },
+    [handlerTitleKey(H.archive)]: { en: "Archive template" },
+    [handlerTitleKey(H.publishSystem)]: { en: "Publish system template" },
+    [handlerTitleKey(H.archiveSystem)]: { en: "Archive system template" },
+    [handlerTitleKey(H.discardDraft)]: { en: "Discard draft" },
+    [handlerTitleKey(H.discardDraftSystem)]: { en: "Discard system template draft" },
+    [handlerTitleKey(H.resetToSystem)]: { en: "Reset to system template" },
+    [handlerTitleKey(H.set)]: { en: "Save text" },
+    [handlerTitleKey(H.importBundle)]: { en: "Import template" },
+    [handlerTitleKey(H.importBundleSystem)]: { en: "Import system template" },
+    [handlerTitleKey(H.copyLocale)]: { en: "Copy template to another language" },
+    [handlerTitleKey(H.resourceUpload)]: { en: "Upload image or attachment" },
+    [handlerTitleKey(H.resourceRemove)]: { en: "Remove image or attachment" },
+    [handlerTitleKey(H.resourceLinkPdf)]: { en: "Attach PDF template" },
+    [handlerTitleKey(H.sendTest)]: { en: "Send test mail" },
+    [handlerTitleKey(H.patchDraft)]: { en: "Edit template draft" },
+};

package/dist/template-resolver/index.d.ts

@@ -1,9 +1,7 @@
 export { isResourceImageContentType } from "../shared/index.ts";
 export { createTemplateResolverApi, type ResolveRequest, requireTemplateResolver, TemplateNotFoundError, type TemplateResolverApi, type TemplateResource, } from "./api.ts";
 export { type CompileDocumentBodyOptions, collectDocumentImageVariables, collectDocumentResourceKeys, compileDocumentBodyToHandlebars, toResourceDataUri, } from "./compile-document-body.ts";
-export { CONTENT_FORMATS, type ContentFormat, DEFAULT_MAIL_LAYOUT_SLUG, DEFAULT_PDF_LAYOUT_SLUG, DOCUMENT_HTML_KINDS, type DocumentHtmlKind, FALLBACK_LOCALE, NON_RENDER_KINDS, type NonRenderKind, PDF_DEFAULT_MARGIN_MM, PDF_FOOTER_MARGIN_MM, PDF_HEADER_MARGIN_MM, PDF_ORIENTATIONS, PDF_PAGE_FORMATS, type PdfOrientation, type PdfPageFormat, RENDER_KINDS, type RenderKind, SYSTEM_TENANT_ID, TEMPLATE_KINDS, TEMPLATE_SCOPES, TEMPLATE_STATUSES, TEXT_BLOCK_KIND, type TemplateKind, type TemplateScope, type TemplateStatus, UPSERT_KINDS, type UpsertKind, } from "./constants.ts";
 export { type DocumentViolation, type DocumentViolationCode, documentViolationsToFieldIssues, flattenParagraphsToLineBreaks, type SanitizeBodyResult, type SanitizeHtmlResult, sanitizeDocumentHtml, sanitizeTemplateBody, } from "./document-sanitizer.ts";
-export { DOCUMENT_CONDITION_ATTRIBUTE, DOCUMENT_NODE_NAMES, DOCUMENT_TEXT_ALIGNMENTS, DocumentButton, DocumentCondition, DocumentDivider, DocumentLink, DocumentPageBreak, DocumentResource, DocumentTable, DocumentTableCell, DocumentTableHeader, DocumentTableRow, DocumentTextAlign, type DocumentTextAlignment, DocumentVariable, documentExtensions, isAllowedDocumentLinkHref, isDocumentPlaceholderHref, isDocumentReferenceName, isDocumentResourceKey, } from "./document-schema.ts";
 export { createTemplateResolverFeature, type TemplateResolverOptions } from "./feature.ts";
 export type { LayoutSourceResponse, LayoutSourceRow } from "./handlers/layout-source.query.ts";
 export type { OverviewKindGroup, OverviewOrigin, OverviewResponse, OverviewRow, OverviewUsage, } from "./handlers/overview.query.ts";
@@ -12,11 +10,11 @@ export { isHexColor, type MailLayoutAppearance, mailLayoutAppearance, } from "./
 export { type LayoutRegions, readLayoutRegions, type SanitizeLayoutResult, sanitizeLayoutHtml, } from "./layout-regions.ts";
 export { fileAttachmentsOf, imageLinksOf, type LinkedResourceEntry, parseLinkedResourceEntries, pdfAttachmentLinksOf, type TemplatePdfAttachmentLink, templatePdfAttachmentLinkSchema, } from "./linked-resources.ts";
 export { prepareDocumentForPrint } from "./print-document.ts";
-export { TEMPLATE_RESOLVER_FEATURE, TemplateResolverErrors, TemplateResolverHandlers, TemplateResolverQueries, } from "./qualified-names.ts";
 export { mapRecordToVariables } from "./record-mapping.ts";
 export { type PreparedTemplateImage, prepareTemplateResourceBeforeTransaction, readTemplateResourceMaxBytes, type StoredTemplateResource, storePreparedTemplateResource, } from "./store-template-resource.ts";
 export { type TemplateResourceRow, templateResourceEntity, templateResourcesTable, } from "./table.ts";
 export { type TemplateBundle, templateBundleSchema } from "./template-bundle.ts";
+export type { TemplateDeliveryPolicy } from "./template-delivery-policy.ts";
 export { type TemplateEditPolicy, type TenantEditableTemplate, templateEditAccess, } from "./template-edit-policy.ts";
 export { isMailTemplateMeta, type LayoutTemplateMeta, MAIL_CATEGORIES, MAIL_TONES, type MailCategory, type MailLayoutMeta, type MailTemplateMeta, type MailTone, type PdfTemplateMeta, parseTemplateMeta, pdfAttachmentFileNamePatternSchema, readMailLayoutMeta, readPdfTemplateMeta, type TemplateMeta, type TemplateMetaIssue, type TemplateMetaResult, templateSlugSchema, } from "./template-meta.ts";
 export { type DocumentDraftOutcome, evaluateDocumentDraft } from "./template-preview.ts";
@@ -25,3 +23,6 @@ export { isSystemOnlyTemplate } from "./template-system-only.ts";
 export { collectTemplateUsage, type TemplateUsageEntry } from "./template-usage.ts";
 export { hasPlaceholderProblems, resolveTemplateVariables, SYSTEM_PLACEHOLDERS, systemPlaceholdersFor, type TemplateValidation, validateTemplatePlaceholders, } from "./template-validation.ts";
 export { type UserContentEntryRow, userContentEntriesTable, userContentEntryEntity, } from "./user-content-table.ts";
+export { CONTENT_FORMATS, type ContentFormat, DEFAULT_MAIL_LAYOUT_SLUG, DEFAULT_PDF_LAYOUT_SLUG, DOCUMENT_HTML_KINDS, type DocumentHtmlKind, FALLBACK_LOCALE, NON_RENDER_KINDS, type NonRenderKind, PDF_DEFAULT_MARGIN_MM, PDF_FOOTER_MARGIN_MM, PDF_HEADER_MARGIN_MM, PDF_ORIENTATIONS, PDF_PAGE_FORMATS, type PdfOrientation, type PdfPageFormat, RENDER_KINDS, type RenderKind, SYSTEM_TENANT_ID, TEMPLATE_KINDS, TEMPLATE_SCOPES, TEMPLATE_STATUSES, TEXT_BLOCK_KIND, type TemplateKind, type TemplateScope, type TemplateStatus, UPSERT_KINDS, type UpsertKind, } from "./web/constants.ts";
+export { DOCUMENT_CONDITION_ATTRIBUTE, DOCUMENT_NODE_NAMES, DOCUMENT_TEXT_ALIGNMENTS, DocumentButton, DocumentCondition, DocumentDivider, DocumentLink, DocumentPageBreak, DocumentResource, DocumentTable, DocumentTableCell, DocumentTableHeader, DocumentTableRow, DocumentTextAlign, type DocumentTextAlignment, DocumentVariable, documentExtensions, isAllowedDocumentLinkHref, isDocumentPlaceholderHref, isDocumentReferenceName, isDocumentResourceKey, } from "./web/document-schema.ts";
+export { TEMPLATE_RESOLVER_FEATURE, TemplateResolverErrors, TemplateResolverHandlers, TemplateResolverQueries, } from "./web/qualified-names.ts";

package/dist/template-resolver/index.js

@@ -1,16 +1,13 @@
 export { isResourceImageContentType } from "../shared/index.js";
 export { createTemplateResolverApi, requireTemplateResolver, TemplateNotFoundError, } from "./api.js";
 export { collectDocumentImageVariables, collectDocumentResourceKeys, compileDocumentBodyToHandlebars, toResourceDataUri, } from "./compile-document-body.js";
-export { CONTENT_FORMATS, DEFAULT_MAIL_LAYOUT_SLUG, DEFAULT_PDF_LAYOUT_SLUG, DOCUMENT_HTML_KINDS, FALLBACK_LOCALE, NON_RENDER_KINDS, PDF_DEFAULT_MARGIN_MM, PDF_FOOTER_MARGIN_MM, PDF_HEADER_MARGIN_MM, PDF_ORIENTATIONS, PDF_PAGE_FORMATS, RENDER_KINDS, SYSTEM_TENANT_ID, TEMPLATE_KINDS, TEMPLATE_SCOPES, TEMPLATE_STATUSES, TEXT_BLOCK_KIND, UPSERT_KINDS, } from "./constants.js";
 export { documentViolationsToFieldIssues, flattenParagraphsToLineBreaks, sanitizeDocumentHtml, sanitizeTemplateBody, } from "./document-sanitizer.js";
-export { DOCUMENT_CONDITION_ATTRIBUTE, DOCUMENT_NODE_NAMES, DOCUMENT_TEXT_ALIGNMENTS, DocumentButton, DocumentCondition, DocumentDivider, DocumentLink, DocumentPageBreak, DocumentResource, DocumentTable, DocumentTableCell, DocumentTableHeader, DocumentTableRow, DocumentTextAlign, DocumentVariable, documentExtensions, isAllowedDocumentLinkHref, isDocumentPlaceholderHref, isDocumentReferenceName, isDocumentResourceKey, } from "./document-schema.js";
 export { createTemplateResolverFeature } from "./feature.js";
 export { localeSchema } from "./handlers/shared.js";
 export { isHexColor, mailLayoutAppearance, } from "./layout-appearance.js";
 export { readLayoutRegions, sanitizeLayoutHtml, } from "./layout-regions.js";
 export { fileAttachmentsOf, imageLinksOf, parseLinkedResourceEntries, pdfAttachmentLinksOf, templatePdfAttachmentLinkSchema, } from "./linked-resources.js";
 export { prepareDocumentForPrint } from "./print-document.js";
-export { TEMPLATE_RESOLVER_FEATURE, TemplateResolverErrors, TemplateResolverHandlers, TemplateResolverQueries, } from "./qualified-names.js";
 export { mapRecordToVariables } from "./record-mapping.js";
 export { prepareTemplateResourceBeforeTransaction, readTemplateResourceMaxBytes, storePreparedTemplateResource, } from "./store-template-resource.js";
 export { templateResourceEntity, templateResourcesTable, } from "./table.js";
@@ -23,3 +20,6 @@ export { isSystemOnlyTemplate } from "./template-system-only.js";
 export { collectTemplateUsage } from "./template-usage.js";
 export { hasPlaceholderProblems, resolveTemplateVariables, SYSTEM_PLACEHOLDERS, systemPlaceholdersFor, validateTemplatePlaceholders, } from "./template-validation.js";
 export { userContentEntriesTable, userContentEntryEntity, } from "./user-content-table.js";
+export { CONTENT_FORMATS, DEFAULT_MAIL_LAYOUT_SLUG, DEFAULT_PDF_LAYOUT_SLUG, DOCUMENT_HTML_KINDS, FALLBACK_LOCALE, NON_RENDER_KINDS, PDF_DEFAULT_MARGIN_MM, PDF_FOOTER_MARGIN_MM, PDF_HEADER_MARGIN_MM, PDF_ORIENTATIONS, PDF_PAGE_FORMATS, RENDER_KINDS, SYSTEM_TENANT_ID, TEMPLATE_KINDS, TEMPLATE_SCOPES, TEMPLATE_STATUSES, TEXT_BLOCK_KIND, UPSERT_KINDS, } from "./web/constants.js";
+export { DOCUMENT_CONDITION_ATTRIBUTE, DOCUMENT_NODE_NAMES, DOCUMENT_TEXT_ALIGNMENTS, DocumentButton, DocumentCondition, DocumentDivider, DocumentLink, DocumentPageBreak, DocumentResource, DocumentTable, DocumentTableCell, DocumentTableHeader, DocumentTableRow, DocumentTextAlign, DocumentVariable, documentExtensions, isAllowedDocumentLinkHref, isDocumentPlaceholderHref, isDocumentReferenceName, isDocumentResourceKey, } from "./web/document-schema.js";
+export { TEMPLATE_RESOLVER_FEATURE, TemplateResolverErrors, TemplateResolverHandlers, TemplateResolverQueries, } from "./web/qualified-names.js";

package/dist/template-resolver/layout-appearance.js

@@ -1,5 +1,5 @@
-import { HEX_COLOR_PATTERN } from "./constants.js";
 import { readMailLayoutMeta } from "./template-meta.js";
+import { HEX_COLOR_PATTERN } from "./web/constants.js";
 const FONT_FAMILIES = {
     sans: "Arial, Helvetica, sans-serif",
     serif: "Georgia, 'Times New Roman', serif",

package/dist/template-resolver/layout-regions.d.ts

@@ -1,5 +1,5 @@
-import type { ContentFormat } from "./constants.ts";
 import { type DocumentViolation, type SanitizeBodyResult } from "./document-sanitizer.ts";
+import type { ContentFormat } from "./web/constants.ts";
 export type LayoutRegions = {
     readonly header: string;
     readonly signature: string;

package/dist/template-resolver/seeding.d.ts

@@ -2,8 +2,8 @@ import { type DbConnection } from "@cosmicdrift/kumiko-framework/db";
 import { type Registry, type SessionUser, type TenantId } from "@cosmicdrift/kumiko-framework/engine";
 import type { Dispatcher } from "@cosmicdrift/kumiko-framework/pipeline";
 import { type SeedIfExists } from "@cosmicdrift/kumiko-framework/seeding";
-import { type ContentFormat, type UpsertKind } from "./constants.ts";
 import type { TemplateBundle } from "./template-bundle.ts";
+import { type ContentFormat, type UpsertKind } from "./web/constants.ts";
 export type SeedSystemTemplateOptions = {
     readonly slug: string;
     readonly kind: UpsertKind;
@@ -16,6 +16,9 @@ export type SeedSystemTemplateOptions = {
     readonly linkedResources?: Record<string, string>;
     readonly meta?: unknown;
     readonly title?: string;
+    /** Translatable title for the overview and designer, stored in the title column; the client
+     *  shows the translation and falls back to the key. Mutually exclusive with `title`. */
+    readonly titleI18nKey?: string;
     readonly parentTemplateId?: string | null;
     readonly by?: SessionUser;
     readonly ifExists?: SeedIfExists;