@cosmicdrift/kumiko-bundled-features 0.378.0 → 0.379.0

package/dist/template-resolver/seeding.js

@@ -8,19 +8,19 @@
 //
 // Default ifExists="skip". The actor is `createSystemUser(SYSTEM_TENANT_ID)`,
 // deliberately not TestUsers (prod seeds are not test utilities).
-import { createTenantDb, deleteMany, fetchOne, } from "@cosmicdrift/kumiko-framework/db";
+import { createTenantDb, fetchOne, } from "@cosmicdrift/kumiko-framework/db";
 import { createSystemUser, SYSTEM_TENANT_ID, } from "@cosmicdrift/kumiko-framework/engine";
-import { getStreamVersion, getUnscopedStreamMaxVersionForSeed, } from "@cosmicdrift/kumiko-framework/event-store";
+import { deleteRowsWithoutReplayableStream, getStreamVersion, getUnscopedStreamMaxVersionForSeed, } from "@cosmicdrift/kumiko-framework/event-store";
 import { runEventStoreSeed } from "@cosmicdrift/kumiko-framework/seeding";
 import { isPlainObject } from "@cosmicdrift/kumiko-types/type-guards";
-import { TEXT_BLOCK_KIND } from "./constants.js";
 import { executor } from "./handlers/shared.js";
 import { evaluateTemplateWrite } from "./handlers/template-gates.js";
-import { TEMPLATE_RESOLVER_FEATURE, TemplateResolverHandlers } from "./qualified-names.js";
 import { templateResourcesTable } from "./table.js";
 import { activeStampChanges, servedStampChanges } from "./template-draft.js";
 import { templateSlugSchema } from "./template-meta.js";
 import { variablesFromSchema } from "./template-validation.js";
+import { TEXT_BLOCK_KIND } from "./web/constants.js";
+import { TEMPLATE_RESOLVER_FEATURE, TemplateResolverHandlers } from "./web/qualified-names.js";
 /** Drop projection orphans (no events anywhere) so boot seeds can recreate. */
 async function resolveExistingForEventStoreSeed(db, tdb, existingRow, tenantId) {
     if (existingRow == null)
@@ -34,12 +34,17 @@ async function resolveExistingForEventStoreSeed(db, tdb, existingRow, tenantId)
         if (unscoped !== 0) {
             throw new Error(`seed orphan check: projection ${id} has no events for tenant ${tenantId} but unscoped stream version is ${unscoped} — refusing delete/recreate to avoid wiping a live stream`);
         }
-        // The cast strips the executor-only brand that WritableTable rejects; the orphan row has no events, so no executor verb applies.
-        await deleteMany(tdb, templateResourcesTable, { id, tenantId });
+        await deleteRowsWithoutReplayableStream(tdb, { table: templateResourcesTable, ids: [id] });
         return null;
     }
     return { id, version: streamVersion };
 }
+function seedTitleColumn(opts, label) {
+    if (opts.title !== undefined && opts.titleI18nKey !== undefined) {
+        throw new Error(`${label} rejected: set either title or titleI18nKey, not both`);
+    }
+    return opts.titleI18nKey ?? opts.title ?? null;
+}
 export async function seedSystemTemplate(db, opts) {
     const tenantId = SYSTEM_TENANT_ID;
     const by = opts.by ?? createSystemUser(tenantId);
@@ -48,6 +53,7 @@ export async function seedSystemTemplate(db, opts) {
     const slug = templateSlugSchema.safeParse(opts.slug);
     if (!slug.success)
         throw new Error(`${label} rejected: ${slug.error.issues[0]?.message}`);
+    const title = seedTitleColumn(opts, label);
     const evaluated = evaluateTemplateWrite({
         kind: opts.kind,
         scope: "system",
@@ -81,7 +87,7 @@ export async function seedSystemTemplate(db, opts) {
         variableSchema,
         ...(linkedResources !== undefined && { linkedResources }),
         meta,
-        title: opts.title ?? null,
+        title,
         folder: null,
         scope: "system",
         parentTemplateId,

package/dist/template-resolver/store-template-resource.js

@@ -3,14 +3,14 @@ import { NotFoundError, UnprocessableError, writeFailure, } from "@cosmicdrift/k
 import { createFileRefFromUploadedBytes, uploadFileBytesBeforeTransaction, } from "@cosmicdrift/kumiko-framework/files";
 import { fileContextForTenant } from "../file-foundation/index.js";
 import { extensionForResourceContentType, requireForTenant } from "../shared/index.js";
-import { ACTIVE_TEMPLATE_STATUS, SYSTEM_TENANT_ID } from "./constants.js";
 import { DEFAULT_RESOURCE_MAX_BYTES, MAX_FILE_ATTACHMENTS_PER_TEMPLATE, RESOURCE_MAX_BYTES_CONFIG_KEY, } from "./handlers/resource-shared.js";
 import { executor } from "./handlers/shared.js";
 import { attachmentEntriesOf, parseLinkedResourceEntries, templatePdfAttachmentLinkSchema, } from "./linked-resources.js";
-import { TemplateResolverErrors } from "./qualified-names.js";
 import { normalizeResourceImage } from "./resource-image.js";
 import { templateResourcesTable } from "./table.js";
 import { readTemplateResource } from "./template-resources.js";
+import { ACTIVE_TEMPLATE_STATUS, SYSTEM_TENANT_ID } from "./web/constants.js";
+import { TemplateResolverErrors } from "./web/qualified-names.js";
 export async function readTemplateResourceMaxBytes(config, registry) {
     if (config === undefined || registry.getConfigKey(RESOURCE_MAX_BYTES_CONFIG_KEY) === undefined) {
         return DEFAULT_RESOURCE_MAX_BYTES;

package/dist/template-resolver/table.js

@@ -1,6 +1,6 @@
 import { buildEntityTable } from "@cosmicdrift/kumiko-framework/db";
 import { createEntity, createLongTextField, createNumberField, createSelectField, createTextField, createTimestampField, } from "@cosmicdrift/kumiko-framework/engine";
-import { CONTENT_FORMATS, TEMPLATE_KINDS, TEMPLATE_SCOPES, TEMPLATE_STATUSES, } from "./constants.js";
+import { CONTENT_FORMATS, TEMPLATE_KINDS, TEMPLATE_SCOPES, TEMPLATE_STATUSES, } from "./web/constants.js";
 // Stored v1 events name the kind "mail-html", which is now "mail".
 const renameMailHtmlKind = {
     fromVersion: 1,

package/dist/template-resolver/template-bundle.js

@@ -1,8 +1,8 @@
 import * as z from "zod";
-import { CONTENT_FORMATS, UPSERT_KINDS } from "./constants.js";
-import { isDocumentResourceKey } from "./document-schema.js";
 import { templatePdfAttachmentLinkSchema } from "./linked-resources.js";
 import { templateSlugSchema } from "./template-meta.js";
+import { CONTENT_FORMATS, UPSERT_KINDS } from "./web/constants.js";
+import { isDocumentResourceKey } from "./web/document-schema.js";
 const MAX_RESOURCES = 20;
 const MAX_LOCALES = 50;
 const MAX_RESOURCE_BYTES = 2 * 1024 * 1024;

package/dist/template-resolver/template-delivery-policy.d.ts

@@ -0,0 +1,22 @@
+import type { Registry } from "@cosmicdrift/kumiko-framework/engine";
+type DeliveryTarget = {
+    readonly kind: string;
+    readonly slug: string;
+};
+export type TemplateDeliveryPolicy = {
+    readonly tenantEditable: readonly DeliveryTarget[];
+    /** Kinds of collections mounted with an explicit `access`; their tenant rows are edited by design. */
+    readonly collectionKinds: readonly string[];
+};
+export declare function isTenantOverrideServed(policy: TemplateDeliveryPolicy, target: DeliveryTarget): boolean;
+export declare function isServedByCollectionOnly(policy: TemplateDeliveryPolicy, target: DeliveryTarget): boolean;
+export declare function isRowServed(policy: TemplateDeliveryPolicy, row: DeliveryTarget & {
+    readonly tenantId: string;
+}): boolean;
+export declare function isRowServedTo(policy: TemplateDeliveryPolicy, user: {
+    readonly roles: readonly string[];
+}, row: DeliveryTarget & {
+    readonly tenantId: string;
+}): boolean;
+export declare function deliveryPolicyOf(registry: Registry): TemplateDeliveryPolicy;
+export {};

package/dist/template-resolver/template-delivery-policy.js

@@ -0,0 +1,40 @@
+import { isPlainObject, propertyOf } from "@cosmicdrift/kumiko-types/type-guards";
+import { isSystemAdmin } from "./template-draft.js";
+import { SYSTEM_TENANT_ID } from "./web/constants.js";
+import { TEMPLATE_RESOLVER_FEATURE } from "./web/qualified-names.js";
+const NOTHING_UNLOCKED = { tenantEditable: [], collectionKinds: [] };
+export function isTenantOverrideServed(policy, target) {
+    return (policy.collectionKinds.includes(target.kind) ||
+        policy.tenantEditable.some((entry) => entry.kind === target.kind && entry.slug === target.slug));
+}
+// Served only because its kind belongs to a collection with `access`, not because the template
+// is listed in tenantEditable. For these a system row of the same slug must win.
+export function isServedByCollectionOnly(policy, target) {
+    return (policy.collectionKinds.includes(target.kind) &&
+        !policy.tenantEditable.some((entry) => entry.kind === target.kind && entry.slug === target.slug));
+}
+export function isRowServed(policy, row) {
+    return row.tenantId === SYSTEM_TENANT_ID || isTenantOverrideServed(policy, row);
+}
+// A SystemAdmin sees every stored row, so a locked override can still be reset; everyone else
+// sees only what is delivered, which keeps a locked override out of the template-resolver queries for a TenantAdmin (the audit log keeps the history).
+export function isRowServedTo(policy, user, row) {
+    return isSystemAdmin(user) || isRowServed(policy, row);
+}
+function isDeliveryTarget(value) {
+    return (typeof propertyOf(value, "kind") === "string" && typeof propertyOf(value, "slug") === "string");
+}
+function isTemplateDeliveryPolicy(value) {
+    if (!isPlainObject(value))
+        return false;
+    const { tenantEditable, collectionKinds } = value;
+    return (Array.isArray(tenantEditable) &&
+        tenantEditable.every(isDeliveryTarget) &&
+        Array.isArray(collectionKinds) &&
+        collectionKinds.every((kind) => typeof kind === "string"));
+}
+// Fail closed: without the mounted feature (or its exports) no tenant row counts as unlocked.
+export function deliveryPolicyOf(registry) {
+    const exported = propertyOf(propertyOf(registry.getFeature(TEMPLATE_RESOLVER_FEATURE), "exports"), "deliveryPolicy");
+    return isTemplateDeliveryPolicy(exported) ? exported : NOTHING_UNLOCKED;
+}

package/dist/template-resolver/template-draft.d.ts

@@ -1,6 +1,6 @@
 import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
-import { type ContentFormat } from "./constants.ts";
 import type { TemplateResourceRow } from "./table.ts";
+import { type ContentFormat } from "./web/constants.ts";
 export type TemplateDraft = {
     readonly content: string | null;
     readonly contentFormat: ContentFormat;

package/dist/template-resolver/template-draft.js

@@ -1,6 +1,6 @@
 import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import * as z from "zod";
-import { CONTENT_FORMATS } from "./constants.js";
+import { CONTENT_FORMATS } from "./web/constants.js";
 const templateDraftSchema = z.object({
     content: z.string().nullable(),
     contentFormat: z.enum(CONTENT_FORMATS),

package/dist/template-resolver/template-edit-policy.d.ts

@@ -1,6 +1,6 @@
 import { type HandlerContext, type RoleAccessRule, type SessionUser } from "@cosmicdrift/kumiko-framework/engine";
 import { type WriteFailure } from "@cosmicdrift/kumiko-framework/errors";
-import type { TemplateKind } from "./constants.ts";
+import type { TemplateKind } from "./web/constants.ts";
 export type TenantEditableTemplate = {
     readonly kind: TemplateKind;
     readonly slug: string;

package/dist/template-resolver/template-edit-policy.js

@@ -1,9 +1,9 @@
 import { fetchOne } from "@cosmicdrift/kumiko-framework/db";
 import { hasAccess, } from "@cosmicdrift/kumiko-framework/engine";
 import { AccessDeniedError, writeFailure, } from "@cosmicdrift/kumiko-framework/errors";
-import { TemplateResolverErrors } from "./qualified-names.js";
 import { templateResourcesTable } from "./table.js";
 import { isSystemAdmin } from "./template-draft.js";
+import { TemplateResolverErrors } from "./web/qualified-names.js";
 const SYSTEM_ADMIN_ROLE = "SystemAdmin";
 export function templateEditAccess(entries) {
     const roles = new Set([SYSTEM_ADMIN_ROLE]);

package/dist/template-resolver/template-meta.d.ts

@@ -1,6 +1,6 @@
 import * as z from "zod";
-import { type TemplateKind } from "./constants.ts";
-import { MAIL_TONES, type MailTone } from "./mail-constants.ts";
+import { type TemplateKind } from "./web/constants.ts";
+import { MAIL_TONES, type MailTone } from "./web/mail-constants.ts";
 export declare const templateSlugSchema: z.ZodString;
 export declare const MAIL_CATEGORIES: readonly ["transactional", "marketing"];
 export type MailCategory = (typeof MAIL_CATEGORIES)[number];

package/dist/template-resolver/template-meta.js

@@ -1,6 +1,6 @@
 import * as z from "zod";
-import { HEX_COLOR_PATTERN, PDF_ORIENTATIONS, PDF_PAGE_FORMATS, } from "./constants.js";
-import { MAIL_TONES } from "./mail-constants.js";
+import { HEX_COLOR_PATTERN, PDF_ORIENTATIONS, PDF_PAGE_FORMATS, } from "./web/constants.js";
+import { MAIL_TONES } from "./web/mail-constants.js";
 // One or more kebab segments joined by ":" — notification templates are seeded
 // under their qualified name `feature:notify:name`.
 export const templateSlugSchema = z

package/dist/template-resolver/template-preview.d.ts

@@ -1,10 +1,10 @@
 import { type HandlerContext, type SessionUser, type TemplateVariables } from "@cosmicdrift/kumiko-framework/engine";
 import { type KumikoError } from "@cosmicdrift/kumiko-framework/errors";
 import { type MailAttachmentRef } from "../renderer-foundation/index.ts";
-import { type TemplateScope } from "./constants.ts";
 import { validateTemplateDraft } from "./handlers/validate.query.ts";
 import { type LayoutRegions, type TemplateWriteScope } from "./layout-regions.ts";
 import { type PdfTemplateMeta } from "./template-meta.ts";
+import { type TemplateScope } from "./web/constants.ts";
 type LabelText = (label: string) => string;
 export declare function sampleValuesFor(variables: TemplateVariables, labelText?: LabelText): Record<string, unknown>;
 export type PreviewCheckCode = "resources_resolved" | "text_present" | "size_under_cap" | "required_placeholders";

package/dist/template-resolver/template-preview.js

@@ -10,15 +10,16 @@ import { fileContextForTenant } from "../file-foundation/index.js";
 import { collectRendererPlugins, createRendererFoundationApi, RendererError, } from "../renderer-foundation/index.js";
 import { createTemplateResolverApi, TemplateNotFoundError } from "./api.js";
 import { collectDocumentResourceKeys } from "./compile-document-body.js";
-import { DEFAULT_MAIL_LAYOUT_SLUG, DEFAULT_PDF_LAYOUT_SLUG, MAIL_PREVIEW_MAX_BYTES, SYSTEM_TENANT_ID, } from "./constants.js";
 import { parseStoredJson } from "./handlers/template-gates.js";
 import { validateTemplateDraft } from "./handlers/validate.query.js";
 import { readLayoutRegions, sanitizeLayoutHtml, } from "./layout-regions.js";
 import { parseLinkedResourceEntries } from "./linked-resources.js";
 import { buildDisplayHtml } from "./preview-display-html.js";
-import { TemplateResolverErrors } from "./qualified-names.js";
 import { templateResourcesTable } from "./table.js";
+import { deliveryPolicyOf, isRowServedTo } from "./template-delivery-policy.js";
 import { isMailTemplateMeta, parseTemplateMeta, readPdfTemplateMeta, } from "./template-meta.js";
+import { DEFAULT_MAIL_LAYOUT_SLUG, DEFAULT_PDF_LAYOUT_SLUG, MAIL_PREVIEW_MAX_BYTES, SYSTEM_TENANT_ID, } from "./web/constants.js";
+import { TemplateResolverErrors } from "./web/qualified-names.js";
 const SAMPLE_LINK = "https://example.com";
 const SAMPLE_DATE = "2026-01-15";
 const SAMPLE_LIST_ROWS = 3;
@@ -86,7 +87,7 @@ const utf8Bytes = (value) => new TextEncoder().encode(value).length;
 const failed = (error) => ({ ok: false, error });
 async function loadStoredDraft(ctx, user, input) {
     try {
-        return await createTemplateResolverApi(ctx.db).resolveTemplate({
+        return await createTemplateResolverApi(ctx.db, ctx.registry).resolveTemplate({
             tenantId: user.tenantId,
             slug: input.slug,
             kind: input.kind,
@@ -148,10 +149,13 @@ export function estimateMailBytes(args) {
 async function loadEditedRowResources(ctx, user, input) {
     const rows = await selectMany(ctx.db, templateResourcesTable, { tenantId: user.tenantId, slug: input.slug, kind: "mail", locale: input.locale }, { limit: 1 });
     const row = rows[0];
+    if (row !== undefined && !isRowServedTo(deliveryPolicyOf(ctx.registry), user, row)) {
+        return undefined;
+    }
     return row === undefined ? undefined : parseLinkedResourceEntries(row.linkedResources);
 }
 async function resolvePdfLayout(ctx, user, slug, locale) {
-    const api = createTemplateResolverApi(ctx.db);
+    const api = createTemplateResolverApi(ctx.db, ctx.registry);
     const find = async (tenantId) => {
         try {
             return await api.resolveLayout({ tenantId, slug, kind: "pdf-layout", locale });

package/dist/template-resolver/template-usage.d.ts

@@ -1,5 +1,5 @@
 import { type Registry } from "@cosmicdrift/kumiko-framework/engine";
-import { type TemplateKind } from "./constants.ts";
+import { type TemplateKind } from "./web/constants.ts";
 type UsageRole = "template" | "layout";
 export type TemplateUsageEntry = {
     readonly qualifiedName: string;

package/dist/template-resolver/template-usage.js

@@ -1,5 +1,5 @@
 import { parseQn, } from "@cosmicdrift/kumiko-framework/engine";
-import { DEFAULT_MAIL_LAYOUT_SLUG } from "./constants.js";
+import { DEFAULT_MAIL_LAYOUT_SLUG } from "./web/constants.js";
 function layoutSlugsOf(qualifiedName, notification, effectiveLayouts) {
     const stored = effectiveLayouts.get(qualifiedName);
     const locales = new Set([

package/dist/template-resolver/template-validation.js

@@ -1,6 +1,6 @@
 import * as z from "zod";
 import { conditionScopeElement, withParsedDocument } from "./document-sanitizer.js";
-import { DOCUMENT_CONDITION_ATTRIBUTE, isDocumentPlaceholderHref, isDocumentReferenceName, } from "./document-schema.js";
+import { DOCUMENT_CONDITION_ATTRIBUTE, isDocumentPlaceholderHref, isDocumentReferenceName, } from "./web/document-schema.js";
 export const SYSTEM_PLACEHOLDERS = new Set([
     "tenantName",
     "signature",

package/dist/template-resolver/testing.js

@@ -3,8 +3,8 @@
 // No bun:test here — callers register cases with their own test runner.
 import { seedRow } from "@cosmicdrift/kumiko-testing/helpers";
 import { TemplateNotFoundError } from "./api.js";
-import { FALLBACK_LOCALE, SYSTEM_TENANT_ID, } from "./constants.js";
 import { templateResourcesTable } from "./table.js";
+import { FALLBACK_LOCALE, SYSTEM_TENANT_ID, } from "./web/constants.js";
 export class ConformanceAssertionError extends Error {
     constructor(message) {
         super(message);

package/dist/template-resolver/user-content-table.js

@@ -1,6 +1,6 @@
 import { buildEntityTable } from "@cosmicdrift/kumiko-framework/db";
 import { createEntity, createLongTextField, createSelectField, createTextField, } from "@cosmicdrift/kumiko-framework/engine";
-import { CONTENT_FORMATS, TEMPLATE_KINDS } from "./constants.js";
+import { CONTENT_FORMATS, TEMPLATE_KINDS } from "./web/constants.js";
 // UserContentEntry — the per-user half of the content store: mail signatures
 // and personal reply snippets, one row per (tenantId, ownerId, slug, kind,
 // locale).

package/dist/template-resolver/web/client-plugin.js

@@ -1,6 +1,5 @@
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { EMPTY_VALUE_PLACEHOLDER } from "@cosmicdrift/kumiko-renderer/headless";
-// @runtime client
 // Client feature factory for the text-block content tree. Apps mount it via
 // createKumikoApp({ clientFeatures: [textBlocksClient()] }); it loads the
 // blocks from the by-tenant query, groups them by their `folder` field and
@@ -16,10 +15,10 @@ import { ContentPreview, useAppFeatures, useContentEditor, useDispatcher, usePri
 import { CSRF_HEADER_NAME, readCsrfToken } from "@cosmicdrift/kumiko-renderer/live";
 import { PlainContentEditor, RichContentEditor, } from "@cosmicdrift/kumiko-renderer/web";
 import { useEffect, useId, useState } from "react";
-import { collectionHandlerName, collectionQueryName, TemplateResolverHandlers, TemplateResolverQueries, } from "../qualified-names.js";
 import { DocumentBlocksContext, DocumentContentEditor } from "./document-editor.js";
 import { documentBlocksForKind } from "./document-toolbar-blocks.js";
 import { defaultTranslations } from "./i18n.js";
+import { collectionHandlerName, collectionQueryName, TemplateResolverHandlers, TemplateResolverQueries, } from "./qualified-names.js";
 function newFolderNode() {
     return { leaves: [], subFolders: new Map() };
 }

package/dist/template-resolver/{constants.d.ts → web/constants.d.ts}

@@ -24,7 +24,7 @@ export declare const DEFAULT_MAIL_LAYOUT_SLUG = "default";
 export declare const DEFAULT_PDF_LAYOUT_SLUG = "default";
 export declare const MAIL_PREVIEW_MAX_BYTES: number;
 export declare const TEST_MAIL_SUBJECT_PREFIX = "[TEST] ";
-export { SYSTEM_TENANT_ID } from "@cosmicdrift/kumiko-framework/engine";
+export { SYSTEM_TENANT_ID } from "@cosmicdrift/kumiko-types/identifiers";
 export declare const FALLBACK_LOCALE = "de";
 export declare const DEFAULT_COLLECTION_ACCESS: {
     readonly roles: readonly ["SystemAdmin"];

package/dist/template-resolver/{constants.js → web/constants.js}

@@ -1,11 +1,9 @@
-// @runtime client
 // Plain data, no imports — the content tree in web/ needs TEXT_BLOCK_KIND to
 // pick between the public and the admin query.
 //
-// RenderKind identifiziert die Konsumenten-Klasse eines Templates.
-// Plugin-Renderer in `renderer-foundation` matchen auf kind; der
-// Resolver hier ist kind-agnostisch — er lädt nur, das Content-Format
-// (markdown/mjml/html) entscheidet wer's rendert.
+// RenderKind identifies the consumer class of a template. Plugin renderers in
+// `renderer-foundation` match on kind; the resolver here is kind-agnostic: it
+// only loads, and the content format (markdown/mjml/html) decides who renders it.
 export const RENDER_KINDS = ["mail", "document-pdf", "image-snapshot"];
 // Kinds whose html body is a rich document: the server rebuilds it through the
 // document schema on every write (see document-sanitizer.ts).
@@ -60,11 +58,10 @@ export const DEFAULT_PDF_LAYOUT_SLUG = "default";
 // The mail transport enforces no size limit of its own; 10 MiB is a common provider ceiling.
 export const MAIL_PREVIEW_MAX_BYTES = 10 * 1024 * 1024;
 export const TEST_MAIL_SUBJECT_PREFIX = "[TEST] ";
-// System-Templates leben unter der canonical SYSTEM_TENANT_ID-Sentinel-UUID.
-// Re-Export aus framework — single source of truth, vermeidet Drift.
-export { SYSTEM_TENANT_ID } from "@cosmicdrift/kumiko-framework/engine";
-// Default-Locale wenn Tenant keinen eigenen Default konfiguriert. Resolver
-// fällt darauf zurück wenn requested locale + tenant-default fehlen.
+// System templates live under the SYSTEM_TENANT_ID sentinel; the client-safe types package is its single source.
+export { SYSTEM_TENANT_ID } from "@cosmicdrift/kumiko-types/identifiers";
+// Default locale when the tenant configures none. The resolver falls back to
+// it when the requested locale and the tenant default are missing.
 export const FALLBACK_LOCALE = "de";
 // A collection mounted without `access` is maintained by the platform only; TenantAdmin access is an explicit mount decision.
 export const DEFAULT_COLLECTION_ACCESS = { roles: ["SystemAdmin"] };

package/dist/template-resolver/web/document-editor-extensions.js

@@ -1,7 +1,7 @@
 import { ListKeymap } from "@tiptap/extension-list";
 import { Dropcursor, Gapcursor, Placeholder, UndoRedo } from "@tiptap/extensions";
-import { DocumentButton, DocumentImages, DocumentPageBreak, DocumentResource, DocumentSteps, DocumentVariable, documentExtensions, } from "../document-schema.js";
-import { readDocumentStepsAttribute } from "../document-steps.js";
+import { DocumentButton, DocumentImages, DocumentPageBreak, DocumentResource, DocumentSteps, DocumentVariable, documentExtensions, } from "./document-schema.js";
+import { readDocumentStepsAttribute } from "./document-steps.js";
 const DOCUMENT_RESOURCE_SIZE_TOKEN = "{size}";
 export const DOCUMENT_BLOCK_ATTRIBUTE = "data-document-block";
 function createElementWithClass(tag, className, text) {

package/dist/template-resolver/web/document-editor.js

@@ -1,5 +1,4 @@
 import { jsx as _jsx } from "react/jsx-runtime";
-// @runtime client
 //
 // Lazy boundary: tiptap only loads when a "document" collection is rendered.
 // Never import document-tiptap-editor or document-editor-extensions statically here.

package/dist/template-resolver/{document-images.js → web/document-images.js}

@@ -1,4 +1,3 @@
-// @runtime client
 // The record's photos: a block bound to an `images` variable whose FileRef ids the
 // app passes at render time. Universal like document-schema.ts.
 import { Node } from "@tiptap/core";

package/dist/template-resolver/{document-schema.js → web/document-schema.js}

@@ -1,4 +1,3 @@
-// @runtime client
 // Canonical document model for template bodies (kinds mail, document-pdf).
 // Universal on purpose: the web editor and the server sanitizer load the same
 // extension list, so what the editor can produce is exactly what the server

package/dist/template-resolver/{document-steps.js → web/document-steps.js}

@@ -1,4 +1,3 @@
-// @runtime client
 // A progress row: fixed stages stored in the template, the reached stage read
 // from a variable at render time. Universal like document-schema.ts.
 import { Node } from "@tiptap/core";

package/dist/template-resolver/web/document-tiptap-editor.js

@@ -1,5 +1,4 @@
 import { Fragment as _Fragment, jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
-// @runtime client
 //
 // tiptap-backed implementation behind DocumentContentEditor's lazy() boundary —
 // never import this file statically, tiptap must only load when a "document"
@@ -13,9 +12,9 @@ import { BubbleMenu } from "@tiptap/react/menus";
 import { AlignCenter, AlignJustify, AlignLeft, AlignRight, Bold as BoldIcon, Braces, ChevronDown, GalleryThumbnails, Image as ImageIcon, Italic as ItalicIcon, Link as LinkIcon, List, ListChecks, ListOrdered, Minus, MousePointerClick, Repeat, Scissors, Table as TableIcon, Underline as UnderlineIcon, } from "lucide-react";
 import { Fragment, useEffect, useMemo, useState } from "react";
 import { createPortal } from "react-dom";
-import { DOCUMENT_TEXT_ALIGNMENTS, isAllowedDocumentLinkHref, isDocumentPlaceholderHref, isDocumentReferenceName, isDocumentResourceKey, } from "../document-schema.js";
-import { parseDocumentStepsInput } from "../document-steps.js";
 import { createDocumentEditorExtensions, DOCUMENT_BLOCK_ATTRIBUTE, } from "./document-editor-extensions.js";
+import { DOCUMENT_TEXT_ALIGNMENTS, isAllowedDocumentLinkHref, isDocumentPlaceholderHref, isDocumentReferenceName, isDocumentResourceKey, } from "./document-schema.js";
+import { parseDocumentStepsInput } from "./document-steps.js";
 import { MAIL_DOCUMENT_BLOCKS, } from "./document-toolbar-blocks.js";
 import { createEditorHandle } from "./editor-handle.js";
 import { useStableByKey } from "./use-stable-by-key.js";

package/dist/template-resolver/web/document-toolbar-blocks.d.ts

@@ -1,6 +1,6 @@
 import type { ContentEditorProps } from "@cosmicdrift/kumiko-renderer";
 import type { ReactNode } from "react";
-import type { DocumentToolbarBlock } from "../document-blocks.ts";
+import type { DocumentToolbarBlock } from "./document-blocks.ts";
 /** Imperative access for an outside panel (placeholder list, resource list). */
 export type DocumentEditorHandle = {
     readonly insertPlaceholder: (name: string) => void;
@@ -37,4 +37,4 @@ export type DocumentEditorProps = ContentEditorProps & {
     /** Called with the handle once the editor exists and with null when it is destroyed (unmount or rebuild), so a held handle never outlives its editor. */
     readonly onEditorReady?: (handle: DocumentEditorHandle | null) => void;
 };
-export { type DocumentToolbarBlock, documentBlocksForKind, MAIL_DOCUMENT_BLOCKS, PDF_DOCUMENT_BLOCKS, } from "../document-blocks.ts";
+export { type DocumentToolbarBlock, documentBlocksForKind, MAIL_DOCUMENT_BLOCKS, PDF_DOCUMENT_BLOCKS, } from "./document-blocks.ts";

package/dist/template-resolver/web/document-toolbar-blocks.js

@@ -1 +1 @@
-export { documentBlocksForKind, MAIL_DOCUMENT_BLOCKS, PDF_DOCUMENT_BLOCKS, } from "../document-blocks.js";
+export { documentBlocksForKind, MAIL_DOCUMENT_BLOCKS, PDF_DOCUMENT_BLOCKS, } from "./document-blocks.js";

package/dist/template-resolver/web/editor-handle.js

@@ -1,4 +1,4 @@
-import { isDocumentReferenceName, isDocumentResourceKey } from "../document-schema.js";
+import { isDocumentReferenceName, isDocumentResourceKey } from "./document-schema.js";
 export function createEditorHandle(editor) {
     return {
         insertPlaceholder: (name) => {

package/dist/template-resolver/web/i18n.js

@@ -1,4 +1,3 @@
-// @runtime client
 // Default translation bundle for the text-block editor. textBlocksClient()
 // hangs it into the LocaleProvider as a fallback bundle — apps override
 // individual keys via mergeTranslations at the createKumikoApp level.
@@ -95,6 +94,7 @@ export const defaultTranslations = {
         "templateResolver.errors.noDraft": "There is no draft to discard.",
         "templateResolver.errors.systemOnlyTemplate": "Only the platform maintains this template; it cannot be overridden per tenant.",
         "templateResolver.errors.templateNotTenantEditable": "Only the platform may edit this template.",
+        "templateResolver.overview.lockedOverride": "Own version stored but not delivered: the template is not unlocked for tenants.",
         "templateResolver.errors.template.invalidMeta": "The template settings are invalid.",
         "templateResolver.errors.template.meta.subject.required": "The subject is missing.",
         "templateResolver.errors.template.meta.subject.invalid": "The subject is invalid (at most 200 characters, no line breaks).",

package/dist/template-resolver/web/index.d.ts

@@ -1,7 +1,7 @@
-export { MAIL_TONES, type MailTone } from "../mail-constants.ts";
-export { PDF_DEFAULT_MARGIN_MM, PDF_FOOTER_MARGIN_MM, PDF_HEADER_MARGIN_MM, PDF_ORIENTATIONS, PDF_PAGE_FORMATS, } from "../pdf-constants.ts";
-export { TemplateResolverErrors, TemplateResolverHandlers, TemplateResolverQueries, } from "../qualified-names.ts";
 export { textBlocksClient } from "./client-plugin.tsx";
 export { DocumentContentEditor } from "./document-editor.tsx";
 export { type DocumentEditorChrome, type DocumentEditorHandle, type DocumentEditorProps, type DocumentResourcePreview, type DocumentToolbarBlock, MAIL_DOCUMENT_BLOCKS, PDF_DOCUMENT_BLOCKS, } from "./document-toolbar-blocks.ts";
+export { MAIL_TONES, type MailTone } from "./mail-constants.ts";
+export { PDF_DEFAULT_MARGIN_MM, PDF_FOOTER_MARGIN_MM, PDF_HEADER_MARGIN_MM, PDF_ORIENTATIONS, PDF_PAGE_FORMATS, } from "./pdf-constants.ts";
 export { PlaceholderLineEditor, type PlaceholderLineEditorProps, } from "./placeholder-line-editor-lazy.tsx";
+export { TemplateResolverErrors, TemplateResolverHandlers, TemplateResolverQueries, } from "./qualified-names.ts";

package/dist/template-resolver/web/index.js

@@ -1,13 +1,12 @@
-// @runtime client
 // Public exports for the browser side of template-resolver. Consumed through
 // the sub-path export `@cosmicdrift/kumiko-bundled-features/template-resolver/web`
 // — the server side (defineFeature) lives in
 // `@cosmicdrift/kumiko-bundled-features/template-resolver` and has no React or
 // DOM deps.
-export { MAIL_TONES } from "../mail-constants.js";
-export { PDF_DEFAULT_MARGIN_MM, PDF_FOOTER_MARGIN_MM, PDF_HEADER_MARGIN_MM, PDF_ORIENTATIONS, PDF_PAGE_FORMATS, } from "../pdf-constants.js";
-export { TemplateResolverErrors, TemplateResolverHandlers, TemplateResolverQueries, } from "../qualified-names.js";
 export { textBlocksClient } from "./client-plugin.js";
 export { DocumentContentEditor } from "./document-editor.js";
 export { MAIL_DOCUMENT_BLOCKS, PDF_DOCUMENT_BLOCKS, } from "./document-toolbar-blocks.js";
+export { MAIL_TONES } from "./mail-constants.js";
+export { PDF_DEFAULT_MARGIN_MM, PDF_FOOTER_MARGIN_MM, PDF_HEADER_MARGIN_MM, PDF_ORIENTATIONS, PDF_PAGE_FORMATS, } from "./pdf-constants.js";
 export { PlaceholderLineEditor, } from "./placeholder-line-editor-lazy.js";
+export { TemplateResolverErrors, TemplateResolverHandlers, TemplateResolverQueries, } from "./qualified-names.js";

package/dist/template-resolver/{mail-constants.js → web/mail-constants.js}

@@ -1,3 +1,2 @@
-// @runtime client
 // No imports: web/ re-exports these, and template-meta.ts pulls in zod and the framework engine.
 export const MAIL_TONES = ["accent", "info", "success", "warning", "danger", "neutral"];

package/dist/template-resolver/{pdf-constants.js → web/pdf-constants.js}

@@ -1,4 +1,3 @@
-// @runtime client
 // No imports: web/ re-exports these, and constants.ts pulls in the framework engine.
 export const PDF_PAGE_FORMATS = ["A4", "Letter"];
 export const PDF_ORIENTATIONS = ["portrait", "landscape"];

package/dist/template-resolver/web/placeholder-line-editor-lazy.js

@@ -1,5 +1,4 @@
 import { jsx as _jsx } from "react/jsx-runtime";
-// @runtime client
 //
 // Lazy boundary for the placeholder line editor: tiptap loads with the chunk,
 // the fallback is a plain text input holding the same `{{name}}` text.

package/dist/template-resolver/web/placeholder-line-editor.js

@@ -1,5 +1,4 @@
 import { jsx as _jsx } from "react/jsx-runtime";
-// @runtime client
 //
 // Single-line editor for plain-text fields that carry {{placeholders}}
 // (subject, preheader). The stored value stays plain text; placeholders show
@@ -10,10 +9,10 @@ import { Placeholder, UndoRedo } from "@tiptap/extensions";
 import { EditorContent, useEditor } from "@tiptap/react";
 import StarterKit from "@tiptap/starter-kit";
 import { useMemo, useState } from "react";
-import { DocumentVariable } from "../document-schema.js";
-import { contentToLine, lineToContent, singleLine } from "../placeholder-text.js";
 import { createVariableView } from "./document-editor-extensions.js";
+import { DocumentVariable } from "./document-schema.js";
 import { createEditorHandle } from "./editor-handle.js";
+import { contentToLine, lineToContent, singleLine } from "./placeholder-text.js";
 import { useStableByKey } from "./use-stable-by-key.js";
 const LineDocument = Node.create({ name: "doc", topNode: true, content: "paragraph" });
 // One line only: Enter must not split the paragraph.
@@ -75,7 +74,10 @@ function LineEditorBody({ id, initialValue, onChange, variableLabels, systemVari
         onDestroy: () => onEditorReady?.(null),
         onUpdate: ({ editor: e }) => onChange(contentToLine(e.getJSON().content?.[0]?.content)),
     });
-    return (_jsx(EditorContent, { editor: editor, className: cn("flex items-center bg-transparent text-base md:text-sm", flat ? "min-h-10" : "min-h-9 rounded-md border border-input px-3", "[&_.ProseMirror]:w-full [&_.ProseMirror]:whitespace-nowrap [&_.ProseMirror]:outline-none", "[&_p]:m-0", "[&_.is-editor-empty]:before:pointer-events-none [&_.is-editor-empty]:before:float-left [&_.is-editor-empty]:before:h-0 [&_.is-editor-empty]:before:text-muted-foreground [&_.is-editor-empty]:before:content-[attr(data-placeholder)]", readOnly && "opacity-60") }));
+    return (_jsx(EditorContent, { editor: editor, className: cn("flex items-center bg-transparent text-base md:text-sm", flat ? "min-h-10" : "min-h-9 rounded-md border border-input px-3", "[&_.ProseMirror]:w-full [&_.ProseMirror]:whitespace-nowrap [&_.ProseMirror]:outline-none", "[&_p]:m-0", 
+        // Absolute and truncated: a hint longer than the field ends in an ellipsis instead of
+        // running past the frame or over the text below it.
+        "[&_.is-editor-empty]:relative [&_.is-editor-empty]:before:pointer-events-none [&_.is-editor-empty]:before:absolute [&_.is-editor-empty]:before:inset-x-0 [&_.is-editor-empty]:before:truncate [&_.is-editor-empty]:before:text-muted-foreground [&_.is-editor-empty]:before:content-[attr(data-placeholder)]", readOnly && "opacity-60") }));
 }
 export default function PlaceholderLineEditor({ id, value, onChange, variableLabels = NO_LABELS, systemVariables = NO_NAMES, readOnly = false, flat = false, placeholder, onEditorReady, "aria-label": ariaLabel, }) {
     const stableLabels = useStableByKey(variableLabels, JSON.stringify(variableLabels));

package/dist/template-resolver/{qualified-names.js → web/qualified-names.js}

@@ -1,4 +1,3 @@
-// @runtime client
 // Feature name + qualified handler/query names (QN: scope:type:name).
 export const TEMPLATE_RESOLVER_FEATURE = "template-resolver";
 export const TemplateResolverHandlers = {

package/dist/template-resolver/web/use-stable-by-key.js

@@ -1,4 +1,3 @@
-// @runtime client
 import { useState } from "react";
 // Callers often pass fresh object literals every render; this keeps the first
 // value for as long as the content key is unchanged, so memoized extension

package/dist/tenant/handlers/add-member.write.js

@@ -2,9 +2,9 @@ import { createEventStoreExecutor, fetchOne } from "@cosmicdrift/kumiko-framewor
 import { defineWriteHandler, SYSTEM_ROLE, SYSTEM_USER_ID, } from "@cosmicdrift/kumiko-framework/engine";
 import { AccessDeniedError, ConflictError, InternalError, writeFailure, } from "@cosmicdrift/kumiko-framework/errors";
 import * as z from "zod";
-import { TenantErrors } from "../constants.js";
 import { findForbiddenMembershipRole, reservedMembershipRoleError } from "../membership-roles.js";
 import { tenantMembershipEntity, tenantMembershipsTable } from "../membership-table.js";
+import { TenantErrors } from "../web/constants.js";
 const executor = createEventStoreExecutor(tenantMembershipsTable, tenantMembershipEntity, {
     entityName: "tenant-membership",
 });

package/dist/tenant/index.d.ts

@@ -1,6 +1,5 @@
 export { cancelPendingInvitation } from "./cancel-pending-invitation.ts";
 export { TenantCommandSchemas } from "./command-schemas.ts";
-export { OWNER_INVITE_ROLE_OPTIONS, TENANT_FEATURE, TenantErrors, TenantHandlers, TenantQueries, } from "./constants.ts";
 export { decryptTenantNames } from "./decrypt-tenant-names.ts";
 export { collectAssignableAppRoles, createTenantFeature } from "./feature.ts";
 export type { InvitationStatus } from "./invitation-table.ts";
@@ -8,3 +7,4 @@ export { INVITATION_STATUS, INVITATION_STATUSES, tenantInvitationEntity, tenantI
 export { isTenantServingPublicContent } from "./is-tenant-serving-public-content.ts";
 export { tenantMembershipEntity, tenantMembershipsTable } from "./membership-table.ts";
 export { TENANT_LIFECYCLE_STATUSES, type TenantLifecycleStatus, tenantEntity, tenantTable, } from "./schema/tenant.ts";
+export { OWNER_INVITE_ROLE_OPTIONS, TENANT_FEATURE, TenantErrors, TenantHandlers, TenantQueries, } from "./web/constants.ts";