@cosmicdrift/kumiko-samples 0.378.0 → 0.379.0

package/packages/bundled-features/src/template-resolver/seeding.ts

@@ -12,8 +12,6 @@
 import {
   createTenantDb,
   type DbConnection,
-  deleteMany,
-  type EntityTableMeta,
   fetchOne,
   type TenantDb,
 } from "@cosmicdrift/kumiko-framework/db";
@@ -25,21 +23,22 @@ import {
   type TenantId,
 } from "@cosmicdrift/kumiko-framework/engine";
 import {
+  deleteRowsWithoutReplayableStream,
   getStreamVersion,
   getUnscopedStreamMaxVersionForSeed,
 } from "@cosmicdrift/kumiko-framework/event-store";
 import type { Dispatcher } from "@cosmicdrift/kumiko-framework/pipeline";
 import { runEventStoreSeed, type SeedIfExists } from "@cosmicdrift/kumiko-framework/seeding";
 import { isPlainObject } from "@cosmicdrift/kumiko-types/type-guards";
-import { type ContentFormat, TEXT_BLOCK_KIND, type UpsertKind } from "./constants.ts";
 import { executor } from "./handlers/shared.ts";
 import { evaluateTemplateWrite } from "./handlers/template-gates.ts";
-import { TEMPLATE_RESOLVER_FEATURE, TemplateResolverHandlers } from "./qualified-names.ts";
 import { type TemplateResourceRow, templateResourcesTable } from "./table.ts";
 import type { TemplateBundle } from "./template-bundle.ts";
 import { activeStampChanges, servedStampChanges } from "./template-draft.ts";
 import { templateSlugSchema } from "./template-meta.ts";
 import { variablesFromSchema } from "./template-validation.ts";
+import { type ContentFormat, TEXT_BLOCK_KIND, type UpsertKind } from "./web/constants.ts";
+import { TEMPLATE_RESOLVER_FEATURE, TemplateResolverHandlers } from "./web/qualified-names.ts";
 
 /** Drop projection orphans (no events anywhere) so boot seeds can recreate. */
 async function resolveExistingForEventStoreSeed(
@@ -60,8 +59,7 @@ async function resolveExistingForEventStoreSeed(
         `seed orphan check: projection ${id} has no events for tenant ${tenantId} but unscoped stream version is ${unscoped} — refusing delete/recreate to avoid wiping a live stream`,
       );
     }
-    // The cast strips the executor-only brand that WritableTable rejects; the orphan row has no events, so no executor verb applies.
-    await deleteMany(tdb, templateResourcesTable as EntityTableMeta, { id, tenantId });
+    await deleteRowsWithoutReplayableStream(tdb, { table: templateResourcesTable, ids: [id] });
     return null;
   }
   return { id, version: streamVersion };
@@ -79,11 +77,21 @@ export type SeedSystemTemplateOptions = {
   readonly linkedResources?: Record<string, string>;
   readonly meta?: unknown;
   readonly title?: string;
+  /** Translatable title for the overview and designer, stored in the title column; the client
+   *  shows the translation and falls back to the key. Mutually exclusive with `title`. */
+  readonly titleI18nKey?: string;
   readonly parentTemplateId?: string | null;
   readonly by?: SessionUser;
   readonly ifExists?: SeedIfExists;
 };
 
+function seedTitleColumn(opts: SeedSystemTemplateOptions, label: string): string | null {
+  if (opts.title !== undefined && opts.titleI18nKey !== undefined) {
+    throw new Error(`${label} rejected: set either title or titleI18nKey, not both`);
+  }
+  return opts.titleI18nKey ?? opts.title ?? null;
+}
+
 export async function seedSystemTemplate(
   db: DbConnection,
   opts: SeedSystemTemplateOptions,
@@ -95,6 +103,7 @@ export async function seedSystemTemplate(
   const label = `seedSystemTemplate ${opts.slug}/${opts.kind}/${opts.locale}`;
   const slug = templateSlugSchema.safeParse(opts.slug);
   if (!slug.success) throw new Error(`${label} rejected: ${slug.error.issues[0]?.message}`);
+  const title = seedTitleColumn(opts, label);
   const evaluated = evaluateTemplateWrite({
     kind: opts.kind,
     scope: "system",
@@ -139,7 +148,7 @@ export async function seedSystemTemplate(
     variableSchema,
     ...(linkedResources !== undefined && { linkedResources }),
     meta,
-    title: opts.title ?? null,
+    title,
     folder: null,
     scope: "system" as const,
     parentTemplateId,

package/packages/bundled-features/src/template-resolver/store-template-resource.ts

@@ -21,7 +21,6 @@ import {
 } from "@cosmicdrift/kumiko-framework/files";
 import { fileContextForTenant } from "../file-foundation/index.ts";
 import { extensionForResourceContentType, requireForTenant } from "../shared/index.ts";
-import { ACTIVE_TEMPLATE_STATUS, SYSTEM_TENANT_ID } from "./constants.ts";
 import {
   DEFAULT_RESOURCE_MAX_BYTES,
   MAX_FILE_ATTACHMENTS_PER_TEMPLATE,
@@ -34,10 +33,11 @@ import {
   parseLinkedResourceEntries,
   templatePdfAttachmentLinkSchema,
 } from "./linked-resources.ts";
-import { TemplateResolverErrors } from "./qualified-names.ts";
 import { normalizeResourceImage } from "./resource-image.ts";
 import { type TemplateResourceRow, templateResourcesTable } from "./table.ts";
 import { readTemplateResource } from "./template-resources.ts";
+import { ACTIVE_TEMPLATE_STATUS, SYSTEM_TENANT_ID } from "./web/constants.ts";
+import { TemplateResolverErrors } from "./web/qualified-names.ts";
 
 export async function readTemplateResourceMaxBytes(
   config: ConfigAccessor | undefined,

package/packages/bundled-features/src/template-resolver/table.ts

@@ -14,7 +14,7 @@ import {
   TEMPLATE_KINDS,
   TEMPLATE_SCOPES,
   TEMPLATE_STATUSES,
-} from "./constants.ts";
+} from "./web/constants.ts";
 
 // Stored v1 events name the kind "mail-html", which is now "mail".
 const renameMailHtmlKind: EntityEventMigration = {

package/packages/bundled-features/src/template-resolver/template-bundle.ts

@@ -1,8 +1,8 @@
 import * as z from "zod";
-import { CONTENT_FORMATS, UPSERT_KINDS } from "./constants.ts";
-import { isDocumentResourceKey } from "./document-schema.ts";
 import { templatePdfAttachmentLinkSchema } from "./linked-resources.ts";
 import { templateSlugSchema } from "./template-meta.ts";
+import { CONTENT_FORMATS, UPSERT_KINDS } from "./web/constants.ts";
+import { isDocumentResourceKey } from "./web/document-schema.ts";
 
 const MAX_RESOURCES = 20;
 const MAX_LOCALES = 50;

package/packages/bundled-features/src/template-resolver/template-delivery-policy.ts

@@ -0,0 +1,82 @@
+import type { Registry } from "@cosmicdrift/kumiko-framework/engine";
+import { isPlainObject, propertyOf } from "@cosmicdrift/kumiko-types/type-guards";
+import { isSystemAdmin } from "./template-draft.ts";
+import { SYSTEM_TENANT_ID } from "./web/constants.ts";
+import { TEMPLATE_RESOLVER_FEATURE } from "./web/qualified-names.ts";
+
+type DeliveryTarget = { readonly kind: string; readonly slug: string };
+
+// What decides whether a tenant row may be served. Independent of who reads: delivery must not
+// change with the caller's roles, so this is not the edit policy.
+export type TemplateDeliveryPolicy = {
+  readonly tenantEditable: readonly DeliveryTarget[];
+  /** Kinds of collections mounted with an explicit `access`; their tenant rows are edited by design. */
+  readonly collectionKinds: readonly string[];
+};
+
+const NOTHING_UNLOCKED: TemplateDeliveryPolicy = { tenantEditable: [], collectionKinds: [] };
+
+export function isTenantOverrideServed(
+  policy: TemplateDeliveryPolicy,
+  target: DeliveryTarget,
+): boolean {
+  return (
+    policy.collectionKinds.includes(target.kind) ||
+    policy.tenantEditable.some((entry) => entry.kind === target.kind && entry.slug === target.slug)
+  );
+}
+
+// Served only because its kind belongs to a collection with `access`, not because the template
+// is listed in tenantEditable. For these a system row of the same slug must win.
+export function isServedByCollectionOnly(
+  policy: TemplateDeliveryPolicy,
+  target: DeliveryTarget,
+): boolean {
+  return (
+    policy.collectionKinds.includes(target.kind) &&
+    !policy.tenantEditable.some((entry) => entry.kind === target.kind && entry.slug === target.slug)
+  );
+}
+
+export function isRowServed(
+  policy: TemplateDeliveryPolicy,
+  row: DeliveryTarget & { readonly tenantId: string },
+): boolean {
+  return row.tenantId === SYSTEM_TENANT_ID || isTenantOverrideServed(policy, row);
+}
+
+// A SystemAdmin sees every stored row, so a locked override can still be reset; everyone else
+// sees only what is delivered, which keeps a locked override out of the template-resolver queries for a TenantAdmin (the audit log keeps the history).
+export function isRowServedTo(
+  policy: TemplateDeliveryPolicy,
+  user: { readonly roles: readonly string[] },
+  row: DeliveryTarget & { readonly tenantId: string },
+): boolean {
+  return isSystemAdmin(user) || isRowServed(policy, row);
+}
+
+function isDeliveryTarget(value: unknown): value is DeliveryTarget {
+  return (
+    typeof propertyOf(value, "kind") === "string" && typeof propertyOf(value, "slug") === "string"
+  );
+}
+
+function isTemplateDeliveryPolicy(value: unknown): value is TemplateDeliveryPolicy {
+  if (!isPlainObject(value)) return false;
+  const { tenantEditable, collectionKinds } = value;
+  return (
+    Array.isArray(tenantEditable) &&
+    tenantEditable.every(isDeliveryTarget) &&
+    Array.isArray(collectionKinds) &&
+    collectionKinds.every((kind) => typeof kind === "string")
+  );
+}
+
+// Fail closed: without the mounted feature (or its exports) no tenant row counts as unlocked.
+export function deliveryPolicyOf(registry: Registry): TemplateDeliveryPolicy {
+  const exported = propertyOf(
+    propertyOf(registry.getFeature(TEMPLATE_RESOLVER_FEATURE), "exports"),
+    "deliveryPolicy",
+  );
+  return isTemplateDeliveryPolicy(exported) ? exported : NOTHING_UNLOCKED;
+}

package/packages/bundled-features/src/template-resolver/template-draft.ts

@@ -1,7 +1,7 @@
 import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import * as z from "zod";
-import { CONTENT_FORMATS, type ContentFormat } from "./constants.ts";
 import type { TemplateResourceRow } from "./table.ts";
+import { CONTENT_FORMATS, type ContentFormat } from "./web/constants.ts";
 
 const templateDraftSchema = z.object({
   content: z.string().nullable(),

package/packages/bundled-features/src/template-resolver/template-edit-policy.ts

@@ -10,10 +10,10 @@ import {
   type WriteFailure,
   writeFailure,
 } from "@cosmicdrift/kumiko-framework/errors";
-import type { TemplateKind } from "./constants.ts";
-import { TemplateResolverErrors } from "./qualified-names.ts";
 import { type TemplateResourceRow, templateResourcesTable } from "./table.ts";
 import { isSystemAdmin } from "./template-draft.ts";
+import type { TemplateKind } from "./web/constants.ts";
+import { TemplateResolverErrors } from "./web/qualified-names.ts";
 
 export type TenantEditableTemplate = {
   readonly kind: TemplateKind;

package/packages/bundled-features/src/template-resolver/template-meta.ts

@@ -4,8 +4,8 @@ import {
   PDF_ORIENTATIONS,
   PDF_PAGE_FORMATS,
   type TemplateKind,
-} from "./constants.ts";
-import { MAIL_TONES, type MailTone } from "./mail-constants.ts";
+} from "./web/constants.ts";
+import { MAIL_TONES, type MailTone } from "./web/mail-constants.ts";
 
 // One or more kebab segments joined by ":" — notification templates are seeded
 // under their qualified name `feature:notify:name`.

package/packages/bundled-features/src/template-resolver/template-preview.ts

@@ -30,13 +30,6 @@ import {
 } from "../renderer-foundation/index.ts";
 import { createTemplateResolverApi, TemplateNotFoundError, type TemplateResource } from "./api.ts";
 import { collectDocumentResourceKeys } from "./compile-document-body.ts";
-import {
-  DEFAULT_MAIL_LAYOUT_SLUG,
-  DEFAULT_PDF_LAYOUT_SLUG,
-  MAIL_PREVIEW_MAX_BYTES,
-  SYSTEM_TENANT_ID,
-  type TemplateScope,
-} from "./constants.ts";
 import { parseStoredJson } from "./handlers/template-gates.ts";
 import { validateTemplateDraft } from "./handlers/validate.query.ts";
 import {
@@ -47,8 +40,8 @@ import {
 } from "./layout-regions.ts";
 import { type LinkedResourceEntry, parseLinkedResourceEntries } from "./linked-resources.ts";
 import { buildDisplayHtml } from "./preview-display-html.ts";
-import { TemplateResolverErrors } from "./qualified-names.ts";
 import { type TemplateResourceRow, templateResourcesTable } from "./table.ts";
+import { deliveryPolicyOf, isRowServedTo } from "./template-delivery-policy.ts";
 import {
   isMailTemplateMeta,
   type MailTemplateMeta,
@@ -56,6 +49,14 @@ import {
   parseTemplateMeta,
   readPdfTemplateMeta,
 } from "./template-meta.ts";
+import {
+  DEFAULT_MAIL_LAYOUT_SLUG,
+  DEFAULT_PDF_LAYOUT_SLUG,
+  MAIL_PREVIEW_MAX_BYTES,
+  SYSTEM_TENANT_ID,
+  type TemplateScope,
+} from "./web/constants.ts";
+import { TemplateResolverErrors } from "./web/qualified-names.ts";
 
 const SAMPLE_LINK = "https://example.com";
 const SAMPLE_DATE = "2026-01-15";
@@ -234,7 +235,7 @@ async function loadStoredDraft(
   input: TemplatePreviewInput,
 ): Promise<TemplateResource | null> {
   try {
-    return await createTemplateResolverApi(ctx.db).resolveTemplate({
+    return await createTemplateResolverApi(ctx.db, ctx.registry).resolveTemplate({
       tenantId: user.tenantId,
       slug: input.slug,
       kind: input.kind,
@@ -326,6 +327,9 @@ async function loadEditedRowResources(
     { limit: 1 },
   );
   const row = rows[0];
+  if (row !== undefined && !isRowServedTo(deliveryPolicyOf(ctx.registry), user, row)) {
+    return undefined;
+  }
   return row === undefined ? undefined : parseLinkedResourceEntries(row.linkedResources);
 }
 
@@ -335,7 +339,7 @@ async function resolvePdfLayout(
   slug: string,
   locale: string,
 ): Promise<PreviewLayout | null> {
-  const api = createTemplateResolverApi(ctx.db);
+  const api = createTemplateResolverApi(ctx.db, ctx.registry);
   const find = async (tenantId: string): Promise<TemplateResource | null> => {
     try {
       return await api.resolveLayout({ tenantId, slug, kind: "pdf-layout", locale });

package/packages/bundled-features/src/template-resolver/template-usage.ts

@@ -3,7 +3,7 @@ import {
   parseQn,
   type Registry,
 } from "@cosmicdrift/kumiko-framework/engine";
-import { DEFAULT_MAIL_LAYOUT_SLUG, type TemplateKind } from "./constants.ts";
+import { DEFAULT_MAIL_LAYOUT_SLUG, type TemplateKind } from "./web/constants.ts";
 
 type UsageRole = "template" | "layout";
 

package/packages/bundled-features/src/template-resolver/template-validation.ts

@@ -7,12 +7,12 @@ import type {
 import type { Element as ScanElement } from "happy-dom";
 import * as z from "zod";
 import { conditionScopeElement, withParsedDocument } from "./document-sanitizer.ts";
+import type { TemplateMeta } from "./template-meta.ts";
 import {
   DOCUMENT_CONDITION_ATTRIBUTE,
   isDocumentPlaceholderHref,
   isDocumentReferenceName,
-} from "./document-schema.ts";
-import type { TemplateMeta } from "./template-meta.ts";
+} from "./web/document-schema.ts";
 
 export const SYSTEM_PLACEHOLDERS: ReadonlySet<string> = new Set([
   "tenantName",

package/packages/bundled-features/src/template-resolver/testing.ts

@@ -6,6 +6,7 @@ import type { DbConnection } from "@cosmicdrift/kumiko-framework/db";
 import { seedRow } from "@cosmicdrift/kumiko-testing/helpers";
 import type { ResolveRequest, TemplateResource } from "./api.ts";
 import { TemplateNotFoundError } from "./api.ts";
+import { templateResourcesTable } from "./table.ts";
 import {
   type ContentFormat,
   FALLBACK_LOCALE,
@@ -13,8 +14,7 @@ import {
   SYSTEM_TENANT_ID,
   type TemplateScope,
   type TemplateStatus,
-} from "./constants.ts";
-import { templateResourcesTable } from "./table.ts";
+} from "./web/constants.ts";
 
 export type TemplateConsumer = {
   readonly resolve: (args: ResolveRequest) => Promise<TemplateResource>;

package/packages/bundled-features/src/template-resolver/user-content-table.ts

@@ -5,8 +5,8 @@ import {
   createSelectField,
   createTextField,
 } from "@cosmicdrift/kumiko-framework/engine";
-import { CONTENT_FORMATS, TEMPLATE_KINDS } from "./constants.ts";
 import type { EntityAuditColumns } from "./table.ts";
+import { CONTENT_FORMATS, TEMPLATE_KINDS } from "./web/constants.ts";
 
 // UserContentEntry — the per-user half of the content store: mail signatures
 // and personal reply snippets, one row per (tenantId, ownerId, slug, kind,

package/packages/bundled-features/src/template-resolver/web/client-plugin.tsx

@@ -1,5 +1,4 @@
 import { EMPTY_VALUE_PLACEHOLDER } from "@cosmicdrift/kumiko-renderer/headless";
-// @runtime client
 // Client feature factory for the text-block content tree. Apps mount it via
 // createKumikoApp({ clientFeatures: [textBlocksClient()] }); it loads the
 // blocks from the by-tenant query, groups them by their `folder` field and
@@ -35,15 +34,15 @@ import {
 } from "@cosmicdrift/kumiko-renderer/web";
 import type { ContentEditorFormat } from "@cosmicdrift/kumiko-types/nav";
 import { type FormEvent, type ReactNode, useEffect, useId, useState } from "react";
+import { DocumentBlocksContext, DocumentContentEditor } from "./document-editor.tsx";
+import { documentBlocksForKind } from "./document-toolbar-blocks.ts";
+import { defaultTranslations } from "./i18n.ts";
 import {
   collectionHandlerName,
   collectionQueryName,
   TemplateResolverHandlers,
   TemplateResolverQueries,
-} from "../qualified-names.ts";
-import { DocumentBlocksContext, DocumentContentEditor } from "./document-editor.tsx";
-import { documentBlocksForKind } from "./document-toolbar-blocks.ts";
-import { defaultTranslations } from "./i18n.ts";
+} from "./qualified-names.ts";
 
 // Exported for the unit test — groupBlocksByFolder is a pure function.
 export type BlockSummary = {

package/packages/bundled-features/src/template-resolver/{constants.ts → web/constants.ts}

@@ -1,11 +1,9 @@
-// @runtime client
 // Plain data, no imports — the content tree in web/ needs TEXT_BLOCK_KIND to
 // pick between the public and the admin query.
 //
-// RenderKind identifiziert die Konsumenten-Klasse eines Templates.
-// Plugin-Renderer in `renderer-foundation` matchen auf kind; der
-// Resolver hier ist kind-agnostisch — er lädt nur, das Content-Format
-// (markdown/mjml/html) entscheidet wer's rendert.
+// RenderKind identifies the consumer class of a template. Plugin renderers in
+// `renderer-foundation` match on kind; the resolver here is kind-agnostic: it
+// only loads, and the content format (markdown/mjml/html) decides who renders it.
 export const RENDER_KINDS = ["mail", "document-pdf", "image-snapshot"] as const;
 export type RenderKind = (typeof RENDER_KINDS)[number];
 
@@ -92,12 +90,11 @@ export const MAIL_PREVIEW_MAX_BYTES = 10 * 1024 * 1024;
 
 export const TEST_MAIL_SUBJECT_PREFIX = "[TEST] ";
 
-// System-Templates leben unter der canonical SYSTEM_TENANT_ID-Sentinel-UUID.
-// Re-Export aus framework — single source of truth, vermeidet Drift.
-export { SYSTEM_TENANT_ID } from "@cosmicdrift/kumiko-framework/engine";
+// System templates live under the SYSTEM_TENANT_ID sentinel; the client-safe types package is its single source.
+export { SYSTEM_TENANT_ID } from "@cosmicdrift/kumiko-types/identifiers";
 
-// Default-Locale wenn Tenant keinen eigenen Default konfiguriert. Resolver
-// fällt darauf zurück wenn requested locale + tenant-default fehlen.
+// Default locale when the tenant configures none. The resolver falls back to
+// it when the requested locale and the tenant default are missing.
 export const FALLBACK_LOCALE = "de";
 
 // A collection mounted without `access` is maintained by the platform only; TenantAdmin access is an explicit mount decision.

package/packages/bundled-features/src/template-resolver/{document-blocks.ts → web/document-blocks.ts}

@@ -1,4 +1,3 @@
-// @runtime client
 export type DocumentToolbarBlock =
   | "image"
   | "table"

package/packages/bundled-features/src/template-resolver/web/document-editor-extensions.ts

@@ -1,4 +1,3 @@
-// @runtime client
 import type { Extensions, NodeViewRenderer } from "@tiptap/core";
 import { ListKeymap } from "@tiptap/extension-list";
 import { Dropcursor, Gapcursor, Placeholder, UndoRedo } from "@tiptap/extensions";
@@ -11,8 +10,8 @@ import {
   DocumentSteps,
   DocumentVariable,
   documentExtensions,
-} from "../document-schema.ts";
-import { readDocumentStepsAttribute } from "../document-steps.ts";
+} from "./document-schema.ts";
+import { readDocumentStepsAttribute } from "./document-steps.ts";
 import type { DocumentResourcePreview } from "./document-toolbar-blocks.ts";
 
 const DOCUMENT_RESOURCE_SIZE_TOKEN = "{size}";

package/packages/bundled-features/src/template-resolver/web/document-editor.tsx

@@ -1,4 +1,3 @@
-// @runtime client
 //
 // Lazy boundary: tiptap only loads when a "document" collection is rendered.
 // Never import document-tiptap-editor or document-editor-extensions statically here.

package/packages/bundled-features/src/template-resolver/{document-images.ts → web/document-images.ts}

@@ -1,4 +1,3 @@
-// @runtime client
 // The record's photos: a block bound to an `images` variable whose FileRef ids the
 // app passes at render time. Universal like document-schema.ts.
 import { Node } from "@tiptap/core";

package/packages/bundled-features/src/template-resolver/{document-schema.ts → web/document-schema.ts}

@@ -1,4 +1,3 @@
-// @runtime client
 // Canonical document model for template bodies (kinds mail, document-pdf).
 // Universal on purpose: the web editor and the server sanitizer load the same
 // extension list, so what the editor can produce is exactly what the server

package/packages/bundled-features/src/template-resolver/{document-steps.ts → web/document-steps.ts}

@@ -1,4 +1,3 @@
-// @runtime client
 // A progress row: fixed stages stored in the template, the reached stage read
 // from a variable at render time. Universal like document-schema.ts.
 import { Node } from "@tiptap/core";

package/packages/bundled-features/src/template-resolver/web/document-tiptap-editor.tsx

@@ -1,4 +1,3 @@
-// @runtime client
 //
 // tiptap-backed implementation behind DocumentContentEditor's lazy() boundary —
 // never import this file statically, tiptap must only load when a "document"
@@ -41,6 +40,10 @@ import {
 } from "lucide-react";
 import { Fragment, type ReactNode, useEffect, useMemo, useState } from "react";
 import { createPortal } from "react-dom";
+import {
+  createDocumentEditorExtensions,
+  DOCUMENT_BLOCK_ATTRIBUTE,
+} from "./document-editor-extensions.ts";
 import {
   DOCUMENT_TEXT_ALIGNMENTS,
   type DocumentTextAlignment,
@@ -48,12 +51,8 @@ import {
   isDocumentPlaceholderHref,
   isDocumentReferenceName,
   isDocumentResourceKey,
-} from "../document-schema.ts";
-import { parseDocumentStepsInput } from "../document-steps.ts";
-import {
-  createDocumentEditorExtensions,
-  DOCUMENT_BLOCK_ATTRIBUTE,
-} from "./document-editor-extensions.ts";
+} from "./document-schema.ts";
+import { parseDocumentStepsInput } from "./document-steps.ts";
 import {
   type DocumentEditorProps,
   type DocumentResourcePreview,

package/packages/bundled-features/src/template-resolver/web/document-toolbar-blocks.ts

@@ -1,7 +1,6 @@
-// @runtime client
 import type { ContentEditorProps } from "@cosmicdrift/kumiko-renderer";
 import type { ReactNode } from "react";
-import type { DocumentToolbarBlock } from "../document-blocks.ts";
+import type { DocumentToolbarBlock } from "./document-blocks.ts";
 
 /** Imperative access for an outside panel (placeholder list, resource list). */
 export type DocumentEditorHandle = {
@@ -48,4 +47,4 @@ export {
   documentBlocksForKind,
   MAIL_DOCUMENT_BLOCKS,
   PDF_DOCUMENT_BLOCKS,
-} from "../document-blocks.ts";
+} from "./document-blocks.ts";

package/packages/bundled-features/src/template-resolver/web/editor-handle.ts

@@ -1,6 +1,5 @@
-// @runtime client
 import type { Editor } from "@tiptap/core";
-import { isDocumentReferenceName, isDocumentResourceKey } from "../document-schema.ts";
+import { isDocumentReferenceName, isDocumentResourceKey } from "./document-schema.ts";
 import type { DocumentEditorHandle } from "./document-toolbar-blocks.ts";
 
 export function createEditorHandle(editor: Editor): DocumentEditorHandle {

package/packages/bundled-features/src/template-resolver/web/i18n.ts

@@ -1,4 +1,3 @@
-// @runtime client
 // Default translation bundle for the text-block editor. textBlocksClient()
 // hangs it into the LocaleProvider as a fallback bundle — apps override
 // individual keys via mergeTranslations at the createKumikoApp level.
@@ -128,6 +127,8 @@ export const defaultTranslations: TranslationsByLocale = {
       "Only the platform maintains this template; it cannot be overridden per tenant.",
     "templateResolver.errors.templateNotTenantEditable":
       "Only the platform may edit this template.",
+    "templateResolver.overview.lockedOverride":
+      "Own version stored but not delivered: the template is not unlocked for tenants.",
     "templateResolver.errors.template.invalidMeta": "The template settings are invalid.",
     "templateResolver.errors.template.meta.subject.required": "The subject is missing.",
     "templateResolver.errors.template.meta.subject.invalid":

package/packages/bundled-features/src/template-resolver/web/index.ts

@@ -1,23 +1,9 @@
-// @runtime client
 // Public exports for the browser side of template-resolver. Consumed through
 // the sub-path export `@cosmicdrift/kumiko-bundled-features/template-resolver/web`
 // — the server side (defineFeature) lives in
 // `@cosmicdrift/kumiko-bundled-features/template-resolver` and has no React or
 // DOM deps.
 
-export { MAIL_TONES, type MailTone } from "../mail-constants.ts";
-export {
-  PDF_DEFAULT_MARGIN_MM,
-  PDF_FOOTER_MARGIN_MM,
-  PDF_HEADER_MARGIN_MM,
-  PDF_ORIENTATIONS,
-  PDF_PAGE_FORMATS,
-} from "../pdf-constants.ts";
-export {
-  TemplateResolverErrors,
-  TemplateResolverHandlers,
-  TemplateResolverQueries,
-} from "../qualified-names.ts";
 export { textBlocksClient } from "./client-plugin.tsx";
 export { DocumentContentEditor } from "./document-editor.tsx";
 export {
@@ -29,7 +15,20 @@ export {
   MAIL_DOCUMENT_BLOCKS,
   PDF_DOCUMENT_BLOCKS,
 } from "./document-toolbar-blocks.ts";
+export { MAIL_TONES, type MailTone } from "./mail-constants.ts";
+export {
+  PDF_DEFAULT_MARGIN_MM,
+  PDF_FOOTER_MARGIN_MM,
+  PDF_HEADER_MARGIN_MM,
+  PDF_ORIENTATIONS,
+  PDF_PAGE_FORMATS,
+} from "./pdf-constants.ts";
 export {
   PlaceholderLineEditor,
   type PlaceholderLineEditorProps,
 } from "./placeholder-line-editor-lazy.tsx";
+export {
+  TemplateResolverErrors,
+  TemplateResolverHandlers,
+  TemplateResolverQueries,
+} from "./qualified-names.ts";

package/packages/bundled-features/src/template-resolver/{mail-constants.ts → web/mail-constants.ts}

@@ -1,4 +1,3 @@
-// @runtime client
 // No imports: web/ re-exports these, and template-meta.ts pulls in zod and the framework engine.
 export const MAIL_TONES = ["accent", "info", "success", "warning", "danger", "neutral"] as const;
 export type MailTone = (typeof MAIL_TONES)[number];

package/packages/bundled-features/src/template-resolver/{pdf-constants.ts → web/pdf-constants.ts}

@@ -1,4 +1,3 @@
-// @runtime client
 // No imports: web/ re-exports these, and constants.ts pulls in the framework engine.
 export const PDF_PAGE_FORMATS = ["A4", "Letter"] as const;
 export type PdfPageFormat = (typeof PDF_PAGE_FORMATS)[number];

package/packages/bundled-features/src/template-resolver/web/placeholder-line-editor-lazy.tsx

@@ -1,4 +1,3 @@
-// @runtime client
 //
 // Lazy boundary for the placeholder line editor: tiptap loads with the chunk,
 // the fallback is a plain text input holding the same `{{name}}` text.

package/packages/bundled-features/src/template-resolver/web/placeholder-line-editor.tsx

@@ -1,4 +1,3 @@
-// @runtime client
 //
 // Single-line editor for plain-text fields that carry {{placeholders}}
 // (subject, preheader). The stored value stays plain text; placeholders show
@@ -10,11 +9,11 @@ import { Placeholder, UndoRedo } from "@tiptap/extensions";
 import { EditorContent, useEditor } from "@tiptap/react";
 import StarterKit from "@tiptap/starter-kit";
 import { type ReactNode, useMemo, useState } from "react";
-import { DocumentVariable } from "../document-schema.ts";
-import { contentToLine, lineToContent, singleLine } from "../placeholder-text.ts";
 import { createVariableView } from "./document-editor-extensions.ts";
+import { DocumentVariable } from "./document-schema.ts";
 import type { DocumentEditorHandle } from "./document-toolbar-blocks.ts";
 import { createEditorHandle } from "./editor-handle.ts";
+import { contentToLine, lineToContent, singleLine } from "./placeholder-text.ts";
 import { useStableByKey } from "./use-stable-by-key.ts";
 
 export type PlaceholderLineEditorProps = {
@@ -132,7 +131,9 @@ function LineEditorBody({
         flat ? "min-h-10" : "min-h-9 rounded-md border border-input px-3",
         "[&_.ProseMirror]:w-full [&_.ProseMirror]:whitespace-nowrap [&_.ProseMirror]:outline-none",
         "[&_p]:m-0",
-        "[&_.is-editor-empty]:before:pointer-events-none [&_.is-editor-empty]:before:float-left [&_.is-editor-empty]:before:h-0 [&_.is-editor-empty]:before:text-muted-foreground [&_.is-editor-empty]:before:content-[attr(data-placeholder)]",
+        // Absolute and truncated: a hint longer than the field ends in an ellipsis instead of
+        // running past the frame or over the text below it.
+        "[&_.is-editor-empty]:relative [&_.is-editor-empty]:before:pointer-events-none [&_.is-editor-empty]:before:absolute [&_.is-editor-empty]:before:inset-x-0 [&_.is-editor-empty]:before:truncate [&_.is-editor-empty]:before:text-muted-foreground [&_.is-editor-empty]:before:content-[attr(data-placeholder)]",
         readOnly && "opacity-60",
       )}
     />

package/packages/bundled-features/src/template-resolver/{placeholder-text.ts → web/placeholder-text.ts}

@@ -1,4 +1,3 @@
-// @runtime client
 import type { JSONContent } from "@tiptap/core";
 import { isDocumentReferenceName } from "./document-schema.ts";