@cosmicdrift/kumiko-samples 0.378.0 → 0.379.0

package/packages/bundled-features/src/user-data-rights/web/default-translations.ts

@@ -0,0 +1,91 @@
+// Default bundle for the apex deletion screens. Apps attach it as a fallback
+// bundle in the LocaleProvider (createPublicSurface clientFeatures or directly)
+// and may override single keys. Keys: `userDataRights.deletion.<step>.<slug>`.
+
+import {
+  mergeTranslations,
+  type TranslationsByLocale,
+  translationsByLocaleFromKeys,
+} from "@cosmicdrift/kumiko-renderer";
+import { USER_DATA_RIGHTS_I18N } from "./i18n.ts";
+
+const apexTranslations: TranslationsByLocale = {
+  en: {
+    "userDataRights.deletion.request.title": "Request account deletion",
+    "userDataRights.deletion.request.intro":
+      "Enter the email address of your account. If an account exists, we'll send you a confirmation link to delete it.",
+    "userDataRights.deletion.request.email": "Email",
+    "userDataRights.deletion.request.submit": "Request confirmation link",
+    "userDataRights.deletion.request.submitting": "…",
+    "userDataRights.deletion.request.successTitle": "Email sent",
+    "userDataRights.deletion.request.successBody":
+      "If the email exists in our system, a message with a confirmation link is on its way. Please check your inbox.",
+    "userDataRights.deletion.request.error": "Something went wrong. Please try again.",
+    "userDataRights.deletion.confirm.title": "Confirm account deletion",
+    "userDataRights.deletion.confirm.intro":
+      "Confirming starts the deletion grace period. Until it ends you can cancel the deletion from your logged-in account.",
+    "userDataRights.deletion.confirm.submit": "Confirm deletion",
+    "userDataRights.deletion.confirm.submitting": "…",
+    "userDataRights.deletion.confirm.successTitle": "Deletion scheduled",
+    "userDataRights.deletion.confirm.successBody":
+      "Your account will be deleted after the grace period. You can cancel the deletion from your logged-in account until then.",
+    "userDataRights.deletion.confirm.invalidToken":
+      "The link is invalid or expired. Please request a new one.",
+    "userDataRights.deletion.confirm.missingToken":
+      "No token found in the link. Please open the link from the email again.",
+    "userDataRights.deletion.confirm.error": "Something went wrong. Please try again.",
+
+    "userDataRights.privacyCenter.errors.generic": "Something went wrong. Please try again.",
+    "userDataRights.privacyCenter.field.status": "Account status",
+    "userDataRights.privacyCenter.field.gracePeriodEnd": "Scheduled deletion date",
+    "userDataRights.privacyCenter.field.status.option.active": "Active",
+    "userDataRights.privacyCenter.field.status.option.restricted": "Restricted",
+    "userDataRights.privacyCenter.field.status.option.deletionRequested": "Deletion requested",
+    "userDataRights.privacyCenter.field.status.option.deleted": "Deleted",
+
+    "userDataRights.privacyCenter.export.title": "Export your data (Art. 20)",
+    "userDataRights.privacyCenter.export.intro":
+      "Request a copy of your data. It is prepared in the background; once ready you can download it here.",
+    "userDataRights.privacyCenter.export.request": "Request data export",
+    "userDataRights.privacyCenter.export.requesting": "Requesting …",
+    "userDataRights.privacyCenter.export.pending":
+      "Your export is being prepared. Please check back later.",
+    "userDataRights.privacyCenter.export.failed":
+      "The last export failed to build. You can try again.",
+    "userDataRights.privacyCenter.export.ready": "Your export is ready.",
+    "userDataRights.privacyCenter.export.download": "Download export",
+    "userDataRights.privacyCenter.export.availableUntil": "Available until {date}",
+    "userDataRights.privacyCenter.export.requestNew": "Request a new export",
+
+    "userDataRights.privacyCenter.restriction.title": "Restrict processing (Art. 18)",
+    "userDataRights.privacyCenter.restriction.explainer":
+      "Freeze your account: processing of your data is paused and you are signed out. Lifting the restriction afterwards is only possible via support.",
+    "userDataRights.privacyCenter.restriction.restrict": "Restrict account",
+    "userDataRights.privacyCenter.restriction.dialogTitle": "Restrict your account?",
+    "userDataRights.privacyCenter.restriction.dialogDescription":
+      "You will be signed out immediately and cannot sign in again until support lifts the restriction.",
+
+    "userDataRights.privacyCenter.deletion.title": "Delete account (Art. 17)",
+    "userDataRights.privacyCenter.deletion.explainer":
+      "Request deletion of your account. Until the grace period ends you can cancel the deletion.",
+    "userDataRights.privacyCenter.deletion.delete": "Delete account",
+    "userDataRights.privacyCenter.deletion.cancel": "Cancel deletion",
+    "userDataRights.privacyCenter.deletion.dialogTitle": "Delete your account?",
+    "userDataRights.privacyCenter.deletion.dialogDescription":
+      "Confirming starts the deletion grace period. You can cancel the deletion until it ends.",
+
+    "userDataRights.errors.download.notFound":
+      "The download link is invalid or belongs to a different account.",
+    "userDataRights.errors.download.expired":
+      "Your download has expired. Please request a new export.",
+    "userDataRights.errors.download.unavailable":
+      "The export is not yet ready or has failed. Please check the status endpoint.",
+    "userDataRights.errors.download.signedUrlNotSupported":
+      "The download is currently unavailable due to a server configuration issue. The operator has been notified.",
+  },
+};
+
+export const defaultTranslations: TranslationsByLocale = mergeTranslations(
+  translationsByLocaleFromKeys(USER_DATA_RIGHTS_I18N),
+  apexTranslations,
+);

package/packages/bundled-features/src/user-data-rights/web/i18n.ts

@@ -1,93 +1,43 @@
-// @runtime client
-// Default-Bundle für die Apex-Deletion-Screens. Apps hängen es als
-// Fallback-Bundle in den LocaleProvider (createPublicSurface clientFeatures
-// oder direkt) und können einzelne Keys überschreiben. Keys: `userDataRights.
-// deletion.<step>.<slug>`.
-
-import {
-  mergeTranslations,
-  type TranslationsByLocale,
-  translationsByLocaleFromKeys,
-} from "@cosmicdrift/kumiko-renderer";
-import { USER_DATA_RIGHTS_I18N } from "../i18n.ts";
-
-const apexTranslations: TranslationsByLocale = {
-  en: {
-    "userDataRights.deletion.request.title": "Request account deletion",
-    "userDataRights.deletion.request.intro":
-      "Enter the email address of your account. If an account exists, we'll send you a confirmation link to delete it.",
-    "userDataRights.deletion.request.email": "Email",
-    "userDataRights.deletion.request.submit": "Request confirmation link",
-    "userDataRights.deletion.request.submitting": "…",
-    "userDataRights.deletion.request.successTitle": "Email sent",
-    "userDataRights.deletion.request.successBody":
-      "If the email exists in our system, a message with a confirmation link is on its way. Please check your inbox.",
-    "userDataRights.deletion.request.error": "Something went wrong. Please try again.",
-    "userDataRights.deletion.confirm.title": "Confirm account deletion",
-    "userDataRights.deletion.confirm.intro":
-      "Confirming starts the deletion grace period. Until it ends you can cancel the deletion from your logged-in account.",
-    "userDataRights.deletion.confirm.submit": "Confirm deletion",
-    "userDataRights.deletion.confirm.submitting": "…",
-    "userDataRights.deletion.confirm.successTitle": "Deletion scheduled",
-    "userDataRights.deletion.confirm.successBody":
-      "Your account will be deleted after the grace period. You can cancel the deletion from your logged-in account until then.",
-    "userDataRights.deletion.confirm.invalidToken":
-      "The link is invalid or expired. Please request a new one.",
-    "userDataRights.deletion.confirm.missingToken":
-      "No token found in the link. Please open the link from the email again.",
-    "userDataRights.deletion.confirm.error": "Something went wrong. Please try again.",
-
-    "userDataRights.privacyCenter.errors.generic": "Something went wrong. Please try again.",
-    "userDataRights.privacyCenter.field.status": "Account status",
-    "userDataRights.privacyCenter.field.gracePeriodEnd": "Scheduled deletion date",
-    "userDataRights.privacyCenter.field.status.option.active": "Active",
-    "userDataRights.privacyCenter.field.status.option.restricted": "Restricted",
-    "userDataRights.privacyCenter.field.status.option.deletionRequested": "Deletion requested",
-    "userDataRights.privacyCenter.field.status.option.deleted": "Deleted",
-
-    "userDataRights.privacyCenter.export.title": "Export your data (Art. 20)",
-    "userDataRights.privacyCenter.export.intro":
-      "Request a copy of your data. It is prepared in the background; once ready you can download it here.",
-    "userDataRights.privacyCenter.export.request": "Request data export",
-    "userDataRights.privacyCenter.export.requesting": "Requesting …",
-    "userDataRights.privacyCenter.export.pending":
-      "Your export is being prepared. Please check back later.",
-    "userDataRights.privacyCenter.export.failed":
-      "The last export failed to build. You can try again.",
-    "userDataRights.privacyCenter.export.ready": "Your export is ready.",
-    "userDataRights.privacyCenter.export.download": "Download export",
-    "userDataRights.privacyCenter.export.availableUntil": "Available until {date}",
-    "userDataRights.privacyCenter.export.requestNew": "Request a new export",
-
-    "userDataRights.privacyCenter.restriction.title": "Restrict processing (Art. 18)",
-    "userDataRights.privacyCenter.restriction.explainer":
-      "Freeze your account: processing of your data is paused and you are signed out. Lifting the restriction afterwards is only possible via support.",
-    "userDataRights.privacyCenter.restriction.restrict": "Restrict account",
-    "userDataRights.privacyCenter.restriction.dialogTitle": "Restrict your account?",
-    "userDataRights.privacyCenter.restriction.dialogDescription":
-      "You will be signed out immediately and cannot sign in again until support lifts the restriction.",
-
-    "userDataRights.privacyCenter.deletion.title": "Delete account (Art. 17)",
-    "userDataRights.privacyCenter.deletion.explainer":
-      "Request deletion of your account. Until the grace period ends you can cancel the deletion.",
-    "userDataRights.privacyCenter.deletion.delete": "Delete account",
-    "userDataRights.privacyCenter.deletion.cancel": "Cancel deletion",
-    "userDataRights.privacyCenter.deletion.dialogTitle": "Delete your account?",
-    "userDataRights.privacyCenter.deletion.dialogDescription":
-      "Confirming starts the deletion grace period. You can cancel the deletion until it ends.",
-
-    "userDataRights.errors.download.notFound":
-      "The download link is invalid or belongs to a different account.",
-    "userDataRights.errors.download.expired":
-      "Your download has expired. Please request a new export.",
-    "userDataRights.errors.download.unavailable":
-      "The export is not yet ready or has failed. Please check the status endpoint.",
-    "userDataRights.errors.download.signedUrlNotSupported":
-      "The download is currently unavailable due to a server configuration issue. The operator has been notified.",
+// Server + client i18n for user-data-rights (operator screens + nav). Pure
+// data, importable from the web bundle (web/default-translations.ts derives the client keys).
+type LocalizedString = { readonly en: string };
+
+export const USER_DATA_RIGHTS_I18N: Readonly<Record<string, LocalizedString>> = {
+  "user-data-rights:feature.label": { en: "Privacy" },
+  "user-data-rights:notify.export-ready.label": { en: "Data export ready" },
+  "user-data-rights:notify.export-failed.label": { en: "Data export failed" },
+  "user-data-rights:notify.deletion-requested.label": { en: "Deletion requested" },
+  "user-data-rights:notify.deletion-executed.label": { en: "Deletion completed" },
+  "user-data-rights:nav.exportJobs": { en: "GDPR exports" },
+  "screen:export-job-list.title": { en: "GDPR exports" },
+  "screen:export-job-detail.title": { en: "Export job" },
+  "screen:download-attempt-list.title": { en: "Download attempts" },
+  "screen:privacy-center.title": { en: "Privacy" },
+  "userDataRights.privacyCenter.subtitle": {
+    en: "Logged-in GDPR self-service page where a user requests and downloads a data export (Art. 20), restricts processing of their account (Art. 18) and requests its deletion (Art. 17).",
+  },
+  "user-data-rights:entity:export-job:field:userId": { en: "User" },
+  "user-data-rights:entity:export-job:field:status": { en: "Status" },
+  "user-data-rights:entity:export-job:field:requestedAt": { en: "Requested" },
+  "user-data-rights:entity:export-job:field:completedAt": { en: "Completed" },
+  "user-data-rights:entity:export-job:field:expiresAt": { en: "Expires" },
+  "user-data-rights:entity:export-job:field:requestedFromTenantId": {
+    en: "Tenant",
+  },
+  "user-data-rights:entity:export-job:field:startedAt": { en: "Started" },
+  "user-data-rights:entity:export-job:field:downloadStorageKey": {
+    en: "Storage key",
   },
+  "user-data-rights:entity:export-job:field:bytesWritten": { en: "Bytes" },
+  "user-data-rights:entity:export-job:field:errorMessage": { en: "Error" },
+  "user-data-rights:entity:download-attempt:field:attemptedAt": {
+    en: "Attempted at",
+  },
+  "user-data-rights:entity:download-attempt:field:result": { en: "Result" },
+  "user-data-rights:entity:download-attempt:field:via": { en: "Via" },
+  "user-data-rights:entity:download-attempt:field:ip": { en: "IP" },
+  "user-data-rights:entity:download-attempt:field:attemptedByUserId": {
+    en: "User",
+  },
+  "user-data-rights:entity:download-attempt:field:jobId": { en: "Job" },
 };
-
-export const defaultTranslations: TranslationsByLocale = mergeTranslations(
-  translationsByLocaleFromKeys(USER_DATA_RIGHTS_I18N),
-  apexTranslations,
-);

package/packages/bundled-features/src/user-data-rights/web/index.ts

@@ -1,4 +1,3 @@
-// @runtime client
 // Public exports für die Browser-Seite des user-data-rights Features —
 // die anonymen Apex-Deletion-Screens. Konsumiert via Sub-Path-Export
 // `@cosmicdrift/kumiko-bundled-features/user-data-rights/web`. Die Server-
@@ -8,7 +7,7 @@
 export { type UserDataRightsClientOptions, userDataRightsClient } from "./client-plugin.tsx";
 export type { ConfirmAccountDeletionScreenProps } from "./confirm-deletion-screen.tsx";
 export { ConfirmAccountDeletionScreen } from "./confirm-deletion-screen.tsx";
-export { defaultTranslations } from "./i18n.ts";
+export { defaultTranslations } from "./default-translations.ts";
 export { formatDate } from "./privacy-center-screen.tsx";
 export { makePublicDeletionGate, type PublicDeletionRoutes } from "./public-deletion-gate.tsx";
 export type { RequestAccountDeletionScreenProps } from "./request-deletion-screen.tsx";

package/packages/bundled-features/src/user-data-rights/web/privacy-center-screen.tsx

@@ -1,5 +1,4 @@
 import { EMPTY_VALUE_PLACEHOLDER } from "@cosmicdrift/kumiko-renderer/headless";
-// @runtime client
 // Export section (Art. 20) — the one part of user-data-rights' privacy-center
 // screen that stays custom (fw#2312). Registered as an EditExtensionSection
 // component (see web/client-plugin.tsx); the projectionDetail screen
@@ -25,7 +24,7 @@ import {
   type ExportJobStatus,
   UserDataRightsHandlers,
   UserDataRightsQueries,
-} from "../constants.ts";
+} from "./constants.ts";
 
 // Export-Job läuft async (worker-Lane-Cron, ~1 Min). Solange er pending/running
 // ist, pollt der Screen den Status, damit der Download ohne manuellen Reload

package/packages/bundled-features/src/user-data-rights/web/public-deletion-gate.tsx

@@ -1,4 +1,3 @@
-// @runtime client
 // Public-Gate für die anonyme Account-Löschung. Matcht window.location.pathname:
 // requestPath → RequestAccountDeletionScreen, confirmPath →
 // ConfirmAccountDeletionScreen, sonst durch zur App. Spiegelt makeAuthGate

package/packages/bundled-features/src/user-data-rights/web/request-deletion-screen.tsx

@@ -1,4 +1,3 @@
-// @runtime client
 // RequestAccountDeletionScreen — anonymer Apex-Screen Schritt 1. Email-Form
 // → user-data-rights:write:request-deletion-by-email. Enumeration-safe: zeigt
 // unconditional ein "Falls Account existiert, Mail unterwegs"-Confirm, auch

package/packages/bundled-features/src/user-data-rights-defaults/hooks/file-ref.userdata-hook.ts

@@ -15,7 +15,11 @@ import {
   type UserDataStorageProvider,
 } from "@cosmicdrift/kumiko-framework/engine";
 import { InternalError } from "@cosmicdrift/kumiko-framework/errors";
-import { fileRefEntity, fileRefsTable } from "@cosmicdrift/kumiko-framework/files";
+import {
+  fileRefEntity,
+  fileRefsTable,
+  resolveActionFormFileField,
+} from "@cosmicdrift/kumiko-framework/files";
 import { collectErasureFailure, throwIfErasureFailed } from "../../shared/index.ts";
 
 const ERROR_CONTEXT = "user-data-rights-defaults:fileRef";
@@ -166,6 +170,8 @@ function isPersonalPiiField(field: FieldDefinition | undefined): boolean {
 //   2. Field exists but carries no PII annotation → anonymize (the
 //      conservative path); the boot-validator warns on a PII-typical field
 //      name so this stays visible and quiet-fixable via `personal`.
+//   2b. Pending upload of an actionForm files field (entityType = screen QN, entityId null):
+//      nothing owns it yet, so it is personal to its uploader and hard-deleted like case 1.
 //   3. Entity or field not resolvable (upload hardening in file-routes.ts
 //      should prevent this from ever being written; theoretical remainder
 //      only) → anonymize, never a silent hard-delete.
@@ -174,6 +180,9 @@ function isPersonalFileRow(registry: Registry, row: Record<string, unknown>): bo
   const fieldName = row["fieldName"]; // @cast-boundary db-row
   if (entityType === null && fieldName === null) return true;
   if (typeof entityType !== "string" || typeof fieldName !== "string") return false;
+  if (row["entityId"] === null && resolveActionFormFileField(registry, entityType, fieldName)) {
+    return true;
+  }
   const fieldDef = registry.getEntity(entityType)?.fields[fieldName];
   return isPersonalPiiField(fieldDef);
 }

package/packages/bundled-features/src/user-profile/feature.ts

@@ -3,14 +3,14 @@ import {
   type FeatureDefinition,
   i18nKey,
 } from "@cosmicdrift/kumiko-framework/engine";
+import { changeEmailWrite } from "./handlers/change-email.write.ts";
 import {
   CHANGE_EMAIL_SECTION_EXTENSION_NAME,
   CHANGE_PASSWORD_SECTION_EXTENSION_NAME,
   PROFILE_SCREEN_ID,
   UserDataRightsHandlers,
   UserProfileQueries,
-} from "./constants.ts";
-import { changeEmailWrite } from "./handlers/change-email.write.ts";
+} from "./web/constants.ts";
 
 export type UserProfileFeatureOptions = {
   /** Default true. false drops the change-email handler and the email

package/packages/bundled-features/src/user-profile/handlers/change-email.write.ts

@@ -8,7 +8,7 @@ import * as z from "zod";
 import { AuthErrors } from "../../auth-email-password/index.ts";
 import { decryptStoredPii, verifyPassword } from "../../shared/index.ts";
 import { UserErrors, UserHandlers, UserQueries } from "../../user/index.ts";
-import { UserProfileErrors } from "../constants.ts";
+import { UserProfileErrors } from "../web/constants.ts";
 
 // Gleiche Failure-Shape wie auth-email-password (anti-enumeration):
 // dessen errors.ts ist nicht Teil des Feature-Barrels, der Reason-Code

package/packages/bundled-features/src/user-profile/index.ts

@@ -1,11 +1,12 @@
 // Bewusst OHNE i18n-Export: das Server-Barrel muss von Server-Samples
 // ohne jsx-tsconfig kompilierbar bleiben (i18n zieht kumiko-renderer →
 // .tsx). Translations kommen via ./web (userProfileClient).
+
+export { createUserProfileFeature, type UserProfileFeatureOptions } from "./feature.ts";
 export {
   USER_PROFILE_FEATURE,
   UserDataRightsHandlers,
   UserProfileErrors,
   UserProfileHandlers,
   UserProfileQueries,
-} from "./constants.ts";
-export { createUserProfileFeature, type UserProfileFeatureOptions } from "./feature.ts";
+} from "./web/constants.ts";

package/packages/bundled-features/src/user-profile/web/client-plugin.ts

@@ -1,4 +1,3 @@
-// @runtime client
 import {
   type ExtensionSectionComponent,
   mergeTranslations,
@@ -8,8 +7,8 @@ import type { ComponentType, ReactNode } from "react";
 import {
   CHANGE_EMAIL_SECTION_EXTENSION_NAME,
   CHANGE_PASSWORD_SECTION_EXTENSION_NAME,
-} from "../constants.ts";
-import { defaultTranslations } from "../i18n.ts";
+} from "./constants.ts";
+import { defaultTranslations } from "./i18n.ts";
 import { ChangeEmailSection, ChangePasswordSection } from "./profile-screen.tsx";
 
 export type UserProfileClientOptions = {

package/packages/bundled-features/src/user-profile/{constants.ts → web/constants.ts}

@@ -1,4 +1,3 @@
-// @runtime client
 // Plain string constants — client-marked so web/profile-screen.tsx can
 // import them; runtime code (handlers/feature) may pull client files anyway.
 

package/packages/bundled-features/src/user-profile/{i18n.ts → web/i18n.ts}

@@ -1,4 +1,3 @@
-// @runtime client
 // Default bundles for the `profile` screen. userProfileClient() hangs this
 // in the LocaleProvider as a fallback bundle — apps override individual keys
 // via `userProfileClient({ translations })`.

package/packages/bundled-features/src/user-profile/web/profile-screen.tsx

@@ -1,4 +1,3 @@
-// @runtime client
 // Change-password and change-email sections for the declarative `profile`
 // projectionDetail screen (fw#2312, ../feature.ts). Both keep re-auth flows
 // a declarative action can't express, so they stay React `EditExtensionSection`
@@ -15,9 +14,9 @@ import {
 } from "@cosmicdrift/kumiko-renderer";
 import { propertyOf } from "@cosmicdrift/kumiko-types/type-guards";
 import { type ReactNode, useState } from "react";
-import { AuthHandlers } from "../../auth-email-password/constants.ts";
+import { AuthHandlers } from "../../auth-email-password/web/constants.ts";
 import { requestEmailVerification } from "../../auth-email-password/web/index.ts";
-import { UserProfileHandlers } from "../constants.ts";
+import { UserProfileHandlers } from "./constants.ts";
 
 type SectionStatus =
   | { kind: "idle" }

package/packages/bundled-features/src/waitlist/changes.json

@@ -1,4 +1,10 @@
 [
+  {
+    "version": "0.379.0",
+    "type": "improvement",
+    "title": "Spanish admin notice for new waitlist entries",
+    "detail": "The operator notice \"new entry on the waitlist\" now exists in Spanish, like the entrant's confirmation. It follows the locale of the request that created the entry and falls back to English."
+  },
   {
     "version": "0.377.0",
     "type": "fix",

package/packages/bundled-features/src/waitlist/entity.ts

@@ -6,7 +6,7 @@ import {
   createTextField,
   createTimestampField,
 } from "@cosmicdrift/kumiko-framework/engine";
-import { WAITLIST_STATUS, type WaitlistStatus } from "./constants.ts";
+import { WAITLIST_STATUS, type WaitlistStatus } from "./web/constants.ts";
 
 const WAITLIST_STATUS_OPTIONS = [
   WAITLIST_STATUS.Pending,

package/packages/bundled-features/src/waitlist/feature.ts

@@ -4,11 +4,6 @@ import {
   type FeatureDefinition,
   i18nKey,
 } from "@cosmicdrift/kumiko-framework/engine";
-import {
-  WAITLIST_EXPORTED_EVENT_SHORT,
-  WAITLIST_FEATURE,
-  WAITLIST_PURGED_EVENT_SHORT,
-} from "./constants.ts";
 import { waitlistEntryEntity } from "./entity.ts";
 import { exportHandler, purgeHandler } from "./handlers/export-purge.write.ts";
 import { createInviteHandler } from "./handlers/invite.write.ts";
@@ -29,6 +24,11 @@ import type { WaitlistOptions } from "./options.ts";
 import { WaitlistAuditEventSchema } from "./payloads.ts";
 import { waitlistListScreen } from "./screens.ts";
 import { waitlistEntryDeleteHook, waitlistEntryExportHook } from "./user-data-hooks.ts";
+import {
+  WAITLIST_EXPORTED_EVENT_SHORT,
+  WAITLIST_FEATURE,
+  WAITLIST_PURGED_EVENT_SHORT,
+} from "./web/constants.ts";
 
 export function createWaitlistFeature(opts: WaitlistOptions = {}): FeatureDefinition {
   return defineFeature(WAITLIST_FEATURE, (r) => {

package/packages/bundled-features/src/waitlist/handlers/export-purge.write.ts

@@ -2,14 +2,14 @@ import { defineWriteHandler, type HandlerContext } from "@cosmicdrift/kumiko-fra
 import { UnprocessableError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
 import { generateId } from "@cosmicdrift/kumiko-framework/utils";
 import * as z from "zod";
+import { listAllWaitlistRows, purgeWaitlistRows } from "../entries-admin.ts";
+import { adminAccess, waitlistDb } from "../lib.ts";
 import {
   WAITLIST_AUDIT_AGGREGATE_TYPE,
   WAITLIST_EXPORTED_EVENT_QN,
   WAITLIST_PURGED_EVENT_QN,
   WaitlistErrors,
-} from "../constants.ts";
-import { listAllWaitlistRows, purgeWaitlistRows } from "../entries-admin.ts";
-import { adminAccess, waitlistDb } from "../lib.ts";
+} from "../web/constants.ts";
 
 export type WaitlistExportData = {
   readonly count: number;

package/packages/bundled-features/src/waitlist/handlers/invite.write.ts

@@ -16,7 +16,6 @@ import {
 import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import { AuthErrors, AuthHandlers } from "../../auth-email-password/index.ts";
 import { TenantHandlers, tenantTable } from "../../tenant/index.ts";
-import { DEFAULT_OWN_TENANT_INVITE_ROLE, WAITLIST_STATUS, WaitlistErrors } from "../constants.ts";
 import { isOpenWaitlistStatus } from "../entity.ts";
 import {
   adminAccess,
@@ -27,6 +26,11 @@ import {
 } from "../lib.ts";
 import type { WaitlistInviteOptions } from "../options.ts";
 import { WaitlistIdSchema } from "../payloads.ts";
+import {
+  DEFAULT_OWN_TENANT_INVITE_ROLE,
+  WAITLIST_STATUS,
+  WaitlistErrors,
+} from "../web/constants.ts";
 
 export type WaitlistInviteData = {
   readonly kind: "invited";

package/packages/bundled-features/src/waitlist/handlers/reject.write.ts

@@ -17,7 +17,6 @@ import {
   INVITATION_STATUS,
   tenantInvitationsTable,
 } from "../../tenant/index.ts";
-import { WAITLIST_STATUS, WaitlistErrors } from "../constants.ts";
 import { isOpenWaitlistStatus } from "../entity.ts";
 import {
   adminAccess,
@@ -28,6 +27,7 @@ import {
   waitlistExecutor,
 } from "../lib.ts";
 import { WaitlistIdSchema } from "../payloads.ts";
+import { WAITLIST_STATUS, WaitlistErrors } from "../web/constants.ts";
 
 export type WaitlistRejectData = { readonly kind: "rejected"; readonly id: string };
 

package/packages/bundled-features/src/waitlist/handlers/submit.write.ts

@@ -7,10 +7,8 @@ import {
 } from "@cosmicdrift/kumiko-framework/engine";
 import { InternalError } from "@cosmicdrift/kumiko-framework/errors";
 import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
-import { WAITLIST_NOTIFICATION_TYPES, WAITLIST_STATUS } from "../constants.ts";
 import { normalizeEmail, platformActor, waitlistDb, waitlistExecutor } from "../lib.ts";
 import {
-  resolveWaitlistAdminMailLocale,
   resolveWaitlistMailLocale,
   waitlistAdminNoticeVariables,
   waitlistConfirmationVariables,
@@ -21,6 +19,7 @@ import {
   type WaitlistOptions,
 } from "../options.ts";
 import { type WaitlistSubmitInput, WaitlistSubmitSchema } from "../payloads.ts";
+import { WAITLIST_NOTIFICATION_TYPES, WAITLIST_STATUS } from "../web/constants.ts";
 
 // pg_advisory_xact_lock namespace (int4): 'wlst' as ASCII, disjoint from the
 // framework's other fixed advisory-lock keys.
@@ -176,7 +175,8 @@ export function createSubmitHandler(opts: WaitlistOptions) {
             message: payload.message,
           }),
           priority: "normal",
-          locale: resolveWaitlistAdminMailLocale(ctx.locale),
+          // Operator-facing: the request locale, not the one the entrant picked in the form.
+          locale: resolveWaitlistMailLocale(ctx.locale),
         });
       });
 

package/packages/bundled-features/src/waitlist/import.ts

@@ -2,8 +2,8 @@ import { createHash } from "node:crypto";
 import type { TenantDb } from "@cosmicdrift/kumiko-framework/db";
 import { InternalError } from "@cosmicdrift/kumiko-framework/errors";
 import type { Temporal } from "@cosmicdrift/kumiko-types/temporal";
-import type { WaitlistStatus } from "./constants.ts";
 import { normalizeEmail, platformActor, waitlistExecutor } from "./lib.ts";
+import type { WaitlistStatus } from "./web/constants.ts";
 
 export type WaitlistImportEntry = {
   /** Stable identity of the source row (e.g. `offlot:<uuid>`); the new entry id derives from it. */

package/packages/bundled-features/src/waitlist/index.ts

@@ -1,14 +1,3 @@
-export {
-  DEFAULT_OWN_TENANT_INVITE_ROLE,
-  WAITLIST_FEATURE,
-  WAITLIST_FIELD_LIMITS,
-  WAITLIST_NOTIFICATION_TYPES,
-  WAITLIST_STATUS,
-  WaitlistErrors,
-  WaitlistHandlers,
-  WaitlistQueries,
-  type WaitlistStatus,
-} from "./constants.ts";
 export { isOpenWaitlistStatus, waitlistEntryEntity, waitlistEntryTable } from "./entity.ts";
 export { createWaitlistFeature } from "./feature.ts";
 export {
@@ -31,3 +20,14 @@ export {
 } from "./legacy-migrate.ts";
 export type { WaitlistInviteOptions, WaitlistOptions } from "./options.ts";
 export { type WaitlistSubmitInput, WaitlistSubmitSchema } from "./payloads.ts";
+export {
+  DEFAULT_OWN_TENANT_INVITE_ROLE,
+  WAITLIST_FEATURE,
+  WAITLIST_FIELD_LIMITS,
+  WAITLIST_NOTIFICATION_TYPES,
+  WAITLIST_STATUS,
+  WaitlistErrors,
+  WaitlistHandlers,
+  WaitlistQueries,
+  type WaitlistStatus,
+} from "./web/constants.ts";

package/packages/bundled-features/src/waitlist/legacy-migrate.ts

@@ -23,8 +23,8 @@ import {
 } from "@cosmicdrift/kumiko-framework/event-store";
 import type { DbConnection } from "@cosmicdrift/kumiko-types/db-connection";
 import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
-import { WAITLIST_STATUS, type WaitlistStatus } from "./constants.ts";
 import { importWaitlistEntry, type WaitlistImportEntry, waitlistImportId } from "./import.ts";
+import { WAITLIST_STATUS, type WaitlistStatus } from "./web/constants.ts";
 
 export const LEGACY_WAITLIST_SOURCES = ["offlot", "publicstatus"] as const;
 export type LegacyWaitlistSource = (typeof LEGACY_WAITLIST_SOURCES)[number];

package/packages/bundled-features/src/waitlist/link-on-signup.ts

@@ -10,8 +10,8 @@ import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import { decryptStoredPii } from "../shared/index.ts";
 import { tenantMembershipsTable } from "../tenant/index.ts";
 import { userTable } from "../user/index.ts";
-import { DEFAULT_OWN_TENANT_INVITE_ROLE, WAITLIST_STATUS } from "./constants.ts";
 import { normalizeEmail, platformActor, waitlistExecutor } from "./lib.ts";
+import { DEFAULT_OWN_TENANT_INVITE_ROLE, WAITLIST_STATUS } from "./web/constants.ts";
 
 const PII_DECRYPT_REASON = "waitlist:link-on-signup";
 

package/packages/bundled-features/src/waitlist/mail.ts

@@ -50,7 +50,7 @@ type AdminNoticeStrings = {
   readonly footer: string;
 };
 
-const ADMIN_NOTICE_STRINGS: Readonly<Record<"en" | "de", AdminNoticeStrings>> = {
+const ADMIN_NOTICE_STRINGS: Readonly<Record<WaitlistMailLocale, AdminNoticeStrings>> = {
   en: {
     subject: (name) => `New waitlist entry: ${name}`,
     header: "New waitlist entry",
@@ -63,6 +63,12 @@ const ADMIN_NOTICE_STRINGS: Readonly<Record<"en" | "de", AdminNoticeStrings>> =
     intro: "Jemand hat sich gerade auf die Warteliste eingetragen.",
     footer: "Den Eintrag findest du in der Wartelisten-Verwaltung.",
   },
+  es: {
+    subject: (name) => `Nueva entrada en la lista de espera: ${name}`,
+    header: "Nueva entrada en la lista de espera",
+    intro: "Alguien acaba de unirse a la lista de espera.",
+    footer: "Revisa la entrada en la administración de la lista de espera.",
+  },
 };
 
 function languageOf(locale: string | undefined): string {
@@ -126,11 +132,6 @@ export function waitlistConfirmationTemplate(): NotificationLocalizedTemplate {
   );
 }
 
-// Operator-facing, so the entrant's locale does not apply: en/de, en default.
-export function resolveWaitlistAdminMailLocale(adminLocale: string | undefined): "en" | "de" {
-  return languageOf(adminLocale) === "de" ? "de" : "en";
-}
-
 export function waitlistAdminNoticeVariables(args: {
   readonly name: string;
   readonly email: string;