@wildo-ai/saas-backend-lib 1.1.1 → 1.1.3

package/dist/esm/notifications/email/services/email-template-compiler.backend.service.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"email-template-compiler.backend.service.js","sourceRoot":"","sources":["../../../../../../src/notifications/email/services/email-template-compiler.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;;;;;;;;;;;;;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AAgBpF,gFAAgF;AAChF,UAAU;AACV,gFAAgF;AAGzE,IAAM,mCAAmC,GAAzC,MAAM,mCAAmC;IAIQ;IAH5C,QAAQ,CAA+D;IAEjF,YACsD,MAAqB;QAArB,WAAM,GAAN,MAAM,CAAe;QAEzE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,qCAAqC,CAAC,CAAC;QAC/E,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,qCAAqC,EAAE,KAAK,CAAC,CAAC;IAChF,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,OAAO,CAAC,SAAiB;QAC7B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAa,EAAE,CAAC;QAE9B,IAAI,CAAC,QAAQ,CAAC,4CAA4C,CAAC,CAAC;QAE5D,IAAI,CAAC;YACH,sBAAsB;YACtB,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;YAExC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,SAAS,EAAE;gBAChD,MAAM,EAAE,KAAK;gBACb,MAAM,EAAE,QAAQ;gBAChB,MAAM,EAAE,KAAK,EAAE,4BAA4B;gBAC3C,GAAG,EAAE,WAAW;gBAChB,eAAe,EAAE,OAAO;gBACxB,MAAM,EAAE,KAAK,EAAE,8BAA8B;gBAC7C,SAAS,EAAE,IAAI;gBACf,QAAQ,EAAE,MAAM;gBAChB,mDAAmD;gBACnD,uCAAuC;aACxC,CAAC,CAAC;YAEH,mBAAmB;YACnB,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAClD,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;oBACtC,MAAM,GAAG,GAAG,QAAQ,OAAO,CAAC,QAAQ,EAAE,IAAI,IAAI,GAAG,KAAK,OAAO,CAAC,IAAI,EAAE,CAAC;oBACrE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBACnB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oCAAoC,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;gBAC3E,CAAC;YACH,CAAC;YAED,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YAC1C,IAAI,CAAC,QAAQ,CAAC,uCAAuC,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;YAEvE,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,YAAY,EAAE,MAAM,CAAC,IAAI;gBACzB,SAAS,EAAE,MAAM,CAAC,GAAG;gBACrB,MAAM;gBACN,QAAQ;gBACR,UAAU;aACX,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,KAAK,GAAG,GAAgF,CAAC;YAC/F,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YAE1C,uBAAuB;YACvB,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;gBAChD,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;oBAC7B,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,IAAI,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC5D,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC7B,CAAC;YAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;YAE/E,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM;gBACN,QAAQ;gBACR,UAAU;aACX,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,kBAAkB,CAAC,SAAiB;QAKxC,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAE7C,MAAM,UAAU,GAAG,MAAM,CAAC,YAAY;YACpC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC;YAChD,CAAC,CAAC,SAAS,CAAC;QAEd,OAAO;YACL,MAAM;YACN,SAAS;YACT,UAAU;SACX,CAAC;IACJ,CAAC;CACF,CAAA;AA1GY,mCAAmC;IAD/C,UAAU,EAAE;IAKR,WAAA,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAA;;GAJzB,mCAAmC,CA0G/C","sourcesContent":["/**\n * Email Template Compiler Backend Service\n *\n * Compiles TSX email templates to JavaScript modules using ESBuild.\n * The compiled modules can be executed in the VM sandbox for rendering.\n */\n\nimport { injectable, inject } from 'inversify';\nimport { SAAS_SERVICE_TYPES } from '~wildo-backend-lib/inject/models/service-types';\nimport type { LoggerService } from '~wildo-backend-lib/monitoring/logger/services/logger.service';\n\n// ─────────────────────────────────────────────────────────────────────────────\n// TYPES\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport interface CompilationResult {\n  success: boolean;\n  compiledCode?: string;\n  sourceMap?: string;\n  errors: string[];\n  warnings: string[];\n  durationMs: number;\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// SERVICE\n// ─────────────────────────────────────────────────────────────────────────────\n\n@injectable()\nexport class EmailTemplateCompilerBackendService {\n  protected logDebug: (message: string, context?: Record<string, unknown>) => void;\n\n  constructor(\n    @inject(SAAS_SERVICE_TYPES.Logger) private readonly logger: LoggerService,\n  ) {\n    this.logDebug = this.logger.debugByType('EmailTemplateCompilerBackendService');\n    this.logger.setDebugTypeLogging('EmailTemplateCompilerBackendService', false);\n  }\n\n  /**\n   * Compile TSX source to JavaScript module\n   *\n   * @param tsxSource - The TSX template source code\n   * @returns Compilation result with compiled code or errors\n   */\n  async compile(tsxSource: string): Promise<CompilationResult> {\n    const startTime = Date.now();\n    const errors: string[] = [];\n    const warnings: string[] = [];\n\n    this.logDebug('Compiling email template TSX to JavaScript');\n\n    try {\n      // Lazy import esbuild\n      const esbuild = await import('esbuild');\n\n      const result = await esbuild.transform(tsxSource, {\n        loader: 'tsx',\n        target: 'es2020',\n        format: 'cjs', // CommonJS for VM execution\n        jsx: 'automatic',\n        jsxImportSource: 'react',\n        minify: false, // Keep readable for debugging\n        sourcemap: true,\n        platform: 'node',\n        // Note: external is not available for transform(),\n        // VM sandbox handles module resolution\n      });\n\n      // Collect warnings\n      if (result.warnings && result.warnings.length > 0) {\n        for (const warning of result.warnings) {\n          const msg = `Line ${warning.location?.line || '?'}: ${warning.text}`;\n          warnings.push(msg);\n          this.logger.warn('ESBuild warning during compilation', { message: msg });\n        }\n      }\n\n      const durationMs = Date.now() - startTime;\n      this.logDebug('Email template compilation successful', { durationMs });\n\n      return {\n        success: true,\n        compiledCode: result.code,\n        sourceMap: result.map,\n        errors,\n        warnings,\n        durationMs,\n      };\n    } catch (err) {\n      const error = err as Error & { errors?: Array<{ text: string; location?: { line: number } }> };\n      const durationMs = Date.now() - startTime;\n\n      // ESBuild error format\n      if (error.errors && Array.isArray(error.errors)) {\n        for (const e of error.errors) {\n          errors.push(`Line ${e.location?.line || '?'}: ${e.text}`);\n        }\n      } else {\n        errors.push(error.message);\n      }\n\n      this.logger.error('Email template compilation failed', { errors, durationMs });\n\n      return {\n        success: false,\n        errors,\n        warnings,\n        durationMs,\n      };\n    }\n  }\n\n  /**\n   * Compile and return detailed information about the compilation\n   * Useful for debugging and development\n   */\n  async compileWithDetails(tsxSource: string): Promise<{\n    result: CompilationResult;\n    inputSize: number;\n    outputSize?: number;\n  }> {\n    const inputSize = Buffer.byteLength(tsxSource, 'utf8');\n    const result = await this.compile(tsxSource);\n\n    const outputSize = result.compiledCode\n      ? Buffer.byteLength(result.compiledCode, 'utf8')\n      : undefined;\n\n    return {\n      result,\n      inputSize,\n      outputSize,\n    };\n  }\n}\n"]}

package/dist/esm/notifications/email/services/email-template-registry.backend.service.d.ts

@@ -51,9 +51,74 @@ export declare class EmailTemplateRegistryBackendService {
     resolveForConfiguredLocale(templateRef: string): ResolvedEmailTemplate;
     /** Return all registered keys as `{templateRef}/{locale}` (diagnostics). */
     getRegisteredKeys(): string[];
-    private validateSystemTemplates;
+    /**
+     * Report email-template coverage against EVERY locale the application enables, not only the one
+     * it authors natively.
+     *
+     * ## What was wrong
+     *
+     * This check resolved the configured primary locale once and tested only that. An application
+     * that declares `enabledLanguages: [en, fr]` and ships ninety-five `labels.en.ts` files and zero
+     * `labels.fr.ts` files started with a clean log — Wonder Todos, measured 2026-09-08. Every French
+     * recipient then silently received English, because {@link resolve} falls back through the
+     * configured chain and lands on the primary. Nothing anywhere said so: the frontend reads
+     * `enabledLanguages` and the dev companion reads it, but no backend surface did, so "the locale
+     * this application owns" was standing in for "the locales this application serves".
+     *
+     * ## Loudness — a WARNING, deliberately, and not an ERROR
+     *
+     * Enabling a language and authoring its email copy are separate acts that happen in that order:
+     * the copy is produced afterwards by the label/translate pipeline. Refusing to boot on the gap
+     * would mean an application cannot start between the two, which is the exact trade the operation
+     * email-template validator already settled in the other direction — "refusing to START an
+     * application because a notice is unauthored trades a missing email for a total outage, which is
+     * the worse failure" (`collectOperationEmailTemplateIssues`). A missing SECONDARY locale is
+     * strictly milder than the case that reasoning was written about: the notice is still delivered,
+     * in the wrong language.
+     *
+     * That is also why this stays inside the registry rather than being handed to the startup config
+     * validator, whose token-backed path is an ERROR that crash-loops a boot. Widening
+     * {@link resolveForConfiguredLocale} — the seam that validator resolves through — to demand every
+     * enabled locale would have converted "ninety-five emails arrive in English" into "this
+     * application cannot start", for the one application the finding came from.
+     *
+     * The warning is not a shrug: it is emitted per non-covered locale, separates the two severities
+     * below, and names the exact `labels.<locale>.ts` file an author has to create — so it is
+     * actionable from the log line alone rather than after an audit.
+     *
+     * ## The two severities it separates
+     *
+     * - **Primary locale** — nothing to fall back TO. A system ref absent here cannot be rendered at
+     *   all, and the send raises `CONFIGURATION`. This is the pre-existing check, unchanged in
+     *   meaning.
+     * - **Any other enabled locale** — the template resolves, in the wrong language. Reported for
+     *   every registered ref rather than only the twelve system ones, because the population that
+     *   goes untranslated is the whole catalog (83 of Wonder Todos' 95 are resource/operation
+     *   templates, which the system-ref loop cannot see).
+     *
+     * Coverage honours the SAME base-language fallback a runtime send uses, so an application that
+     * ships `fr` and enables `fr-CA` is covered rather than reported. It deliberately does NOT accept
+     * a fallback to the primary locale — landing there is the failure being reported.
+     */
+    private validateTemplateLocaleCoverage;
+    /**
+     * Does this ref have labels a recipient in `locale` would actually receive?
+     *
+     * Mirrors the first two candidates of {@link resolve} — exact locale, then base language — and
+     * stops there on purpose. The remaining candidates (configured fallback, configured primary) are
+     * what make an uncovered locale silent at runtime, so accepting them here would make the check
+     * agree with the defect instead of reporting it.
+     */
+    private hasTemplateForLocale;
     private computeStats;
     private buildNotFoundError;
     private getConfiguredPrimaryLocale;
+    /**
+     * Every locale this application enables, primary first. Delegates to the named config helper so
+     * the registry does not re-derive the enabled set — it is the same question the frontend's
+     * language switcher and the companion's translate pass answer, and three private derivations of
+     * one set is how they come to disagree.
+     */
+    private getConfiguredEnabledLocales;
 }
 //# sourceMappingURL=email-template-registry.backend.service.d.ts.map

package/dist/esm/notifications/email/services/email-template-registry.backend.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"email-template-registry.backend.service.d.ts","sourceRoot":"","sources":["../../../../../../src/notifications/email/services/email-template-registry.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAClG,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AACnH,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,sEAAsE,CAAC;AAMpH,OAAO,KAAK,EACV,uBAAuB,EACvB,2BAA2B,EAC5B,MAAM,yEAAyE,CAAC;AAEjF,qFAAqF;AACrF,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,uBAAuB,CAAC,GAAG,CAAC,CAAC;IACzC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,cAAc,EAAE,MAAM,CAAC;CACxB;AAOD,qBACa,mCAAmC;IAMT,OAAO,CAAC,QAAQ,CAAC,MAAM;IACV,OAAO,CAAC,QAAQ,CAAC,YAAY;IAE7E,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IARnC,OAAO,CAAC,OAAO,CAAuD;IAEtE,SAAS,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;gBAG3B,MAAM,EAAE,aAAa,EACR,YAAY,EAAE,0BAA0B,EAExF,gBAAgB,EAAE,uBAAuB;IAM5D;;;;;OAKG;IACH,UAAU,CAAC,WAAW,EAAE,2BAA2B,GAAG,IAAI;IAgB1D;;;;;;;;OAQG;IACH,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,cAAc,CAAC,EAAE,MAAM,GAAG,qBAAqB;IAiCnH;;;;;OAKG;IACH,0BAA0B,CAAC,WAAW,EAAE,MAAM,GAAG,qBAAqB;IAatE,4EAA4E;IAC5E,iBAAiB,IAAI,MAAM,EAAE;IAY7B,OAAO,CAAC,uBAAuB;IAsB/B,OAAO,CAAC,YAAY;IAYpB,OAAO,CAAC,kBAAkB;IAc1B,OAAO,CAAC,0BAA0B;CAGnC"}
+{"version":3,"file":"email-template-registry.backend.service.d.ts","sourceRoot":"","sources":["../../../../../../src/notifications/email/services/email-template-registry.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAClG,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AACnH,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,sEAAsE,CAAC;AAOpH,OAAO,KAAK,EACV,uBAAuB,EACvB,2BAA2B,EAC5B,MAAM,yEAAyE,CAAC;AAEjF,qFAAqF;AACrF,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,uBAAuB,CAAC,GAAG,CAAC,CAAC;IACzC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,cAAc,EAAE,MAAM,CAAC;CACxB;AAOD,qBACa,mCAAmC;IAMT,OAAO,CAAC,QAAQ,CAAC,MAAM;IACV,OAAO,CAAC,QAAQ,CAAC,YAAY;IAE7E,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IARnC,OAAO,CAAC,OAAO,CAAuD;IAEtE,SAAS,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;gBAG3B,MAAM,EAAE,aAAa,EACR,YAAY,EAAE,0BAA0B,EAExF,gBAAgB,EAAE,uBAAuB;IAM5D;;;;;OAKG;IACH,UAAU,CAAC,WAAW,EAAE,2BAA2B,GAAG,IAAI;IAgB1D;;;;;;;;OAQG;IACH,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,cAAc,CAAC,EAAE,MAAM,GAAG,qBAAqB;IAiCnH;;;;;OAKG;IACH,0BAA0B,CAAC,WAAW,EAAE,MAAM,GAAG,qBAAqB;IAatE,4EAA4E;IAC5E,iBAAiB,IAAI,MAAM,EAAE;IAY7B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAgDG;IACH,OAAO,CAAC,8BAA8B;IAyCtC;;;;;;;OAOG;IACH,OAAO,CAAC,oBAAoB;IAc5B,OAAO,CAAC,YAAY;IAYpB,OAAO,CAAC,kBAAkB;IAc1B,OAAO,CAAC,0BAA0B;IAIlC;;;;;OAKG;IACH,OAAO,CAAC,2BAA2B;CAGpC"}

package/dist/esm/notifications/email/services/email-template-registry.backend.service.js

@@ -22,7 +22,7 @@ var __param = (this && this.__param) || function (paramIndex, decorator) {
 };
 import { injectable, inject } from 'inversify';
 import { SAAS_SERVICE_TYPES } from '../../../inject/models/service-types.js';
-import { getConfiguredFallbackLanguage, getConfiguredPrimaryLanguage, } from '../../../config/services/app-configuration.backend.utils.js';
+import { getConfiguredEnabledLanguages, getConfiguredFallbackLanguage, getConfiguredPrimaryLanguage, } from '../../../config/services/app-configuration.backend.utils.js';
 import { ErrorType, getAllSystemTemplateRefs } from '@wildo-ai/saas-models';
 let EmailTemplateRegistryBackendService = class EmailTemplateRegistryBackendService {
     logger;
@@ -54,7 +54,7 @@ let EmailTemplateRegistryBackendService = class EmailTemplateRegistryBackendServ
         }
         const { templateCount, locales } = this.computeStats();
         this.logger.info(`✅ Email template registry: ${templateCount} template(s) across ${locales.size} locale(s)`);
-        this.validateSystemTemplates(locales);
+        this.validateTemplateLocaleCoverage(locales);
     }
     /**
      * Resolve a template by ref with i18n locale fallback.
@@ -116,22 +116,108 @@ let EmailTemplateRegistryBackendService = class EmailTemplateRegistryBackendServ
         return keys;
     }
     // ── Validation ─────────────────────────────────────────────────
-    validateSystemTemplates(registeredLocales) {
+    /**
+     * Report email-template coverage against EVERY locale the application enables, not only the one
+     * it authors natively.
+     *
+     * ## What was wrong
+     *
+     * This check resolved the configured primary locale once and tested only that. An application
+     * that declares `enabledLanguages: [en, fr]` and ships ninety-five `labels.en.ts` files and zero
+     * `labels.fr.ts` files started with a clean log — Wonder Todos, measured 2026-09-08. Every French
+     * recipient then silently received English, because {@link resolve} falls back through the
+     * configured chain and lands on the primary. Nothing anywhere said so: the frontend reads
+     * `enabledLanguages` and the dev companion reads it, but no backend surface did, so "the locale
+     * this application owns" was standing in for "the locales this application serves".
+     *
+     * ## Loudness — a WARNING, deliberately, and not an ERROR
+     *
+     * Enabling a language and authoring its email copy are separate acts that happen in that order:
+     * the copy is produced afterwards by the label/translate pipeline. Refusing to boot on the gap
+     * would mean an application cannot start between the two, which is the exact trade the operation
+     * email-template validator already settled in the other direction — "refusing to START an
+     * application because a notice is unauthored trades a missing email for a total outage, which is
+     * the worse failure" (`collectOperationEmailTemplateIssues`). A missing SECONDARY locale is
+     * strictly milder than the case that reasoning was written about: the notice is still delivered,
+     * in the wrong language.
+     *
+     * That is also why this stays inside the registry rather than being handed to the startup config
+     * validator, whose token-backed path is an ERROR that crash-loops a boot. Widening
+     * {@link resolveForConfiguredLocale} — the seam that validator resolves through — to demand every
+     * enabled locale would have converted "ninety-five emails arrive in English" into "this
+     * application cannot start", for the one application the finding came from.
+     *
+     * The warning is not a shrug: it is emitted per non-covered locale, separates the two severities
+     * below, and names the exact `labels.<locale>.ts` file an author has to create — so it is
+     * actionable from the log line alone rather than after an audit.
+     *
+     * ## The two severities it separates
+     *
+     * - **Primary locale** — nothing to fall back TO. A system ref absent here cannot be rendered at
+     *   all, and the send raises `CONFIGURATION`. This is the pre-existing check, unchanged in
+     *   meaning.
+     * - **Any other enabled locale** — the template resolves, in the wrong language. Reported for
+     *   every registered ref rather than only the twelve system ones, because the population that
+     *   goes untranslated is the whole catalog (83 of Wonder Todos' 95 are resource/operation
+     *   templates, which the system-ref loop cannot see).
+     *
+     * Coverage honours the SAME base-language fallback a runtime send uses, so an application that
+     * ships `fr` and enables `fr-CA` is covered rather than reported. It deliberately does NOT accept
+     * a fallback to the primary locale — landing there is the failure being reported.
+     */
+    validateTemplateLocaleCoverage(registeredLocales) {
         const systemRefs = getAllSystemTemplateRefs();
+        // The primary is asked for by name rather than taken off the front of the enabled set: the
+        // helper does put it first, but the two locales carry DIFFERENT severities below, and a
+        // severity split that depends on array order is one refactor away from being silently wrong.
         const configuredPrimaryLocale = this.getConfiguredPrimaryLocale();
+        const secondaryLocales = this.getConfiguredEnabledLocales().filter((locale) => locale !== configuredPrimaryLocale);
+        const registeredRefs = [...this.entries.keys()];
         if (!registeredLocales.has(configuredPrimaryLocale)) {
             this.logger.warn(`⚠️ No email templates registered for configured primary locale "${configuredPrimaryLocale}".`);
         }
-        const missing = [];
-        for (const ref of systemRefs) {
-            const localeMap = this.entries.get(ref);
-            if (!localeMap?.has(configuredPrimaryLocale)) {
-                missing.push(ref);
+        const missingSystemRefs = systemRefs.filter((ref) => !this.hasTemplateForLocale(ref, configuredPrimaryLocale));
+        if (missingSystemRefs.length > 0) {
+            this.logger.warn(`⚠️ Missing email templates for ${missingSystemRefs.length} system ref(s) in configured primary locale "${configuredPrimaryLocale}": ${missingSystemRefs.join(', ')}`);
+        }
+        for (const locale of secondaryLocales) {
+            const uncovered = registeredRefs.filter((ref) => !this.hasTemplateForLocale(ref, locale));
+            if (uncovered.length === 0) {
+                continue;
             }
+            // Two shapes, because "none of them" and "some of them" have different remedies. When the
+            // whole catalog is uncovered, enumerating it is noise — Wonder Todos would print ninety-five
+            // refs to say "translate everything" — so the headline states the total instead. When only
+            // some are, the names ARE the remedy and are printed.
+            //
+            // Note the totality is measured against `uncovered.length`, not against `registeredLocales`:
+            // that set is exact-match only, so an app shipping `fr` while enabling `fr-CA` would read as
+            // having nothing in `fr-CA` when every one of its templates in fact covers it.
+            if (uncovered.length === registeredRefs.length) {
+                this.logger.warn(`⚠️ No email templates registered for enabled locale "${locale}" — all ${registeredRefs.length} of them fall back to "${configuredPrimaryLocale}", so every email to a "${locale}" recipient is sent in the wrong language. Author labels.${locale}.ts beside each template.`);
+                continue;
+            }
+            this.logger.warn(`⚠️ Missing email templates for ${uncovered.length} ref(s) in enabled locale "${locale}" — these fall back to "${configuredPrimaryLocale}", so a "${locale}" recipient receives them in the wrong language. Create labels.${locale}.ts beside each: ${uncovered.join(', ')}`);
+        }
+    }
+    /**
+     * Does this ref have labels a recipient in `locale` would actually receive?
+     *
+     * Mirrors the first two candidates of {@link resolve} — exact locale, then base language — and
+     * stops there on purpose. The remaining candidates (configured fallback, configured primary) are
+     * what make an uncovered locale silent at runtime, so accepting them here would make the check
+     * agree with the defect instead of reporting it.
+     */
+    hasTemplateForLocale(templateRef, locale) {
+        const localeMap = this.entries.get(templateRef);
+        if (!localeMap) {
+            return false;
         }
-        if (missing.length > 0) {
-            this.logger.warn(`⚠️ Missing email templates for ${missing.length} system ref(s) in configured primary locale "${configuredPrimaryLocale}": ${missing.join(', ')}`);
+        if (localeMap.has(locale)) {
+            return true;
         }
+        const baseLanguage = locale.includes('-') ? locale.split('-')[0] : null;
+        return Boolean(baseLanguage && baseLanguage !== locale && localeMap.has(baseLanguage));
     }
     // ── Helpers ────────────────────────────────────────────────────
     computeStats() {
@@ -157,6 +243,15 @@ let EmailTemplateRegistryBackendService = class EmailTemplateRegistryBackendServ
     getConfiguredPrimaryLocale() {
         return getConfiguredPrimaryLanguage(this.appConfigService.config);
     }
+    /**
+     * Every locale this application enables, primary first. Delegates to the named config helper so
+     * the registry does not re-derive the enabled set — it is the same question the frontend's
+     * language switcher and the companion's translate pass answer, and three private derivations of
+     * one set is how they come to disagree.
+     */
+    getConfiguredEnabledLocales() {
+        return getConfiguredEnabledLanguages(this.appConfigService.config);
+    }
 };
 EmailTemplateRegistryBackendService = __decorate([
     injectable(),

package/dist/esm/notifications/email/services/email-template-registry.backend.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"email-template-registry.backend.service.js","sourceRoot":"","sources":["../../../../../../src/notifications/email/services/email-template-registry.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;;;;;;;;;;;;;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AAIpF,OAAO,EACL,6BAA6B,EAC7B,4BAA4B,GAC7B,MAAM,oEAAoE,CAAC;AAC5E,OAAO,EAAE,SAAS,EAAE,wBAAwB,EAA2B,MAAM,uBAAuB,CAAC;AAmB9F,IAAM,mCAAmC,GAAzC,MAAM,mCAAmC;IAMQ;IACa;IAEhD;IARX,OAAO,GAAG,IAAI,GAAG,EAA4C,CAAC;IAE5D,QAAQ,CAA+D;IAEjF,YACsD,MAAqB,EACR,YAAwC,EAExF,gBAAyC;QAHN,WAAM,GAAN,MAAM,CAAe;QACR,iBAAY,GAAZ,YAAY,CAA4B;QAExF,qBAAgB,GAAhB,gBAAgB,CAAyB;QAE1D,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,uBAAuB,CAAC,CAAC;QACjE,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,uBAAuB,EAAE,KAAK,CAAC,CAAC;IAClE,CAAC;IAED;;;;;OAKG;IACH,UAAU,CAAC,WAAwC;QACjD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAErB,KAAK,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YAC/D,MAAM,SAAS,GAAG,IAAI,GAAG,EAA+B,CAAC;YACzD,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC5D,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;YAChE,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QAC3C,CAAC;QAED,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QACvD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,8BAA8B,aAAa,uBAAuB,OAAO,CAAC,IAAI,YAAY,CAAC,CAAC;QAC7G,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IAED;;;;;;;;OAQG;IACH,OAAO,CAAC,WAAmB,EAAE,MAAc,EAAE,aAAqB,EAAE,cAAuB;QACzF,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAChD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,kBAAkB,CAAC,WAAW,EAAE,CAAC,MAAM,EAAE,cAAc,EAAE,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QAClI,CAAC;QAED,MAAM,UAAU,GAAG,CAAC,MAAM,CAAC,CAAC;QAC5B,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACxE,IAAI,YAAY,IAAI,YAAY,KAAK,MAAM,EAAE,CAAC;YAC5C,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAChC,CAAC;QACD,IAAI,cAAc,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YAC3D,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAClC,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;YACxC,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACjC,CAAC;QAED,KAAK,MAAM,eAAe,IAAI,UAAU,EAAE,CAAC;YACzC,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;YAC7C,IAAI,KAAK,EAAE,CAAC;gBACV,IAAI,CAAC,QAAQ,CAAC,mBAAmB,EAAE,EAAE,WAAW,EAAE,cAAc,EAAE,eAAe,EAAE,CAAC,CAAC;gBACrF,OAAO;oBACL,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,cAAc,EAAE,eAAe;iBAChC,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,IAAI,CAAC,kBAAkB,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IACzD,CAAC;IAED;;;;;OAKG;IACH,0BAA0B,CAAC,WAAmB;QAC5C,MAAM,aAAa,GACjB,4BAA4B,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAC7D,MAAM,cAAc,GAClB,6BAA6B,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAC9D,OAAO,IAAI,CAAC,OAAO,CACjB,WAAW,EACX,aAAa,EACb,aAAa,EACb,cAAc,CACf,CAAC;IACJ,CAAC;IAED,4EAA4E;IAC5E,iBAAiB;QACf,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,KAAK,MAAM,CAAC,WAAW,EAAE,SAAS,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACpD,KAAK,MAAM,MAAM,IAAI,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;gBACtC,IAAI,CAAC,IAAI,CAAC,GAAG,WAAW,IAAI,MAAM,EAAE,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,kEAAkE;IAE1D,uBAAuB,CAAC,iBAA8B;QAC5D,MAAM,UAAU,GAAG,wBAAwB,EAAE,CAAC;QAC9C,MAAM,uBAAuB,GAAG,IAAI,CAAC,0BAA0B,EAAE,CAAC;QAClE,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,uBAAuB,CAAC,EAAE,CAAC;YACpD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mEAAmE,uBAAuB,IAAI,CAAC,CAAC;QACnH,CAAC;QAED,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;YAC7B,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACxC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,uBAAuB,CAAC,EAAE,CAAC;gBAC7C,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACpB,CAAC;QACH,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kCAAkC,OAAO,CAAC,MAAM,gDAAgD,uBAAuB,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACtK,CAAC;IACH,CAAC;IAED,kEAAkE;IAE1D,YAAY;QAClB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,IAAI,aAAa,GAAG,CAAC,CAAC;QACtB,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAC9C,aAAa,IAAI,SAAS,CAAC,IAAI,CAAC;YAChC,KAAK,MAAM,MAAM,IAAI,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;gBACtC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;QACD,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC;IACpC,CAAC;IAEO,kBAAkB,CAAC,WAAmB,EAAE,YAAsB;QACpE,OAAO,IAAI,CAAC,YAAY,CAAC,UAAU,CACjC,SAAS,CAAC,aAAa,EACvB,SAAS,EACT;YACE,OAAO,EAAE;gBACP,OAAO,EAAE,mBAAmB,WAAW,+BAA+B,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;gBAChG,WAAW;gBACX,YAAY;aACb;SACF,CACF,CAAC;IACJ,CAAC;IAEO,0BAA0B;QAChC,OAAO,4BAA4B,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACpE,CAAC;CACF,CAAA;AAlKY,mCAAmC;IAD/C,UAAU,EAAE;IAOR,WAAA,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAA;IACjC,WAAA,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;IAC9C,WAAA,MAAM,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAA;;GARnC,mCAAmC,CAkK/C","sourcesContent":["/**\n * Email Template Registry Backend Service\n *\n * In-memory registry for file-based email template definitions.\n * Templates are injected at startup from app-custom via initialize().\n * Resolution uses exact templateRef match with i18n locale fallback.\n *\n * Each template is a locale-agnostic definition (`template.tsx`) paired\n * with co-located per-locale label files (`labels.{locale}.ts`).\n */\n\nimport { injectable, inject } from 'inversify';\nimport { SAAS_SERVICE_TYPES } from '~wildo-backend-lib/inject/models/service-types';\nimport type { LoggerService } from '~wildo-backend-lib/monitoring/logger/services/logger.service';\nimport type { ErrorBuilderBackendService } from '~wildo-backend-lib/errors/services/error-builder.backend.service';\nimport type { AppConfigurationService } from '~wildo-backend-lib/config/services/app-configuration.backend.service';\nimport {\n  getConfiguredFallbackLanguage,\n  getConfiguredPrimaryLanguage,\n} from '~wildo-backend-lib/config/services/app-configuration.backend.utils';\nimport { ErrorType, getAllSystemTemplateRefs, type WildoError_Backend } from '@wildo-ai/saas-models';\nimport type {\n  EmailTemplateDefinition,\n  EmailTemplateDefinitionsMap,\n} from '~wildo-backend-lib/notifications/email/models/email-template-definition';\n\n/** Resolved template returned by `resolve()`: definition + locale-matched labels. */\nexport interface ResolvedEmailTemplate {\n  definition: EmailTemplateDefinition<any>;\n  labels: Record<string, string>;\n  resolvedLocale: string;\n}\n\ninterface RegistryLocaleEntry {\n  definition: EmailTemplateDefinition<any>;\n  labels: Record<string, string>;\n}\n\n@injectable()\nexport class EmailTemplateRegistryBackendService {\n  private entries = new Map<string, Map<string, RegistryLocaleEntry>>();\n\n  protected logDebug: (message: string, context?: Record<string, unknown>) => void;\n\n  constructor(\n    @inject(SAAS_SERVICE_TYPES.Logger) private readonly logger: LoggerService,\n    @inject(SAAS_SERVICE_TYPES.ErrorBuilderService) private readonly errorBuilder: ErrorBuilderBackendService,\n    @inject(SAAS_SERVICE_TYPES.AppConfigService)\n    private readonly appConfigService: AppConfigurationService,\n  ) {\n    this.logDebug = this.logger.debugByType('EmailTemplateRegistry');\n    this.logger.setDebugTypeLogging('EmailTemplateRegistry', false);\n  }\n\n  /**\n   * Populate the registry from the app-custom template map.\n   *\n   * Keys are bare `templateRef` values. Each entry has a locale-agnostic\n   * template definition + per-locale label objects.\n   */\n  initialize(definitions: EmailTemplateDefinitionsMap): void {\n    this.entries.clear();\n\n    for (const [templateRef, entry] of Object.entries(definitions)) {\n      const localeMap = new Map<string, RegistryLocaleEntry>();\n      for (const [locale, labels] of Object.entries(entry.labels)) {\n        localeMap.set(locale, { definition: entry.template, labels });\n      }\n      this.entries.set(templateRef, localeMap);\n    }\n\n    const { templateCount, locales } = this.computeStats();\n    this.logger.info(`✅ Email template registry: ${templateCount} template(s) across ${locales.size} locale(s)`);\n    this.validateSystemTemplates(locales);\n  }\n\n  /**\n   * Resolve a template by ref with i18n locale fallback.\n   *\n   * 1. Exact locale match (e.g. fr-CA)\n   * 2. Base language fallback (e.g. fr)\n   * 3. Configured fallback locale\n   * 4. Configured primary locale\n   * 5. Throw if none found\n   */\n  resolve(templateRef: string, locale: string, primaryLocale: string, fallbackLocale?: string): ResolvedEmailTemplate {\n    const localeMap = this.entries.get(templateRef);\n    if (!localeMap) {\n      throw this.buildNotFoundError(templateRef, [locale, fallbackLocale, primaryLocale].filter((value): value is string => !!value));\n    }\n\n    const candidates = [locale];\n    const baseLanguage = locale.includes('-') ? locale.split('-')[0] : null;\n    if (baseLanguage && baseLanguage !== locale) {\n      candidates.push(baseLanguage);\n    }\n    if (fallbackLocale && !candidates.includes(fallbackLocale)) {\n      candidates.push(fallbackLocale);\n    }\n    if (!candidates.includes(primaryLocale)) {\n      candidates.push(primaryLocale);\n    }\n\n    for (const candidateLocale of candidates) {\n      const entry = localeMap.get(candidateLocale);\n      if (entry) {\n        this.logDebug('Template resolved', { templateRef, resolvedLocale: candidateLocale });\n        return {\n          definition: entry.definition,\n          labels: entry.labels,\n          resolvedLocale: candidateLocale,\n        };\n      }\n    }\n\n    throw this.buildNotFoundError(templateRef, candidates);\n  }\n\n  /**\n   * Resolve exactly as runtime email delivery does for the application's\n   * configured primary/fallback locales. Startup contract validation uses this\n   * seam so template existence is proven against the same locale semantics as\n   * a later send.\n   */\n  resolveForConfiguredLocale(templateRef: string): ResolvedEmailTemplate {\n    const primaryLocale =\n      getConfiguredPrimaryLanguage(this.appConfigService.config);\n    const fallbackLocale =\n      getConfiguredFallbackLanguage(this.appConfigService.config);\n    return this.resolve(\n      templateRef,\n      primaryLocale,\n      primaryLocale,\n      fallbackLocale,\n    );\n  }\n\n  /** Return all registered keys as `{templateRef}/{locale}` (diagnostics). */\n  getRegisteredKeys(): string[] {\n    const keys: string[] = [];\n    for (const [templateRef, localeMap] of this.entries) {\n      for (const locale of localeMap.keys()) {\n        keys.push(`${templateRef}/${locale}`);\n      }\n    }\n    return keys;\n  }\n\n  // ── Validation ─────────────────────────────────────────────────\n\n  private validateSystemTemplates(registeredLocales: Set<string>): void {\n    const systemRefs = getAllSystemTemplateRefs();\n    const configuredPrimaryLocale = this.getConfiguredPrimaryLocale();\n    if (!registeredLocales.has(configuredPrimaryLocale)) {\n      this.logger.warn(`⚠️ No email templates registered for configured primary locale \"${configuredPrimaryLocale}\".`);\n    }\n\n    const missing: string[] = [];\n    for (const ref of systemRefs) {\n      const localeMap = this.entries.get(ref);\n      if (!localeMap?.has(configuredPrimaryLocale)) {\n        missing.push(ref);\n      }\n    }\n\n    if (missing.length > 0) {\n      this.logger.warn(`⚠️ Missing email templates for ${missing.length} system ref(s) in configured primary locale \"${configuredPrimaryLocale}\": ${missing.join(', ')}`);\n    }\n  }\n\n  // ── Helpers ────────────────────────────────────────────────────\n\n  private computeStats(): { templateCount: number; locales: Set<string> } {\n    const locales = new Set<string>();\n    let templateCount = 0;\n    for (const localeMap of this.entries.values()) {\n      templateCount += localeMap.size;\n      for (const locale of localeMap.keys()) {\n        locales.add(locale);\n      }\n    }\n    return { templateCount, locales };\n  }\n\n  private buildNotFoundError(templateRef: string, triedLocales: string[]): WildoError_Backend {\n    return this.errorBuilder.buildError(\n      ErrorType.CONFIGURATION,\n      undefined,\n      {\n        context: {\n          message: `Email template \"${templateRef}\" not found for any locale [${triedLocales.join(', ')}]`,\n          templateRef,\n          triedLocales,\n        },\n      },\n    );\n  }\n\n  private getConfiguredPrimaryLocale(): string {\n    return getConfiguredPrimaryLanguage(this.appConfigService.config);\n  }\n}\n"]}
+{"version":3,"file":"email-template-registry.backend.service.js","sourceRoot":"","sources":["../../../../../../src/notifications/email/services/email-template-registry.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;;;;;;;;;;;;;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AAIpF,OAAO,EACL,6BAA6B,EAC7B,6BAA6B,EAC7B,4BAA4B,GAC7B,MAAM,oEAAoE,CAAC;AAC5E,OAAO,EAAE,SAAS,EAAE,wBAAwB,EAA2B,MAAM,uBAAuB,CAAC;AAmB9F,IAAM,mCAAmC,GAAzC,MAAM,mCAAmC;IAMQ;IACa;IAEhD;IARX,OAAO,GAAG,IAAI,GAAG,EAA4C,CAAC;IAE5D,QAAQ,CAA+D;IAEjF,YACsD,MAAqB,EACR,YAAwC,EAExF,gBAAyC;QAHN,WAAM,GAAN,MAAM,CAAe;QACR,iBAAY,GAAZ,YAAY,CAA4B;QAExF,qBAAgB,GAAhB,gBAAgB,CAAyB;QAE1D,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,uBAAuB,CAAC,CAAC;QACjE,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,uBAAuB,EAAE,KAAK,CAAC,CAAC;IAClE,CAAC;IAED;;;;;OAKG;IACH,UAAU,CAAC,WAAwC;QACjD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAErB,KAAK,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YAC/D,MAAM,SAAS,GAAG,IAAI,GAAG,EAA+B,CAAC;YACzD,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC5D,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;YAChE,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QAC3C,CAAC;QAED,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QACvD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,8BAA8B,aAAa,uBAAuB,OAAO,CAAC,IAAI,YAAY,CAAC,CAAC;QAC7G,IAAI,CAAC,8BAA8B,CAAC,OAAO,CAAC,CAAC;IAC/C,CAAC;IAED;;;;;;;;OAQG;IACH,OAAO,CAAC,WAAmB,EAAE,MAAc,EAAE,aAAqB,EAAE,cAAuB;QACzF,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAChD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,kBAAkB,CAAC,WAAW,EAAE,CAAC,MAAM,EAAE,cAAc,EAAE,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QAClI,CAAC;QAED,MAAM,UAAU,GAAG,CAAC,MAAM,CAAC,CAAC;QAC5B,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACxE,IAAI,YAAY,IAAI,YAAY,KAAK,MAAM,EAAE,CAAC;YAC5C,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAChC,CAAC;QACD,IAAI,cAAc,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YAC3D,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAClC,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;YACxC,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACjC,CAAC;QAED,KAAK,MAAM,eAAe,IAAI,UAAU,EAAE,CAAC;YACzC,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;YAC7C,IAAI,KAAK,EAAE,CAAC;gBACV,IAAI,CAAC,QAAQ,CAAC,mBAAmB,EAAE,EAAE,WAAW,EAAE,cAAc,EAAE,eAAe,EAAE,CAAC,CAAC;gBACrF,OAAO;oBACL,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,cAAc,EAAE,eAAe;iBAChC,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,IAAI,CAAC,kBAAkB,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IACzD,CAAC;IAED;;;;;OAKG;IACH,0BAA0B,CAAC,WAAmB;QAC5C,MAAM,aAAa,GACjB,4BAA4B,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAC7D,MAAM,cAAc,GAClB,6BAA6B,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAC9D,OAAO,IAAI,CAAC,OAAO,CACjB,WAAW,EACX,aAAa,EACb,aAAa,EACb,cAAc,CACf,CAAC;IACJ,CAAC;IAED,4EAA4E;IAC5E,iBAAiB;QACf,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,KAAK,MAAM,CAAC,WAAW,EAAE,SAAS,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACpD,KAAK,MAAM,MAAM,IAAI,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;gBACtC,IAAI,CAAC,IAAI,CAAC,GAAG,WAAW,IAAI,MAAM,EAAE,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,kEAAkE;IAElE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAgDG;IACK,8BAA8B,CAAC,iBAA8B;QACnE,MAAM,UAAU,GAAG,wBAAwB,EAAE,CAAC;QAC9C,2FAA2F;QAC3F,wFAAwF;QACxF,6FAA6F;QAC7F,MAAM,uBAAuB,GAAG,IAAI,CAAC,0BAA0B,EAAE,CAAC;QAClE,MAAM,gBAAgB,GAAG,IAAI,CAAC,2BAA2B,EAAE,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,KAAK,uBAAuB,CAAC,CAAC;QACnH,MAAM,cAAc,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QAEhD,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,uBAAuB,CAAC,EAAE,CAAC;YACpD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mEAAmE,uBAAuB,IAAI,CAAC,CAAC;QACnH,CAAC;QAED,MAAM,iBAAiB,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC,CAAC;QAC/G,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kCAAkC,iBAAiB,CAAC,MAAM,gDAAgD,uBAAuB,MAAM,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1L,CAAC;QAED,KAAK,MAAM,MAAM,IAAI,gBAAgB,EAAE,CAAC;YACtC,MAAM,SAAS,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;YAC1F,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC3B,SAAS;YACX,CAAC;YAED,0FAA0F;YAC1F,6FAA6F;YAC7F,2FAA2F;YAC3F,sDAAsD;YACtD,EAAE;YACF,6FAA6F;YAC7F,6FAA6F;YAC7F,+EAA+E;YAC/E,IAAI,SAAS,CAAC,MAAM,KAAK,cAAc,CAAC,MAAM,EAAE,CAAC;gBAC/C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wDAAwD,MAAM,WAAW,cAAc,CAAC,MAAM,0BAA0B,uBAAuB,2BAA2B,MAAM,4DAA4D,MAAM,2BAA2B,CAAC,CAAC;gBAChS,SAAS;YACX,CAAC;YAED,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kCAAkC,SAAS,CAAC,MAAM,8BAA8B,MAAM,2BAA2B,uBAAuB,YAAY,MAAM,kEAAkE,MAAM,oBAAoB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjS,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACK,oBAAoB,CAAC,WAAmB,EAAE,MAAc;QAC9D,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAChD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACxE,OAAO,OAAO,CAAC,YAAY,IAAI,YAAY,KAAK,MAAM,IAAI,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC;IACzF,CAAC;IAED,kEAAkE;IAE1D,YAAY;QAClB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,IAAI,aAAa,GAAG,CAAC,CAAC;QACtB,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAC9C,aAAa,IAAI,SAAS,CAAC,IAAI,CAAC;YAChC,KAAK,MAAM,MAAM,IAAI,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;gBACtC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;QACD,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC;IACpC,CAAC;IAEO,kBAAkB,CAAC,WAAmB,EAAE,YAAsB;QACpE,OAAO,IAAI,CAAC,YAAY,CAAC,UAAU,CACjC,SAAS,CAAC,aAAa,EACvB,SAAS,EACT;YACE,OAAO,EAAE;gBACP,OAAO,EAAE,mBAAmB,WAAW,+BAA+B,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;gBAChG,WAAW;gBACX,YAAY;aACb;SACF,CACF,CAAC;IACJ,CAAC;IAEO,0BAA0B;QAChC,OAAO,4BAA4B,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACpE,CAAC;IAED;;;;;OAKG;IACK,2BAA2B;QACjC,OAAO,6BAA6B,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACrE,CAAC;CACF,CAAA;AAtQY,mCAAmC;IAD/C,UAAU,EAAE;IAOR,WAAA,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAA;IACjC,WAAA,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;IAC9C,WAAA,MAAM,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAA;;GARnC,mCAAmC,CAsQ/C","sourcesContent":["/**\n * Email Template Registry Backend Service\n *\n * In-memory registry for file-based email template definitions.\n * Templates are injected at startup from app-custom via initialize().\n * Resolution uses exact templateRef match with i18n locale fallback.\n *\n * Each template is a locale-agnostic definition (`template.tsx`) paired\n * with co-located per-locale label files (`labels.{locale}.ts`).\n */\n\nimport { injectable, inject } from 'inversify';\nimport { SAAS_SERVICE_TYPES } from '~wildo-backend-lib/inject/models/service-types';\nimport type { LoggerService } from '~wildo-backend-lib/monitoring/logger/services/logger.service';\nimport type { ErrorBuilderBackendService } from '~wildo-backend-lib/errors/services/error-builder.backend.service';\nimport type { AppConfigurationService } from '~wildo-backend-lib/config/services/app-configuration.backend.service';\nimport {\n  getConfiguredEnabledLanguages,\n  getConfiguredFallbackLanguage,\n  getConfiguredPrimaryLanguage,\n} from '~wildo-backend-lib/config/services/app-configuration.backend.utils';\nimport { ErrorType, getAllSystemTemplateRefs, type WildoError_Backend } from '@wildo-ai/saas-models';\nimport type {\n  EmailTemplateDefinition,\n  EmailTemplateDefinitionsMap,\n} from '~wildo-backend-lib/notifications/email/models/email-template-definition';\n\n/** Resolved template returned by `resolve()`: definition + locale-matched labels. */\nexport interface ResolvedEmailTemplate {\n  definition: EmailTemplateDefinition<any>;\n  labels: Record<string, string>;\n  resolvedLocale: string;\n}\n\ninterface RegistryLocaleEntry {\n  definition: EmailTemplateDefinition<any>;\n  labels: Record<string, string>;\n}\n\n@injectable()\nexport class EmailTemplateRegistryBackendService {\n  private entries = new Map<string, Map<string, RegistryLocaleEntry>>();\n\n  protected logDebug: (message: string, context?: Record<string, unknown>) => void;\n\n  constructor(\n    @inject(SAAS_SERVICE_TYPES.Logger) private readonly logger: LoggerService,\n    @inject(SAAS_SERVICE_TYPES.ErrorBuilderService) private readonly errorBuilder: ErrorBuilderBackendService,\n    @inject(SAAS_SERVICE_TYPES.AppConfigService)\n    private readonly appConfigService: AppConfigurationService,\n  ) {\n    this.logDebug = this.logger.debugByType('EmailTemplateRegistry');\n    this.logger.setDebugTypeLogging('EmailTemplateRegistry', false);\n  }\n\n  /**\n   * Populate the registry from the app-custom template map.\n   *\n   * Keys are bare `templateRef` values. Each entry has a locale-agnostic\n   * template definition + per-locale label objects.\n   */\n  initialize(definitions: EmailTemplateDefinitionsMap): void {\n    this.entries.clear();\n\n    for (const [templateRef, entry] of Object.entries(definitions)) {\n      const localeMap = new Map<string, RegistryLocaleEntry>();\n      for (const [locale, labels] of Object.entries(entry.labels)) {\n        localeMap.set(locale, { definition: entry.template, labels });\n      }\n      this.entries.set(templateRef, localeMap);\n    }\n\n    const { templateCount, locales } = this.computeStats();\n    this.logger.info(`✅ Email template registry: ${templateCount} template(s) across ${locales.size} locale(s)`);\n    this.validateTemplateLocaleCoverage(locales);\n  }\n\n  /**\n   * Resolve a template by ref with i18n locale fallback.\n   *\n   * 1. Exact locale match (e.g. fr-CA)\n   * 2. Base language fallback (e.g. fr)\n   * 3. Configured fallback locale\n   * 4. Configured primary locale\n   * 5. Throw if none found\n   */\n  resolve(templateRef: string, locale: string, primaryLocale: string, fallbackLocale?: string): ResolvedEmailTemplate {\n    const localeMap = this.entries.get(templateRef);\n    if (!localeMap) {\n      throw this.buildNotFoundError(templateRef, [locale, fallbackLocale, primaryLocale].filter((value): value is string => !!value));\n    }\n\n    const candidates = [locale];\n    const baseLanguage = locale.includes('-') ? locale.split('-')[0] : null;\n    if (baseLanguage && baseLanguage !== locale) {\n      candidates.push(baseLanguage);\n    }\n    if (fallbackLocale && !candidates.includes(fallbackLocale)) {\n      candidates.push(fallbackLocale);\n    }\n    if (!candidates.includes(primaryLocale)) {\n      candidates.push(primaryLocale);\n    }\n\n    for (const candidateLocale of candidates) {\n      const entry = localeMap.get(candidateLocale);\n      if (entry) {\n        this.logDebug('Template resolved', { templateRef, resolvedLocale: candidateLocale });\n        return {\n          definition: entry.definition,\n          labels: entry.labels,\n          resolvedLocale: candidateLocale,\n        };\n      }\n    }\n\n    throw this.buildNotFoundError(templateRef, candidates);\n  }\n\n  /**\n   * Resolve exactly as runtime email delivery does for the application's\n   * configured primary/fallback locales. Startup contract validation uses this\n   * seam so template existence is proven against the same locale semantics as\n   * a later send.\n   */\n  resolveForConfiguredLocale(templateRef: string): ResolvedEmailTemplate {\n    const primaryLocale =\n      getConfiguredPrimaryLanguage(this.appConfigService.config);\n    const fallbackLocale =\n      getConfiguredFallbackLanguage(this.appConfigService.config);\n    return this.resolve(\n      templateRef,\n      primaryLocale,\n      primaryLocale,\n      fallbackLocale,\n    );\n  }\n\n  /** Return all registered keys as `{templateRef}/{locale}` (diagnostics). */\n  getRegisteredKeys(): string[] {\n    const keys: string[] = [];\n    for (const [templateRef, localeMap] of this.entries) {\n      for (const locale of localeMap.keys()) {\n        keys.push(`${templateRef}/${locale}`);\n      }\n    }\n    return keys;\n  }\n\n  // ── Validation ─────────────────────────────────────────────────\n\n  /**\n   * Report email-template coverage against EVERY locale the application enables, not only the one\n   * it authors natively.\n   *\n   * ## What was wrong\n   *\n   * This check resolved the configured primary locale once and tested only that. An application\n   * that declares `enabledLanguages: [en, fr]` and ships ninety-five `labels.en.ts` files and zero\n   * `labels.fr.ts` files started with a clean log — Wonder Todos, measured 2026-09-08. Every French\n   * recipient then silently received English, because {@link resolve} falls back through the\n   * configured chain and lands on the primary. Nothing anywhere said so: the frontend reads\n   * `enabledLanguages` and the dev companion reads it, but no backend surface did, so \"the locale\n   * this application owns\" was standing in for \"the locales this application serves\".\n   *\n   * ## Loudness — a WARNING, deliberately, and not an ERROR\n   *\n   * Enabling a language and authoring its email copy are separate acts that happen in that order:\n   * the copy is produced afterwards by the label/translate pipeline. Refusing to boot on the gap\n   * would mean an application cannot start between the two, which is the exact trade the operation\n   * email-template validator already settled in the other direction — \"refusing to START an\n   * application because a notice is unauthored trades a missing email for a total outage, which is\n   * the worse failure\" (`collectOperationEmailTemplateIssues`). A missing SECONDARY locale is\n   * strictly milder than the case that reasoning was written about: the notice is still delivered,\n   * in the wrong language.\n   *\n   * That is also why this stays inside the registry rather than being handed to the startup config\n   * validator, whose token-backed path is an ERROR that crash-loops a boot. Widening\n   * {@link resolveForConfiguredLocale} — the seam that validator resolves through — to demand every\n   * enabled locale would have converted \"ninety-five emails arrive in English\" into \"this\n   * application cannot start\", for the one application the finding came from.\n   *\n   * The warning is not a shrug: it is emitted per non-covered locale, separates the two severities\n   * below, and names the exact `labels.<locale>.ts` file an author has to create — so it is\n   * actionable from the log line alone rather than after an audit.\n   *\n   * ## The two severities it separates\n   *\n   * - **Primary locale** — nothing to fall back TO. A system ref absent here cannot be rendered at\n   *   all, and the send raises `CONFIGURATION`. This is the pre-existing check, unchanged in\n   *   meaning.\n   * - **Any other enabled locale** — the template resolves, in the wrong language. Reported for\n   *   every registered ref rather than only the twelve system ones, because the population that\n   *   goes untranslated is the whole catalog (83 of Wonder Todos' 95 are resource/operation\n   *   templates, which the system-ref loop cannot see).\n   *\n   * Coverage honours the SAME base-language fallback a runtime send uses, so an application that\n   * ships `fr` and enables `fr-CA` is covered rather than reported. It deliberately does NOT accept\n   * a fallback to the primary locale — landing there is the failure being reported.\n   */\n  private validateTemplateLocaleCoverage(registeredLocales: Set<string>): void {\n    const systemRefs = getAllSystemTemplateRefs();\n    // The primary is asked for by name rather than taken off the front of the enabled set: the\n    // helper does put it first, but the two locales carry DIFFERENT severities below, and a\n    // severity split that depends on array order is one refactor away from being silently wrong.\n    const configuredPrimaryLocale = this.getConfiguredPrimaryLocale();\n    const secondaryLocales = this.getConfiguredEnabledLocales().filter((locale) => locale !== configuredPrimaryLocale);\n    const registeredRefs = [...this.entries.keys()];\n\n    if (!registeredLocales.has(configuredPrimaryLocale)) {\n      this.logger.warn(`⚠️ No email templates registered for configured primary locale \"${configuredPrimaryLocale}\".`);\n    }\n\n    const missingSystemRefs = systemRefs.filter((ref) => !this.hasTemplateForLocale(ref, configuredPrimaryLocale));\n    if (missingSystemRefs.length > 0) {\n      this.logger.warn(`⚠️ Missing email templates for ${missingSystemRefs.length} system ref(s) in configured primary locale \"${configuredPrimaryLocale}\": ${missingSystemRefs.join(', ')}`);\n    }\n\n    for (const locale of secondaryLocales) {\n      const uncovered = registeredRefs.filter((ref) => !this.hasTemplateForLocale(ref, locale));\n      if (uncovered.length === 0) {\n        continue;\n      }\n\n      // Two shapes, because \"none of them\" and \"some of them\" have different remedies. When the\n      // whole catalog is uncovered, enumerating it is noise — Wonder Todos would print ninety-five\n      // refs to say \"translate everything\" — so the headline states the total instead. When only\n      // some are, the names ARE the remedy and are printed.\n      //\n      // Note the totality is measured against `uncovered.length`, not against `registeredLocales`:\n      // that set is exact-match only, so an app shipping `fr` while enabling `fr-CA` would read as\n      // having nothing in `fr-CA` when every one of its templates in fact covers it.\n      if (uncovered.length === registeredRefs.length) {\n        this.logger.warn(`⚠️ No email templates registered for enabled locale \"${locale}\" — all ${registeredRefs.length} of them fall back to \"${configuredPrimaryLocale}\", so every email to a \"${locale}\" recipient is sent in the wrong language. Author labels.${locale}.ts beside each template.`);\n        continue;\n      }\n\n      this.logger.warn(`⚠️ Missing email templates for ${uncovered.length} ref(s) in enabled locale \"${locale}\" — these fall back to \"${configuredPrimaryLocale}\", so a \"${locale}\" recipient receives them in the wrong language. Create labels.${locale}.ts beside each: ${uncovered.join(', ')}`);\n    }\n  }\n\n  /**\n   * Does this ref have labels a recipient in `locale` would actually receive?\n   *\n   * Mirrors the first two candidates of {@link resolve} — exact locale, then base language — and\n   * stops there on purpose. The remaining candidates (configured fallback, configured primary) are\n   * what make an uncovered locale silent at runtime, so accepting them here would make the check\n   * agree with the defect instead of reporting it.\n   */\n  private hasTemplateForLocale(templateRef: string, locale: string): boolean {\n    const localeMap = this.entries.get(templateRef);\n    if (!localeMap) {\n      return false;\n    }\n    if (localeMap.has(locale)) {\n      return true;\n    }\n    const baseLanguage = locale.includes('-') ? locale.split('-')[0] : null;\n    return Boolean(baseLanguage && baseLanguage !== locale && localeMap.has(baseLanguage));\n  }\n\n  // ── Helpers ────────────────────────────────────────────────────\n\n  private computeStats(): { templateCount: number; locales: Set<string> } {\n    const locales = new Set<string>();\n    let templateCount = 0;\n    for (const localeMap of this.entries.values()) {\n      templateCount += localeMap.size;\n      for (const locale of localeMap.keys()) {\n        locales.add(locale);\n      }\n    }\n    return { templateCount, locales };\n  }\n\n  private buildNotFoundError(templateRef: string, triedLocales: string[]): WildoError_Backend {\n    return this.errorBuilder.buildError(\n      ErrorType.CONFIGURATION,\n      undefined,\n      {\n        context: {\n          message: `Email template \"${templateRef}\" not found for any locale [${triedLocales.join(', ')}]`,\n          templateRef,\n          triedLocales,\n        },\n      },\n    );\n  }\n\n  private getConfiguredPrimaryLocale(): string {\n    return getConfiguredPrimaryLanguage(this.appConfigService.config);\n  }\n\n  /**\n   * Every locale this application enables, primary first. Delegates to the named config helper so\n   * the registry does not re-derive the enabled set — it is the same question the frontend's\n   * language switcher and the companion's translate pass answer, and three private derivations of\n   * one set is how they come to disagree.\n   */\n  private getConfiguredEnabledLocales(): string[] {\n    return getConfiguredEnabledLanguages(this.appConfigService.config);\n  }\n}\n"]}

package/dist/esm/notifications/email/services/email-template-sandbox.backend.service.d.ts

@@ -1,58 +0,0 @@
-/**
- * Email Template Sandbox Backend Service
- *
- * Provides a secure execution environment for running compiled email templates.
- * Uses Node.js VM with restricted globals and a controlled require function.
- */
-import type { LoggerService } from '../../../monitoring/logger/services/logger.service';
-import type { ErrorBuilderBackendService } from '../../../errors/services/error-builder.backend.service';
-export interface SandboxExecutionResult {
-    success: boolean;
-    result?: unknown;
-    error?: string;
-    durationMs: number;
-}
-export interface SandboxOptions {
-    /** Timeout in milliseconds (default: 5000) */
-    timeout?: number;
-    /** Additional context to pass to the template */
-    additionalContext?: Record<string, unknown>;
-}
-export declare class EmailTemplateSandboxBackendService {
-    private readonly logger;
-    private readonly errorBuilder;
-    private emailComponentsModule;
-    protected logDebug: (message: string, context?: Record<string, unknown>) => void;
-    constructor(logger: LoggerService, errorBuilder: ErrorBuilderBackendService);
-    /**
-     * Execute a compiled module in the sandbox
-     *
-     * @param compiledCode - The compiled JavaScript code
-     * @param context - The context to pass to the template
-     * @param options - Execution options
-     * @returns Execution result with the rendered output or error
-     */
-    execute(compiledCode: string, context: Record<string, unknown>, options?: SandboxOptions): Promise<SandboxExecutionResult>;
-    /**
-     * Create a safe require function that only allows specific modules
-     */
-    private createSandboxRequire;
-    /**
-     * Get the email components module (lazy loaded)
-     * Uses multiple resolution strategies for robustness across different build outputs
-     */
-    private getEmailComponentsModule;
-    /**
-     * Create a safe console that logs through our logger
-     */
-    private createSafeConsole;
-    /**
-     * Check if a module is allowed in the sandbox
-     */
-    isModuleAllowed(moduleName: string): boolean;
-    /**
-     * Get list of allowed modules (for LLM context)
-     */
-    getAllowedModules(): string[];
-}
-//# sourceMappingURL=email-template-sandbox.backend.service.d.ts.map

package/dist/esm/notifications/email/services/email-template-sandbox.backend.service.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"email-template-sandbox.backend.service.d.ts","sourceRoot":"","sources":["../../../../../../src/notifications/email/services/email-template-sandbox.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAClG,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAMnH,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,8CAA8C;IAC9C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iDAAiD;IACjD,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC7C;AAuBD,qBACa,kCAAkC;IAMR,OAAO,CAAC,QAAQ,CAAC,MAAM;IACV,OAAO,CAAC,QAAQ,CAAC,YAAY;IAN/E,OAAO,CAAC,qBAAqB,CAAwB;IAErD,SAAS,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;gBAG3B,MAAM,EAAE,aAAa,EACR,YAAY,EAAE,0BAA0B;IAM3G;;;;;;;OAOG;IACG,OAAO,CACX,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,OAAO,GAAE,cAAmB,GAC3B,OAAO,CAAC,sBAAsB,CAAC;IA8ElC;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAqB5B;;;OAGG;IACH,OAAO,CAAC,wBAAwB;IAiChC;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAoBzB;;OAEG;IACH,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO;IAI5C;;OAEG;IACH,iBAAiB,IAAI,MAAM,EAAE;CAG9B"}

package/dist/esm/notifications/email/services/email-template-sandbox.backend.service.js

@@ -1,223 +0,0 @@
-/**
- * Email Template Sandbox Backend Service
- *
- * Provides a secure execution environment for running compiled email templates.
- * Uses Node.js VM with restricted globals and a controlled require function.
- */
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-var __param = (this && this.__param) || function (paramIndex, decorator) {
-    return function (target, key) { decorator(target, key, paramIndex); }
-};
-import { injectable, inject } from 'inversify';
-import * as vm from 'vm';
-import { ErrorType, ErrorCustomMessageReference } from '@wildo-ai/saas-models';
-import { SAAS_SERVICE_TYPES } from '../../../inject/models/service-types.js';
-// ─────────────────────────────────────────────────────────────────────────────
-// CONSTANTS
-// ─────────────────────────────────────────────────────────────────────────────
-const DEFAULT_TIMEOUT_MS = 5000;
-/**
- * Allowed modules that can be required in the sandbox
- */
-const ALLOWED_MODULES = new Set([
-    'react',
-    'react-dom',
-    '@react-email/components',
-    '@react-email/render',
-    '@wildo-ai/email-components',
-]);
-// ─────────────────────────────────────────────────────────────────────────────
-// SERVICE
-// ─────────────────────────────────────────────────────────────────────────────
-let EmailTemplateSandboxBackendService = class EmailTemplateSandboxBackendService {
-    logger;
-    errorBuilder;
-    emailComponentsModule = null;
-    logDebug;
-    constructor(logger, errorBuilder) {
-        this.logger = logger;
-        this.errorBuilder = errorBuilder;
-        this.logDebug = this.logger.debugByType('EmailTemplateSandboxBackendService');
-        this.logger.setDebugTypeLogging('EmailTemplateSandboxBackendService', false);
-    }
-    /**
-     * Execute a compiled module in the sandbox
-     *
-     * @param compiledCode - The compiled JavaScript code
-     * @param context - The context to pass to the template
-     * @param options - Execution options
-     * @returns Execution result with the rendered output or error
-     */
-    async execute(compiledCode, context, options = {}) {
-        const startTime = Date.now();
-        const timeout = options.timeout ?? DEFAULT_TIMEOUT_MS;
-        this.logDebug('Executing email template in sandbox', { timeout });
-        try {
-            // Create sandbox require function
-            const sandboxRequire = this.createSandboxRequire();
-            // Create sandbox globals
-            const sandbox = {
-                module: { exports: {} },
-                exports: {},
-                require: sandboxRequire,
-                console: this.createSafeConsole(),
-                // Pass context values
-                __context: context,
-                __brand: context.__brand || {},
-                // Provide Buffer for any serialization needs
-                Buffer: {
-                    from: Buffer.from.bind(Buffer),
-                    isBuffer: Buffer.isBuffer.bind(Buffer),
-                },
-            };
-            // Add additional context if provided
-            if (options.additionalContext) {
-                Object.assign(sandbox, options.additionalContext);
-            }
-            // Create VM context
-            vm.createContext(sandbox);
-            // Wrap the code to capture the default export
-            const wrappedCode = `
-        (function(module, exports, require, __context, __brand) {
-          ${compiledCode}
-          return module.exports.default || module.exports;
-        })(module, exports, require, __context, __brand);
-      `;
-            // Execute with timeout
-            const script = new vm.Script(wrappedCode, {
-                filename: 'email-template.js',
-            });
-            const result = script.runInContext(sandbox, {
-                timeout,
-                displayErrors: true,
-            });
-            const durationMs = Date.now() - startTime;
-            this.logDebug('Sandbox execution completed', { durationMs });
-            return {
-                success: true,
-                result,
-                durationMs,
-            };
-        }
-        catch (err) {
-            const error = err;
-            const durationMs = Date.now() - startTime;
-            this.logger.error('Sandbox execution failed', {
-                error: error.message,
-                durationMs,
-                isTimeout: error.message.includes('Script execution timed out'),
-            });
-            return {
-                success: false,
-                error: error.message,
-                durationMs,
-            };
-        }
-    }
-    /**
-     * Create a safe require function that only allows specific modules
-     */
-    createSandboxRequire() {
-        return (moduleName) => {
-            // Handle @wildo-ai/email-components specially - load our internal module
-            if (moduleName === '@wildo-ai/email-components') {
-                return this.getEmailComponentsModule();
-            }
-            // Check if module is in allowlist
-            if (!ALLOWED_MODULES.has(moduleName)) {
-                throw this.errorBuilder.buildError(ErrorType.VALIDATION, undefined, {
-                    customMessageReference: ErrorCustomMessageReference.SERVICE_RESOURCE_VALIDATION_FAILED,
-                    context: { moduleName }, // diagnostic (log-only)
-                });
-            }
-            // For allowed modules, use the real require
-            // eslint-disable-next-line @typescript-eslint/no-require-imports
-            return require(moduleName);
-        };
-    }
-    /**
-     * Get the email components module (lazy loaded)
-     * Uses multiple resolution strategies for robustness across different build outputs
-     */
-    getEmailComponentsModule() {
-        if (!this.emailComponentsModule) {
-            // Load our internal email components with multiple resolution strategies
-            const resolutionStrategies = [
-                // Strategy 1: Relative path from current file
-                () => require('../components/email-components'),
-                // Strategy 2: Absolute path using __dirname
-                () => require(require('path').resolve(__dirname, '../components/email-components')),
-                // Strategy 3: Try dist/esm path
-                () => require(require('path').resolve(__dirname, '../../dist/esm/notifications/email/components/email-components')),
-                // Strategy 4: Try dist/cjs path
-                () => require(require('path').resolve(__dirname, '../../dist/cjs/notifications/email/components/email-components')),
-            ];
-            for (const strategy of resolutionStrategies) {
-                try {
-                    this.emailComponentsModule = strategy();
-                    this.logDebug('Email components module loaded successfully');
-                    return this.emailComponentsModule;
-                }
-                catch {
-                    // Try next strategy
-                }
-            }
-            this.logger.error('Failed to load email components module with any strategy');
-            throw this.errorBuilder.buildError(ErrorType.CONFIGURATION, undefined, {
-                customMessageReference: ErrorCustomMessageReference.CONFIGURATION,
-                context: { message: 'Email components module not available' },
-            });
-        }
-        return this.emailComponentsModule;
-    }
-    /**
-     * Create a safe console that logs through our logger
-     */
-    createSafeConsole() {
-        return {
-            log: (...args) => {
-                this.logger.debug('Template console.log', { args });
-            },
-            warn: (...args) => {
-                this.logger.warn('Template console.warn', { args });
-            },
-            error: (...args) => {
-                this.logger.error('Template console.error', { args });
-            },
-            info: (...args) => {
-                this.logger.info('Template console.info', { args });
-            },
-            debug: (...args) => {
-                this.logger.debug('Template console.debug', { args });
-            },
-        };
-    }
-    /**
-     * Check if a module is allowed in the sandbox
-     */
-    isModuleAllowed(moduleName) {
-        return ALLOWED_MODULES.has(moduleName);
-    }
-    /**
-     * Get list of allowed modules (for LLM context)
-     */
-    getAllowedModules() {
-        return Array.from(ALLOWED_MODULES);
-    }
-};
-EmailTemplateSandboxBackendService = __decorate([
-    injectable(),
-    __param(0, inject(SAAS_SERVICE_TYPES.Logger)),
-    __param(1, inject(SAAS_SERVICE_TYPES.ErrorBuilderService)),
-    __metadata("design:paramtypes", [Function, Function])
-], EmailTemplateSandboxBackendService);
-export { EmailTemplateSandboxBackendService };
-//# sourceMappingURL=email-template-sandbox.backend.service.js.map