@wopr-network/platform-core 1.28.0 → 1.30.0

package/src/email/drizzle-notification-template-repository.ts

@@ -0,0 +1,108 @@
+/**
+ * DrizzleNotificationTemplateRepository — Drizzle ORM implementation
+ * of INotificationTemplateRepository.
+ */
+
+import crypto from "node:crypto";
+import { eq } from "drizzle-orm";
+import type { PgDatabase } from "drizzle-orm/pg-core";
+import { notificationTemplates } from "../db/schema/notification-templates.js";
+import type { INotificationTemplateRepository, NotificationTemplateRow } from "./notification-repository-types.js";
+
+export class DrizzleNotificationTemplateRepository implements INotificationTemplateRepository {
+  constructor(private readonly db: PgDatabase<never>) {}
+
+  async getByName(name: string): Promise<NotificationTemplateRow | null> {
+    const rows = await this.db
+      .select()
+      .from(notificationTemplates)
+      .where(eq(notificationTemplates.name, name))
+      .limit(1);
+    if (rows.length === 0) return null;
+    return this.toRow(rows[0]);
+  }
+
+  async list(): Promise<NotificationTemplateRow[]> {
+    const rows = await this.db.select().from(notificationTemplates);
+    return rows.map((r) => this.toRow(r));
+  }
+
+  async upsert(
+    name: string,
+    template: Omit<NotificationTemplateRow, "id" | "name" | "createdAt" | "updatedAt">,
+  ): Promise<void> {
+    const now = Math.floor(Date.now() / 1000);
+    await this.db
+      .insert(notificationTemplates)
+      .values({
+        id: crypto.randomUUID(),
+        name,
+        description: template.description,
+        subject: template.subject,
+        htmlBody: template.htmlBody,
+        textBody: template.textBody,
+        active: template.active,
+        createdAt: now,
+        updatedAt: now,
+      })
+      .onConflictDoUpdate({
+        target: notificationTemplates.name,
+        set: {
+          description: template.description,
+          subject: template.subject,
+          htmlBody: template.htmlBody,
+          textBody: template.textBody,
+          active: template.active,
+          updatedAt: now,
+        },
+      });
+  }
+
+  async seed(
+    templates: Array<{
+      name: string;
+      description: string;
+      subject: string;
+      htmlBody: string;
+      textBody: string;
+    }>,
+  ): Promise<number> {
+    if (templates.length === 0) return 0;
+
+    const now = Math.floor(Date.now() / 1000);
+    const values = templates.map((t) => ({
+      id: crypto.randomUUID(),
+      name: t.name,
+      description: t.description,
+      subject: t.subject,
+      htmlBody: t.htmlBody,
+      textBody: t.textBody,
+      active: true,
+      createdAt: now,
+      updatedAt: now,
+    }));
+
+    // INSERT ... ON CONFLICT DO NOTHING — preserves admin edits
+    const result = await this.db
+      .insert(notificationTemplates)
+      .values(values)
+      .onConflictDoNothing({ target: notificationTemplates.name })
+      .returning({ id: notificationTemplates.id });
+
+    return result.length;
+  }
+
+  private toRow(r: typeof notificationTemplates.$inferSelect): NotificationTemplateRow {
+    return {
+      id: r.id,
+      name: r.name,
+      description: r.description,
+      subject: r.subject,
+      htmlBody: r.htmlBody,
+      textBody: r.textBody,
+      active: r.active,
+      createdAt: r.createdAt,
+      updatedAt: r.updatedAt,
+    };
+  }
+}

package/src/email/handlebars-renderer.ts

@@ -0,0 +1,64 @@
+/**
+ * HandlebarsRenderer — compiles DB-driven templates with Handlebars.
+ *
+ * Registers shared helpers (eq, gt, formatDate, escapeHtml) at module load
+ * so every compiled template can use them.
+ */
+
+import Handlebars from "handlebars";
+import type { INotificationTemplateRepository } from "./notification-template-repository.js";
+import type { TemplateResult } from "./templates.js";
+
+// ---------------------------------------------------------------------------
+// Register global helpers
+// ---------------------------------------------------------------------------
+
+Handlebars.registerHelper("eq", (a: unknown, b: unknown) => a === b);
+
+Handlebars.registerHelper("gt", (a: unknown, b: unknown) => Number(a) > Number(b));
+
+Handlebars.registerHelper("formatDate", (timestamp: unknown) => {
+  const ms = Number(timestamp);
+  if (Number.isNaN(ms)) return String(timestamp);
+  return new Date(ms).toLocaleDateString("en-US", {
+    year: "numeric",
+    month: "long",
+    day: "numeric",
+  });
+});
+
+Handlebars.registerHelper("escapeHtml", (text: unknown) => {
+  const str = String(text ?? "");
+  const map: Record<string, string> = {
+    "&": "&amp;",
+    "<": "&lt;",
+    ">": "&gt;",
+    '"': "&quot;",
+    "'": "&#39;",
+  };
+  return new Handlebars.SafeString(str.replace(/[&<>"']/g, (c) => map[c] ?? c));
+});
+
+// ---------------------------------------------------------------------------
+// Renderer
+// ---------------------------------------------------------------------------
+
+export class HandlebarsRenderer {
+  constructor(private readonly templateRepo: INotificationTemplateRepository) {}
+
+  /**
+   * Render a named template with the given data.
+   * Returns null if the template does not exist or is inactive.
+   */
+  async render(templateName: string, data: Record<string, unknown>): Promise<TemplateResult | null> {
+    const template = await this.templateRepo.getByName(templateName);
+    if (!template || !template.active) return null;
+
+    const ctx = { currentYear: new Date().getFullYear(), ...data };
+    const subject = Handlebars.compile(template.subject)(ctx);
+    const html = Handlebars.compile(template.htmlBody)(ctx);
+    const text = Handlebars.compile(template.textBody)(ctx);
+
+    return { subject, html, text };
+  }
+}

package/src/email/index.ts

@@ -13,8 +13,11 @@ export type { BillingEmailServiceConfig, BillingEmailType } from "./billing-emai
 export { BillingEmailService } from "./billing-emails.js";
 export type { EmailClientConfig, EmailSendResult, SendTemplateEmailOpts } from "./client.js";
 export { EmailClient, getEmailClient, resetEmailClient, setEmailClient } from "./client.js";
+export { DEFAULT_TEMPLATES } from "./default-templates.js";
 export type { IBillingEmailRepository } from "./drizzle-billing-email-repository.js";
 export { DrizzleBillingEmailRepository } from "./drizzle-billing-email-repository.js";
+export { DrizzleNotificationTemplateRepository } from "./drizzle-notification-template-repository.js";
+export { HandlebarsRenderer } from "./handlebars-renderer.js";
 export type { INotificationPreferencesRepository } from "./notification-preferences-store.js";
 export { DrizzleNotificationPreferencesStore } from "./notification-preferences-store.js";
 export type { INotificationQueueRepository } from "./notification-queue-store.js";
@@ -28,6 +31,7 @@ export type {
   QueuedNotification,
 } from "./notification-repository-types.js";
 export { NotificationService } from "./notification-service.js";
+export type { INotificationTemplateRepository, NotificationTemplateRow } from "./notification-template-repository.js";
 export type { TemplateName as NotificationTemplateName } from "./notification-templates.js";
 export { renderNotificationTemplate } from "./notification-templates.js";
 export { NotificationWorker } from "./notification-worker.js";

package/src/email/notification-preferences-store.test.ts

@@ -35,6 +35,7 @@ describe("DrizzleNotificationPreferencesStore", () => {
         agent_status_changes: false,
         account_role_changes: true,
         account_team_invites: true,
+        fleet_updates: true,
       });
     });
 

package/src/email/notification-preferences-store.ts

@@ -23,6 +23,7 @@ const DEFAULTS: NotificationPrefs = {
   agent_status_changes: false,
   account_role_changes: true,
   account_team_invites: true,
+  fleet_updates: true,
 };
 
 export class DrizzleNotificationPreferencesStore implements INotificationPreferencesRepository {
@@ -46,6 +47,7 @@ export class DrizzleNotificationPreferencesStore implements INotificationPrefere
       agent_status_changes: row.agentStatusChanges,
       account_role_changes: row.accountRoleChanges,
       account_team_invites: row.accountTeamInvites,
+      fleet_updates: row.fleetUpdates,
     };
   }
 
@@ -60,6 +62,7 @@ export class DrizzleNotificationPreferencesStore implements INotificationPrefere
     if (prefs.agent_status_changes !== undefined) values.agentStatusChanges = prefs.agent_status_changes;
     if (prefs.account_role_changes !== undefined) values.accountRoleChanges = prefs.account_role_changes;
     if (prefs.account_team_invites !== undefined) values.accountTeamInvites = prefs.account_team_invites;
+    if (prefs.fleet_updates !== undefined) values.fleetUpdates = prefs.fleet_updates;
 
     // Get existing row to merge with defaults
     const existing = await this.db
@@ -81,6 +84,7 @@ export class DrizzleNotificationPreferencesStore implements INotificationPrefere
         agentStatusChanges: DEFAULTS.agent_status_changes,
         accountRoleChanges: DEFAULTS.account_role_changes,
         accountTeamInvites: DEFAULTS.account_team_invites,
+        fleetUpdates: DEFAULTS.fleet_updates,
         updatedAt: Math.floor(Date.now() / 1000),
         ...values,
       };

package/src/email/notification-repository-types.ts

@@ -36,6 +36,7 @@ export interface NotificationPrefs {
   agent_status_changes: boolean;
   account_role_changes: boolean;
   account_team_invites: boolean;
+  fleet_updates: boolean;
 }
 
 // ---------------------------------------------------------------------------
@@ -78,6 +79,46 @@ export interface NotificationRow {
   sentAt: number | null;
 }
 
+// ---------------------------------------------------------------------------
+// Notification Template Types
+// ---------------------------------------------------------------------------
+
+/** Row shape returned by the template repository. */
+export interface NotificationTemplateRow {
+  id: string;
+  name: string;
+  description: string | null;
+  subject: string;
+  htmlBody: string;
+  textBody: string;
+  active: boolean;
+  createdAt: number;
+  updatedAt: number;
+}
+
+/** Repository contract for notification templates. */
+export interface INotificationTemplateRepository {
+  getByName(name: string): Promise<NotificationTemplateRow | null>;
+  list(): Promise<NotificationTemplateRow[]>;
+  upsert(
+    name: string,
+    template: Omit<NotificationTemplateRow, "id" | "name" | "createdAt" | "updatedAt">,
+  ): Promise<void>;
+  /**
+   * Seed default templates — INSERT OR IGNORE so admin edits are not overwritten.
+   * @returns number of templates inserted (not already present).
+   */
+  seed(
+    templates: Array<{
+      name: string;
+      description: string;
+      subject: string;
+      htmlBody: string;
+      textBody: string;
+    }>,
+  ): Promise<number>;
+}
+
 // ---------------------------------------------------------------------------
 // Repository Interfaces
 // ---------------------------------------------------------------------------

package/src/email/notification-service.ts

@@ -255,6 +255,37 @@ export class NotificationService {
     this.queue.enqueue(tenantId, "account-deletion-completed", { email });
   }
 
+  // ---------------------------------------------------------------------------
+  // Fleet Updates
+  // ---------------------------------------------------------------------------
+
+  notifyFleetUpdateAvailable(
+    tenantId: string,
+    email: string,
+    version: string,
+    changelogDate: string,
+    changelogSummary: string,
+  ): void {
+    this.queue.enqueue(tenantId, "fleet-update-available", {
+      email,
+      version,
+      changelogDate,
+      changelogSummary,
+      fleetUrl: `${this.appBaseUrl}/fleet`,
+    });
+  }
+
+  notifyFleetUpdateComplete(tenantId: string, email: string, version: string, succeeded: number, failed: number): void {
+    this.queue.enqueue(tenantId, "fleet-update-complete", {
+      email,
+      version,
+      succeeded,
+      failed,
+      total: succeeded + failed,
+      fleetUrl: `${this.appBaseUrl}/fleet`,
+    });
+  }
+
   // ---------------------------------------------------------------------------
   // Admin custom email
   // ---------------------------------------------------------------------------

package/src/email/notification-template-repository.ts

@@ -0,0 +1,8 @@
+/**
+ * INotificationTemplateRepository — interface for DB-driven email templates.
+ *
+ * Types live in notification-repository-types.ts; this file re-exports them
+ * so existing imports continue to work.
+ */
+
+export type { INotificationTemplateRepository, NotificationTemplateRow } from "./notification-repository-types.js";

package/src/email/notification-templates.ts

@@ -39,6 +39,9 @@ export type NotificationTemplateName =
   | "dividend-weekly-digest"
   | "affiliate-credit-match"
   | "spend-alert"
+  // Fleet updates
+  | "fleet-update-available"
+  | "fleet-update-complete"
   // Passthrough to existing templates
   | "low-balance"
   | "credit-purchase-receipt"
@@ -657,6 +660,64 @@ export function renderNotificationTemplate(template: TemplateName, data: Record<
       return accountDeletionCancelledTemplate(data);
     case "account-deletion-completed":
       return accountDeletionCompletedTemplate(data);
+    case "fleet-update-available": {
+      const version = escapeHtml((data.version as string) || "");
+      const changelogDate = escapeHtml((data.changelogDate as string) || "");
+      const changelogSummary = escapeHtml((data.changelogSummary as string) || "");
+      const fleetUrl = (data.fleetUrl as string) || "";
+      const faParts = [
+        heading(`Fleet Update Available: ${version}`),
+        paragraph(
+          `<p>A new version <strong>${version}</strong> is available for your fleet.</p>` +
+            (changelogDate ? `<p style="color: #718096; font-size: 14px;">Released: ${changelogDate}</p>` : "") +
+            (changelogSummary
+              ? `<div style="background: #f7fafc; border-left: 4px solid #2563eb; padding: 12px 16px; margin: 16px 0; color: #4a5568; font-size: 14px; line-height: 22px;">${changelogSummary}</div>`
+              : ""),
+        ),
+      ];
+      if (fleetUrl) faParts.push(button(fleetUrl, "View Fleet Dashboard"));
+      faParts.push(footer("Review the changelog and update when ready."));
+      return {
+        subject: `Fleet update available: ${data.version}`,
+        html: wrapHtml("Fleet Update Available", faParts.join("\n")),
+        text: `Fleet Update Available: ${data.version}\n\nA new version ${data.version} is available for your fleet.\n${changelogDate ? `Released: ${data.changelogDate}\n` : ""}${changelogSummary ? `Changelog: ${data.changelogSummary}\n` : ""}${fleetUrl ? `\nFleet dashboard: ${fleetUrl}\n` : ""}${copyright()}`,
+      };
+    }
+    case "fleet-update-complete": {
+      const fcVersion = escapeHtml((data.version as string) || "");
+      const succeeded = Number(data.succeeded) || 0;
+      const failed = Number(data.failed) || 0;
+      const total = succeeded + failed;
+      const fleetUrl2 = (data.fleetUrl as string) || "";
+      const statusText = failed === 0 ? "all instances healthy" : `${failed} instance(s) failed`;
+      const fcParts = [
+        heading(`Fleet Updated to ${fcVersion}`),
+        paragraph(
+          `<p>Your fleet update to <strong>${fcVersion}</strong> has completed.</p>` +
+            `<table style="width: 100%; border-collapse: collapse; margin: 16px 0;">` +
+            `<tr><td style="padding: 8px 0; color: #4a5568;">Succeeded</td><td style="padding: 8px 0; text-align: right; font-weight: 600; color: #22c55e;">${succeeded}</td></tr>` +
+            `<tr><td style="padding: 8px 0; color: #4a5568;">Failed</td><td style="padding: 8px 0; text-align: right; font-weight: 600; color: ${failed > 0 ? "#dc2626" : "#22c55e"};">${failed}</td></tr>` +
+            `<tr style="border-top: 2px solid #e2e8f0;"><td style="padding: 12px 0; color: #4a5568; font-weight: 600;">Total</td><td style="padding: 12px 0; text-align: right; font-weight: 700; color: #1a1a1a;">${total}</td></tr>` +
+            `</table>` +
+            (failed > 0
+              ? `<p style="color: #dc2626;">Some instances failed to update. Check the fleet dashboard for details.</p>`
+              : ""),
+        ),
+      ];
+      if (fleetUrl2) fcParts.push(button(fleetUrl2, "View Fleet Dashboard"));
+      fcParts.push(
+        footer(
+          failed === 0
+            ? "All instances are running the latest version."
+            : "Review failed instances and retry if needed.",
+        ),
+      );
+      return {
+        subject: `Fleet updated to ${data.version} \u2014 ${statusText}`,
+        html: wrapHtml("Fleet Update Complete", fcParts.join("\n")),
+        text: `Fleet Updated to ${data.version}\n\nSucceeded: ${succeeded}\nFailed: ${failed}\nTotal: ${total}\n${failed > 0 ? "\nSome instances failed to update.\n" : ""}${fleetUrl2 ? `\nFleet dashboard: ${fleetUrl2}\n` : ""}${copyright()}`,
+      };
+    }
     case "low-balance":
       return {
         subject: "Your WOPR credits are running low",

package/src/email/notification-worker.ts

@@ -7,17 +7,20 @@
 
 import { logger } from "../config/logger.js";
 import type { EmailClient } from "./client.js";
+import type { HandlebarsRenderer } from "./handlebars-renderer.js";
 import type {
   INotificationPreferencesRepository,
   INotificationQueueRepository,
 } from "./notification-repository-types.js";
 import { renderNotificationTemplate, type TemplateName } from "./notification-templates.js";
+import type { TemplateResult } from "./templates.js";
 
 export interface NotificationWorkerConfig {
   queue: INotificationQueueRepository;
   emailClient: EmailClient;
   preferences: INotificationPreferencesRepository;
   batchSize?: number;
+  handlebarsRenderer?: HandlebarsRenderer;
 }
 
 /** Templates that bypass user preference checks — always sent. */
@@ -50,6 +53,8 @@ const PREF_MAP: Record<string, string> = {
   "dividend-weekly-digest": "billing_receipts",
   "role-changed": "account_role_changes",
   "team-invite": "account_team_invites",
+  "fleet-update-available": "fleet_updates",
+  "fleet-update-complete": "fleet_updates",
 };
 
 export class NotificationWorker {
@@ -57,12 +62,14 @@ export class NotificationWorker {
   private readonly emailClient: EmailClient;
   private readonly preferences: INotificationPreferencesRepository;
   private readonly batchSize: number;
+  private readonly handlebarsRenderer: HandlebarsRenderer | undefined;
 
   constructor(config: NotificationWorkerConfig) {
     this.queue = config.queue;
     this.emailClient = config.emailClient;
     this.preferences = config.preferences;
     this.batchSize = config.batchSize ?? 10;
+    this.handlebarsRenderer = config.handlebarsRenderer;
   }
 
   /** Process one batch of pending notifications. Returns count of processed items. */
@@ -96,8 +103,14 @@ export class NotificationWorker {
           }
         }
 
-        // Render the template
-        const rendered = renderNotificationTemplate(notif.template as TemplateName, data);
+        // Try DB-driven Handlebars first, fall back to code templates
+        let rendered: TemplateResult | null = null;
+        if (this.handlebarsRenderer) {
+          rendered = await this.handlebarsRenderer.render(notif.template, data);
+        }
+        if (!rendered) {
+          rendered = renderNotificationTemplate(notif.template as TemplateName, data);
+        }
 
         // Send via email client
         await this.emailClient.send({

package/src/fleet/fleet-notification-listener.ts

@@ -0,0 +1,87 @@
+import { logger } from "../config/logger.js";
+import type { INotificationPreferencesRepository } from "../email/notification-repository-types.js";
+import type { NotificationService } from "../email/notification-service.js";
+import type { BotFleetEvent, FleetEventEmitter } from "./fleet-event-emitter.js";
+
+export interface FleetNotificationListenerDeps {
+  eventEmitter: FleetEventEmitter;
+  notificationService: NotificationService;
+  preferences: INotificationPreferencesRepository;
+  /** Resolve tenant ID to owner email. Return null if no email found. */
+  resolveEmail: (tenantId: string) => Promise<string | null>;
+  /** Debounce window in ms before sending summary email. Default 60_000. */
+  debounceMs?: number;
+}
+
+interface PendingRollout {
+  tenantId: string;
+  succeeded: number;
+  failed: number;
+  timer: ReturnType<typeof setTimeout>;
+}
+
+export function initFleetNotificationListener(deps: FleetNotificationListenerDeps): () => void {
+  const { eventEmitter, notificationService, preferences, resolveEmail } = deps;
+  const debounceMs = deps.debounceMs ?? 60_000;
+  const pending = new Map<string, PendingRollout>();
+
+  async function flush(tenantId: string): Promise<void> {
+    const rollout = pending.get(tenantId);
+    if (!rollout) return;
+    pending.delete(tenantId);
+
+    try {
+      const prefs = await preferences.get(tenantId);
+      if (!prefs.fleet_updates) return;
+
+      const email = await resolveEmail(tenantId);
+      if (!email) {
+        logger.warn("Fleet notification skipped: no email for tenant", { tenantId });
+        return;
+      }
+
+      // TODO: Surface actual target version from RolloutOrchestrator context.
+      // BotFleetEvent doesn't carry version info; "latest" is a placeholder.
+      notificationService.notifyFleetUpdateComplete(tenantId, email, "latest", rollout.succeeded, rollout.failed);
+    } catch (err) {
+      logger.error("Fleet notification flush error", { err, tenantId });
+    }
+  }
+
+  const unsubscribe = eventEmitter.subscribe((event) => {
+    if (!("tenantId" in event)) return;
+    const botEvent = event as BotFleetEvent;
+    if (botEvent.type !== "bot.updated" && botEvent.type !== "bot.update_failed") return;
+
+    let rollout = pending.get(botEvent.tenantId);
+    if (!rollout) {
+      rollout = {
+        tenantId: botEvent.tenantId,
+        succeeded: 0,
+        failed: 0,
+        timer: setTimeout(() => flush(botEvent.tenantId), debounceMs),
+      };
+      pending.set(botEvent.tenantId, rollout);
+    } else {
+      // Reset timer on each new event (sliding window)
+      clearTimeout(rollout.timer);
+      rollout.timer = setTimeout(() => flush(botEvent.tenantId), debounceMs);
+    }
+
+    if (botEvent.type === "bot.updated") {
+      rollout.succeeded++;
+    } else {
+      rollout.failed++;
+    }
+  });
+
+  return () => {
+    unsubscribe();
+    // Flush all pending on shutdown
+    for (const [tenantId, rollout] of pending) {
+      clearTimeout(rollout.timer);
+      void flush(tenantId);
+    }
+    pending.clear();
+  };
+}

package/src/fleet/index.ts

@@ -1,4 +1,6 @@
 export * from "./drizzle-tenant-update-config-repository.js";
+export type { FleetNotificationListenerDeps } from "./fleet-notification-listener.js";
+export { initFleetNotificationListener } from "./fleet-notification-listener.js";
 export * from "./init-fleet-updater.js";
 export * from "./repository-types.js";
 export * from "./rollout-orchestrator.js";

package/src/trpc/index.ts

@@ -11,3 +11,4 @@ export {
   type TRPCContext,
   tenantProcedure,
 } from "./init.js";
+export { createNotificationTemplateRouter } from "./notification-template-router.js";

package/src/trpc/notification-template-router.ts

@@ -0,0 +1,91 @@
+/**
+ * Admin tRPC router for managing DB-driven notification templates.
+ *
+ * All procedures require platform_admin role via adminProcedure.
+ */
+
+import { TRPCError } from "@trpc/server";
+import Handlebars from "handlebars";
+import { z } from "zod";
+import { logger } from "../config/logger.js";
+import { DEFAULT_TEMPLATES } from "../email/default-templates.js";
+import type { INotificationTemplateRepository } from "../email/notification-template-repository.js";
+import { adminProcedure, router } from "./init.js";
+
+export function createNotificationTemplateRouter(getRepo: () => INotificationTemplateRepository) {
+  return router({
+    listTemplates: adminProcedure.query(async () => {
+      const repo = getRepo();
+      return repo.list();
+    }),
+
+    getTemplate: adminProcedure.input(z.object({ name: z.string() })).query(async ({ input }) => {
+      const repo = getRepo();
+      return repo.getByName(input.name);
+    }),
+
+    updateTemplate: adminProcedure
+      .input(
+        z.object({
+          name: z.string(),
+          subject: z.string().optional(),
+          htmlBody: z.string().optional(),
+          textBody: z.string().optional(),
+          description: z.string().optional(),
+          active: z.boolean().optional(),
+        }),
+      )
+      .mutation(async ({ input }) => {
+        const repo = getRepo();
+        const existing = await repo.getByName(input.name);
+        if (!existing) {
+          throw new TRPCError({ code: "NOT_FOUND", message: `Template "${input.name}" not found` });
+        }
+        await repo.upsert(input.name, {
+          subject: input.subject ?? existing.subject,
+          htmlBody: input.htmlBody ?? existing.htmlBody,
+          textBody: input.textBody ?? existing.textBody,
+          description: input.description ?? existing.description,
+          active: input.active ?? existing.active,
+        });
+        logger.info("Notification template updated", {
+          action: "notification_template.update",
+          templateName: input.name,
+        });
+      }),
+
+    previewTemplate: adminProcedure
+      .input(
+        z.object({
+          subject: z.string(),
+          htmlBody: z.string(),
+          textBody: z.string(),
+          data: z.record(z.string(), z.unknown()),
+        }),
+      )
+      .mutation(({ input }) => {
+        try {
+          const subject = Handlebars.compile(input.subject)(input.data);
+          const html = Handlebars.compile(input.htmlBody)(input.data);
+          const text = Handlebars.compile(input.textBody)(input.data);
+          return { subject, html, text };
+        } catch (err) {
+          throw new TRPCError({
+            code: "BAD_REQUEST",
+            message: `Template render error: ${err instanceof Error ? err.message : String(err)}`,
+          });
+        }
+      }),
+
+    seedDefaults: adminProcedure.mutation(async () => {
+      const repo = getRepo();
+      const inserted = await repo.seed(DEFAULT_TEMPLATES);
+      logger.info("Notification template defaults seeded", {
+        action: "notification_template.seed",
+        inserted,
+        total: DEFAULT_TEMPLATES.length,
+      });
+      return { inserted, total: DEFAULT_TEMPLATES.length };
+    }),
+  });
+}