@cosmicdrift/kumiko-bundled-features 0.165.2 → 0.165.3

package/src/jobs/web/__tests__/job-runs-screen.test.tsx

@@ -0,0 +1,223 @@
+// @runtime client
+// DOM test for JobRunsScreen trigger panel (#1602).
+// Provider wrapper is local — renderer-web → bundled-features forbids importing
+// renderer-web test-utils from here.
+
+// CI runs this file in its own `bun test` process via `bun run test:dom:isolated`
+// (excluded from shared bunfig.dom.toml) — same #457 happy-dom accumulation class
+// as privacy-center / deletion-screens.
+
+import { describe, expect, test } from "bun:test";
+import { createStore, type Dispatcher, type DispatcherStatus } from "@cosmicdrift/kumiko-headless";
+import {
+  createStaticLocaleResolver,
+  DispatcherProvider,
+  kumikoDefaultTranslations,
+  type LiveEventSubscriber,
+  LiveEventsProvider,
+  LocaleProvider,
+  type NavApi,
+  NavProvider,
+  PrimitivesProvider,
+  TokensProvider,
+} from "@cosmicdrift/kumiko-renderer";
+import { defaultPrimitives, defaultTokens } from "@cosmicdrift/kumiko-renderer-web";
+import { fireEvent, render, waitFor } from "@testing-library/react";
+import userEvent from "@testing-library/user-event";
+import type { ReactNode } from "react";
+import { JobHandlers, JobQueries } from "../../constants";
+import { defaultTranslations } from "../i18n";
+import { JobRunsScreen } from "../job-runs-screen";
+
+if (typeof globalThis.ResizeObserver === "undefined") {
+  globalThis.ResizeObserver = class {
+    observe(): void {}
+    unobserve(): void {}
+    disconnect(): void {}
+  } as unknown as typeof ResizeObserver;
+}
+
+const stubLiveEvents: LiveEventSubscriber = () => () => {};
+const stubTokens = {
+  tokens: defaultTokens,
+  mode: "light" as const,
+  setMode: () => {},
+  toggleMode: () => {},
+};
+const stubResolver = createStaticLocaleResolver();
+const stubNav: NavApi = {
+  route: undefined,
+  navigate: () => {},
+  replace: () => {},
+  hrefFor: (target) =>
+    target.entityId !== undefined
+      ? `/${target.screenId}/${target.entityId}`
+      : `/${target.screenId}`,
+  searchParams: {},
+  setSearchParams: () => {},
+};
+
+type CatalogRow = {
+  readonly jobName: string;
+  readonly perTenant: boolean;
+  readonly payloadSchema: Record<string, unknown> | null;
+};
+
+type Fixture = {
+  readonly catalogRows?: readonly CatalogRow[];
+  readonly listRows?: readonly Record<string, unknown>[];
+};
+
+function makeDispatcher(
+  fixture: Fixture,
+  writes: Array<{ type: string; payload: unknown }>,
+  queries: Array<{ type: string; payload: unknown }>,
+): Dispatcher {
+  const statusStore = createStore<DispatcherStatus>("online");
+  const query = (async (type: string, payload: unknown) => {
+    queries.push({ type, payload });
+    if (type === JobQueries.catalog) {
+      return { isSuccess: true, data: { rows: fixture.catalogRows ?? [] } };
+    }
+    if (type === JobQueries.list) {
+      return { isSuccess: true, data: { rows: fixture.listRows ?? [] } };
+    }
+    return { isSuccess: true, data: null };
+  }) as unknown as Dispatcher["query"];
+  const write = (async (type: string, payload: unknown) => {
+    writes.push({ type, payload });
+    return {
+      isSuccess: true,
+      data: { jobName: (payload as { jobName: string }).jobName, bullJobId: "bull-1" },
+    };
+  }) as unknown as Dispatcher["write"];
+  return {
+    write,
+    query,
+    batch: (async () => ({ isSuccess: true, results: [] })) as unknown as Dispatcher["batch"],
+    statusStore,
+    async *stream() {},
+    pendingWrites: () => [],
+    pendingFiles: () => [],
+  } as unknown as Dispatcher; // @cast-boundary test-stub
+}
+
+function renderScreen(fixture: Fixture = {}): {
+  view: ReturnType<typeof render>;
+  writes: Array<{ type: string; payload: unknown }>;
+  queries: Array<{ type: string; payload: unknown }>;
+} {
+  const writes: Array<{ type: string; payload: unknown }> = [];
+  const queries: Array<{ type: string; payload: unknown }> = [];
+  const wrapper = ({ children }: { readonly children: ReactNode }): ReactNode => (
+    <TokensProvider value={stubTokens}>
+      <LocaleProvider
+        resolver={stubResolver}
+        fallbackBundles={[defaultTranslations, kumikoDefaultTranslations]}
+      >
+        <PrimitivesProvider value={defaultPrimitives}>
+          <NavProvider value={stubNav}>
+            <LiveEventsProvider value={stubLiveEvents}>
+              <DispatcherProvider dispatcher={makeDispatcher(fixture, writes, queries)}>
+                {children}
+              </DispatcherProvider>
+            </LiveEventsProvider>
+          </NavProvider>
+        </PrimitivesProvider>
+      </LocaleProvider>
+    </TokensProvider>
+  );
+  return { view: render(<JobRunsScreen />, { wrapper }), writes, queries };
+}
+
+const REINDEX: CatalogRow = {
+  jobName: "jobs:job:reindex-entity",
+  perTenant: true,
+  payloadSchema: {
+    type: "object",
+    properties: { entity: { type: "string" } },
+    required: ["entity"],
+  },
+};
+
+describe("JobRunsScreen — manual trigger panel", () => {
+  test("loads catalog + list via QNs and renders translated trigger UI", async () => {
+    const { view, queries } = renderScreen({ catalogRows: [REINDEX] });
+    await waitFor(() => {
+      if (view.queryByTestId("job-runs-screen") === null) throw new Error("not mounted");
+    });
+    expect(view.getByTestId("job-trigger-panel")).toBeTruthy();
+    expect(view.getByTestId("job-trigger-form")).toBeTruthy();
+    expect(view.container.textContent).not.toContain("jobs.trigger.");
+    expect(view.container.textContent).not.toContain("jobs.runs.");
+
+    await waitFor(() => {
+      const catalogHit = queries.some((q) => q.type === JobQueries.catalog);
+      const listHit = queries.some((q) => q.type === JobQueries.list);
+      if (!catalogHit || !listHit) throw new Error("expected catalog + list queries");
+    });
+  });
+
+  test("empty catalog shows empty copy, no form", async () => {
+    const { view } = renderScreen({ catalogRows: [] });
+    await waitFor(() => {
+      if (view.queryByTestId("job-trigger-empty") === null) throw new Error("empty missing");
+    });
+    expect(view.queryByTestId("job-trigger-form")).toBeNull();
+  });
+
+  test("select job + JSON payload → jobs:write:trigger", async () => {
+    const user = userEvent.setup();
+    const { view, writes } = renderScreen({ catalogRows: [REINDEX] });
+    await waitFor(() => {
+      if (view.queryByTestId("job-trigger-form") === null) throw new Error("form missing");
+    });
+
+    await user.click(view.getByTestId("combobox-job-trigger-name"));
+    const option = await view.findByText("jobs:job:reindex-entity");
+    await user.click(option);
+
+    await waitFor(() => {
+      if (view.queryByTestId("job-trigger-per-tenant") === null) {
+        throw new Error("perTenant hint missing");
+      }
+    });
+    expect(view.getByTestId("job-trigger-schema-hint").textContent).toContain("entity");
+
+    const payload = view.container.querySelector<HTMLTextAreaElement>("#job-trigger-payload");
+    if (!payload) throw new Error("payload textarea missing");
+    fireEvent.change(payload, { target: { value: '{"entity":"credit"}' } });
+
+    await user.click(view.getByTestId("job-trigger-submit"));
+
+    await waitFor(() => {
+      if (writes.length === 0) throw new Error("no write yet");
+    });
+    expect(writes[0]).toEqual({
+      type: JobHandlers.trigger,
+      payload: { jobName: "jobs:job:reindex-entity", payload: { entity: "credit" } },
+    });
+    expect(view.getByTestId("job-trigger-success")).toBeTruthy();
+  });
+
+  test("invalid JSON payload → client error, no write", async () => {
+    const user = userEvent.setup();
+    const { view, writes } = renderScreen({ catalogRows: [REINDEX] });
+    await waitFor(() => {
+      if (view.queryByTestId("job-trigger-form") === null) throw new Error("form missing");
+    });
+
+    await user.click(view.getByTestId("combobox-job-trigger-name"));
+    await user.click(await view.findByText("jobs:job:reindex-entity"));
+
+    const payload = view.container.querySelector<HTMLTextAreaElement>("#job-trigger-payload");
+    if (!payload) throw new Error("payload textarea missing");
+    fireEvent.change(payload, { target: { value: "{not-json" } });
+    await user.click(view.getByTestId("job-trigger-submit"));
+
+    await waitFor(() => {
+      if (view.queryByTestId("job-trigger-error") === null) throw new Error("error missing");
+    });
+    expect(writes).toEqual([]);
+  });
+});

package/src/jobs/web/job-runs-screen.tsx

@@ -1,17 +1,18 @@
 // @runtime client
-// SystemAdmin job-run list with link to detail screen.
+// SystemAdmin job-run list + manual trigger panel.
 
 import {
   type DataTableSort,
   formatWhen,
   sortByAccessor,
-  useDispatcher,
+  useMutation,
   useNav,
   usePrimitives,
+  useQuery,
   useTranslation,
 } from "@cosmicdrift/kumiko-renderer";
-import { type ReactNode, useCallback, useEffect, useState } from "react";
-import { JOB_RUN_DETAIL_SCREEN_ID, JobQueries } from "../constants";
+import { type ReactNode, useMemo, useState } from "react";
+import { JOB_RUN_DETAIL_SCREEN_ID, JobHandlers, JobQueries } from "../constants";
 
 type JobRunRow = {
   readonly id: string;
@@ -25,10 +26,15 @@ type JobRunRow = {
 
 type ListResponse = { readonly rows: readonly JobRunRow[] };
 
-type State =
-  | { readonly kind: "loading" }
-  | { readonly kind: "error"; readonly message: string }
-  | { readonly kind: "ready"; readonly rows: readonly JobRunRow[] };
+type CatalogEntry = {
+  readonly jobName: string;
+  readonly perTenant: boolean;
+  readonly payloadSchema: Record<string, unknown> | null;
+};
+
+type CatalogResponse = { readonly rows: readonly CatalogEntry[] };
+
+type TriggerResult = { readonly jobName: string; readonly bullJobId: string };
 
 const STATUS_FILTER_OPTIONS = [
   { value: "", labelKey: "jobs.runs.filter.all" },
@@ -40,100 +46,228 @@ const STATUS_FILTER_OPTIONS = [
 
 export function JobRunsScreen(): ReactNode {
   const t = useTranslation();
-  const { Banner, DataTable, Field, Input, Text } = usePrimitives();
-  const dispatcher = useDispatcher();
+  const { Banner, Button, DataTable, Field, Form, Heading, Input, Text } = usePrimitives();
   const nav = useNav();
-  const [state, setState] = useState<State>({ kind: "loading" });
   const [statusFilter, setStatusFilter] = useState("");
   const [sort, setSort] = useState<DataTableSort | null>(null);
+  const [jobName, setJobName] = useState("");
+  const [payloadText, setPayloadText] = useState("{}");
+  const [clientError, setClientError] = useState<string | null>(null);
+  const [successMessage, setSuccessMessage] = useState<string | null>(null);
+
+  const listPayload = useMemo(
+    () => ({
+      limit: 50,
+      ...(statusFilter !== "" && {
+        status: statusFilter as "queued" | "running" | "completed" | "failed",
+      }),
+    }),
+    [statusFilter],
+  );
+
+  const listQuery = useQuery<ListResponse | null>(JobQueries.list, listPayload);
+  const catalogQuery = useQuery<CatalogResponse | null>(JobQueries.catalog, {});
+  const triggerMutation = useMutation<TriggerResult>(JobHandlers.trigger);
 
   const filterOptions = STATUS_FILTER_OPTIONS.map((opt) => ({
     value: opt.value,
     label: t(opt.labelKey),
   }));
 
-  const refresh = useCallback(async (): Promise<void> => {
-    setState({ kind: "loading" });
-    const res = await dispatcher.query<ListResponse>(JobQueries.list, {
-      limit: 50,
-      ...(statusFilter !== "" && {
-        status: statusFilter as "queued" | "running" | "completed" | "failed",
-      }),
+  const catalogRows = catalogQuery.data?.rows ?? [];
+  const selected = catalogRows.find((row) => row.jobName === jobName) ?? null;
+  const jobOptions = catalogRows.map((row) => ({
+    value: row.jobName,
+    label: row.jobName,
+  }));
+
+  const schemaHint =
+    selected?.payloadSchema !== undefined && selected.payloadSchema !== null
+      ? JSON.stringify(selected.payloadSchema, null, 2)
+      : null;
+
+  const onTrigger = async (): Promise<void> => {
+    setClientError(null);
+    setSuccessMessage(null);
+    if (jobName === "") return;
+
+    let payload: Record<string, unknown> = {};
+    const trimmed = payloadText.trim();
+    if (trimmed !== "" && trimmed !== "{}") {
+      try {
+        const parsed: unknown = JSON.parse(trimmed);
+        if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
+          setClientError(t("jobs.trigger.payload.invalidJson"));
+          return;
+        }
+        payload = parsed as Record<string, unknown>;
+      } catch {
+        setClientError(t("jobs.trigger.payload.invalidJson"));
+        return;
+      }
+    }
+
+    const res = await triggerMutation.mutate({
+      jobName,
+      ...(Object.keys(payload).length > 0 ? { payload } : {}),
     });
     if (!res.isSuccess) {
-      setState({ kind: "error", message: res.error.message });
+      setClientError(res.error.message);
       return;
     }
-    setState({ kind: "ready", rows: res.data.rows });
-  }, [dispatcher, statusFilter]);
-
-  useEffect(() => {
-    void refresh();
-  }, [refresh]);
-
-  if (state.kind === "loading") {
-    return (
-      <div className="p-6" data-testid="job-runs-screen">
-        <Text variant="small">{t("jobs.runs.loading")}</Text>
-      </div>
-    );
-  }
-
-  if (state.kind === "error") {
-    return (
-      <div className="p-6" data-testid="job-runs-screen">
-        <Banner variant="error">{state.message}</Banner>
-      </div>
-    );
-  }
+    setSuccessMessage(t("jobs.trigger.success"));
+    void listQuery.refetch();
+  };
 
   const openDetail = (id: string): void =>
     nav.navigate({ screenId: JOB_RUN_DETAIL_SCREEN_ID, entityId: id });
 
+  const rows = listQuery.data?.rows ?? [];
+  const listLoading = listQuery.loading === true && listQuery.data === null;
+  const submitting = triggerMutation.pending;
+
   return (
-    <DataTable
-      testId="job-runs-table"
-      columns={[
-        { field: "job", label: t("jobs.runs.col.job"), type: "string", sortable: true },
-        { field: "status", label: t("jobs.runs.col.status"), type: "string", sortable: true },
-        { field: "started", label: t("jobs.runs.col.started"), type: "string", sortable: true },
-        { field: "duration", label: t("jobs.runs.col.duration"), type: "string", sortable: false },
-      ]}
-      sort={sort}
-      onSortChange={setSort}
-      rows={sortByAccessor(state.rows, sort, SORT_ACCESSORS).map((row) => ({
-        id: row.id,
-        values: {
-          job: row.jobName,
-          status: row.status,
-          started: formatWhen(row.startedAt),
-          duration: row.duration ?? "—",
-        },
-      }))}
-      onRowClick={(row) => openDetail(row.id)}
-      toolbarStart={
-        <Field id="job-runs-status-filter" label={t("jobs.runs.filter.status")}>
-          <Input
-            kind="select"
-            id="job-runs-status-filter"
-            name="job-runs-status-filter"
-            value={statusFilter}
-            onChange={setStatusFilter}
-            options={filterOptions}
-          />
-        </Field>
-      }
-      rowActions={[
-        {
-          id: "open",
-          label: t("jobs.runs.open"),
-          style: "secondary",
-          onTrigger: (row) => openDetail(row.id),
-        },
-      ]}
-      rowActionMode="inline"
-      emptyState={<Text variant="small">{t("jobs.runs.empty")}</Text>}
-    />
+    <div className="flex flex-col gap-6 p-6" data-testid="job-runs-screen">
+      <section className="flex flex-col gap-3" data-testid="job-trigger-panel">
+        <Heading variant="section">{t("jobs.trigger.title")}</Heading>
+        <Text variant="small">{t("jobs.trigger.explainer")}</Text>
+
+        {catalogQuery.error !== null && (
+          <Banner variant="error" testId="job-trigger-catalog-error">
+            {catalogQuery.error.message}
+          </Banner>
+        )}
+
+        {catalogQuery.error === null &&
+        catalogRows.length === 0 &&
+        catalogQuery.loading !== true ? (
+          <Text variant="small" testId="job-trigger-empty">
+            {t("jobs.trigger.empty")}
+          </Text>
+        ) : catalogQuery.error !== null ? null : (
+          <Form
+            testId="job-trigger-form"
+            onSubmit={(e) => {
+              e?.preventDefault();
+              void onTrigger();
+            }}
+            actions={
+              <Button
+                type="submit"
+                disabled={jobName === "" || submitting}
+                loading={submitting}
+                testId="job-trigger-submit"
+              >
+                {submitting ? t("jobs.trigger.submitting") : t("jobs.trigger.submit")}
+              </Button>
+            }
+          >
+            <Field id="job-trigger-name" label={t("jobs.trigger.job")} required>
+              <Input
+                kind="select"
+                id="job-trigger-name"
+                name="job-trigger-name"
+                value={jobName}
+                onChange={setJobName}
+                options={jobOptions}
+              />
+            </Field>
+
+            {selected?.perTenant === true && (
+              <Text variant="small" testId="job-trigger-per-tenant">
+                {t("jobs.trigger.perTenant")}
+              </Text>
+            )}
+
+            {schemaHint !== null && (
+              <Text variant="code" testId="job-trigger-schema-hint">
+                {t("jobs.trigger.payload.hint")}: {schemaHint}
+              </Text>
+            )}
+
+            <Field id="job-trigger-payload" label={t("jobs.trigger.payload")}>
+              <Input
+                kind="textarea"
+                id="job-trigger-payload"
+                name="job-trigger-payload"
+                value={payloadText}
+                onChange={setPayloadText}
+              />
+            </Field>
+
+            {clientError !== null && (
+              <Banner variant="error" testId="job-trigger-error">
+                {clientError}
+              </Banner>
+            )}
+            {successMessage !== null && (
+              <Banner variant="info" testId="job-trigger-success">
+                {successMessage}
+              </Banner>
+            )}
+          </Form>
+        )}
+      </section>
+
+      {listQuery.error !== null && (
+        <Banner variant="error" testId="job-runs-list-error">
+          {listQuery.error.message}
+        </Banner>
+      )}
+
+      {listLoading ? (
+        <Text variant="small">{t("jobs.runs.loading")}</Text>
+      ) : listQuery.error !== null ? null : (
+        <DataTable
+          testId="job-runs-table"
+          columns={[
+            { field: "job", label: t("jobs.runs.col.job"), type: "string", sortable: true },
+            { field: "status", label: t("jobs.runs.col.status"), type: "string", sortable: true },
+            { field: "started", label: t("jobs.runs.col.started"), type: "string", sortable: true },
+            {
+              field: "duration",
+              label: t("jobs.runs.col.duration"),
+              type: "string",
+              sortable: false,
+            },
+          ]}
+          sort={sort}
+          onSortChange={setSort}
+          rows={sortByAccessor(rows, sort, SORT_ACCESSORS).map((row) => ({
+            id: row.id,
+            values: {
+              job: row.jobName,
+              status: row.status,
+              started: formatWhen(row.startedAt),
+              duration: row.duration ?? "—",
+            },
+          }))}
+          onRowClick={(row) => openDetail(row.id)}
+          toolbarStart={
+            <Field id="job-runs-status-filter" label={t("jobs.runs.filter.status")}>
+              <Input
+                kind="select"
+                id="job-runs-status-filter"
+                name="job-runs-status-filter"
+                value={statusFilter}
+                onChange={setStatusFilter}
+                options={filterOptions}
+              />
+            </Field>
+          }
+          rowActions={[
+            {
+              id: "open",
+              label: t("jobs.runs.open"),
+              style: "secondary",
+              onTrigger: (row) => openDetail(row.id),
+            },
+          ]}
+          rowActionMode="inline"
+          emptyState={<Text variant="small">{t("jobs.runs.empty")}</Text>}
+        />
+      )}
+    </div>
   );
 }
 

package/src/ledger/changes.json

@@ -0,0 +1 @@
+[]

package/src/legal-pages/changes.json

@@ -0,0 +1 @@
+[]

package/src/mail-foundation/changes.json

@@ -0,0 +1 @@
+[]

package/src/mail-transport-inmemory/changes.json

@@ -0,0 +1 @@
+[]

package/src/mail-transport-smtp/changes.json

@@ -0,0 +1 @@
+[]

package/src/managed-pages/changes.json

@@ -0,0 +1,20 @@
+[
+  {
+    "version": "0.147.3",
+    "type": "fix",
+    "title": "`managed-pages`' `GET {basePath}/:slug` render route and `seo`'s `sitemap.xml`/`llms.txt`…",
+    "detail": "`managed-pages`' `GET {basePath}/:slug` render route and `seo`'s `sitemap.xml`/`llms.txt` routes now use the `systemQuery` in-process dispatch (introduced for `legal-pages` in the `resolverTrust` fix) instead of an internal `app.fetch` self-request with a forged `X-Tenant` header. That self-fetch carried no `Host` header (Host is only implied by the request URL, never stored in `Headers`), so a host-based `anonymousAccess.tenantResolver` reading only the header resolved `null` for the inner request. Under `resolverTrust: \"authoritative\"` there is no client-tenant fallback for a `null` resolution, so the route failed with `tenant_required` (503 \"page unavailable\" / empty sitemap entries) even for a legitimate, correctly-routed visitor. `systemQuery` forces the already host-resolved tenant in-process — no header round-trip, nothing that can go missing. Consumers running `managed-pages` or `seo` with `resolverTrust: \"authoritative\"` should upgrade — the render/discovery routes were not reliably servable under that mode before this fix. - @cosmicdrift/kumiko-framework@0.147.3 - @cosmicdrift/kumiko-dispatcher-live@0.147.3 - @cosmicdrift/kumiko-headless@0.147.3 - @cosmicdrift/kumiko-renderer@0.147.3 - @cosmicdrift/kumiko-renderer-web@0.147.3"
+  },
+  {
+    "version": "0.123.1",
+    "type": "fix",
+    "title": "managed-pages: add a `./managed-pages/web` client export (`managedPagesClient()`) so apps…",
+    "detail": "managed-pages: add a `./managed-pages/web` client export (`managedPagesClient()`) so apps can register the feature's admin-screen translations into the browser i18n store. Previously the server-side `r.translations` bundle never reached the client, so configEdit/entityEdit labels (branding, page CMS) rendered as raw i18n keys in the admin UI. The client bundle is pivoted from the same `MANAGED_PAGES_I18N` source (no key duplication). renderer-web: extract a shared `FormScreenShell` primitive — the canonical centered `max-w-3xl` form/settings column that `DefaultForm` (configEdit/entityEdit) already used. Exporting it lets custom settings screens share the exact same width + centering instead of each author re-inventing the wrapper. `user-data-rights`' privacy-center screen adopts it. - @cosmicdrift/kumiko-renderer-web@0.123.1 - @cosmicdrift/kumiko-framework@0.123.1 - @cosmicdrift/kumiko-dispatcher-live@0.123.1 - @cosmicdrift/kumiko-headless@0.123.1 - @cosmicdrift/kumiko-renderer@0.123.1"
+  },
+  {
+    "version": "0.122.5",
+    "type": "fix",
+    "title": "managed-pages: ship de/en translations for its admin screens (branding settings + page CM…",
+    "detail": "managed-pages: ship de/en translations for its admin screens (branding settings + page CMS) via `r.translations`, so field labels, section headers and screen titles no longer render as raw i18n keys. Any app mounting `managed-pages` now boots with a complete, translated admin surface. Also adds `tag` and `key` to the nav-icon allowlist (`NAV_ICONS`) so nav entries using those keys render a Lucide icon instead of the grey dot fallback. - @cosmicdrift/kumiko-renderer-web@0.122.5 - @cosmicdrift/kumiko-framework@0.122.5 - @cosmicdrift/kumiko-dispatcher-live@0.122.5 - @cosmicdrift/kumiko-headless@0.122.5 - @cosmicdrift/kumiko-renderer@0.122.5"
+  }
+]

package/src/page-render/changes.json

@@ -0,0 +1,14 @@
+[
+  {
+    "version": "0.123.3",
+    "type": "fix",
+    "title": "page-render: neuer `./page-render/web`-Subpath für client-safe Exports (renderSafeMarkdow…",
+    "detail": "page-render: neuer `./page-render/web`-Subpath für client-safe Exports (renderSafeMarkdown, sanitizeTenantCss, wrapInLayout, branding-Helpers, securePageHeaders). Der bestehende `./page-render`-Barrel re-exportierte auch `cachedSecurePageResponse`, das transitiv `@cosmicdrift/kumiko-framework/api` (postgres/ioredis) zieht — jeder Import aus dem Barrel in Client-Code ließ den Browser-Bundle mit \"Bundle failed\" crashen, ohne brauchbare Fehlermeldung. - @cosmicdrift/kumiko-framework@0.123.3 - @cosmicdrift/kumiko-dispatcher-live@0.123.3 - @cosmicdrift/kumiko-headless@0.123.3 - @cosmicdrift/kumiko-renderer@0.123.3 - @cosmicdrift/kumiko-renderer-web@0.123.3"
+  },
+  {
+    "version": "0.123.0",
+    "type": "fix",
+    "title": "headless: new `html` tagged template + `raw()`/`RawHtml` — auto-escapes every interpolati…",
+    "detail": "headless: new `html` tagged template + `raw()`/`RawHtml` — auto-escapes every interpolation, `raw()` marks prerendered markup, nested `html` fragments compose without double-escaping. Structural companion to the new HTML-escape guard (infra#201). Hardening from the guard's first run: apex JSON-LD `<script>` block serializes `<` as `<` (no `</script>` breakout), dev-server `injectSchema` does the same for `window.__KUMIKO_SCHEMA__`; apex/page-render prerendered fragments renamed to the `*Html` convention. - @cosmicdrift/kumiko-headless@0.123.0 - @cosmicdrift/kumiko-dispatcher-live@0.123.0 - @cosmicdrift/kumiko-renderer@0.123.0 - @cosmicdrift/kumiko-renderer-web@0.123.0 - @cosmicdrift/kumiko-framework@0.123.0"
+  }
+]

package/src/personal-access-tokens/changes.json

@@ -0,0 +1,8 @@
+[
+  {
+    "version": "0.117.0",
+    "type": "improvement",
+    "title": "personal-access-tokens: add `toggleable` option so the whole feature can be tier-gated vi…",
+    "detail": "personal-access-tokens: add `toggleable` option so the whole feature can be tier-gated via the tier-engine (mirrors ledger/tags). Pass `{ toggleable: { default: false } }` for fail-closed gating — PAT is then off until a tier lists `\"personal-access-tokens\"` in its features. Omitting the option keeps PAT always-on (no behaviour change for existing consumers)."
+  }
+]

package/src/presets/changes.json

@@ -0,0 +1 @@
+[]

package/src/presets/dsgvo-self-service.ts

@@ -13,7 +13,7 @@ export type DsgvoSelfServiceOptions = {
 
 // DSGVO- + Account-Self-Service-Kette, die jede Kumiko-SaaS-App mountet
 // (Privacy-Center, Account-Löschung Art. 17, Export Art. 20, Sessions).
-// Die Reihenfolge IST load-bearing (Require-Order): user-data-rights braucht
+// Order is load-bearing (Require-Order): user-data-rights braucht
 // data-retention + compliance-profiles + sessions, user-profile braucht
 // user-data-rights. Genau diese Order stand bisher in jeder App handkopiert
 // mit Erklär-Kommentar. text-content + legal-pages bleiben bewusst draußen —

package/src/rate-limiting/changes.json

@@ -0,0 +1 @@
+[]

package/src/readiness/changes.json

@@ -0,0 +1 @@
+[]

package/src/renderer-foundation/changes.json

@@ -0,0 +1 @@
+[]

package/src/renderer-simple/changes.json

@@ -0,0 +1 @@
+[]

package/src/secrets/changes.json

@@ -0,0 +1 @@
+[]