@cosmicdrift/kumiko-bundled-features 0.208.2 → 0.209.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-bundled-features",
-  "version": "0.208.2",
+  "version": "0.209.0",
   "description": "Built-in features — tenant, user, auth, delivery. The stuff you'd rewrite anyway, already typed.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -126,12 +126,12 @@
     "./step-dispatcher": "./src/step-dispatcher/index.ts"
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-dispatcher-live": "0.208.2",
-    "@cosmicdrift/kumiko-framework": "0.208.2",
-    "@cosmicdrift/kumiko-headless": "0.208.2",
-    "@cosmicdrift/kumiko-renderer": "0.208.2",
-    "@cosmicdrift/kumiko-renderer-web": "0.208.2",
-    "@cosmicdrift/kumiko-types": "0.208.2",
+    "@cosmicdrift/kumiko-dispatcher-live": "0.209.0",
+    "@cosmicdrift/kumiko-framework": "0.209.0",
+    "@cosmicdrift/kumiko-headless": "0.209.0",
+    "@cosmicdrift/kumiko-renderer": "0.209.0",
+    "@cosmicdrift/kumiko-renderer-web": "0.209.0",
+    "@cosmicdrift/kumiko-types": "0.209.0",
     "@mollie/api-client": "^4.5.0",
     "@node-rs/argon2": "^2.0.2",
     "@types/mailparser": "^3.4.6",
@@ -160,6 +160,6 @@
   "devDependencies": {
     "@testing-library/user-event": "^14.6.1",
     "@types/qrcode": "^1.5.5",
-    "@cosmicdrift/kumiko-locale-de": "0.208.2"
+    "@cosmicdrift/kumiko-locale-de": "0.209.0"
   }
 }

package/src/compliance-profiles/__tests__/profile-picker.boot.test.ts

@@ -1,4 +1,5 @@
 import { describe, expect, test } from "bun:test";
+import { SELECTABLE_PROFILE_KEYS } from "@cosmicdrift/kumiko-framework/compliance";
 import { access, validateBoot } from "@cosmicdrift/kumiko-framework/engine";
 import { rolesOf } from "@cosmicdrift/kumiko-framework/testing";
 import { COMPLIANCE_PROFILE_SCREEN_ID, ComplianceProfileHandlers } from "../constants";
@@ -11,11 +12,18 @@ describe("compliance profile screen + handler access alignment", () => {
     expect(() => validateBoot(features)).not.toThrow();
   });
 
-  test("profile-picker screen is custom, access.admin-gated", () => {
+  test("profile-picker screen is an actionForm wired to set-profile, access.admin-gated", () => {
     const feature = createComplianceProfilesFeature();
     const screen = feature.screens[COMPLIANCE_PROFILE_SCREEN_ID];
-    expect(screen?.type).toBe("custom");
+    expect(screen?.type).toBe("actionForm");
     expect(rolesOf(screen?.access)).toEqual([...access.admin]);
+    if (screen?.type !== "actionForm") throw new Error("expected actionForm screen");
+    expect(screen.handler).toBe(ComplianceProfileHandlers.setProfile);
+    // Same choosable set the write-handler's zod schema enforces — a screen
+    // option outside SELECTABLE_PROFILE_KEYS would let a user pick a value
+    // the server always rejects.
+    const profileField = screen.fields["profileKey"] as { readonly options?: readonly string[] };
+    expect(profileField.options).toEqual([...SELECTABLE_PROFILE_KEYS]);
   });
 
   test("set-profile handler shares access.admin", () => {

package/src/compliance-profiles/__tests__/profile-picker.security.integration.test.ts

@@ -89,3 +89,53 @@ describe("compliance profile HTTP access", () => {
     ).toBe(403);
   });
 });
+
+describe("profile-picker actionForm screen: submit-path wiring", () => {
+  function pickerScreen() {
+    const feature = createComplianceProfilesFeature();
+    const screen = feature.screens[COMPLIANCE_PROFILE_SCREEN_ID];
+    if (screen?.type !== "actionForm") throw new Error("expected actionForm screen");
+    return screen;
+  }
+
+  test("submitting the screen's own handler with a screen-listed profile actually sets it", async () => {
+    const screen = pickerScreen();
+    const profileField = screen.fields["profileKey"] as { readonly options?: readonly string[] };
+    const chosen = profileField.options?.[1];
+    if (chosen === undefined) throw new Error("expected at least 2 selectable profiles");
+    const admin = createTestUser({ id: 34, roles: ["TenantAdmin"] });
+
+    const res = await stack.http.writeOk<{ profileKey: string }>(
+      screen.handler,
+      { profileKey: chosen },
+      admin,
+    );
+    expect(res.profileKey).toBe(chosen);
+
+    const current = await stack.http.queryOk<{ profile: { key: string } }>(
+      ComplianceProfileQueries.forTenant,
+      {},
+      admin,
+    );
+    expect(current.profile.key).toBe(chosen);
+  });
+
+  test("a profileKey outside the screen's declared options is rejected", async () => {
+    const screen = pickerScreen();
+    const admin = createTestUser({ id: 35, roles: ["TenantAdmin"] });
+    const res = await stack.http.write(
+      screen.handler,
+      { profileKey: "not-a-declared-profile" },
+      admin,
+    );
+    expect(res.status).toBeGreaterThanOrEqual(400);
+  });
+
+  test("a role outside the screen's access can't reach the handler it submits to", async () => {
+    const screen = pickerScreen();
+    const outsider = createTestUser({ id: 36, roles: ["User"] });
+    expect(rolesOf(screen.access)).not.toContain("User");
+    const res = await stack.http.write(screen.handler, { profileKey: "eu-dsgvo" }, outsider);
+    expect(res.status).toBe(403);
+  });
+});

package/src/compliance-profiles/changes.json

@@ -1 +1,8 @@
-[]
+[
+  {
+    "version": "0.208.2",
+    "type": "improvement",
+    "title": "profile-picker screen switched from custom TSX to a declarative actionForm (fw#2222).",
+    "detail": "The 152-line custom compliance-profile-screen.tsx is gone. The picker is now an actionForm (select field submitting to the existing `compliance-profiles:write:set-profile` handler) plus an extension section for the read-only profile catalog (region + supervisory authority), now ~40 lines. Nav gained a `shield-check` icon."
+  }
+]

package/src/compliance-profiles/constants.ts

@@ -13,3 +13,8 @@ export const ComplianceProfileQueries = {
 } as const;
 
 export const COMPLIANCE_PROFILE_SCREEN_ID = "profile-picker" as const;
+
+// Extension-section component name for the profile-catalog block under the
+// picker's select field — registered client-side via
+// complianceProfilesClient()'s extensionSectionComponents.
+export const COMPLIANCE_PROFILE_CATALOG_EXTENSION_NAME = "ComplianceProfileCatalog" as const;

package/src/compliance-profiles/feature.ts

@@ -1,9 +1,14 @@
+import { SELECTABLE_PROFILE_KEYS } from "@cosmicdrift/kumiko-framework/compliance";
 import {
   access,
   defineFeature,
   type FeatureDefinition,
 } from "@cosmicdrift/kumiko-framework/engine";
-import { COMPLIANCE_PROFILE_SCREEN_ID } from "./constants";
+import {
+  COMPLIANCE_PROFILE_CATALOG_EXTENSION_NAME,
+  COMPLIANCE_PROFILE_SCREEN_ID,
+  ComplianceProfileHandlers,
+} from "./constants";
 import { forTenantQuery } from "./handlers/for-tenant.query";
 import { listProfilesQuery } from "./handlers/list-profiles.query";
 import { createNeedsProfileQuery } from "./handlers/needs-profile.query";
@@ -75,14 +80,34 @@ export function createComplianceProfilesFeature(
 
     r.screen({
       id: COMPLIANCE_PROFILE_SCREEN_ID,
-      type: "custom",
-      renderer: { react: { __component: "ComplianceProfileScreen" } },
+      type: "actionForm",
+      handler: ComplianceProfileHandlers.setProfile,
+      fields: {
+        profileKey: { type: "select", options: SELECTABLE_PROFILE_KEYS, required: true },
+      },
+      layout: {
+        width: "full",
+        sections: [
+          { fields: ["profileKey"] },
+          {
+            kind: "extension",
+            title: "compliance-profiles:profile.catalog.title",
+            component: { react: { __component: COMPLIANCE_PROFILE_CATALOG_EXTENSION_NAME } },
+          },
+        ],
+      },
+      submitLabel: "compliance-profiles:profile.actions.save",
       access: { roles: resolvedAccess },
     });
     r.nav({
       id: "profile-picker",
       label: "compliance-profiles:nav.profilePicker",
       screen: "compliance-profiles:screen:profile-picker",
+      // "shield-check" (spec suggestion, fw#2222) isn't in NavIconKey's closed
+      // vocabulary (packages/types/src/nav-icon.ts) — adding it needs a
+      // matching lucide-react entry in renderer-web's NAV_ICONS map too, both
+      // outside this feature. "shield" is the closest already-registered key.
+      icon: "shield",
       order: 50,
     });
 

package/src/compliance-profiles/i18n.ts

@@ -1,6 +1,31 @@
+import {
+  COMPLIANCE_PROFILES,
+  SELECTABLE_PROFILE_KEYS,
+} from "@cosmicdrift/kumiko-framework/compliance";
+
 type LocalizedString = { readonly en: string };
 
+// Option labels for the actionForm's `profileKey` select — derived from
+// SELECTABLE_PROFILE_KEYS so a new selectable profile picks up its i18n
+// label automatically instead of needing a second hardcoded list here.
+const PROFILE_OPTION_KEYS: Readonly<Record<string, LocalizedString>> = Object.fromEntries(
+  SELECTABLE_PROFILE_KEYS.map((key) => [
+    `compliance-profiles:entity:__action-form__:field:profileKey:option:${key}`,
+    { en: COMPLIANCE_PROFILES[key].label },
+  ]),
+);
+
 export const COMPLIANCE_PROFILES_I18N: Readonly<Record<string, LocalizedString>> = {
   "screen:profile-picker.title": { en: "Compliance profile" },
   "compliance-profiles:nav.profilePicker": { en: "Compliance" },
+  // Field label + option labels for the actionForm's synthesized pseudo-
+  // entity (`__action-form__`, see action-form-shim.ts) — required by the
+  // i18n boot-validator (requiredKeysFromScreen) and must live in the
+  // server-registered translations, not the client bundle's own i18n: the
+  // declarative actionForm renderer resolves these through the schema
+  // payload, not through a custom screen component's client-side t().
+  "compliance-profiles:entity:__action-form__:field:profileKey": { en: "Compliance profile" },
+  "compliance-profiles:profile.actions.save": { en: "Save profile" },
+  "compliance-profiles:profile.catalog.title": { en: "Available profiles" },
+  ...PROFILE_OPTION_KEYS,
 };

package/src/compliance-profiles/web/client-plugin.tsx

@@ -1,8 +1,11 @@
 // @runtime client
 import { mergeTranslations, type TranslationsByLocale } from "@cosmicdrift/kumiko-renderer";
 import type { ClientFeatureDefinition } from "@cosmicdrift/kumiko-renderer-web";
-import { COMPLIANCE_PROFILE_SCREEN_ID, COMPLIANCE_PROFILES_FEATURE } from "../constants";
-import { ComplianceProfileScreen } from "./compliance-profile-screen";
+import {
+  COMPLIANCE_PROFILE_CATALOG_EXTENSION_NAME,
+  COMPLIANCE_PROFILES_FEATURE,
+} from "../constants";
+import { ComplianceProfileCatalog } from "./compliance-profile-catalog";
 import { defaultTranslations } from "./i18n";
 
 export type ComplianceProfilesClientOptions = {
@@ -15,8 +18,8 @@ export function complianceProfilesClient(
   return {
     name: COMPLIANCE_PROFILES_FEATURE,
     translations: mergeTranslations(defaultTranslations, options?.translations ?? {}),
-    components: {
-      [COMPLIANCE_PROFILE_SCREEN_ID]: ComplianceProfileScreen,
+    extensionSectionComponents: {
+      [COMPLIANCE_PROFILE_CATALOG_EXTENSION_NAME]: ComplianceProfileCatalog,
     },
   };
 }

package/src/compliance-profiles/web/compliance-profile-catalog.tsx

@@ -0,0 +1,55 @@
+// @runtime client
+// Extension-section component for the profile-picker actionForm's catalog
+// block — read-only list of the selectable compliance profiles (region +
+// supervisory authority). The select field above owns the actual choice;
+// this is reference material for the tenant admin.
+import {
+  type ExtensionSectionProps,
+  usePrimitives,
+  useQuery,
+  useTranslation,
+} from "@cosmicdrift/kumiko-renderer";
+import type { ReactNode } from "react";
+import { ComplianceProfileQueries } from "../constants";
+
+type ProfileSummary = {
+  readonly key: string;
+  readonly region: string;
+  readonly label: string;
+  readonly authorityContact: string;
+};
+
+type ListProfilesResponse = {
+  readonly profiles: readonly ProfileSummary[];
+};
+
+export function ComplianceProfileCatalog(_props: ExtensionSectionProps): ReactNode {
+  const { Banner, Text } = usePrimitives();
+  const t = useTranslation();
+  const query = useQuery<ListProfilesResponse>(ComplianceProfileQueries.listProfiles, {});
+
+  if (query.loading && query.data === null) {
+    return (
+      <Banner variant="loading" testId="compliance-profile-catalog-loading">
+        <Text>{t("compliance.profile.catalog.loading")}</Text>
+      </Banner>
+    );
+  }
+  if (query.error) {
+    return (
+      <Banner variant="error" testId="compliance-profile-catalog-error">
+        <Text>{t(query.error.i18nKey, query.error.i18nParams)}</Text>
+      </Banner>
+    );
+  }
+
+  return (
+    <ul className="flex flex-col gap-2 text-sm" data-testid="compliance-profile-catalog">
+      {(query.data?.profiles ?? []).map((profile) => (
+        <li key={profile.key} data-profile-key={profile.key}>
+          <strong>{profile.label}</strong> — {profile.region} — {profile.authorityContact}
+        </li>
+      ))}
+    </ul>
+  );
+}

package/src/compliance-profiles/web/i18n.ts

@@ -3,13 +3,7 @@ import type { TranslationsByLocale } from "@cosmicdrift/kumiko-renderer";
 
 export const defaultTranslations: TranslationsByLocale = {
   en: {
-    "compliance.profile.title": "Compliance profile",
-    "compliance.profile.loading": "Loading compliance profiles…",
-    "compliance.profile.current": "Current",
-    "compliance.profile.select": "Profile",
-    "compliance.profile.save": "Save profile",
-    "compliance.profile.saving": "Saving…",
-    "compliance.profile.catalog": "Available profiles",
+    "compliance.profile.catalog.loading": "Loading compliance profiles…",
     "compliance-profiles:nav.profilePicker": "Compliance",
   },
 };

package/src/compliance-profiles/web/index.ts

@@ -3,4 +3,4 @@ export {
   type ComplianceProfilesClientOptions,
   complianceProfilesClient,
 } from "./client-plugin";
-export { ComplianceProfileScreen } from "./compliance-profile-screen";
+export { ComplianceProfileCatalog } from "./compliance-profile-catalog";

package/src/delivery/__tests__/delivery-log-query.integration.test.ts

@@ -0,0 +1,132 @@
+// delivery:query:log — PagedRows contract, real sort, sort-whitelist
+// fallback, and the notificationType/recipientAddress → type/recipient
+// field-mapping the query handler now owns (see log.query.ts).
+
+import { afterAll, beforeAll, describe, expect, test } from "bun:test";
+import { insertMany } from "@cosmicdrift/kumiko-framework/bun-db";
+import {
+  createTestUser,
+  setupTestStack,
+  type TestStack,
+  testTenantId,
+  unsafePushTables,
+} from "@cosmicdrift/kumiko-framework/stack";
+import { DeliveryQueries } from "../constants";
+import { createDeliveryFeature } from "../feature";
+import { deliveryAttemptsTable, notificationPreferencesTable } from "../tables";
+
+type LogRow = {
+  readonly id: string;
+  readonly type: string;
+  readonly channel: string;
+  readonly recipient: string | null;
+  readonly status: string;
+};
+
+let stack: TestStack;
+const tenantId = testTenantId(701);
+const admin = createTestUser({ id: 701, roles: ["TenantAdmin"], tenantId });
+
+beforeAll(async () => {
+  stack = await setupTestStack({ features: [createDeliveryFeature()] });
+  await unsafePushTables(stack.db, { deliveryAttemptsTable, notificationPreferencesTable });
+  await insertMany(stack.db, deliveryAttemptsTable, [
+    {
+      id: crypto.randomUUID(),
+      tenantId,
+      notificationType: "logtest:alpha",
+      channel: "email",
+      recipientAddress: "alpha@example.com",
+      status: "sent",
+    },
+    {
+      id: crypto.randomUUID(),
+      tenantId,
+      notificationType: "logtest:beta",
+      channel: "push",
+      recipientAddress: "beta@example.com",
+      status: "failed",
+    },
+    {
+      id: crypto.randomUUID(),
+      tenantId,
+      notificationType: "logtest:gamma",
+      channel: "inApp",
+      recipientAddress: null,
+      status: "queued",
+    },
+  ]);
+});
+
+afterAll(async () => {
+  await stack.cleanup();
+});
+
+describe("delivery:query:log — PagedRows contract", () => {
+  test("a full page carries a nextCursor; the following (partial) page does not", async () => {
+    const first = await stack.http.queryOk<{
+      rows: readonly LogRow[];
+      nextCursor: string | null;
+    }>(DeliveryQueries.log, { limit: 2, sort: "type", sortDirection: "asc" }, admin);
+    expect(first.rows.map((r) => r.type)).toEqual(["logtest:alpha", "logtest:beta"]);
+    expect(first.nextCursor).not.toBeNull();
+
+    const second = await stack.http.queryOk<{
+      rows: readonly LogRow[];
+      nextCursor: string | null;
+    }>(
+      DeliveryQueries.log,
+      { limit: 2, sort: "type", sortDirection: "asc", cursor: first.nextCursor ?? undefined },
+      admin,
+    );
+    expect(second.rows.map((r) => r.type)).toEqual(["logtest:gamma"]);
+    expect(second.nextCursor).toBeNull();
+  });
+});
+
+describe("delivery:query:log — sort", () => {
+  test("asc vs desc on the same whitelisted field actually reverses row order", async () => {
+    const asc = await stack.http.queryOk<{ rows: readonly LogRow[] }>(
+      DeliveryQueries.log,
+      { sort: "type", sortDirection: "asc" },
+      admin,
+    );
+    const desc = await stack.http.queryOk<{ rows: readonly LogRow[] }>(
+      DeliveryQueries.log,
+      { sort: "type", sortDirection: "desc" },
+      admin,
+    );
+    const ascTypes = asc.rows.map((r) => r.type);
+    const descTypes = desc.rows.map((r) => r.type);
+    expect(ascTypes).toEqual(["logtest:alpha", "logtest:beta", "logtest:gamma"]);
+    expect(descTypes).toEqual([...ascTypes].reverse());
+  });
+
+  test("a sort field outside the whitelist falls back to the default order, not an ad-hoc SQL column", async () => {
+    const withInvalidSort = await stack.http.queryOk<{ rows: readonly LogRow[] }>(
+      DeliveryQueries.log,
+      { sort: "recipient" },
+      admin,
+    );
+    const withNoSort = await stack.http.queryOk<{ rows: readonly LogRow[] }>(
+      DeliveryQueries.log,
+      {},
+      admin,
+    );
+    expect(withInvalidSort.rows.map((r) => r.id)).toEqual(withNoSort.rows.map((r) => r.id));
+  });
+});
+
+describe("delivery:query:log — field mapping", () => {
+  test("rows carry type/recipient (display names), not the raw notificationType/recipientAddress column names", async () => {
+    const result = await stack.http.queryOk<{ rows: readonly Record<string, unknown>[] }>(
+      DeliveryQueries.log,
+      { sort: "type", sortDirection: "asc" },
+      admin,
+    );
+    const alpha = result.rows.find((r) => r["type"] === "logtest:alpha");
+    expect(alpha?.["recipient"]).toBe("alpha@example.com");
+    expect(alpha).not.toHaveProperty("notificationType");
+    expect(alpha).not.toHaveProperty("recipientAddress");
+  });
+});

package/src/delivery/__tests__/delivery-pii-kms.integration.test.ts

@@ -171,7 +171,7 @@ describe("delivery attempt log under KMS", () => {
     const entry = before.rows.find(
       (r) => r["recipientId"] === recipient.id && r["channel"] === "email",
     );
-    expect(entry?.["recipientAddress"]).toBe(testEmail(recipient.id));
+    expect(entry?.["recipient"]).toBe(testEmail(recipient.id));
 
     await kms.eraseKey({ kind: "user", userId: recipient.id });
 
@@ -183,7 +183,7 @@ describe("delivery attempt log under KMS", () => {
     const erased = after.rows.find(
       (r) => r["recipientId"] === recipient.id && r["channel"] === "email",
     );
-    expect(erased?.["recipientAddress"]).toBe(PII_ERASED_SENTINEL);
+    expect(erased?.["recipient"]).toBe(PII_ERASED_SENTINEL);
   });
 
   // money-horse#330: route:{email} (no user account, e.g. a share-token
@@ -224,7 +224,7 @@ describe("delivery attempt log under KMS", () => {
     );
     const otherSubjectBefore = beforeErase.rows.find(
       (r) => r["recipientId"] === recipient.id && r["channel"] === "email",
-    )?.["recipientAddress"];
+    )?.["recipient"];
     // Guard against a vacuous pass: if the row fell outside the `limit 100`
     // window, both sides below would be `undefined` and the "unaffected"
     // assertion would prove nothing.
@@ -241,13 +241,13 @@ describe("delivery attempt log under KMS", () => {
     const shredded = after.rows.find(
       (r) => r["recipientId"] === subjectId && r["channel"] === "email",
     );
-    expect(shredded?.["recipientAddress"]).toBe(PII_ERASED_SENTINEL);
+    expect(shredded?.["recipient"]).toBe(PII_ERASED_SENTINEL);
 
     // Other subjects (e.g. the plain `to:` recipient) are unaffected by the
     // share-token subject's erasure.
     const otherSubjectAfter = after.rows.find(
       (r) => r["recipientId"] === recipient.id && r["channel"] === "email",
-    )?.["recipientAddress"];
+    )?.["recipient"];
     expect(otherSubjectAfter).toBe(otherSubjectBefore);
   });
 });

package/src/delivery/__tests__/delivery-screens.boot.test.ts

@@ -11,10 +11,10 @@ describe("delivery screens + handler access alignment", () => {
     expect(() => validateBoot(features)).not.toThrow();
   });
 
-  test("delivery-log screen is custom, access.admin-gated", () => {
+  test("delivery-log screen is projectionList, access.admin-gated", () => {
     const delivery = createDeliveryFeature();
     const screen = delivery.screens[DELIVERY_LOG_SCREEN_ID];
-    expect(screen?.type).toBe("custom");
+    expect(screen?.type).toBe("projectionList");
     expect(rolesOf(screen?.access)).toEqual([...access.admin]);
   });
 

package/src/delivery/__tests__/delivery.integration.test.ts

@@ -515,7 +515,7 @@ describe("flow 3: broadcast to multiple users + markAllRead", () => {
 
     // 1 orderAssigned × 3 channels + 2 announcement × 3 channels = 9 total
     expect(result.rows.length).toBe(9);
-    expect(result.rows[0]?.["notificationType"]).toBe("app:notify:announcement");
+    expect(result.rows[0]?.["type"]).toBe("app:notify:announcement");
   });
 });
 

package/src/delivery/changes.json

@@ -1,4 +1,10 @@
 [
+  {
+    "version": "0.208.2",
+    "type": "improvement",
+    "title": "`/delivery-log` is a declarative projectionList screen (#2221).",
+    "detail": "The 103-line hand-rolled `custom` screen (`delivery-log-screen.tsx`) is gone. `r.screen({ id: DELIVERY_LOG_SCREEN_ID, type: \"projectionList\", ... })` drives the list off `delivery:query:log`, now built on `definePagedQueryHandler` with `cursor`/`limit`/`sort`/`sortDirection` and a server-side sort whitelist (type-guarded, not an `as`-cast) covering `createdAt`/`type`/`channel`/`status` — `recipient` isn't sortable since it's PII decrypted per-row, not a column SQL can ORDER BY. Pagination is cursor-based (`pagination: \"infinite\"`): `deliveryAttemptsTable.id` is an event-stream aggregate id, not a sequential PK, so there's no cheap offset/COUNT(*) path. The notificationType/recipientAddress → type/recipient display-name mapping moved from the old client component into the query handler, matching the read-projection convention for declarative list screens; column i18n keys moved from the client-only bundle into the server-registered `DELIVERY_I18N` so the generic renderer can resolve them. The status column keeps one small TSX cell (`DeliveryStatusCell`, a `StatusBadge`), registered as a `columnRenderer` — that's the only surviving hand-written UI for this screen."
+  },
   {
     "version": "0.120.0",
     "type": "improvement",

package/src/delivery/constants.ts

@@ -6,6 +6,7 @@ export {
   DELIVERY_ATTEMPT_EVENT,
   DELIVERY_FEATURE,
   DELIVERY_LOG_SCREEN_ID,
+  DELIVERY_STATUS_CELL_COMPONENT,
   DeliveryErrors,
   DeliveryHandlers,
   DeliveryJobNames,

package/src/delivery/feature.ts

@@ -5,7 +5,13 @@ import {
   type FeatureDefinition,
 } from "@cosmicdrift/kumiko-framework/engine";
 import type { z } from "zod";
-import { DELIVERY_ATTEMPT_EVENT, DELIVERY_LOG_SCREEN_ID, DeliveryJobNames } from "./constants";
+import {
+  DELIVERY_ATTEMPT_EVENT,
+  DELIVERY_LOG_SCREEN_ID,
+  DELIVERY_STATUS_CELL_COMPONENT,
+  DeliveryJobNames,
+  DeliveryQueries,
+} from "./constants";
 import { deliveryAttemptSchema } from "./events";
 import { logQuery } from "./handlers/log.query";
 import { preferencesQuery } from "./handlers/preferences.query";
@@ -134,13 +140,32 @@ export function createDeliveryFeature(options?: DeliveryFeatureOptions): Feature
 
     r.screen({
       id: DELIVERY_LOG_SCREEN_ID,
-      type: "custom",
-      renderer: { react: { __component: "DeliveryLogScreen" } },
+      type: "projectionList",
+      query: DeliveryQueries.log,
+      columns: [
+        { field: "type", label: "delivery.log.col.type" },
+        { field: "channel", label: "delivery.log.col.channel" },
+        { field: "recipient", label: "delivery.log.col.recipient" },
+        {
+          field: "status",
+          label: "delivery.log.col.status",
+          renderer: { react: { __component: DELIVERY_STATUS_CELL_COMPONENT } },
+        },
+      ],
+      // Cursor-based paging: deliveryAttemptsTable's id is an event-stream
+      // aggregate id (not a sequential PK), so the "pages" default (offset +
+      // COUNT(*)) has no cheap query-side implementation here — "infinite"
+      // matches what log.query.ts's cursor/limit/sort schema actually supports.
+      pagination: "infinite",
+      defaultSort: { field: "createdAt", dir: "desc" },
       access: { roles: resolvedAccess },
     });
     r.nav({
       id: "delivery-log",
       label: "delivery:nav.deliveryLog",
+      // "send" isn't in the closed NavIconKey vocabulary (packages/types/src/
+      // nav-icon.ts) — "bell" matches the feature's own notifications framing.
+      icon: "bell",
       screen: "delivery:screen:delivery-log",
       order: 40,
     });