@cosmicdrift/kumiko-bundled-features 0.218.0 → 0.219.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-bundled-features",
-  "version": "0.218.0",
+  "version": "0.219.0",
   "description": "Built-in features — tenant, user, auth, delivery. The stuff you'd rewrite anyway, already typed.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -126,12 +126,12 @@
     "./step-dispatcher": "./src/step-dispatcher/index.ts"
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-dispatcher-live": "0.218.0",
-    "@cosmicdrift/kumiko-framework": "0.218.0",
-    "@cosmicdrift/kumiko-headless": "0.218.0",
-    "@cosmicdrift/kumiko-renderer": "0.218.0",
-    "@cosmicdrift/kumiko-renderer-web": "0.218.0",
-    "@cosmicdrift/kumiko-types": "0.218.0",
+    "@cosmicdrift/kumiko-dispatcher-live": "0.219.0",
+    "@cosmicdrift/kumiko-framework": "0.219.0",
+    "@cosmicdrift/kumiko-headless": "0.219.0",
+    "@cosmicdrift/kumiko-renderer": "0.219.0",
+    "@cosmicdrift/kumiko-renderer-web": "0.219.0",
+    "@cosmicdrift/kumiko-types": "0.219.0",
     "@mollie/api-client": "^4.5.0",
     "@node-rs/argon2": "^2.0.2",
     "@types/mailparser": "^3.4.6",
@@ -160,7 +160,7 @@
   "devDependencies": {
     "@testing-library/user-event": "^14.6.1",
     "@types/qrcode": "^1.5.5",
-    "@cosmicdrift/kumiko-locale-de": "0.218.0",
-    "@cosmicdrift/kumiko-locale-es": "0.218.0"
+    "@cosmicdrift/kumiko-locale-de": "0.219.0",
+    "@cosmicdrift/kumiko-locale-es": "0.219.0"
   }
 }

package/src/tenant/__tests__/tenant-security.integration.test.ts

@@ -321,6 +321,19 @@ describe("privilege escalation via invite role", () => {
     expectErrorIncludes(err, "unassignable_membership_role");
   });
 
+  test("TenantAdmin can invite as TenantAdmin (same-rank owner invite)", async () => {
+    await stack.http.write(
+      AuthHandlers.inviteCreate,
+      { email: "co-owner@example.com", role: "TenantAdmin" },
+      tenantAdminA(),
+    );
+    const rows = await selectMany(stack.db, tenantInvitationsTable, {
+      email: "co-owner@example.com",
+    });
+    expect(rows).toHaveLength(1);
+    expect(rows[0]?.["role"]).toBe("TenantAdmin");
+  });
+
   test("TenantAdmin cannot invite with unknown unranked role (elevation guard)", async () => {
     const err = await stack.http.writeErr(
       AuthHandlers.inviteCreate,

package/src/tenant/changes.json

@@ -1,33 +1,39 @@
 [
+  {
+    "version": "0.219.0",
+    "type": "improvement",
+    "title": "Invite/member-roles pickers include TenantAdmin",
+    "detail": "DEFAULT_INVITE_ROLE_OPTIONS adds TenantAdmin so SystemAdmin/TenantAdmin can invite owners. SystemAdmin stays global-only (user.roles), never a membership invite option."
+  },
   {
     "version": "0.209.0",
     "type": "improvement",
     "title": "tenant: single /members screen replaces the members-card/pending-card split (#2223)",
-    "detail": "New `tenant:query:team:list` handler merges active memberships and pending invitations into one projectionList screen (`membersScreen`), with a `status` facet, sortable/searchable columns, and a danger-styled `cancel-invitation` row action visible only on pending rows. `createTenantFeature({ inviteScreen: true })` additionally wires a drawer-hosted invite actionForm onto the toolbar (bound to auth-email-password's `invite-create` handler) — off by default, and only safe to enable once the app also configures `createAuthEmailPasswordFeature({ invite: {...} })`, since the boot validator rejects the actionForm's cross-feature handler QN otherwise. The old `members`/`invitations` query handlers and their custom `MembersScreen` component are unaffected and stay registered for existing callers; `updateMemberRoles` stays SystemAdmin-only and off this screen."
+    "detail": "New `tenant:query:team:list` handler merges active memberships and pending invitations into one projectionList screen (`membersScreen`), with a `status` facet, sortable/searchable columns, and a danger-styled `cancel-invitation` row action visible only on pending rows. `createTenantFeature({ inviteScreen: true })` additionally wires a drawer-hosted invite actionForm onto the toolbar (bound to auth-email-password's `invite-create` handler) \u2014 off by default, and only safe to enable once the app also configures `createAuthEmailPasswordFeature({ invite: {...} })`, since the boot validator rejects the actionForm's cross-feature handler QN otherwise. The old `members`/`invitations` query handlers and their custom `MembersScreen` component are unaffected and stay registered for existing callers; `updateMemberRoles` stays SystemAdmin-only and off this screen."
   },
   {
     "version": "0.165.0",
     "type": "fix",
     "title": "resolveRawDb: removed redundant null check",
-    "detail": "CodeQL flagged db !== null after if (!db) — truthiness already excludes null. Internal cleanup, no API break."
+    "detail": "CodeQL flagged db !== null after if (!db) \u2014 truthiness already excludes null. Internal cleanup, no API break."
   },
   {
     "version": "0.165.0",
     "type": "fix",
     "title": "Seed hook: explicit SessionUser typing",
-    "detail": "Fixed tenant seeding type annotation — prevents implicit any propagation in seed handlers."
+    "detail": "Fixed tenant seeding type annotation \u2014 prevents implicit any propagation in seed handlers."
   },
   {
     "version": "0.165.0",
     "type": "fix",
     "title": "Seed afterCommit + real tenant rescope",
-    "detail": "ScheduleAfterCommit now available on HandlerContext — fireEntityPostSave queues after TX commit instead of mid-transaction. DB/notify/hasFeature/_tenantId are correctly rescoped when targeting an entity's tenant.",
-    "migration": "Only affects custom seed handlers using fireEntityPostSave — now afterCommit-compatible."
+    "detail": "ScheduleAfterCommit now available on HandlerContext \u2014 fireEntityPostSave queues after TX commit instead of mid-transaction. DB/notify/hasFeature/_tenantId are correctly rescoped when targeting an entity's tenant.",
+    "migration": "Only affects custom seed handlers using fireEntityPostSave \u2014 now afterCommit-compatible."
   },
   {
     "version": "0.163.0",
     "type": "improvement",
     "title": "tenant: seedTenant fires entity postSave hooks (#1463).",
-    "detail": "tenant: seedTenant fires entity postSave hooks (#1463). `seedTenant` writes through the raw event-store executor, which never fired postSave hooks — self-signup (`provisionSignupAccount` → `signup-confirm`) silently skipped feature-registered entity hooks like tier-engine's auto-default-tier and app-level auto-default-compliance, leaving new tenants without a tier/compliance row. `seedTenant` and `provisionSignupAccount` take a new optional `hooks: { registry, context }` param; passing it fires the same entity-scoped postSave hooks the dispatcher would, without the full dispatch roundtrip. Existing call-sites are unaffected — the param is optional and append-only."
+    "detail": "tenant: seedTenant fires entity postSave hooks (#1463). `seedTenant` writes through the raw event-store executor, which never fired postSave hooks \u2014 self-signup (`provisionSignupAccount` \u2192 `signup-confirm`) silently skipped feature-registered entity hooks like tier-engine's auto-default-tier and app-level auto-default-compliance, leaving new tenants without a tier/compliance row. `seedTenant` and `provisionSignupAccount` take a new optional `hooks: { registry, context }` param; passing it fires the same entity-scoped postSave hooks the dispatcher would, without the full dispatch roundtrip. Existing call-sites are unaffected \u2014 the param is optional and append-only."
   }
 ]

package/src/tenant/constants.ts

@@ -23,7 +23,7 @@ export const MEMBER_STATUS_CELL_COMPONENT = "MemberStatusCell" as const;
 export const MEMBER_ROLES_CELL_COMPONENT = "MemberRolesCell" as const;
 
 /** Closed allowlist for invite-role picker — never free text (escalation guard). */
-export const DEFAULT_INVITE_ROLE_OPTIONS = ["User", "Admin", "Editor"] as const;
+export const DEFAULT_INVITE_ROLE_OPTIONS = ["User", "Editor", "Admin", "TenantAdmin"] as const;
 
 // Qualified write handler names (QN format: scope:type:name)
 export const TenantHandlers = {

package/src/tenant/i18n.ts

@@ -28,11 +28,13 @@ export const TENANT_I18N: Readonly<Record<string, LocalizedString>> = {
   "tenant:entity:__action-form__:field:role": { en: "Role" },
   "tenant:entity:__action-form__:field:role:option:User": { en: "User" },
   "tenant:entity:__action-form__:field:role:option:Admin": { en: "Admin" },
+  "tenant:entity:__action-form__:field:role:option:TenantAdmin": { en: "TenantAdmin" },
   "tenant:entity:__action-form__:field:role:option:Editor": { en: "Editor" },
   "tenant:entity:__action-form__:field:userId": { en: "User ID" },
   "tenant:entity:__action-form__:field:roles": { en: "Roles" },
   "tenant:entity:__action-form__:field:roles:option:User": { en: "User" },
   "tenant:entity:__action-form__:field:roles:option:Admin": { en: "Admin" },
+  "tenant:entity:__action-form__:field:roles:option:TenantAdmin": { en: "TenantAdmin" },
   "tenant:entity:__action-form__:field:roles:option:Editor": { en: "Editor" },
   "tenant:entity:tenant:field:key": { en: "Key" },
   "tenant:entity:tenant:field:name": { en: "Name" },