@cosmicdrift/kumiko-bundled-features 0.270.0 → 0.274.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (56) hide show
  1. package/package.json +9 -9
  2. package/src/__tests__/account-security-fixture.ts +3 -0
  3. package/src/agent-tools/tool-catalog.ts +1 -1
  4. package/src/agent-tools/tool-dispatch.ts +1 -1
  5. package/src/audit/__tests__/escape-hatch-audit.integration.test.ts +96 -0
  6. package/src/audit/changes.json +12 -0
  7. package/src/audit/escape-hatch-audit-sink.ts +52 -0
  8. package/src/audit/feature.ts +5 -1
  9. package/src/audit/index.ts +1 -0
  10. package/src/auth-email-password/__tests__/query-as-member.integration.test.ts +303 -0
  11. package/src/auth-mfa/screens.ts +14 -10
  12. package/src/cap-counter/feature.ts +5 -3
  13. package/src/cap-overview/screens.ts +6 -0
  14. package/src/config/__tests__/reencrypt-job-tenant-checks.integration.test.ts +2 -1
  15. package/src/config/changes.json +6 -0
  16. package/src/config/db/queries/__tests__/resolver.test.ts +43 -38
  17. package/src/config/db/queries/resolver.ts +22 -22
  18. package/src/config/handlers/cascade.query.ts +6 -0
  19. package/src/config/handlers/readiness.query.ts +6 -0
  20. package/src/config/handlers/reencrypt.job.ts +21 -2
  21. package/src/config/handlers/schema.query.ts +6 -0
  22. package/src/config/handlers/values.query.ts +6 -0
  23. package/src/delivery/__tests__/delivery.integration.test.ts +34 -0
  24. package/src/delivery/changes.json +6 -0
  25. package/src/delivery/delivery-service.ts +25 -3
  26. package/src/delivery/handlers/preferences.query.ts +6 -0
  27. package/src/delivery/testing.ts +8 -1
  28. package/src/jobs/handlers/list.query.ts +3 -1
  29. package/src/ledger/__tests__/ledger.integration.test.ts +57 -0
  30. package/src/managed-pages/screens/branding-screen.ts +3 -0
  31. package/src/managed-pages/screens/page-screens.ts +3 -0
  32. package/src/notes-history/__tests__/notes-section.test.tsx +23 -0
  33. package/src/notes-history/web/i18n.ts +3 -0
  34. package/src/notes-history/web/notes-section.tsx +61 -51
  35. package/src/personal-access-tokens/screens.ts +7 -7
  36. package/src/sessions/screens.ts +5 -3
  37. package/src/tags/screens.ts +3 -0
  38. package/src/tenant/__tests__/members-facet-i18n.test.ts +5 -5
  39. package/src/tenant/changes.json +6 -0
  40. package/src/tenant/handlers/me.query.ts +6 -0
  41. package/src/tenant/handlers/update-member-roles.write.ts +10 -1
  42. package/src/tenant/screens.ts +3 -0
  43. package/src/tenant/seeding.ts +25 -19
  44. package/src/tier-engine/feature.ts +3 -0
  45. package/src/user/changes.json +6 -0
  46. package/src/user/handlers/me.query.ts +6 -0
  47. package/src/user/handlers/update-roles.ts +8 -5
  48. package/src/user/screens.ts +3 -0
  49. package/src/user-data-rights/__tests__/boot-checks.test.ts +16 -0
  50. package/src/user-data-rights/__tests__/export-job-list-cross-tenant.integration.test.ts +1 -1
  51. package/src/user-data-rights/feature.ts +3 -5
  52. package/src/user-data-rights/handlers/download-attempt-list.query.ts +4 -1
  53. package/src/user-data-rights/handlers/export-job-detail.query.ts +4 -1
  54. package/src/user-data-rights/handlers/export-job-list.query.ts +4 -1
  55. package/src/user-data-rights/screens.ts +3 -0
  56. package/src/user-profile/feature.ts +3 -0
package/src/user-data-rights/handlers/export-job-detail.query.ts CHANGED
@@ -4,7 +4,10 @@ import { exportJobEntity } from "../schema/export-job";
4
4
  // Detail fetch backing the read-only export-job inspector screen.
5
5
  export const exportJobDetailQuery = defineEntityDetailHandler("export-job", exportJobEntity, {
6
6
  access: { roles: access.systemAdmin },
7
- crossTenant: true,
7
+ escapeHatch: {
8
+ reason:
9
+ "SystemAdmin GDPR Art. 20 export inspector opens one data-export job owned by any tenant for platform-operator support",
10
+ },
8
11
  description:
9
12
  "Read-only cross-tenant detail view of one GDPR data-export job for the system-admin inspector, showing its lifecycle timestamps, storage key, byte count and error message.",
10
13
  });
package/src/user-data-rights/handlers/export-job-list.query.ts CHANGED
@@ -5,7 +5,10 @@ import { exportJobEntity } from "../schema/export-job";
5
5
  // rows are created by the user's request-export flow, never through this handler.
6
6
  export const exportJobListQuery = defineEntityListHandler("export-job", exportJobEntity, {
7
7
  access: { roles: access.systemAdmin },
8
- crossTenant: true,
8
+ escapeHatch: {
9
+ reason:
10
+ "SystemAdmin GDPR Art. 20 export inspector lists data-export jobs of every tenant for platform-operator support",
11
+ },
9
12
  description:
10
13
  "Read-only cross-tenant list of GDPR Art. 20 data-export jobs for the system-admin inspector; use export-status instead when a user asks about their own export.",
11
14
  });
package/src/user-data-rights/screens.ts CHANGED
@@ -71,4 +71,7 @@ export const downloadAttemptListScreen: EntityListScreenDefinition = {
71
71
  columns: ["attemptedAt", "result", "via", "ip", "attemptedByUserId", "jobId"],
72
72
  searchable: false,
73
73
  access: { roles: access.systemAdmin },
74
+ // Inert until an app navs it (see file header) — no nav area to resolve
75
+ // in isolation.
76
+ dormant: true,
74
77
  };
package/src/user-profile/feature.ts CHANGED
@@ -85,6 +85,9 @@ export function createUserProfileFeature(): FeatureDefinition {
85
85
  "own userId; no app role name is portable enough to gate this",
86
86
  },
87
87
  },
88
+ // Self-service settings-area screen, placed by the consuming app's own
89
+ // r.nav() (see samples/apps/use-all-bundled's screens-feature.ts).
90
+ dormant: true,
88
91
  description:
89
92
  "Self-service account page: change password, change email (with re-auth and " +
90
93
  "a verification-mail follow-up), and request or cancel account deletion " +