@cosmicdrift/kumiko-bundled-features 0.307.0 → 0.308.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (243) hide show
  1. package/package.json +9 -9
  2. package/src/__tests__/access-invalidation-consumer.integration.test.ts +107 -0
  3. package/src/__tests__/access-invalidation-stream.integration.test.ts +1 -1
  4. package/src/__tests__/credential-scoped-sse-revoke.integration.test.ts +296 -0
  5. package/src/agent-tools/__tests__/agent-doc-lint.test.ts +1 -1
  6. package/src/agent-tools/__tests__/agent-manifest.test.ts +1 -1
  7. package/src/agent-tools/__tests__/agent-optout.test.ts +1 -1
  8. package/src/agent-tools/__tests__/agent-tools.integration.test.ts +1 -1
  9. package/src/agent-tools/__tests__/feature.test.ts +1 -1
  10. package/src/agent-tools/__tests__/tool-catalog.test.ts +1 -1
  11. package/src/agent-tools/agent-manifest.ts +1 -1
  12. package/src/audit/__tests__/escape-hatch-audit.integration.test.ts +1 -1
  13. package/src/audit/escape-hatch-audit-sink.ts +1 -1
  14. package/src/audit/handlers/details.query.ts +1 -1
  15. package/src/audit/handlers/list.query.ts +1 -1
  16. package/src/auth-email-password/__tests__/query-as-member.integration.test.ts +1 -1
  17. package/src/auth-email-password/feature.ts +1 -1
  18. package/src/auth-email-password/handlers/change-password.write.ts +1 -1
  19. package/src/auth-email-password/handlers/confirm-account-unlock.write.ts +1 -1
  20. package/src/auth-email-password/handlers/invite-accept-with-login.write.ts +1 -1
  21. package/src/auth-email-password/handlers/invite-accept.write.ts +1 -1
  22. package/src/auth-email-password/handlers/invite-create.write.ts +1 -1
  23. package/src/auth-email-password/handlers/invite-signup-complete.write.ts +1 -1
  24. package/src/auth-email-password/handlers/login.write.ts +1 -1
  25. package/src/auth-email-password/handlers/logout.write.ts +1 -1
  26. package/src/auth-email-password/handlers/reset-password.write.ts +1 -1
  27. package/src/auth-email-password/handlers/self-registration-status.query.ts +1 -1
  28. package/src/auth-email-password/handlers/signup-confirm.write.ts +1 -1
  29. package/src/auth-email-password/handlers/signup-request.write.ts +1 -1
  30. package/src/auth-email-password/handlers/token-request-handler.ts +1 -1
  31. package/src/auth-email-password/handlers/verify-email.write.ts +1 -1
  32. package/src/auth-email-password/password-policy.ts +1 -1
  33. package/src/auth-mfa/__tests__/session-scoped-sse-revoke.integration.test.ts +1 -1
  34. package/src/auth-mfa/handlers/disable.write.ts +1 -1
  35. package/src/auth-mfa/handlers/enable-confirm-preauth.write.ts +1 -1
  36. package/src/auth-mfa/handlers/enable-confirm.write.ts +1 -1
  37. package/src/auth-mfa/handlers/enable-start-preauth.write.ts +1 -1
  38. package/src/auth-mfa/handlers/enable-start.write.ts +1 -1
  39. package/src/auth-mfa/handlers/regenerate-recovery.write.ts +1 -1
  40. package/src/auth-mfa/handlers/status.query.ts +1 -1
  41. package/src/auth-mfa/handlers/verify.write.ts +1 -1
  42. package/src/billing-foundation/billing-info-query.ts +1 -1
  43. package/src/billing-foundation/events.ts +1 -1
  44. package/src/billing-foundation/handlers/create-checkout-session.write.ts +1 -1
  45. package/src/billing-foundation/handlers/create-portal-session.write.ts +1 -1
  46. package/src/billing-foundation/handlers/list-subscriptions.query.ts +1 -1
  47. package/src/billing-foundation/handlers/process-event.write.ts +1 -1
  48. package/src/billing-foundation/handlers/process-payment-event.write.ts +1 -1
  49. package/src/cap-counter/__tests__/cap-counter.integration.test.ts +1 -1
  50. package/src/cap-counter/__tests__/stock-cap-guard.integration.test.ts +1 -1
  51. package/src/cap-counter/__tests__/with-cap-enforcement.integration.test.ts +1 -1
  52. package/src/cap-counter/book-cap-usage.ts +1 -1
  53. package/src/cap-counter/handlers/get-counter.query.ts +1 -1
  54. package/src/cap-counter/handlers/increment-rolling.write.ts +1 -1
  55. package/src/cap-counter/handlers/increment.write.ts +1 -1
  56. package/src/cap-counter/handlers/mark-soft-warned.write.ts +1 -1
  57. package/src/cap-overview/handlers/caps-usage.query.ts +1 -1
  58. package/src/cap-overview/handlers/tenant-caps-list.query.ts +1 -1
  59. package/src/cap-overview/handlers/tenant-options.query.ts +1 -1
  60. package/src/channel-in-app/handlers/inbox.query.ts +1 -1
  61. package/src/channel-in-app/handlers/mark-all-read.write.ts +1 -1
  62. package/src/channel-in-app/handlers/mark-read.write.ts +1 -1
  63. package/src/channel-in-app/handlers/unread-count.query.ts +1 -1
  64. package/src/compliance-profiles/handlers/for-tenant.query.ts +1 -1
  65. package/src/compliance-profiles/handlers/list-profiles.query.ts +1 -1
  66. package/src/compliance-profiles/handlers/needs-profile.query.ts +1 -1
  67. package/src/compliance-profiles/handlers/set-profile.write.ts +1 -1
  68. package/src/compliance-profiles/handlers/sub-processors.query.ts +1 -1
  69. package/src/compliance-profiles-ops/handlers/tenants-missing-profile.query.ts +1 -1
  70. package/src/config/__tests__/backing-secrets.integration.test.ts +1 -1
  71. package/src/config/__tests__/config.integration.test.ts +1 -1
  72. package/src/config/__tests__/tz-resolution.integration.test.ts +1 -1
  73. package/src/config/handlers/cascade.query.ts +1 -1
  74. package/src/config/handlers/readiness.query.ts +1 -1
  75. package/src/config/handlers/reset.write.ts +1 -1
  76. package/src/config/handlers/schema.query.ts +1 -1
  77. package/src/config/handlers/set.write.ts +1 -1
  78. package/src/config/handlers/values.query.ts +1 -1
  79. package/src/crypto-shredding/handlers/forget-subject.write.ts +1 -1
  80. package/src/custom-fields/__tests__/audit-integration.integration.test.ts +1 -1
  81. package/src/custom-fields/__tests__/cross-tenant-field-delete.integration.test.ts +1 -1
  82. package/src/custom-fields/__tests__/cross-tenant-set-write.integration.test.ts +1 -1
  83. package/src/custom-fields/__tests__/custom-fields.integration.test.ts +1 -1
  84. package/src/custom-fields/__tests__/field-access.integration.test.ts +1 -1
  85. package/src/custom-fields/__tests__/quota.integration.test.ts +1 -1
  86. package/src/custom-fields/__tests__/retention.integration.test.ts +1 -1
  87. package/src/custom-fields/__tests__/user-data-rights.integration.test.ts +1 -1
  88. package/src/custom-fields/events.ts +1 -1
  89. package/src/custom-fields/feature.ts +1 -1
  90. package/src/custom-fields/handlers/clear-custom-field.write.ts +1 -1
  91. package/src/custom-fields/handlers/set-custom-field.write.ts +1 -1
  92. package/src/custom-fields/lib/value-schema.ts +1 -1
  93. package/src/custom-fields/schemas.ts +1 -1
  94. package/src/data-retention/handlers/policy-for.query.ts +1 -1
  95. package/src/data-retention/override-schema.ts +1 -1
  96. package/src/delivery/__tests__/delivery-pii-kms.integration.test.ts +1 -1
  97. package/src/delivery/__tests__/delivery.integration.test.ts +1 -1
  98. package/src/delivery/events.ts +1 -1
  99. package/src/delivery/feature.ts +1 -1
  100. package/src/delivery/handlers/log.query.ts +1 -1
  101. package/src/delivery/handlers/preferences.query.ts +1 -1
  102. package/src/delivery/handlers/set-preference.write.ts +1 -1
  103. package/src/delivery/jobs.ts +1 -1
  104. package/src/delivery/unsubscribe.ts +1 -1
  105. package/src/derivatives-sharp/__tests__/derivatives-sharp.integration.test.ts +1 -1
  106. package/src/document-ingest-foundation/events.ts +1 -1
  107. package/src/document-ingest-foundation/feature.ts +1 -1
  108. package/src/feature-toggles/__tests__/feature-toggles.integration.test.ts +1 -1
  109. package/src/feature-toggles/events.ts +1 -1
  110. package/src/feature-toggles/handlers/list.query.ts +1 -1
  111. package/src/feature-toggles/handlers/registered.query.ts +1 -1
  112. package/src/feature-toggles/handlers/set.write.ts +1 -1
  113. package/src/file-derivatives/handlers/public-variant.query.ts +1 -1
  114. package/src/file-foundation/__tests__/file-foundation.integration.test.ts +1 -1
  115. package/src/files-tenant-data/handlers/sweep-orphaned-derivatives.job.ts +1 -1
  116. package/src/folders/handlers/delete-folder.write.ts +1 -1
  117. package/src/folders/schemas.ts +1 -1
  118. package/src/form-draft/schemas.ts +1 -1
  119. package/src/inbound-mail-foundation/events.ts +1 -1
  120. package/src/inbound-mail-foundation/handlers/connect-account.write.ts +1 -1
  121. package/src/inbound-mail-foundation/handlers/disconnect-account.write.ts +1 -1
  122. package/src/inbound-mail-foundation/handlers/ingest-message.write.ts +1 -1
  123. package/src/inbound-mail-foundation/handlers/list-accounts.query.ts +1 -1
  124. package/src/inbound-mail-foundation/handlers/list-messages.query.ts +1 -1
  125. package/src/inbound-mail-foundation/handlers/update-account.write.ts +1 -1
  126. package/src/inbound-provider-imap/credential-document.ts +1 -1
  127. package/src/jobs/__tests__/jobs-catalog.integration.test.ts +1 -1
  128. package/src/jobs/__tests__/tenant-job-failures.integration.test.ts +1 -1
  129. package/src/jobs/events.ts +1 -1
  130. package/src/jobs/handlers/catalog.query.ts +1 -1
  131. package/src/jobs/handlers/detail.query.ts +1 -1
  132. package/src/jobs/handlers/list.query.ts +1 -1
  133. package/src/jobs/handlers/projection-rebuild.job.ts +1 -1
  134. package/src/jobs/handlers/reindex-entity.job.ts +1 -1
  135. package/src/jobs/handlers/retry.write.ts +1 -1
  136. package/src/jobs/handlers/tenant-failures.query.ts +1 -1
  137. package/src/jobs/handlers/trigger.write.ts +1 -1
  138. package/src/ledger/handlers/reports.query.ts +1 -1
  139. package/src/ledger/schemas.ts +1 -1
  140. package/src/mail-foundation/__tests__/mail-foundation.integration.test.ts +1 -1
  141. package/src/managed-pages/handlers/branding.query.ts +1 -1
  142. package/src/managed-pages/handlers/by-slug.query.ts +1 -1
  143. package/src/managed-pages/handlers/by-tenant-published.query.ts +1 -1
  144. package/src/managed-pages/handlers/set.write.ts +1 -1
  145. package/src/notes-history/changes.json +7 -0
  146. package/src/notes-history/schemas.ts +1 -1
  147. package/src/notes-history/web/notes-section.tsx +37 -36
  148. package/src/personal-access-tokens/feature.ts +10 -0
  149. package/src/personal-access-tokens/handlers/available-scopes.query.ts +1 -1
  150. package/src/personal-access-tokens/handlers/create.write.ts +1 -1
  151. package/src/personal-access-tokens/handlers/list.query.ts +1 -1
  152. package/src/personal-access-tokens/handlers/revoke.write.ts +18 -2
  153. package/src/personal-access-tokens/index.ts +7 -0
  154. package/src/personal-access-tokens/pat-revoked-event.ts +23 -0
  155. package/src/personal-access-tokens/revoke-for-user.ts +31 -0
  156. package/src/rate-limiting/__tests__/rate-limiting.integration.test.ts +1 -1
  157. package/src/rate-limiting/handlers/status.query.ts +1 -1
  158. package/src/readiness/handlers/status.query.ts +1 -1
  159. package/src/secrets/feature.ts +1 -1
  160. package/src/secrets/handlers/delete.write.ts +1 -1
  161. package/src/secrets/handlers/list.query.ts +1 -1
  162. package/src/secrets/handlers/set.write.ts +1 -1
  163. package/src/secrets/secrets-context.ts +1 -1
  164. package/src/seo/handlers/seo-config.query.ts +1 -1
  165. package/src/sessions/handlers/detail.query.ts +1 -1
  166. package/src/sessions/handlers/list.query.ts +1 -1
  167. package/src/sessions/handlers/mine.query.ts +1 -1
  168. package/src/sessions/handlers/revoke-all-for-user.write.ts +1 -1
  169. package/src/sessions/handlers/revoke-all-others.write.ts +1 -1
  170. package/src/sessions/handlers/revoke.write.ts +1 -1
  171. package/src/sessions/session-callbacks.ts +25 -1
  172. package/src/sessions/session-revoked-event.ts +6 -1
  173. package/src/shared/__tests__/row-bound-grant.integration.test.ts +1 -1
  174. package/src/step-dispatcher/mail-runner.ts +1 -1
  175. package/src/step-dispatcher/webhook-runner.ts +1 -1
  176. package/src/subscription-mollie/feature.ts +1 -1
  177. package/src/subscription-stripe/feature.ts +1 -1
  178. package/src/tags/schemas.ts +1 -1
  179. package/src/template-resolver/handlers/by-slug.query.ts +1 -1
  180. package/src/template-resolver/handlers/by-tenant.query.ts +1 -1
  181. package/src/template-resolver/handlers/collection-item.query.ts +1 -1
  182. package/src/template-resolver/handlers/collection-list.query.ts +1 -1
  183. package/src/template-resolver/handlers/collection-set.write.ts +1 -1
  184. package/src/template-resolver/handlers/find-by-id.query.ts +1 -1
  185. package/src/template-resolver/handlers/list.query.ts +1 -1
  186. package/src/template-resolver/handlers/set.write.ts +1 -1
  187. package/src/template-resolver/handlers/shared.ts +1 -1
  188. package/src/template-resolver/handlers/toggle-status.write.ts +1 -1
  189. package/src/template-resolver/handlers/upsert-tenant.write.ts +1 -1
  190. package/src/tenant/__tests__/tenant-timezone-boot.integration.test.ts +1 -1
  191. package/src/tenant/handlers/active-tenant-ids.query.ts +1 -1
  192. package/src/tenant/handlers/add-member.write.ts +1 -1
  193. package/src/tenant/handlers/cancel-invitation.write.ts +1 -1
  194. package/src/tenant/handlers/create.write.ts +1 -1
  195. package/src/tenant/handlers/invitations.query.ts +1 -1
  196. package/src/tenant/handlers/list.query.ts +1 -1
  197. package/src/tenant/handlers/me.query.ts +1 -1
  198. package/src/tenant/handlers/member-directory.query.ts +1 -1
  199. package/src/tenant/handlers/members.query.ts +1 -1
  200. package/src/tenant/handlers/memberships.query.ts +1 -1
  201. package/src/tenant/handlers/remove-member.write.ts +1 -1
  202. package/src/tenant/handlers/resolve-user-ids.query.ts +1 -1
  203. package/src/tenant/handlers/team-list.query.ts +1 -1
  204. package/src/tenant/handlers/tenant-directory.query.ts +1 -1
  205. package/src/tenant/handlers/toggle-enabled.write.ts +1 -1
  206. package/src/tenant/handlers/update-member-roles.write.ts +1 -1
  207. package/src/tenant/handlers/update.write.ts +1 -1
  208. package/src/tenant-handover/events.ts +1 -1
  209. package/src/tenant-handover/handlers/claim.write.ts +1 -1
  210. package/src/tenant-lifecycle/events.ts +1 -1
  211. package/src/tenant-lifecycle/handlers/cancel-destruction.write.ts +1 -1
  212. package/src/tenant-lifecycle/handlers/request-destruction.write.ts +1 -1
  213. package/src/tenant-settings/tenant-defaults.ts +1 -1
  214. package/src/tier-engine/__tests__/tier-resolver.integration.test.ts +1 -1
  215. package/src/tier-engine/feature.ts +1 -1
  216. package/src/tier-engine/handlers/active-tier.query.ts +1 -1
  217. package/src/tier-engine/handlers/get-tenant-tier.query.ts +1 -1
  218. package/src/tier-engine/handlers/set-tenant-tier.write.ts +1 -1
  219. package/src/user/__tests__/user-global-tenancy.integration.test.ts +1 -1
  220. package/src/user/handlers/create.write.ts +1 -1
  221. package/src/user/handlers/find-for-auth.query.ts +1 -1
  222. package/src/user/handlers/me.query.ts +1 -1
  223. package/src/user/handlers/update.write.ts +1 -1
  224. package/src/user/roles-input-schema.ts +1 -1
  225. package/src/user-data-rights/__tests__/boot-checks.test.ts +1 -1
  226. package/src/user-data-rights/changes.json +6 -0
  227. package/src/user-data-rights/feature.ts +1 -0
  228. package/src/user-data-rights/handlers/cancel-deletion.write.ts +1 -1
  229. package/src/user-data-rights/handlers/confirm-deletion-by-token.write.ts +1 -1
  230. package/src/user-data-rights/handlers/download-by-job.query.ts +1 -1
  231. package/src/user-data-rights/handlers/download-by-token.query.ts +1 -1
  232. package/src/user-data-rights/handlers/export-status.query.ts +1 -1
  233. package/src/user-data-rights/handlers/lift-restriction.write.ts +1 -1
  234. package/src/user-data-rights/handlers/list-download-attempts.query.ts +1 -1
  235. package/src/user-data-rights/handlers/my-audit-log.query.ts +1 -1
  236. package/src/user-data-rights/handlers/request-deletion-by-email.write.ts +1 -1
  237. package/src/user-data-rights/handlers/request-deletion.write.ts +1 -1
  238. package/src/user-data-rights/handlers/request-export.write.ts +1 -1
  239. package/src/user-data-rights/handlers/restrict-account.write.ts +1 -1
  240. package/src/user-data-rights/handlers/run-forget-cleanup.write.ts +1 -1
  241. package/src/user-profile/handlers/change-email.write.ts +1 -1
  242. package/src/workflow-runner/__tests__/pending-projection.integration.test.ts +1 -1
  243. package/src/workflow-runner/handlers/resume-run.write.ts +1 -1
@@ -1,7 +1,7 @@
1
1
  import { fetchOne } from "@cosmicdrift/kumiko-framework/bun-db";
2
2
  import { defineWriteHandler } from "@cosmicdrift/kumiko-framework/engine";
3
3
  import { NotFoundError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
4
- import { z } from "zod";
4
+ import * as z from "zod";
5
5
  import type { TemplateResourceRow } from "../table";
6
6
  import { templateResourcesTable } from "../table";
7
7
  import { executor } from "./shared";
@@ -6,7 +6,7 @@ import {
6
6
  type TenantId,
7
7
  } from "@cosmicdrift/kumiko-framework/engine";
8
8
  import { AccessDeniedError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
9
- import { z } from "zod";
9
+ import * as z from "zod";
10
10
  import type { TemplateResourceRow } from "../table";
11
11
  import { templateResourcesTable } from "../table";
12
12
  import { executor, upsertPayloadSchema } from "./shared";
@@ -13,7 +13,7 @@ import {
13
13
  testTenantId,
14
14
  unsafePushTables,
15
15
  } from "@cosmicdrift/kumiko-framework/stack";
16
- import { z } from "zod";
16
+ import * as z from "zod";
17
17
  import { createConfigAccessorFactory, createConfigFeature } from "../../config/feature";
18
18
  import { createConfigResolver } from "../../config/resolver";
19
19
  import { configValuesTable } from "../../config/table";
@@ -5,7 +5,7 @@ import {
5
5
  type TenantId,
6
6
  } from "@cosmicdrift/kumiko-framework/engine";
7
7
  import { InternalError } from "@cosmicdrift/kumiko-framework/errors";
8
- import { z } from "zod";
8
+ import * as z from "zod";
9
9
  import { tenantTable } from "../schema/tenant";
10
10
 
11
11
  export const activeTenantIdsQuery = defineQueryHandler({
@@ -2,7 +2,7 @@ import { fetchOne } from "@cosmicdrift/kumiko-framework/bun-db";
2
2
  import { createEventStoreExecutor } from "@cosmicdrift/kumiko-framework/db";
3
3
  import { defineWriteHandler } from "@cosmicdrift/kumiko-framework/engine";
4
4
  import { ConflictError, InternalError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
5
- import { z } from "zod";
5
+ import * as z from "zod";
6
6
  import { TenantErrors } from "../constants";
7
7
  import { findForbiddenMembershipRole, reservedMembershipRoleError } from "../membership-roles";
8
8
  import { tenantMembershipEntity, tenantMembershipsTable } from "../membership-table";
@@ -14,7 +14,7 @@ import { fetchOne } from "@cosmicdrift/kumiko-framework/bun-db";
14
14
  import { createEventStoreExecutor } from "@cosmicdrift/kumiko-framework/db";
15
15
  import { access, defineWriteHandler } from "@cosmicdrift/kumiko-framework/engine";
16
16
  import { InternalError, NotFoundError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
17
- import { z } from "zod";
17
+ import * as z from "zod";
18
18
  // kumiko-lint-ignore cross-feature-import cancel needs invite-token-store for Redis cleanup
19
19
  import { invalidateExistingInviteToken } from "../../auth-email-password/invite-token-store";
20
20
  import {
@@ -1,7 +1,7 @@
1
1
  import { createEventStoreExecutor } from "@cosmicdrift/kumiko-framework/db";
2
2
  import { defineWriteHandler } from "@cosmicdrift/kumiko-framework/engine";
3
3
  import { InternalError } from "@cosmicdrift/kumiko-framework/errors";
4
- import { z } from "zod";
4
+ import * as z from "zod";
5
5
  import { tenantEntity, tenantTable } from "../schema/tenant";
6
6
 
7
7
  const crud = createEventStoreExecutor(tenantTable, tenantEntity, { entityName: "tenant" });
@@ -1,7 +1,7 @@
1
1
  import { selectMany } from "@cosmicdrift/kumiko-framework/bun-db";
2
2
  import { access, defineQueryHandler } from "@cosmicdrift/kumiko-framework/engine";
3
3
  import { InternalError } from "@cosmicdrift/kumiko-framework/errors";
4
- import { z } from "zod";
4
+ import * as z from "zod";
5
5
  import { decryptStoredPii, mapWithConcurrency } from "../../shared";
6
6
  import { INVITATION_STATUS, tenantInvitationsTable } from "../invitation-table";
7
7
 
@@ -1,7 +1,7 @@
1
1
  import { createEventStoreExecutor } from "@cosmicdrift/kumiko-framework/db";
2
2
  import { defineQueryHandler } from "@cosmicdrift/kumiko-framework/engine";
3
3
  import { InternalError } from "@cosmicdrift/kumiko-framework/errors";
4
- import { z } from "zod";
4
+ import * as z from "zod";
5
5
  import { tenantEntity, tenantTable } from "../schema/tenant";
6
6
 
7
7
  const crud = createEventStoreExecutor(tenantTable, tenantEntity, { entityName: "tenant" });
@@ -1,7 +1,7 @@
1
1
  import { fetchOne } from "@cosmicdrift/kumiko-framework/bun-db";
2
2
  import { defineQueryHandler } from "@cosmicdrift/kumiko-framework/engine";
3
3
  import { InternalError } from "@cosmicdrift/kumiko-framework/errors";
4
- import { z } from "zod";
4
+ import * as z from "zod";
5
5
  import { tenantTable } from "../schema/tenant";
6
6
 
7
7
  // Direct query — query handlers don't have a tenant-crud handle. A direct
@@ -6,7 +6,7 @@ import {
6
6
  MAX_LIST_LIMIT,
7
7
  } from "@cosmicdrift/kumiko-framework/engine";
8
8
  import { InternalError } from "@cosmicdrift/kumiko-framework/errors";
9
- import { z } from "zod";
9
+ import * as z from "zod";
10
10
  import { decryptStoredPii, mapWithConcurrency } from "../../shared";
11
11
  import { userTable } from "../../user";
12
12
  import { tenantMembershipsTable } from "../membership-table";
@@ -2,7 +2,7 @@ import { selectMany } from "@cosmicdrift/kumiko-framework/bun-db";
2
2
  import { access, defineQueryHandler } from "@cosmicdrift/kumiko-framework/engine";
3
3
  import { InternalError } from "@cosmicdrift/kumiko-framework/errors";
4
4
  import { parseRoles } from "@cosmicdrift/kumiko-framework/utils";
5
- import { z } from "zod";
5
+ import * as z from "zod";
6
6
  import { decryptStoredPii, mapWithConcurrency } from "../../shared";
7
7
  import { userTable } from "../../user";
8
8
  import { tenantMembershipsTable } from "../membership-table";
@@ -2,7 +2,7 @@ import { selectMany } from "@cosmicdrift/kumiko-framework/bun-db";
2
2
  import { defineQueryHandler, SYSTEM_ROLE } from "@cosmicdrift/kumiko-framework/engine";
3
3
  import { InternalError } from "@cosmicdrift/kumiko-framework/errors";
4
4
  import { parseRoles } from "@cosmicdrift/kumiko-framework/utils";
5
- import { z } from "zod";
5
+ import * as z from "zod";
6
6
  import { tenantMembershipsTable } from "../membership-table";
7
7
  import { tenantTable } from "../schema/tenant";
8
8
 
@@ -7,7 +7,7 @@ import {
7
7
  } from "@cosmicdrift/kumiko-framework/engine";
8
8
  import { InternalError, NotFoundError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
9
9
  import { parseRoles } from "@cosmicdrift/kumiko-framework/utils";
10
- import { z } from "zod";
10
+ import * as z from "zod";
11
11
  import { assertNotLastTenantAdmin } from "../last-tenant-admin";
12
12
  import { tenantMembershipEntity, tenantMembershipsTable } from "../membership-table";
13
13
 
@@ -1,7 +1,7 @@
1
1
  import { selectMany } from "@cosmicdrift/kumiko-framework/bun-db";
2
2
  import { defineQueryHandler, SYSTEM_ROLE } from "@cosmicdrift/kumiko-framework/engine";
3
3
  import { InternalError } from "@cosmicdrift/kumiko-framework/errors";
4
- import { z } from "zod";
4
+ import * as z from "zod";
5
5
  import { tenantMembershipsTable } from "../membership-table";
6
6
 
7
7
  // Cross-feature query: resolve user IDs by tenantId or userId.
@@ -7,7 +7,7 @@ import {
7
7
  import { InternalError } from "@cosmicdrift/kumiko-framework/errors";
8
8
  import { parseRoles } from "@cosmicdrift/kumiko-framework/utils";
9
9
  import { Temporal } from "temporal-polyfill";
10
- import { z } from "zod";
10
+ import * as z from "zod";
11
11
  import { userSessionTable } from "../../sessions";
12
12
  import { decryptStoredPii, mapWithConcurrency } from "../../shared";
13
13
  import { userTable } from "../../user";
@@ -5,7 +5,7 @@ import {
5
5
  MAX_LIST_LIMIT,
6
6
  } from "@cosmicdrift/kumiko-framework/engine";
7
7
  import { InternalError } from "@cosmicdrift/kumiko-framework/errors";
8
- import { z } from "zod";
8
+ import * as z from "zod";
9
9
  import { tenantTable } from "../schema/tenant";
10
10
  import { isSystemAdmin } from "./is-system-admin";
11
11
 
@@ -1,7 +1,7 @@
1
1
  import { createEventStoreExecutor } from "@cosmicdrift/kumiko-framework/db";
2
2
  import { defineWriteHandler } from "@cosmicdrift/kumiko-framework/engine";
3
3
  import { InternalError } from "@cosmicdrift/kumiko-framework/errors";
4
- import { z } from "zod";
4
+ import * as z from "zod";
5
5
  import { tenantEntity, tenantTable } from "../schema/tenant";
6
6
 
7
7
  const crud = createEventStoreExecutor(tenantTable, tenantEntity, { entityName: "tenant" });
@@ -14,7 +14,7 @@ import {
14
14
  writeFailure,
15
15
  } from "@cosmicdrift/kumiko-framework/errors";
16
16
  import { parseRoles } from "@cosmicdrift/kumiko-framework/utils";
17
- import { z } from "zod";
17
+ import * as z from "zod";
18
18
  import { assertNotLastTenantAdmin } from "../last-tenant-admin";
19
19
  import {
20
20
  findForbiddenMembershipRole,
@@ -6,7 +6,7 @@ import {
6
6
  NotFoundError,
7
7
  writeFailure,
8
8
  } from "@cosmicdrift/kumiko-framework/errors";
9
- import { z } from "zod";
9
+ import * as z from "zod";
10
10
  import { tenantEntity, tenantTable } from "../schema/tenant";
11
11
 
12
12
  const crud = createEventStoreExecutor(tenantTable, tenantEntity, { entityName: "tenant" });
@@ -1,4 +1,4 @@
1
- import { z } from "zod";
1
+ import * as z from "zod";
2
2
 
3
3
  // Audit trail for a completed claim (kumiko-framework#3035's audit-entry
4
4
  // requirement: names the source tenant, destination tenant, entities and
@@ -7,7 +7,7 @@ import {
7
7
  import { defineWriteHandler } from "@cosmicdrift/kumiko-framework/engine";
8
8
  import { UnprocessableError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
9
9
  import { generateId } from "@cosmicdrift/kumiko-framework/utils";
10
- import { z } from "zod";
10
+ import * as z from "zod";
11
11
  import { redeemRowBoundGrant } from "../../shared";
12
12
  import { TENANT_HANDOVER_CLAIM_AGGREGATE_TYPE, TENANT_HANDOVER_CLAIMED_EVENT_QN } from "../events";
13
13
  import { tenantHandoverPurpose } from "../grant";
@@ -1,4 +1,4 @@
1
- import { z } from "zod";
1
+ import * as z from "zod";
2
2
 
3
3
  export const destructionRequestedSchema = z.object({
4
4
  requestedBy: z.uuid(),
@@ -2,7 +2,7 @@ import { fetchOne } from "@cosmicdrift/kumiko-framework/bun-db";
2
2
  import { createEventStoreExecutor } from "@cosmicdrift/kumiko-framework/db";
3
3
  import { defineWriteHandler } from "@cosmicdrift/kumiko-framework/engine";
4
4
  import { UnprocessableError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
5
- import { z } from "zod";
5
+ import * as z from "zod";
6
6
  import { isWithinGracePeriod } from "../../shared";
7
7
  import { type TenantLifecycleStatus, tenantEntity, tenantTable } from "../../tenant";
8
8
  import { DESTRUCTION_CANCELLED_EVENT_QN } from "../constants";
@@ -4,7 +4,7 @@ import { createEventStoreExecutor } from "@cosmicdrift/kumiko-framework/db";
4
4
  import { defineWriteHandler } from "@cosmicdrift/kumiko-framework/engine";
5
5
  import { UnprocessableError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
6
6
  import { getTemporal } from "@cosmicdrift/kumiko-framework/time";
7
- import { z } from "zod";
7
+ import * as z from "zod";
8
8
  import { resolveProfileForTenant } from "../../compliance-profiles";
9
9
  import { type TenantLifecycleStatus, tenantEntity, tenantTable } from "../../tenant";
10
10
  import { DESTRUCTION_REQUESTED_EVENT_QN } from "../constants";
@@ -15,7 +15,7 @@ import {
15
15
  type EntityDefinition,
16
16
  type WriteHandlerDef,
17
17
  } from "@cosmicdrift/kumiko-framework/engine";
18
- import { z } from "zod";
18
+ import * as z from "zod";
19
19
  import { TenantSettingsConfig } from "./constants";
20
20
 
21
21
  const OPTIONAL_CURRENCY_MONEY = z.object({ amount: z.number(), currency: z.string().optional() });
@@ -19,7 +19,7 @@ import {
19
19
  unsafePushTables,
20
20
  } from "@cosmicdrift/kumiko-framework/stack";
21
21
  import { composeFeatures } from "@cosmicdrift/kumiko-server-runtime/compose-features";
22
- import { z } from "zod";
22
+ import * as z from "zod";
23
23
  import { tierAssignmentEntity } from "../entity";
24
24
  import { tierEngineFeature } from "../feature";
25
25
  import { createTierResolver } from "../tier-resolver";
@@ -64,7 +64,7 @@ import {
64
64
  } from "@cosmicdrift/kumiko-framework/engine";
65
65
  import { getUnscopedAggregateStreamMaxVersion } from "@cosmicdrift/kumiko-framework/event-store";
66
66
  import { getTemporal } from "@cosmicdrift/kumiko-framework/time";
67
- import { z } from "zod";
67
+ import * as z from "zod";
68
68
  import { tenantTable } from "../tenant";
69
69
  import { tierAssignmentAggregateId } from "./aggregate-id";
70
70
  import type { TierMap } from "./compose-app";
@@ -1,5 +1,5 @@
1
1
  import type { QueryHandlerDef } from "@cosmicdrift/kumiko-framework/engine";
2
- import { z } from "zod";
2
+ import * as z from "zod";
3
3
 
4
4
  // get-active-tier — return the current tier-assignment for the calling tenant.
5
5
  //
@@ -1,7 +1,7 @@
1
1
  import { fetchOne } from "@cosmicdrift/kumiko-framework/bun-db";
2
2
  import { buildEntityTable, createTenantDb } from "@cosmicdrift/kumiko-framework/db";
3
3
  import { defineQueryHandler, type TenantId } from "@cosmicdrift/kumiko-framework/engine";
4
- import { z } from "zod";
4
+ import * as z from "zod";
5
5
  import { type TierAssignmentRow, tierAssignmentEntity } from "../entity";
6
6
 
7
7
  // Liest das Tier-Assignment eines BELIEBIGEN Tenants (cross-tenant) für den
@@ -5,7 +5,7 @@ import {
5
5
  createTenantDb,
6
6
  } from "@cosmicdrift/kumiko-framework/db";
7
7
  import { defineWriteHandler, type TenantId } from "@cosmicdrift/kumiko-framework/engine";
8
- import { z } from "zod";
8
+ import * as z from "zod";
9
9
  import { tierAssignmentAggregateId } from "../aggregate-id";
10
10
  import { type TierAssignmentRow, tierAssignmentEntity } from "../entity";
11
11
 
@@ -13,7 +13,7 @@ import {
13
13
  TestUsers,
14
14
  unsafeCreateEntityTable,
15
15
  } from "@cosmicdrift/kumiko-framework/stack";
16
- import { z } from "zod";
16
+ import * as z from "zod";
17
17
  import { UserHandlers } from "../constants";
18
18
  import { createUserFeature } from "../feature";
19
19
  import { userEntity, userTable } from "../schema/user";
@@ -14,7 +14,7 @@ import {
14
14
  import { isValidLocaleTag } from "@cosmicdrift/kumiko-framework/i18n";
15
15
  import { isValidIanaTimeZone } from "@cosmicdrift/kumiko-framework/time";
16
16
  import { parseRoles } from "@cosmicdrift/kumiko-framework/utils";
17
- import { z } from "zod";
17
+ import * as z from "zod";
18
18
  import { UserErrors } from "../constants";
19
19
  import { rolesInputSchema } from "../roles-input-schema";
20
20
  import { userEntity, userTable } from "../schema/user";
@@ -1,7 +1,7 @@
1
1
  import { fetchOne } from "@cosmicdrift/kumiko-framework/bun-db";
2
2
  import { access, defineQueryHandler } from "@cosmicdrift/kumiko-framework/engine";
3
3
  import { InternalError } from "@cosmicdrift/kumiko-framework/errors";
4
- import { z } from "zod";
4
+ import * as z from "zod";
5
5
  import { userTable } from "../schema/user";
6
6
 
7
7
  // Privileged auth lookup: returns the full user row — including passwordHash —
@@ -1,7 +1,7 @@
1
1
  import { createEventStoreExecutor } from "@cosmicdrift/kumiko-framework/db";
2
2
  import { defineQueryHandler } from "@cosmicdrift/kumiko-framework/engine";
3
3
  import { InternalError } from "@cosmicdrift/kumiko-framework/errors";
4
- import { z } from "zod";
4
+ import * as z from "zod";
5
5
  import { userEntity, userTable } from "../schema/user";
6
6
 
7
7
  const crud = createEventStoreExecutor(userTable, userEntity, { entityName: "user" });
@@ -7,7 +7,7 @@ import {
7
7
  } from "@cosmicdrift/kumiko-framework/errors";
8
8
  import { isValidLocaleTag } from "@cosmicdrift/kumiko-framework/i18n";
9
9
  import { isValidIanaTimeZone } from "@cosmicdrift/kumiko-framework/time";
10
- import { z } from "zod";
10
+ import * as z from "zod";
11
11
  import { UserErrors } from "../constants";
12
12
  import { rolesInputSchema } from "../roles-input-schema";
13
13
  import { userEntity, userTable } from "../schema/user";
@@ -1,4 +1,4 @@
1
- import { z } from "zod";
1
+ import * as z from "zod";
2
2
 
3
3
  /** Accept string[] or a JSON-encoded string[]; reject bare non-JSON strings. */
4
4
  export const rolesInputSchema = z.union([
@@ -9,7 +9,7 @@ import {
9
9
  validateBoot,
10
10
  } from "@cosmicdrift/kumiko-framework/engine";
11
11
  import { createFilesFeature } from "@cosmicdrift/kumiko-framework/files";
12
- import { z } from "zod";
12
+ import * as z from "zod";
13
13
  import { authFoundationFeature } from "../../auth-foundation";
14
14
  import { createComplianceProfilesFeature } from "../../compliance-profiles/feature";
15
15
  import { createConfigFeature } from "../../config/feature";
@@ -1,4 +1,10 @@
1
1
  [
2
+ {
3
+ "version": "0.308.0",
4
+ "type": "fix",
5
+ "title": "The privacy-center screen's \"restrict\" action declares an explicit icon",
6
+ "detail": "The boot validator now requires every projectionDetail action to resolve an icon (fw#3234); \"restrict\" resolved none from the shared id-derived map, so it now declares `icon: \"lock\"` explicitly. \"request-deletion\" needed no change — it now resolves via the shared map's new `deletion: \"trash\"` entry (@cosmicdrift/kumiko-types)."
7
+ },
2
8
  {
3
9
  "version": "0.289.0",
4
10
  "type": "improvement",
@@ -406,6 +406,7 @@ export function createUserDataRightsFeature(opts: UserDataRightsOptions = {}): F
406
406
  actions: [
407
407
  {
408
408
  id: "restrict",
409
+ icon: "lock",
409
410
  label: i18nKey("userDataRights.privacyCenter.restriction.restrict"),
410
411
  handler: UserDataRightsHandlers.restrictAccount,
411
412
  confirm: i18nKey("userDataRights.privacyCenter.restriction.dialogDescription"),
@@ -1,6 +1,6 @@
1
1
  import { defineWriteHandler } from "@cosmicdrift/kumiko-framework/engine";
2
2
  import { UnprocessableError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
3
- import { z } from "zod";
3
+ import * as z from "zod";
4
4
  import { isWithinGracePeriod } from "../../shared";
5
5
  import { USER_STATUS, userTable } from "../../user";
6
6
  import { updateUserLifecycle } from "../lib/update-user-lifecycle";
@@ -5,7 +5,7 @@ import {
5
5
  type HandlerContext,
6
6
  } from "@cosmicdrift/kumiko-framework/engine";
7
7
  import { UnprocessableError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
8
- import { z } from "zod";
8
+ import * as z from "zod";
9
9
  import { USER_STATUS, userTable } from "../../user";
10
10
  import { redeemDeletionToken } from "../deletion-token";
11
11
  import { startDeletionGracePeriod } from "./deletion-grace-period";
@@ -32,7 +32,7 @@ import {
32
32
  } from "@cosmicdrift/kumiko-framework/engine";
33
33
  import { NotFoundError, UnprocessableError } from "@cosmicdrift/kumiko-framework/errors";
34
34
  import { getTemporal } from "@cosmicdrift/kumiko-framework/time";
35
- import { z } from "zod";
35
+ import * as z from "zod";
36
36
  import { recordDownloadUse, recordInvalidAttempt } from "../audit-download";
37
37
  import { makeTenantStorageProviderResolver } from "../lib/storage-provider-resolver";
38
38
  import { exportDownloadTokensTable } from "../schema/download-token";
@@ -34,7 +34,7 @@ import {
34
34
  } from "@cosmicdrift/kumiko-framework/engine";
35
35
  import { NotFoundError, UnprocessableError } from "@cosmicdrift/kumiko-framework/errors";
36
36
  import { getTemporal } from "@cosmicdrift/kumiko-framework/time";
37
- import { z } from "zod";
37
+ import * as z from "zod";
38
38
  import { recordDownloadUse, recordInvalidAttempt } from "../audit-download";
39
39
  import { makeTenantStorageProviderResolver } from "../lib/storage-provider-resolver";
40
40
  import { exportDownloadTokensTable } from "../schema/download-token";
@@ -14,7 +14,7 @@
14
14
  import { selectMany } from "@cosmicdrift/kumiko-framework/bun-db";
15
15
  import { defineQueryHandler } from "@cosmicdrift/kumiko-framework/engine";
16
16
  import type { getTemporal } from "@cosmicdrift/kumiko-framework/time";
17
- import { z } from "zod";
17
+ import * as z from "zod";
18
18
  import { exportJobsTable } from "../schema/export-job";
19
19
 
20
20
  type Instant = InstanceType<ReturnType<typeof getTemporal>["Instant"]>;
@@ -1,6 +1,6 @@
1
1
  import { access, defineWriteHandler } from "@cosmicdrift/kumiko-framework/engine";
2
2
  import { UnprocessableError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
3
- import { z } from "zod";
3
+ import * as z from "zod";
4
4
  import { USER_STATUS, userTable } from "../../user";
5
5
  import { denyIfTargetOutsideAdminTenant } from "../lib/deny-if-target-outside-admin-tenant";
6
6
  import { updateUserLifecycle } from "../lib/update-user-lifecycle";
@@ -1,7 +1,7 @@
1
1
  import { selectMany, type WhereObject } from "@cosmicdrift/kumiko-framework/bun-db";
2
2
  import { defineQueryHandler } from "@cosmicdrift/kumiko-framework/engine";
3
3
  import { Temporal } from "temporal-polyfill";
4
- import { z } from "zod";
4
+ import * as z from "zod";
5
5
  import { downloadAttemptsTable } from "../schema/download-attempt";
6
6
 
7
7
  // Operator-Query: invalid Download-Attempts (S2.U7).
@@ -2,7 +2,7 @@ import { selectMany, type WhereObject } from "@cosmicdrift/kumiko-framework/bun-
2
2
  import { defineQueryHandler } from "@cosmicdrift/kumiko-framework/engine";
3
3
  import { eventsTable } from "@cosmicdrift/kumiko-framework/event-store";
4
4
  import { Temporal } from "temporal-polyfill";
5
- import { z } from "zod";
5
+ import * as z from "zod";
6
6
 
7
7
  // DSGVO Art. 15 Selbstauskunft — User reads HIS OWN audit-log.
8
8
  // WHERE createdBy = ctx.user.id ist hard-coded (kein userId-Param,
@@ -1,5 +1,5 @@
1
1
  import { defineWriteHandler } from "@cosmicdrift/kumiko-framework/engine";
2
- import { z } from "zod";
2
+ import * as z from "zod";
3
3
  import { USER_STATUS, userTable } from "../../user";
4
4
  import { signDeletionToken } from "../deletion-token";
5
5
  import { updateUserLifecycle } from "../lib/update-user-lifecycle";
@@ -2,7 +2,7 @@ import { createTransportForTenant } from "@cosmicdrift/kumiko-bundled-features/m
2
2
  import type { DurationSpec } from "@cosmicdrift/kumiko-framework/compliance";
3
3
  import { createSystemUser, defineWriteHandler } from "@cosmicdrift/kumiko-framework/engine";
4
4
  import { writeFailure } from "@cosmicdrift/kumiko-framework/errors";
5
- import { z } from "zod";
5
+ import * as z from "zod";
6
6
  import { USER_STATUS } from "../../user";
7
7
  import {
8
8
  type GdprMailDefaults,
@@ -25,7 +25,7 @@ import { createEventStoreExecutor } from "@cosmicdrift/kumiko-framework/db";
25
25
  import { defineWriteHandler, type SaveContext } from "@cosmicdrift/kumiko-framework/engine";
26
26
  import type { WriteFailure } from "@cosmicdrift/kumiko-framework/errors";
27
27
  import { getTemporal } from "@cosmicdrift/kumiko-framework/time";
28
- import { z } from "zod";
28
+ import * as z from "zod";
29
29
  import {
30
30
  ACTIVE_JOB_CONSTRAINT,
31
31
  EXPORT_JOB_STATUS,
@@ -4,7 +4,7 @@ import {
4
4
  UnprocessableError,
5
5
  writeFailure,
6
6
  } from "@cosmicdrift/kumiko-framework/errors";
7
- import { z } from "zod";
7
+ import * as z from "zod";
8
8
  import { USER_STATUS, userTable } from "../../user";
9
9
  import { denyIfTargetOutsideAdminTenant } from "../lib/deny-if-target-outside-admin-tenant";
10
10
  import { isAdminActor } from "../lib/is-admin-actor";
@@ -14,7 +14,7 @@ import type { DbConnection } from "@cosmicdrift/kumiko-framework/db";
14
14
  import { access, defineWriteHandler, SYSTEM_USER_ID } from "@cosmicdrift/kumiko-framework/engine";
15
15
  import { InternalError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
16
16
  import { getTemporal } from "@cosmicdrift/kumiko-framework/time";
17
- import { z } from "zod";
17
+ import * as z from "zod";
18
18
  import { resolveAppTenantModel } from "../lib/resolve-tenant-model";
19
19
  import { makeTenantStorageProviderResolver } from "../lib/storage-provider-resolver";
20
20
  import { runForgetCleanup, type SendDeletionExecutedEmailFn } from "../run-forget-cleanup";
@@ -5,7 +5,7 @@ import {
5
5
  SYSTEM_TENANT_ID,
6
6
  } from "@cosmicdrift/kumiko-framework/engine";
7
7
  import { UnprocessableError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
8
- import { z } from "zod";
8
+ import * as z from "zod";
9
9
  import { AuthErrors } from "../../auth-email-password";
10
10
  import { decryptStoredPii, verifyPassword } from "../../shared";
11
11
  import { UserErrors, UserHandlers, UserQueries } from "../../user";
@@ -21,7 +21,7 @@ import {
21
21
  WORKFLOW_WAITING_TYPE,
22
22
  } from "@cosmicdrift/kumiko-framework/engine";
23
23
  import { setupTestStack, type TestStack, TestUsers } from "@cosmicdrift/kumiko-framework/stack";
24
- import { z } from "zod";
24
+ import * as z from "zod";
25
25
  import { workflowRunAggregateId } from "../aggregate-id";
26
26
  import { workflowRunnerFeature } from "../feature";
27
27
  import { workflowRunPendingTable } from "../tables";
@@ -48,7 +48,7 @@ import {
48
48
  type WriteHandlerDef,
49
49
  } from "@cosmicdrift/kumiko-framework/engine";
50
50
  import { InternalError } from "@cosmicdrift/kumiko-framework/errors";
51
- import { z } from "zod";
51
+ import * as z from "zod";
52
52
  import {
53
53
  isResumableSuspension,
54
54
  type WorkflowRunCompletedPayload,