@cosmicdrift/kumiko-bundled-features 0.329.0 → 0.330.2

package/dist/metrics/window.d.ts

@@ -0,0 +1,13 @@
+import type { AggregateTimeBucket } from "@cosmicdrift/kumiko-types/aggregate-types";
+import { Temporal } from "temporal-polyfill";
+import type { MetricRange } from "./constants.js";
+import type { MetricDefinition } from "./types.js";
+export type MetricWindow = {
+    readonly start: Temporal.Instant;
+    readonly end: Temporal.Instant;
+    readonly previousStart: Temporal.Instant;
+};
+export declare function isValidTimeZone(timeZone: string): boolean;
+export declare function resolveBucket(metric: MetricDefinition, range: MetricRange): AggregateTimeBucket | undefined;
+export declare function computeWindow(range: MetricRange, bucket: AggregateTimeBucket | undefined, timeZone: string, now: Temporal.Instant): MetricWindow;
+export declare function bucketStartsMs(window: MetricWindow, bucket: AggregateTimeBucket, timeZone: string): readonly number[];

package/dist/metrics/window.js

@@ -0,0 +1,63 @@
+import { Temporal } from "temporal-polyfill";
+const RANGE_HOURS = {
+    "24h": 24,
+    "7d": 7 * 24,
+    "14d": 14 * 24,
+    "30d": 30 * 24,
+};
+// The 24h range counts as one day when bucketing by day.
+const RANGE_DAYS = {
+    "24h": 1,
+    "7d": 7,
+    "14d": 14,
+    "30d": 30,
+};
+export function isValidTimeZone(timeZone) {
+    try {
+        new Intl.DateTimeFormat(undefined, { timeZone });
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+export function resolveBucket(metric, range) {
+    if (metric.bucket === undefined)
+        return undefined;
+    if (metric.bucket === "auto")
+        return range === "24h" ? "hour" : "day";
+    return metric.bucket;
+}
+export function computeWindow(range, bucket, timeZone, now) {
+    const zonedNow = now.toZonedDateTimeISO(timeZone);
+    let start;
+    if (bucket === "hour") {
+        const hourStart = zonedNow.round({ smallestUnit: "hour", roundingMode: "floor" });
+        start = hourStart.subtract({ hours: RANGE_HOURS[range] - 1 }).toInstant();
+    }
+    else if (bucket === "day") {
+        start = zonedNow
+            .startOfDay()
+            .subtract({ days: RANGE_DAYS[range] - 1 })
+            .startOfDay()
+            .toInstant();
+    }
+    else {
+        start = now.subtract({ hours: RANGE_HOURS[range] });
+    }
+    const spanMs = now.epochMilliseconds - start.epochMilliseconds;
+    const previousStart = Temporal.Instant.fromEpochMilliseconds(start.epochMilliseconds - spanMs);
+    return { start, end: now, previousStart };
+}
+// Every bucket start in [window.start, window.end], in the display zone —
+// SQL only returns buckets that have rows, the chart needs the gaps too.
+export function bucketStartsMs(window, bucket, timeZone) {
+    const starts = [];
+    const step = bucket === "hour" ? { hours: 1 } : { days: 1 };
+    let cursor = window.start.toZonedDateTimeISO(timeZone);
+    while (cursor.epochMilliseconds <= window.end.epochMilliseconds) {
+        starts.push(cursor.epochMilliseconds);
+        cursor = bucket === "day" ? cursor.add(step).startOfDay() : cursor.add(step);
+    }
+    return starts;
+}

package/dist/personal-access-tokens/i18n.js

@@ -7,6 +7,9 @@ export const PAT_FEATURE_I18N = {
     "pat.list.col.status": { en: "Status" },
     "pat.list.col.created": { en: "Created" },
     "pat.list.col.expires": { en: "Expires" },
+    "pat.list.status.active": { en: "Active" },
+    "pat.list.status.revoked": { en: "Revoked" },
+    "pat.list.status.expired": { en: "Expired" },
     "pat.list.revoke": { en: "Revoke" },
     "pat.list.revoke.confirm": { en: "Revoke this token? Anything using it will stop working." },
     "pat.create.title": { en: "Create a new token" },

package/dist/personal-access-tokens/screens.js

@@ -1,5 +1,6 @@
 import { i18nKey, } from "@cosmicdrift/kumiko-framework/engine";
 import { PAT_MINT_SCREEN_ID, PAT_SCREEN_ID, PatHandlers, PatQueries } from "./constants.js";
+const PAT_STATUS_OPTION_KEY_PREFIX = "pat.list.status.";
 export const patListScreen = {
     id: PAT_SCREEN_ID,
     type: "projectionList",
@@ -9,7 +10,11 @@ export const patListScreen = {
         { field: "name", label: i18nKey("pat.list.col.name") },
         { field: "prefix", label: i18nKey("pat.list.col.prefix") },
         { field: "scopes", label: i18nKey("pat.list.col.scopes") },
-        { field: "status", label: i18nKey("pat.list.col.status") },
+        {
+            field: "status",
+            label: i18nKey("pat.list.col.status"),
+            renderer: { format: "enumOption", keyPrefix: PAT_STATUS_OPTION_KEY_PREFIX },
+        },
         {
             field: "createdAt",
             label: i18nKey("pat.list.col.created"),

package/dist/sessions/schema/user-session.js

@@ -71,6 +71,7 @@ export const userSessionEntity = createEntity({
             find: "none",
         }),
     },
+    indexes: [{ columns: ["tenantId", "lastSeenAt"] }],
 });
 // Plain EntityTableMeta, NOT a branded EntityTable: user-session is an
 // unmanaged direct-write store (r.storeTable in feature.ts, no event stream —

package/dist/shared/grace-period.d.ts

@@ -1,4 +1,5 @@
 /** Shared grace-period check for user-data-rights + tenant-lifecycle cancel flows. */
+/// <reference types="temporal-polyfill/global" preserve="true" />
 /**
  * True when `gracePeriodEnd` is still in the future.
  * Uses the polyfill Instant API so callers don't depend on `globalThis.Temporal`.

package/dist/shared/grace-period.js

@@ -1,3 +1,4 @@
+/// <reference types="temporal-polyfill/global" preserve="true" />
 /** Shared grace-period check for user-data-rights + tenant-lifecycle cancel flows. */
 import { Temporal as TemporalPolyfill } from "temporal-polyfill";
 /**

package/dist/tenant-lifecycle/run-tenant-destroy.d.ts

@@ -1,3 +1,4 @@
+/// <reference types="temporal-polyfill/global" preserve="true" />
 import type { DbRunner } from "@cosmicdrift/kumiko-framework/db";
 import { type EscapeHatchAuditSink, type Registry, type TenantId } from "@cosmicdrift/kumiko-framework/engine";
 import type { FileProviderResolver } from "@cosmicdrift/kumiko-framework/files";

package/dist/tenant-lifecycle/run-tenant-destroy.js

@@ -1,3 +1,4 @@
+/// <reference types="temporal-polyfill/global" preserve="true" />
 import { selectMany } from "@cosmicdrift/kumiko-framework/bun-db";
 import { createEventStoreExecutor, createTenantDb } from "@cosmicdrift/kumiko-framework/db";
 import { createSystemUser, } from "@cosmicdrift/kumiko-framework/engine";

package/dist/tier-engine/feature.js

@@ -198,7 +198,7 @@ export function createTierEngineFeature(opts = {}) {
             },
             submitLabel: "tier-admin.submit",
             cancelTarget: false,
-            description: "Operator form that assigns a tier to any tenant as a manual grant without a billing purchase.",
+            description: "tier-admin.screen.subtitle",
             access: { roles: ["SystemAdmin"] },
             // Apps place it via r.nav() (see above) — no nav area to resolve in
             // isolation.

package/dist/tier-engine/i18n.js

@@ -6,6 +6,9 @@
 import { translationsByLocaleFromKeys, } from "@cosmicdrift/kumiko-renderer";
 export const TIER_ENGINE_I18N = {
     "screen:tier-admin.title": { en: "Assign tier manually" },
+    "tier-admin.screen.subtitle": {
+        en: "Assign a tier to a tenant as a manual grant, without a purchase.",
+    },
     "tier-admin.explainer": {
         en: "Grant a tenant a tier without a purchase. The grant is marked as “manual” and a later billing sync won't overwrite it.",
     },

package/dist/user-data-rights/email-templates.d.ts

@@ -1,5 +1,6 @@
 export type GdprMailLocale = string;
 export declare function normalizeGdprMailLocale(raw: string | null | undefined): GdprMailLocale | undefined;
+export declare const GDPR_MAIL_EN: Readonly<Record<string, string>>;
 export type RenderedEmail = {
     readonly subject: string;
     readonly html: string;

package/dist/user-data-rights/email-templates.js

@@ -11,7 +11,7 @@ export function normalizeGdprMailLocale(raw) {
     const root = raw.toLowerCase().split("-")[0];
     return root && root.length > 0 ? root : undefined;
 }
-const GDPR_MAIL_EN = {
+export const GDPR_MAIL_EN = {
     "gdpr.mail.appNameDefault": "Account",
     "gdpr.mail.greeting": "Hi,",
     "gdpr.mail.exportReady.subject": "{app} — Your data export is ready",

package/dist/user-data-rights/feature.js

@@ -157,12 +157,14 @@ export function createUserDataRightsFeature(opts = {}) {
                 "userDataRights.privacyCenter.export.title": { en: "Export your data (Art. 20)" },
                 "userDataRights.privacyCenter.restriction.title": { en: "Restrict processing (Art. 18)" },
                 "userDataRights.privacyCenter.restriction.restrict": { en: "Restrict account" },
+                "userDataRights.privacyCenter.restriction.dialogTitle": { en: "Restrict your account?" },
                 "userDataRights.privacyCenter.restriction.dialogDescription": {
                     en: "You will be signed out immediately and cannot sign in again until support lifts the restriction.",
                 },
                 "userDataRights.privacyCenter.deletion.title": { en: "Delete account (Art. 17)" },
                 "userDataRights.privacyCenter.deletion.delete": { en: "Delete account" },
                 "userDataRights.privacyCenter.deletion.cancel": { en: "Cancel deletion" },
+                "userDataRights.privacyCenter.deletion.dialogTitle": { en: "Delete your account?" },
                 "userDataRights.privacyCenter.deletion.dialogDescription": {
                     en: "Confirming starts the deletion grace period. You can cancel the deletion until it ends.",
                 },

package/dist/user-data-rights/web/i18n.js

@@ -44,11 +44,13 @@ const apexTranslations = {
         "userDataRights.privacyCenter.restriction.title": "Restrict processing (Art. 18)",
         "userDataRights.privacyCenter.restriction.explainer": "Freeze your account: processing of your data is paused and you are signed out. Lifting the restriction afterwards is only possible via support.",
         "userDataRights.privacyCenter.restriction.restrict": "Restrict account",
+        "userDataRights.privacyCenter.restriction.dialogTitle": "Restrict your account?",
         "userDataRights.privacyCenter.restriction.dialogDescription": "You will be signed out immediately and cannot sign in again until support lifts the restriction.",
         "userDataRights.privacyCenter.deletion.title": "Delete account (Art. 17)",
         "userDataRights.privacyCenter.deletion.explainer": "Request deletion of your account. Until the grace period ends you can cancel the deletion.",
         "userDataRights.privacyCenter.deletion.delete": "Delete account",
         "userDataRights.privacyCenter.deletion.cancel": "Cancel deletion",
+        "userDataRights.privacyCenter.deletion.dialogTitle": "Delete your account?",
         "userDataRights.privacyCenter.deletion.dialogDescription": "Confirming starts the deletion grace period. You can cancel the deletion until it ends.",
         "userDataRights.errors.download.notFound": "The download link is invalid or belongs to a different account.",
         "userDataRights.errors.download.expired": "Your download has expired. Please request a new export.",

package/dist/user-profile/feature.js

@@ -36,6 +36,9 @@ export function createUserProfileFeature() {
         r.translations({
             keys: {
                 "screen:profile.title": { en: "Profile" },
+                "profile.screen.profile.subtitle": {
+                    en: "Change your password or email, or request account deletion.",
+                },
                 "profile.email.title": { en: "Email address" },
                 "profile.password.title": { en: "Password" },
                 "profile.danger.title": { en: "Delete account" },
@@ -71,9 +74,7 @@ export function createUserProfileFeature() {
             // Self-service settings-area screen, placed by the consuming app's own
             // r.nav() (see samples/apps/use-all-bundled's screens-feature.ts).
             dormant: true,
-            description: "Self-service account page: change password, change email (with re-auth and " +
-                "a verification-mail follow-up), and request or cancel account deletion " +
-                "(user-data-rights grace period).",
+            description: "profile.screen.profile.subtitle",
             fieldLabels: {
                 gracePeriodEnd: i18nKey("profile.danger.gracePeriodEnd"),
             },

package/dist/user-profile/i18n.js

@@ -8,6 +8,7 @@
 export const defaultTranslations = {
     en: {
         "screen:profile.title": "Profile",
+        "profile.screen.profile.subtitle": "Change your password or email, or request account deletion.",
         "profile.email.title": "Email address",
         "profile.email.current": "Current email",
         "profile.email.new": "New email",
@@ -30,6 +31,6 @@ export const defaultTranslations = {
         "profile.errors.generic": "Something went wrong.",
         "profile.errors.emailUnchanged": "That is already your email address.",
         "user.errors.emailAlreadyExists": "This email address is already in use.",
-        "auth.errors.invalidCredentials": "Email or password incorrect.",
+        "auth.errors.invalidCredentials": "Invalid email or password.",
     },
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-bundled-features",
-  "version": "0.329.0",
+  "version": "0.330.2",
   "description": "Built-in features — tenant, user, auth, delivery. The stuff you'd rewrite anyway, already typed.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -101,6 +101,10 @@
       "types": "./dist/cap-overview/web/index.d.ts",
       "default": "./dist/cap-overview/web/index.js"
     },
+    "./metrics": {
+      "types": "./dist/metrics/index.d.ts",
+      "default": "./dist/metrics/index.js"
+    },
     "./custom-fields": {
       "types": "./dist/custom-fields/index.d.ts",
       "default": "./dist/custom-fields/index.js"
@@ -479,12 +483,12 @@
     }
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-dispatcher-live": "0.329.0",
-    "@cosmicdrift/kumiko-framework": "0.329.0",
-    "@cosmicdrift/kumiko-headless": "0.329.0",
-    "@cosmicdrift/kumiko-renderer": "0.329.0",
-    "@cosmicdrift/kumiko-renderer-web": "0.329.0",
-    "@cosmicdrift/kumiko-types": "0.329.0",
+    "@cosmicdrift/kumiko-dispatcher-live": "0.330.2",
+    "@cosmicdrift/kumiko-framework": "0.330.2",
+    "@cosmicdrift/kumiko-headless": "0.330.2",
+    "@cosmicdrift/kumiko-renderer": "0.330.2",
+    "@cosmicdrift/kumiko-renderer-web": "0.330.2",
+    "@cosmicdrift/kumiko-types": "0.330.2",
     "@mollie/api-client": "^4.5.0",
     "@node-rs/argon2": "^2.0.2",
     "@types/mailparser": "^3.4.6",
@@ -589,6 +593,10 @@
         "types": "./dist/cap-overview/web/index.d.ts",
         "default": "./dist/cap-overview/web/index.js"
       },
+      "./metrics": {
+        "types": "./dist/metrics/index.d.ts",
+        "default": "./dist/metrics/index.js"
+      },
       "./custom-fields": {
         "types": "./dist/custom-fields/index.d.ts",
         "default": "./dist/custom-fields/index.js"
@@ -975,8 +983,8 @@
   ],
   "devDependencies": {
     "@testing-library/user-event": "^14.6.1",
-    "@cosmicdrift/kumiko-locale-de": "0.329.0",
-    "@cosmicdrift/kumiko-locale-es": "0.329.0",
+    "@cosmicdrift/kumiko-locale-de": "0.330.2",
+    "@cosmicdrift/kumiko-locale-es": "0.330.2",
     "jsqr": "^1.4.0"
   }
 }

package/src/admin-shell/changes.json

@@ -1,4 +1,17 @@
 [
+  {
+    "version": "0.330.0",
+    "type": "breaking",
+    "title": "admin-shell requires the metrics and metrics-system features and builds its overview dashboards from a metrics list",
+    "detail": "Dashboard panels gain the chart kinds `stacked-bars`, `segment-bars` and `stacked-area`, a subtitle, per-series tones, static query `params`, `ignoreScreenFilter`, an empty label and hint, a `span` (half/full width), a stat `sparklineField` and static `tone`, a `negative` tone, an unlabelled `stat-group` KPI strip and bar/badge list columns. Every panel shows skeleton, empty and error states with retry. A screen can declare a `timeRange` control and a `scope` badge and notice. The admin-shell overview screens use all of this and show the metrics of the new `metrics` and `metrics-system` features. `deliveries-by-channel` now labels the email, in-app and push channels.",
+    "migration": "Mount createMetricsFeature({ metrics: DEFAULT_METRICS }) and createSystemMetricsFeature({ metrics: DEFAULT_METRICS }) from the metrics bundled feature before admin-shell. DEFAULT_METRICS also requires the delivery, sessions, jobs and tenant features.\n\nIf you do not mount all of them, pass the same reduced list to all three: createMetricsFeature({ metrics }), createSystemMetricsFeature({ metrics }) and createAdminShellFeature({ metrics }). Overview panels exist only for metric ids in that list."
+  },
+  {
+    "version": "0.330.0",
+    "type": "improvement",
+    "title": "Bundled screen subtitles (admin-shell, jobs, auth-mfa, tier-engine, user-profile) are i18n keys with de and es translations",
+    "migration": "Additive. Apps that override these screen descriptions keep working; apps that asserted the old English description text in tests now see the translated subtitle."
+  },
   {
     "version": "0.241.0",
     "type": "fix",

package/src/billing-foundation/changes.json

@@ -1,4 +1,10 @@
 [
+  {
+    "version": "0.330.0",
+    "type": "fix",
+    "title": "The switch-plan error for a subscription with a scheduled cancellation says \"scheduled to end\", matching the plan badge",
+    "detail": "The error for switching plans on a subscription with a scheduled cancellation now says \"scheduled to end\", like the plan badge, and the invalid-credentials message reads the same in every source that registers it."
+  },
   {
     "version": "0.321.0",
     "type": "breaking",

package/src/data-retention/changes.json

@@ -1,4 +1,9 @@
 [
+  {
+    "version": "0.330.1",
+    "type": "fix",
+    "title": "blockDelete entities without anonymize fields no longer log skips or boot warnings"
+  },
   {
     "version": "0.315.0",
     "type": "breaking",

package/src/delivery/changes.json

@@ -1,4 +1,11 @@
 [
+  {
+    "version": "0.330.0",
+    "type": "improvement",
+    "title": "store_delivery_attempts gets an index on (tenant_id, created_at) (fw#3396)",
+    "detail": "Windowed per-tenant dashboard aggregates over delivery attempts (metrics feature) filter on tenant_id and created_at.",
+    "migration": "Run `kumiko migrate generate` and apply the migration: it adds `store_delivery_attempts_tenant_id_created_at_idx`."
+  },
   {
     "version": "0.323.0",
     "type": "improvement",

package/src/jobs/changes.json

@@ -1,4 +1,11 @@
 [
+  {
+    "version": "0.330.0",
+    "type": "improvement",
+    "title": "store_job_runs gets an index on started_at (fw#3396)",
+    "detail": "Windowed dashboard aggregates over job runs (metrics feature) filter on started_at; the index keeps them off a sequential scan.",
+    "migration": "Run `kumiko migrate generate` and apply the migration: it adds `store_job_runs_started_at_idx`."
+  },
   {
     "version": "0.291.0",
     "type": "improvement",

package/src/metrics/changes.json

@@ -0,0 +1,15 @@
+[
+  {
+    "version": "0.330.0",
+    "type": "fix",
+    "title": "deliveries-by-channel shows readable channel labels instead of raw channel ids",
+    "detail": "Dashboard panels gain the chart kinds `stacked-bars`, `segment-bars` and `stacked-area`, a subtitle, per-series tones, static query `params`, `ignoreScreenFilter`, an empty label and hint, a `span` (half/full width), a stat `sparklineField` and static `tone`, a `negative` tone, an unlabelled `stat-group` KPI strip and bar/badge list columns. Every panel shows skeleton, empty and error states with retry. A screen can declare a `timeRange` control and a `scope` badge and notice. The admin-shell overview screens use all of this and show the metrics of the new `metrics` and `metrics-system` features. `deliveries-by-channel` now labels the email, in-app and push channels."
+  },
+  {
+    "version": "0.330.0",
+    "type": "improvement",
+    "title": "Add metrics feature: declarative dashboard metrics over TenantDb.aggregate (fw#3396)",
+    "detail": "New bundled features `metrics` (tenant scope, `access.admin`) and `metrics-system` (platform-wide, `access.systemAdmin`). A metric is declared once with `defineMetric` (source table, measure, optional timeField, window, bucket, groupBy, stackBy, where) and becomes the query `<feature>:query:<metric.id>` returning a `MetricResult` (total, delta against the previous period, bucketed series, group rows, segments). Definitions are validated when the feature is built. Eight default metrics ship: job-runs-by-status, failed-job-runs, tenant-job-failures, deliveries-by-channel, failed-deliveries, active-users, active-tenants, audit-writes. Pass your own list via `createMetricsFeature({ metrics })`.",
+    "migration": "Opt-in: mount `createMetricsFeature(...)` and/or `createSystemMetricsFeature(...)`. The new indexes on jobs, delivery and sessions need `kumiko migrate generate`."
+  }
+]

package/src/personal-access-tokens/changes.json

@@ -1,4 +1,9 @@
 [
+  {
+    "version": "0.330.0",
+    "type": "fix",
+    "title": "The token list status column shows translated labels instead of raw status values"
+  },
   {
     "version": "0.202.0",
     "type": "breaking",

package/src/sessions/changes.json

@@ -1,4 +1,11 @@
 [
+  {
+    "version": "0.330.0",
+    "type": "improvement",
+    "title": "store_user_sessions gets an index on (tenant_id, last_seen_at) (fw#3396)",
+    "detail": "Active-user dashboard aggregates (metrics feature) filter on tenant_id and last_seen_at.",
+    "migration": "Run `kumiko migrate generate` and apply the migration: it adds an index on `store_user_sessions (tenant_id, last_seen_at)`."
+  },
   {
     "version": "0.259.0",
     "type": "breaking",

package/src/user-data-rights/changes.json

@@ -1,4 +1,10 @@
 [
+  {
+    "version": "0.330.0",
+    "type": "fix",
+    "title": "The privacy-center restriction and deletion dialog titles are registered in English by the feature",
+    "detail": "The new i18n-parity test in `use-all-bundled` harvests the English copy from the real registrations (feature translations, client plugins, renderer defaults, mail templates) and fails with `key -> locale` when `locale-de` or `locale-es` lacks a key or an en-catalog drifts. This added the missing German and Spanish copy for billing plans, the privacy-center status field and many more keys, and removed 110 translation keys no feature registers any more. German uses \"Ereignisprotokoll\" for the audit log everywhere. `userDataRights.privacyCenter.restriction.dialogTitle` and `.deletion.dialogTitle` are registered in English by the feature."
+  },
   {
     "version": "0.320.0",
     "type": "fix",