@cosmicdrift/kumiko-bundled-features 0.343.0 → 0.344.0

package/dist/billing-foundation/checkout-core.d.ts

@@ -92,11 +92,22 @@ export type OpenCheckoutInput = {
     readonly locale?: string;
     readonly submitMessage?: string;
 };
-/** The one checkout entry-point create-checkout-session and
- *  start-plan-checkout both funnel through. `mode: "payment"` (one-off
- *  top-ups etc.) skips the price/subscription gates entirely — those apply
- *  to recurring subscriptions only. */
+type CheckoutCapableProvider = SubscriptionProviderPlugin & {
+    readonly createCheckoutSession: NonNullable<SubscriptionProviderPlugin["createCheckoutSession"]>;
+};
+/** All gates that run before a provider checkout call: provider, billing
+ *  enabled, redirect origins, mode gates, foreign provider customer.
+ *  `mode: "payment"` (one-off top-ups etc.) skips the price/subscription
+ *  gates — those apply to recurring subscriptions only. */
+export declare function assertCheckoutAllowed(ctx: HandlerContext, options: OpenCheckoutOptions, input: OpenCheckoutInput): Promise<CheckoutCapableProvider>;
+export declare function startProviderCheckout(ctx: HandlerContext, plugin: CheckoutCapableProvider, input: OpenCheckoutInput): Promise<{
+    readonly url: string;
+    readonly providerName: string;
+}>;
+/** The one checkout entry-point start-plan-checkout, switch-plan and the
+ *  non-consumer-protection create-checkout-session funnel through. */
 export declare function openCheckout(ctx: HandlerContext, options: OpenCheckoutOptions, input: OpenCheckoutInput): Promise<{
     readonly url: string;
     readonly providerName: string;
 }>;
+export {};

package/dist/billing-foundation/checkout-core.js

@@ -234,13 +234,16 @@ function assertOneOffPriceAllowed(plugin, input) {
         });
     }
 }
-/** The one checkout entry-point create-checkout-session and
- *  start-plan-checkout both funnel through. `mode: "payment"` (one-off
- *  top-ups etc.) skips the price/subscription gates entirely — those apply
- *  to recurring subscriptions only. */
-export async function openCheckout(ctx, options, input) {
+function canCreateCheckoutSession(plugin) {
+    return plugin.createCheckoutSession !== undefined;
+}
+/** All gates that run before a provider checkout call: provider, billing
+ *  enabled, redirect origins, mode gates, foreign provider customer.
+ *  `mode: "payment"` (one-off top-ups etc.) skips the price/subscription
+ *  gates — those apply to recurring subscriptions only. */
+export async function assertCheckoutAllowed(ctx, options, input) {
     const { plugin } = resolveProviderPlugin(ctx, input.providerName);
-    if (!plugin.createCheckoutSession) {
+    if (!canCreateCheckoutSession(plugin)) {
         throw new Error(`subscription-foundation: provider "${input.providerName}" has no createCheckoutSession-method (e.g. Apple-IAP-only providers). Use the provider's native checkout flow.`);
     }
     // Checked before the redirect-origin hardening for every mode — a
@@ -272,6 +275,9 @@ export async function openCheckout(ctx, options, input) {
             });
         }
     }
+    return plugin;
+}
+export async function startProviderCheckout(ctx, plugin, input) {
     const result = await plugin.createCheckoutSession(ctx, {
         priceId: input.priceId,
         tenantId: ctx.user.tenantId,
@@ -288,3 +294,9 @@ export async function openCheckout(ctx, options, input) {
     });
     return { url: result.url, providerName: input.providerName };
 }
+/** The one checkout entry-point start-plan-checkout, switch-plan and the
+ *  non-consumer-protection create-checkout-session funnel through. */
+export async function openCheckout(ctx, options, input) {
+    const plugin = await assertCheckoutAllowed(ctx, options, input);
+    return startProviderCheckout(ctx, plugin, input);
+}

package/dist/billing-foundation/consumer-protection/confirmation-mail.d.ts

@@ -1,14 +1,24 @@
 import type { CheckoutConsentRecordedPayload } from "../events.js";
+export type ContractConfirmationSection = {
+    readonly text: string;
+} | {
+    readonly heading: string;
+} | {
+    readonly markdown: string;
+};
 export type ContractConfirmationContent = {
     readonly subject: string;
     readonly header: string;
-    readonly sections: readonly {
-        readonly text: string;
-    }[];
+    readonly sections: readonly ContractConfirmationSection[];
     readonly footer: string;
 };
 export type RenderContractConfirmationArgs = {
     readonly consent: CheckoutConsentRecordedPayload;
+    readonly timeZone: string;
+    /** Translated plan name; falls back to the raw tier. */
+    readonly tierLabel?: string;
+    /** Translated purchased item for one-off payments; falls back to the generic label. */
+    readonly itemLabel?: string;
     readonly consentGivenAtIso: string;
     readonly contractStartIso: string;
     readonly currentPeriodEndIso?: string;

package/dist/billing-foundation/consumer-protection/confirmation-mail.js

@@ -3,8 +3,9 @@ import { CONSENT_TEXTS, resolveConsentLocale } from "./consent-text.js";
 const LABELS = {
     de: {
         subject: "Vertragsbestätigung",
-        intro: "vielen Dank für deine Bestellung. Hiermit bestätigen wir den Vertragsschluss mit folgendem Inhalt.",
+        intro: "Vielen Dank für deine Bestellung. Hiermit bestätigen wir den Vertragsschluss mit folgendem Inhalt.",
         plan: "Tarif",
+        item: "Leistung",
         oneOffPayment: "Einmalzahlung",
         price: "Preis",
         oneOff: "einmalig",
@@ -24,8 +25,9 @@ const LABELS = {
     },
     en: {
         subject: "Contract confirmation",
-        intro: "thank you for your order. We hereby confirm the conclusion of the contract with the following content.",
+        intro: "Thank you for your order. We hereby confirm the conclusion of the contract with the following content.",
         plan: "Plan",
+        item: "Item",
         oneOffPayment: "One-off payment",
         price: "Price",
         oneOff: "one-off",
@@ -69,7 +71,7 @@ function formatPrice(consent, locale) {
             : `${labels.every} ${count} ${unit.many}`;
     return count === 1 ? `${amount} / ${intervalText}` : `${amount}, ${intervalText}`;
 }
-function formatDate(iso, locale) {
+function formatDate(iso, locale, timeZone) {
     let epochMilliseconds;
     try {
         epochMilliseconds = Temporal.Instant.from(iso).epochMilliseconds;
@@ -78,18 +80,15 @@ function formatDate(iso, locale) {
         return iso;
     }
     return new Intl.DateTimeFormat(locale, {
-        dateStyle: "long",
-        timeStyle: "short",
-        timeZone: "UTC",
+        year: "numeric",
+        month: "long",
+        day: "numeric",
+        hour: "2-digit",
+        minute: "2-digit",
+        timeZone,
+        timeZoneName: "short",
     }).format(epochMilliseconds);
 }
-function paragraphs(text) {
-    return text
-        .split(/\n{2,}/)
-        .map((part) => part.trim())
-        .filter((part) => part.length > 0)
-        .map((part) => ({ text: part }));
-}
 /** Structured mail content (header/sections/footer) for the email channel's
  *  renderer; the renderer owns HTML escaping, this only builds plain text. */
 export function renderContractConfirmation(args) {
@@ -97,12 +96,16 @@ export function renderContractConfirmation(args) {
     const labels = LABELS[locale];
     const texts = CONSENT_TEXTS[locale];
     const { consent } = args;
+    const { timeZone } = args;
+    const subjectLine = consent.mode === "payment"
+        ? `${labels.item}: ${args.itemLabel ?? labels.oneOffPayment}`
+        : `${labels.plan}: ${args.tierLabel ?? consent.tier ?? labels.oneOffPayment}`;
     const contractLines = [
-        `${labels.plan}: ${consent.tier ?? labels.oneOffPayment}`,
+        subjectLine,
         `${labels.price}: ${formatPrice(consent, locale)}`,
-        `${labels.contractStart}: ${formatDate(args.contractStartIso, locale)}`,
+        `${labels.contractStart}: ${formatDate(args.contractStartIso, locale, timeZone)}`,
         ...(args.currentPeriodEndIso !== undefined
-            ? [`${labels.currentPeriodEnd}: ${formatDate(args.currentPeriodEndIso, locale)}`]
+            ? [`${labels.currentPeriodEnd}: ${formatDate(args.currentPeriodEndIso, locale, timeZone)}`]
             : []),
     ];
     const vatNote = args.vatNote[locale] ?? args.vatNote[resolveConsentLocale()];
@@ -113,12 +116,12 @@ export function renderContractConfirmation(args) {
             { text: labels.intro },
             ...contractLines.map((text) => ({ text })),
             ...(vatNote !== undefined ? [{ text: vatNote }] : []),
-            { text: labels.consentHeading },
+            { heading: labels.consentHeading },
             { text: texts.earlyPerformance },
             { text: texts.withdrawalLoss },
-            { text: `${labels.consentGivenAt}: ${formatDate(args.consentGivenAtIso, locale)}` },
-            { text: labels.termsHeading },
-            ...paragraphs(args.termsContent),
+            { text: `${labels.consentGivenAt}: ${formatDate(args.consentGivenAtIso, locale, timeZone)}` },
+            { heading: labels.termsHeading },
+            { markdown: args.termsContent },
         ],
         footer: `${labels.contact} ${args.operatorEmail}`,
     };

package/dist/billing-foundation/consumer-protection/consent-gate.d.ts

@@ -1,4 +1,4 @@
-import type { HandlerContext } from "@cosmicdrift/kumiko-framework/engine";
+import { type HandlerContext } from "@cosmicdrift/kumiko-framework/engine";
 import * as z from "zod";
 import type { ConsumerProtectionOptions, ProviderPrice } from "../types.js";
 export type CheckoutMode = "subscription" | "payment";
@@ -18,10 +18,15 @@ export type PreparedConsent = {
     readonly termsHash: string;
     readonly termsTemplateVersion: number;
 };
+export type OrderItem = {
+    readonly labelKey: string;
+    readonly params?: Readonly<Record<string, string | number>>;
+};
 export type ConsentPriceDetails = {
     readonly tier: string | null;
     readonly priceId: string;
     readonly price: Pick<ProviderPrice, "unitAmount" | "currency" | "interval" | "intervalCount"> | null;
+    readonly orderItem?: OrderItem;
 };
 export declare function prepareConsent(ctx: HandlerContext, options: ConsumerProtectionOptions, consent: ConsentPayload | undefined, mode: CheckoutMode): Promise<PreparedConsent>;
 export declare function consentCheckoutFields(prepared: PreparedConsent): {

package/dist/billing-foundation/consumer-protection/consent-gate.js

@@ -1,6 +1,7 @@
 // Consent gate shared by start-plan-checkout and create-checkout-session:
 // validate + prepare before the provider call, record only after it succeeded.
 import { createHash } from "node:crypto";
+import { SYSTEM_TENANT_ID } from "@cosmicdrift/kumiko-framework/engine";
 import { UnprocessableError } from "@cosmicdrift/kumiko-framework/errors";
 import { generateId } from "@cosmicdrift/kumiko-framework/utils";
 import * as z from "zod";
@@ -36,7 +37,7 @@ export async function prepareConsent(ctx, options, consent, mode) {
     let terms;
     try {
         terms = await resolver.resolveTemplate({
-            tenantId: ctx.user.tenantId,
+            tenantId: SYSTEM_TENANT_ID,
             slug: options.termsTextBlock,
             kind: TEXT_BLOCK_KIND,
             locale,
@@ -84,6 +85,10 @@ export async function recordConsent(ctx, prepared, details) {
         termsTemplateVersion: prepared.termsTemplateVersion,
         locale: prepared.locale,
         actorUserId: String(ctx.user.id),
+        ...(details.orderItem && {
+            itemLabelKey: details.orderItem.labelKey,
+            ...(details.orderItem.params && { itemLabelParams: details.orderItem.params }),
+        }),
     };
     const tenantId = ctx.user.tenantId;
     const isSubscription = prepared.mode === "subscription";

package/dist/billing-foundation/consumer-protection/consent-locale.js

@@ -1,7 +1,7 @@
 // @runtime client
 // Crypto-free so the browser panel can share the locale rule with the server.
 export const CONSENT_LOCALES = ["de", "en"];
-export const FALLBACK_CONSENT_LOCALE = "de";
+export const FALLBACK_CONSENT_LOCALE = "en";
 function isConsentLocale(value) {
     return CONSENT_LOCALES.some((locale) => locale === value);
 }

package/dist/billing-foundation/consumer-protection/issue-confirmation.js

@@ -1,8 +1,10 @@
 // § 312f contract confirmation: one mail per recorded consent, sent by the
 // system-only issue-contract-confirmation handler that the event-triggered
 // jobs (register-consent.ts) call.
-import { access, createSystemUser, } from "@cosmicdrift/kumiko-framework/engine";
+import { access, createSystemUser, SYSTEM_TENANT_ID, } from "@cosmicdrift/kumiko-framework/engine";
 import { InternalError, UnprocessableError } from "@cosmicdrift/kumiko-framework/errors";
+import { createI18n } from "@cosmicdrift/kumiko-framework/i18n";
+import { isValidIanaTimeZone } from "@cosmicdrift/kumiko-framework/time";
 import * as z from "zod";
 import { requireTemplateResolver, TEXT_BLOCK_KIND } from "../../template-resolver/index.js";
 import { UserQueries } from "../../user/index.js";
@@ -22,7 +24,17 @@ export const issueContractConfirmationSchema = z
 const recipientRowSchema = z.object({
     email: z.string().min(1),
     isDeleted: z.boolean().optional(),
+    timezone: z.string().nullish(),
 });
+// createI18n returns the key itself for an unknown key.
+function translatedOrUndefined(translation, key) {
+    return translation === key ? undefined : translation;
+}
+function pickTimeZone(userZone, tenantZone) {
+    if (userZone && isValidIanaTimeZone(userZone))
+        return userZone;
+    return isValidIanaTimeZone(tenantZone) ? tenantZone : "UTC";
+}
 export function createIssueContractConfirmationHandler(options, consumerProtection) {
     return {
         name: "issue-contract-confirmation",
@@ -100,7 +112,7 @@ export function createIssueContractConfirmationHandler(options, consumerProtecti
             }
             const locale = resolveConsentLocale(consent.locale);
             const terms = await requireTemplateResolver(ctx, "billing-foundation").resolveTemplate({
-                tenantId,
+                tenantId: SYSTEM_TENANT_ID,
                 slug: consumerProtection.termsTextBlock,
                 kind: TEXT_BLOCK_KIND,
                 locale,
@@ -108,9 +120,19 @@ export function createIssueContractConfirmationHandler(options, consumerProtecti
             if (terms.version !== consent.termsTemplateVersion) {
                 ctx.log?.warn(`[billing-foundation:issue-contract-confirmation] terms text block changed since consent ${payload.consentId} (version ${consent.termsTemplateVersion} -> ${terms.version}); the mail carries the current text`);
             }
+            const i18n = createI18n(ctx.registry, { defaultLocale: "en" });
+            const tierLabel = consent.tier !== null && options.catalog
+                ? translatedOrUndefined(i18n.t(options.catalog.tierLabelKey(consent.tier), locale), options.catalog.tierLabelKey(consent.tier))
+                : undefined;
+            const itemLabel = consent.itemLabelKey !== undefined
+                ? translatedOrUndefined(i18n.t(consent.itemLabelKey, locale, consent.itemLabelParams), consent.itemLabelKey)
+                : undefined;
             const issuedAtIso = options.now().toString();
             const content = renderContractConfirmation({
                 consent,
+                timeZone: pickTimeZone(recipient.data.timezone, ctx.tz.tenant),
+                ...(tierLabel !== undefined && { tierLabel }),
+                ...(itemLabel !== undefined && { itemLabel }),
                 consentGivenAtIso: consentEvent.createdAt.toString(),
                 contractStartIso: issuedAtIso,
                 ...(payload.currentPeriodEndIso !== undefined && {

package/dist/billing-foundation/events.d.ts

@@ -65,6 +65,8 @@ export declare const checkoutConsentRecordedPayloadSchema: z.ZodObject<{
     termsTemplateVersion: z.ZodNumber;
     locale: z.ZodString;
     actorUserId: z.ZodString;
+    itemLabelKey: z.ZodOptional<z.ZodString>;
+    itemLabelParams: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>>;
 }, z.core.$strip>;
 export type CheckoutConsentRecordedPayload = z.infer<typeof checkoutConsentRecordedPayloadSchema>;
 export declare const CONTRACT_CONFIRMATION_ISSUED_EVENT_SHORT: "contract-confirmation-issued";

package/dist/billing-foundation/events.js

@@ -101,6 +101,8 @@ export const checkoutConsentRecordedPayloadSchema = z.object({
     termsTemplateVersion: z.number(),
     locale: z.string().min(2).max(35),
     actorUserId: z.string().min(1),
+    itemLabelKey: z.string().min(1).max(200).optional(),
+    itemLabelParams: z.record(z.string(), z.union([z.string().max(100), z.number()])).optional(),
 });
 // =============================================================================
 // contract-confirmation-issued — § 312f confirmation mail sent

package/dist/billing-foundation/handlers/billing-plans.query.d.ts

@@ -1,3 +1,3 @@
 import type { QueryHandlerDef } from "@cosmicdrift/kumiko-framework/engine";
-import type { BillingPlanCatalog, ResolvedBillingFoundationOptions } from "../types.js";
+import { type BillingPlanCatalog, type ResolvedBillingFoundationOptions } from "../types.js";
 export declare function createBillingPlansQuery(options: ResolvedBillingFoundationOptions, catalog: BillingPlanCatalog): QueryHandlerDef;

package/dist/billing-foundation/handlers/billing-plans.query.js

@@ -5,6 +5,7 @@ import * as z from "zod";
 import { findCatalogProvider } from "../checkout-core.js";
 import { CONSENT_TEXTS, consentTextVersion, } from "../consumer-protection/consent-text.js";
 import { buildBillingPlans } from "../plan-catalog.js";
+import { isLegalLinkSet, } from "../types.js";
 const billingPlansSchema = z.object({}).strict();
 export function createBillingPlansQuery(options, catalog) {
     return {
@@ -25,12 +26,15 @@ export function createBillingPlansQuery(options, catalog) {
                         de: consentTextView("de"),
                         en: consentTextView("en"),
                     },
-                    legalLinks: consumerProtection.legalLinks,
+                    legalLinks: legalLinksPerLocale(consumerProtection.legalLinks),
                 },
             };
         },
     };
 }
+function legalLinksPerLocale(legalLinks) {
+    return isLegalLinkSet(legalLinks) ? { de: legalLinks, en: legalLinks } : legalLinks;
+}
 function consentTextView(locale) {
     const { earlyPerformance, withdrawalLoss } = CONSENT_TEXTS[locale];
     return { earlyPerformance, withdrawalLoss, consentTextVersion: consentTextVersion(locale) };

package/dist/billing-foundation/handlers/create-checkout-session.write.js

@@ -21,8 +21,9 @@
 // billing-foundation:write:switch-plan instead. Plan-driven callers should
 // prefer start-plan-checkout/switch-plan over calling this handler with a
 // hand-picked priceId.
+import { UnprocessableError } from "@cosmicdrift/kumiko-framework/errors";
 import * as z from "zod";
-import { findProviderPlugin, openCheckout } from "../checkout-core.js";
+import { assertCheckoutAllowed, openCheckout, startProviderCheckout, } from "../checkout-core.js";
 import { consentCheckoutFields, consentPayloadSchema, prepareConsent, recordConsent, } from "../consumer-protection/consent-gate.js";
 const createCheckoutSessionSchema = z.object({
     /** Welcher Provider — entityName eines registrierten subscription-
@@ -44,7 +45,7 @@ const createCheckoutSessionSchema = z.object({
 export function createCheckoutSessionHandler(options) {
     const consumerProtection = options.consumerProtection;
     const schema = consumerProtection
-        ? createCheckoutSessionSchema.extend({ consent: consentPayloadSchema.optional() })
+        ? createCheckoutSessionSchema.extend({ consent: consentPayloadSchema.optional() }).strict()
         : createCheckoutSessionSchema;
     return {
         name: "create-checkout-session",
@@ -56,27 +57,39 @@ export function createCheckoutSessionHandler(options) {
         handler: async (event, ctx) => {
             // @cast-boundary engine-payload — dispatcher-zod-validated payload
             const payload = event.payload;
-            const mode = payload.mode ?? "subscription";
-            const consent = consumerProtection
-                ? await prepareConsent(ctx, consumerProtection, payload.consent, mode)
-                : undefined;
-            const result = await openCheckout(ctx, { baseUrl: options.baseUrl, catalog: options.catalog, now: options.now }, {
+            const openOptions = { baseUrl: options.baseUrl, catalog: options.catalog, now: options.now };
+            const checkoutInput = {
                 providerName: payload.providerName,
                 priceId: payload.priceId,
                 successUrl: payload.successUrl,
                 cancelUrl: payload.cancelUrl,
                 ...(payload.providerCustomerId && { providerCustomerId: payload.providerCustomerId }),
                 ...(payload.mode && { mode: payload.mode }),
-                ...(consent && consentCheckoutFields(consent)),
-            });
-            if (consent) {
-                const plugin = findProviderPlugin(ctx, payload.providerName)?.plugin;
-                await recordConsent(ctx, consent, {
-                    tier: mode === "subscription" ? (plugin?.priceToTier?.[payload.priceId] ?? null) : null,
-                    priceId: payload.priceId,
-                    price: await lookupPrice(ctx, plugin, payload.priceId),
-                });
+            };
+            if (!consumerProtection) {
+                const result = await openCheckout(ctx, openOptions, checkoutInput);
+                return {
+                    isSuccess: true,
+                    data: { url: result.url, providerName: result.providerName },
+                };
             }
+            const mode = payload.mode ?? "subscription";
+            const plugin = await assertCheckoutAllowed(ctx, openOptions, checkoutInput);
+            const price = await lookupPrice(ctx, plugin, payload.priceId);
+            const orderItem = mode === "payment"
+                ? await consumerProtection.oneOffItemLabel?.(ctx, payload.priceId)
+                : undefined;
+            const consent = await prepareConsent(ctx, consumerProtection, payload.consent, mode);
+            const result = await startProviderCheckout(ctx, plugin, {
+                ...checkoutInput,
+                ...consentCheckoutFields(consent),
+            });
+            await recordConsent(ctx, consent, {
+                tier: mode === "subscription" ? (plugin.priceToTier?.[payload.priceId] ?? null) : null,
+                priceId: payload.priceId,
+                price,
+                ...(orderItem && { orderItem }),
+            });
             return {
                 isSuccess: true,
                 data: { url: result.url, providerName: result.providerName },
@@ -84,16 +97,25 @@ export function createCheckoutSessionHandler(options) {
         },
     };
 }
-// A failed price lookup must not lose a consent the buyer already gave at the
-// provider, so it degrades to null price fields.
+// The price is part of the consent record, so it must be known before the
+// buyer is sent to the provider.
 async function lookupPrice(ctx, plugin, priceId) {
-    if (!plugin?.retrievePrices)
-        return null;
+    let price;
     try {
-        const prices = await plugin.retrievePrices(ctx, [priceId]);
-        return prices.find((p) => p.priceId === priceId) ?? null;
+        const prices = (await plugin.retrievePrices?.(ctx, [priceId])) ?? [];
+        price = prices.find((p) => p.priceId === priceId);
     }
-    catch {
-        return null;
+    catch (cause) {
+        throw priceUnavailable(priceId, cause);
     }
+    if (!price)
+        throw priceUnavailable(priceId);
+    return price;
+}
+function priceUnavailable(priceId, cause) {
+    return new UnprocessableError("price_unavailable", {
+        i18nKey: "billing-foundation.errors.priceUnavailable",
+        message: `billing-foundation: no live price resolved for priceId "${priceId}"`,
+        ...(cause instanceof Error && { cause }),
+    });
 }

package/dist/billing-foundation/index.d.ts

@@ -2,6 +2,8 @@ export { paymentAggregateId, subscriptionAggregateId } from "./aggregate-id.js";
 export { type BillingInfo, type BillingInfoQueryDeps, createBillingInfoQueryConfig, } from "./billing-info-query.js";
 export { isBillingEnabled, type ResolvedProvider, resolveProviderPlugin, } from "./checkout-core.js";
 export { BILLING_FOUNDATION_FEATURE, BILLING_PLANS_PANEL_COMPONENT, BILLING_PLANS_SCREEN_ID, type BillingEventKind, BillingEventKinds, type BillingPlanAction, BillingPlanActions, DEFAULT_PURCHASE_ROLES, isSwitchableSubscriptionStatus, isTerminalSubscriptionStatus, parseProviderConsentId, SUBSCRIPTION_PROVIDER_EXTENSION, type SubscriptionCancelTiming, SubscriptionCancelTimings, type SubscriptionEventType, SubscriptionEventTypes, SubscriptionFoundationHandlers, SubscriptionFoundationQueries, type SubscriptionStatus, SubscriptionStatuses, } from "./constants.js";
+export { type ConsentPayload, consentPayloadSchema, type OrderItem, } from "./consumer-protection/consent-gate.js";
+export { CONSENT_LOCALES, type ConsentLocale, resolveConsentLocale, } from "./consumer-protection/consent-locale.js";
 export { type ContractTerminationRoutesOptions, createContractTerminationRoutes, } from "./consumer-protection/termination-pages.js";
 export { paymentEntity, subscriptionEntity } from "./entities.js";
 export { INVOICE_PAID_EVENT_QN, INVOICE_PAID_EVENT_SHORT, INVOICE_PAYMENT_FAILED_EVENT_QN, INVOICE_PAYMENT_FAILED_EVENT_SHORT, PAYMENT_AGGREGATE_TYPE, PAYMENT_RECEIVED_EVENT_QN, PAYMENT_RECEIVED_EVENT_SHORT, type PaymentEventHeaders, type PaymentEventPayload, paymentEventPayloadSchema, SUBSCRIPTION_AGGREGATE_TYPE, SUBSCRIPTION_CANCELED_EVENT_QN, SUBSCRIPTION_CANCELED_EVENT_SHORT, SUBSCRIPTION_CREATED_EVENT_QN, SUBSCRIPTION_CREATED_EVENT_SHORT, SUBSCRIPTION_UPDATED_EVENT_QN, SUBSCRIPTION_UPDATED_EVENT_SHORT, type SubscriptionEventHeaders, type SubscriptionEventPayload, subscriptionEventPayloadSchema, } from "./events.js";
@@ -10,5 +12,5 @@ export { getSubscriptionForTenant, type SubscriptionView } from "./get-subscript
 export { paymentsProjectionTable, subscriptionsProjectionTable } from "./projection.js";
 export { billingPlansPanel, createBillingPlansScreen } from "./screens.js";
 export { createSubscriptionTierSync, effectiveTierFromSubscription, SUBSCRIPTION_WEBHOOK_PATH, type SubscriptionTierSyncDeps, } from "./subscription-tier-sync.js";
-export { type BillingFoundationOptions, type BillingPlanBenefit, type BillingPlanCatalog, type BillingPlanPrice, type BillingPlansResult, type BillingPlanView, type ConsumerProtectionOptions, KNOWN_RECURRING_INTERVALS, type PaymentEvent, type ProviderPrice, type ProviderSubscriptionSnapshot, type RecurringInterval, type SubscriptionEvent, type SubscriptionProviderPlugin, } from "./types.js";
+export { type BillingFoundationOptions, type BillingPlanBenefit, type BillingPlanCatalog, type BillingPlanPrice, type BillingPlansResult, type BillingPlanView, type ConsumerProtectionOptions, KNOWN_RECURRING_INTERVALS, type LegalLinkSet, type PaymentEvent, type ProviderPrice, type ProviderSubscriptionSnapshot, type RecurringInterval, type SubscriptionEvent, type SubscriptionProviderPlugin, } from "./types.js";
 export { createSubscriptionWebhookRoute, type SubscriptionWebhookRouteOptions, } from "./webhook-handler.js";

package/dist/billing-foundation/index.js

@@ -3,6 +3,8 @@ export { paymentAggregateId, subscriptionAggregateId } from "./aggregate-id.js";
 export { createBillingInfoQueryConfig, } from "./billing-info-query.js";
 export { isBillingEnabled, resolveProviderPlugin, } from "./checkout-core.js";
 export { BILLING_FOUNDATION_FEATURE, BILLING_PLANS_PANEL_COMPONENT, BILLING_PLANS_SCREEN_ID, BillingEventKinds, BillingPlanActions, DEFAULT_PURCHASE_ROLES, isSwitchableSubscriptionStatus, isTerminalSubscriptionStatus, parseProviderConsentId, SUBSCRIPTION_PROVIDER_EXTENSION, SubscriptionCancelTimings, SubscriptionEventTypes, SubscriptionFoundationHandlers, SubscriptionFoundationQueries, SubscriptionStatuses, } from "./constants.js";
+export { consentPayloadSchema, } from "./consumer-protection/consent-gate.js";
+export { CONSENT_LOCALES, resolveConsentLocale, } from "./consumer-protection/consent-locale.js";
 export { createContractTerminationRoutes, } from "./consumer-protection/termination-pages.js";
 export { paymentEntity, subscriptionEntity } from "./entities.js";
 export { INVOICE_PAID_EVENT_QN, INVOICE_PAID_EVENT_SHORT, INVOICE_PAYMENT_FAILED_EVENT_QN, INVOICE_PAYMENT_FAILED_EVENT_SHORT, PAYMENT_AGGREGATE_TYPE, PAYMENT_RECEIVED_EVENT_QN, PAYMENT_RECEIVED_EVENT_SHORT, paymentEventPayloadSchema, SUBSCRIPTION_AGGREGATE_TYPE, SUBSCRIPTION_CANCELED_EVENT_QN, SUBSCRIPTION_CANCELED_EVENT_SHORT, SUBSCRIPTION_CREATED_EVENT_QN, SUBSCRIPTION_CREATED_EVENT_SHORT, SUBSCRIPTION_UPDATED_EVENT_QN, SUBSCRIPTION_UPDATED_EVENT_SHORT, subscriptionEventPayloadSchema, } from "./events.js";

package/dist/billing-foundation/types.d.ts

@@ -3,6 +3,8 @@ import type { TenantDb } from "@cosmicdrift/kumiko-framework/db";
 import type { HandlerContext, TenantId } from "@cosmicdrift/kumiko-framework/engine";
 import type { SecretsContext } from "@cosmicdrift/kumiko-framework/secrets";
 import { type BillingEventKinds, type BillingPlanAction, SUBSCRIPTION_PROVIDER_EXTENSION, type SubscriptionCancelTiming, type SubscriptionEventType, type SubscriptionStatus, type TerminationScope } from "./constants.js";
+import type { OrderItem } from "./consumer-protection/consent-gate.js";
+import type { ConsentLocale } from "./consumer-protection/consent-locale.js";
 export type SubscriptionEvent = {
     /** Discriminator against PaymentEvent. Optional (instead of required) so
      *  existing plugins like subscription-mollie, which don't set this field,
@@ -279,6 +281,12 @@ export type BillingPlanCatalog<TTier extends string = string> = {
     /** Defaults to the only registered provider exposing `priceToTier`. */
     readonly providerName?: string;
 };
+export type LegalLinkSet = {
+    readonly terms: string;
+    readonly withdrawal: string;
+    readonly privacy: string;
+};
+export declare function isLegalLinkSet(links: LegalLinkSet | Readonly<Record<ConsentLocale, LegalLinkSet>>): links is LegalLinkSet;
 /** Consumer-protection consent gate (§ 312j / § 356 BGB style). When set,
  *  `start-plan-checkout` and `create-checkout-session` require a `consent`
  *  payload and record it as an event before the buyer reaches the provider. */
@@ -294,12 +302,13 @@ export type ConsumerProtectionOptions = {
      *  host that resolves none (the platform apex) — the declaration then runs
      *  without a request tenant and finds the contract by the declarant's email. */
     readonly terminationScope?: TerminationScope;
-    /** Root-relative paths or absolute https URLs. */
-    readonly legalLinks: {
-        readonly terms: string;
-        readonly withdrawal: string;
-        readonly privacy: string;
-    };
+    /** Names the item of a one-off payment (mode "payment") for the consent record
+     *  and the confirmation mail; the label key is resolved through the registry
+     *  i18n, so it must be qualified with the registering feature. */
+    readonly oneOffItemLabel?: (ctx: HandlerContext, priceId: string) => Promise<OrderItem | undefined>;
+    /** Root-relative paths or absolute https URLs. One set for every locale, or
+     *  one set per consent locale (`de` and `en` required). */
+    readonly legalLinks: LegalLinkSet | Readonly<Record<ConsentLocale, LegalLinkSet>>;
 };
 export type BillingFoundationOptions<TTier extends string = string> = {
     /** Absolute http(s) URL. Its origin is the only redirect origin
@@ -361,7 +370,7 @@ export type BillingPlansResult = {
             readonly withdrawalLoss: string;
             readonly consentTextVersion: string;
         }>>;
-        readonly legalLinks: ConsumerProtectionOptions["legalLinks"];
+        readonly legalLinks: Readonly<Record<ConsentLocale, LegalLinkSet>>;
     };
 };
 declare module "@cosmicdrift/kumiko-framework/engine" {

package/dist/billing-foundation/types.js

@@ -30,3 +30,6 @@ import { SUBSCRIPTION_PROVIDER_EXTENSION, } from "./constants.js";
 // =============================================================================
 // Closed set a provider's recurring-price interval narrows to; an unrecognized provider value maps to null instead of widening this type.
 export const KNOWN_RECURRING_INTERVALS = ["day", "week", "month", "year"];
+export function isLegalLinkSet(links) {
+    return "terms" in links;
+}

package/dist/billing-foundation/validate-options.d.ts

@@ -1,4 +1,4 @@
-import type { BillingFoundationOptions } from "./types.js";
+import { type BillingFoundationOptions } from "./types.js";
 /** Validates `options` and throws a plain `Error` with a clear message at
  *  feature-definition time — same pattern as `createCapOverviewFeature`.
  *  `createBillingFoundationFeature()` (no options) always succeeds; the

package/dist/billing-foundation/validate-options.js

@@ -4,6 +4,8 @@
 // re-exported from index.ts.
 import * as z from "zod";
 import { isTerminationScope, TERMINATION_SCOPES } from "./constants.js";
+import { CONSENT_LOCALES } from "./consumer-protection/consent-locale.js";
+import { isLegalLinkSet, } from "./types.js";
 function isRootRelativePath(path) {
     return path.startsWith("/") && !path.startsWith("//");
 }
@@ -29,12 +31,32 @@ function validateConsumerProtection(cp) {
     if (!z.email().safeParse(cp.operatorEmail).success) {
         throw new Error(`createBillingFoundationFeature: consumerProtection.operatorEmail "${cp.operatorEmail}" is not a valid email address.`);
     }
+    if (cp.oneOffItemLabel !== undefined && typeof cp.oneOffItemLabel !== "function") {
+        throw new Error("createBillingFoundationFeature: consumerProtection.oneOffItemLabel must be a function.");
+    }
     if (cp.terminationScope !== undefined && !isTerminationScope(cp.terminationScope)) {
         throw new Error(`createBillingFoundationFeature: consumerProtection.terminationScope "${String(cp.terminationScope)}" must be one of ${TERMINATION_SCOPES.map((scope) => `"${scope}"`).join(", ")}.`);
     }
-    for (const [key, link] of Object.entries(cp.legalLinks)) {
+    if (isLegalLinkSet(cp.legalLinks)) {
+        validateLegalLinkSet(cp.legalLinks, "legalLinks");
+    }
+    else {
+        validatePerLocaleLegalLinks(cp.legalLinks);
+    }
+}
+function validatePerLocaleLegalLinks(legalLinks) {
+    for (const locale of CONSENT_LOCALES) {
+        const set = legalLinks[locale];
+        if (!set) {
+            throw new Error(`createBillingFoundationFeature: consumerProtection.legalLinks needs a "${locale}" entry when given per locale.`);
+        }
+        validateLegalLinkSet(set, `legalLinks.${locale}`);
+    }
+}
+function validateLegalLinkSet(set, path) {
+    for (const [key, link] of Object.entries(set)) {
         if (!isRootRelativeOrHttpsUrl(link)) {
-            throw new Error(`createBillingFoundationFeature: consumerProtection.legalLinks.${key} "${link}" must be a root-relative path ("/..." not "//") or an absolute https URL.`);
+            throw new Error(`createBillingFoundationFeature: consumerProtection.${path}.${key} "${link}" must be a root-relative path ("/..." not "//") or an absolute https URL.`);
         }
     }
 }

package/dist/billing-foundation/web/billing-plans-panel.js

@@ -189,7 +189,7 @@ export function BillingPlansPanel(_props) {
                         date: toInstant(result.subscription.cancelAt).toLocaleString(locale, {
                             dateStyle: "medium",
                         }),
-                    }), " ", t("billing-foundation.plans.switchRequiresReactivation")] })), consumerProtection !== undefined && canManage && (_jsx("div", { children: _jsx(Button, { variant: "secondary", onClick: () => setCancelOpen(true), testId: "billing-plans-cancel-contract", children: t("billing-foundation.cancel.open") }) })), _jsxs(PlanGrid, { testId: "billing-plans-grid", children: [!currentTierInPlans && (_jsx(PlanCard, { title: t(result.currentTier.labelKey), current: true, testId: "billing-plan-card-current", features: result.currentTier.benefits.map((benefit) => t(benefit.labelKey, localizedParams(benefit.params, locale))), secondaryAction: manageOrReactivateAction(canManage, result.subscription, t, handleManage, redirecting) })), visiblePlans.map((plan) => (_jsx(PlanCard, { testId: `billing-plan-card-${plan.tier}`, ...toCardProps(plan) }, plan.tier)))] }), consumerProtection !== undefined &&
+                    }), " ", t("billing-foundation.plans.switchRequiresReactivation")] })), consumerProtection !== undefined && canManage && result.subscription?.cancelAt == null && (_jsx("div", { children: _jsx(Button, { variant: "secondary", onClick: () => setCancelOpen(true), testId: "billing-plans-cancel-contract", children: t("billing-foundation.cancel.open") }) })), _jsxs(PlanGrid, { testId: "billing-plans-grid", children: [!currentTierInPlans && (_jsx(PlanCard, { title: t(result.currentTier.labelKey), current: true, testId: "billing-plan-card-current", features: result.currentTier.benefits.map((benefit) => t(benefit.labelKey, localizedParams(benefit.params, locale))), secondaryAction: manageOrReactivateAction(canManage, result.subscription, t, handleManage, redirecting) })), visiblePlans.map((plan) => (_jsx(PlanCard, { testId: `billing-plan-card-${plan.tier}`, ...toCardProps(plan) }, plan.tier)))] }), consumerProtection !== undefined &&
                 consentPlan !== undefined &&
                 consentPlan.price !== null && (_jsx(CheckoutConsentDialog, { open: true, onOpenChange: (open) => {
                     if (!open)

package/dist/billing-foundation/web/cancel-contract-dialog.js

@@ -14,7 +14,7 @@ const TERMINATION_KINDS = ["ordinary", "extraordinary"];
 export function CancelContractDialog({ open, onOpenChange, onTerminated, }) {
     const t = useTranslation();
     const locale = useLocale().locale();
-    const { Modal, Heading, Text, Field, Input, Button, Banner } = usePrimitives();
+    const { Modal, Text, Field, Input, Button, Banner } = usePrimitives();
     const terminate = useMutation(SubscriptionFoundationHandlers.terminateContract);
     const [step, setStep] = useState("form");
     const [declarationType, setDeclarationType] = useState("termination");
@@ -38,7 +38,7 @@ export function CancelContractDialog({ open, onOpenChange, onTerminated, }) {
     function formatInstant(iso) {
         return toInstant(iso).toLocaleString(locale, { dateStyle: "medium", timeStyle: "short" });
     }
-    return (_jsx(Modal, { open: open, onOpenChange: onOpenChange, title: t("billing-foundation.cancel.title"), testId: "cancel-contract-dialog", children: _jsxs("div", { className: "flex flex-col gap-4", children: [_jsx(Heading, { variant: "page", children: t("billing-foundation.cancel.title") }), step === "form" && (_jsxs(_Fragment, { children: [_jsx(Text, { variant: "muted", children: t("billing-foundation.cancel.declaration") }), _jsx(ModeSwitch, { value: declarationType, options: DECLARATION_TYPES.map((value) => ({
+    return (_jsx(Modal, { open: open, onOpenChange: onOpenChange, title: t("billing-foundation.cancel.title"), testId: "cancel-contract-dialog", children: _jsxs("div", { className: "flex flex-col gap-4", children: [step === "form" && (_jsxs(_Fragment, { children: [_jsx(Text, { variant: "muted", children: t("billing-foundation.cancel.declaration") }), _jsx(ModeSwitch, { value: declarationType, options: DECLARATION_TYPES.map((value) => ({
                                 value,
                                 label: t(`billing-foundation.cancel.declaration.${value}`),
                             })), onChange: setDeclarationType, ariaLabel: t("billing-foundation.cancel.declaration"), testId: "cancel-declaration-type" }), declarationType === "withdrawal" && (_jsx(Text, { variant: "muted", children: t("billing-foundation.cancel.withdrawalHint") })), _jsx(Text, { variant: "muted", children: t("billing-foundation.cancel.kind") }), _jsx(ModeSwitch, { value: terminationKind, options: TERMINATION_KINDS.map((value) => ({

package/dist/billing-foundation/web/checkout-consent-dialog.d.ts

@@ -16,7 +16,7 @@ export type CheckoutConsentDialogProps = {
     readonly price: {
         readonly amount: string;
         readonly renewalKey?: string;
-        readonly count: string;
+        readonly count?: string;
     };
     readonly consumerProtection: ConsumerProtectionView;
     readonly onOrder: (consent: CheckoutConsentPayload) => Promise<WriteResult<{

package/dist/billing-foundation/web/checkout-consent-dialog.js

@@ -1,4 +1,4 @@
-import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { Fragment as _Fragment, jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { useLocale, usePrimitives, useTranslation } from "@cosmicdrift/kumiko-renderer";
 import { useState } from "react";
 import { resolveConsentLocale } from "../consumer-protection/consent-locale.js";
@@ -7,14 +7,14 @@ export const CONSENT_TEXT_OUTDATED_CODE = "consent_text_outdated";
 export function CheckoutConsentDialog({ open, onOpenChange, planName, price, consumerProtection, onOrder, onConsentTextOutdated, }) {
     const t = useTranslation();
     const uiLocale = useLocale().locale();
-    const { Modal, Heading, Text, Field, Input, Button, Link, Banner } = usePrimitives();
+    const { Modal, Text, Field, Input, Button, Link, Banner } = usePrimitives();
     const [earlyPerformance, setEarlyPerformance] = useState(false);
     const [withdrawalLoss, setWithdrawalLoss] = useState(false);
     const [submitting, setSubmitting] = useState(false);
     const [errorText, setErrorText] = useState(null);
     const consentLocale = resolveConsentLocale(uiLocale);
     const texts = consumerProtection.consentTexts[consentLocale];
-    const { legalLinks } = consumerProtection;
+    const legalLinks = consumerProtection.legalLinks[consentLocale];
     async function order() {
         setSubmitting(true);
         setErrorText(null);
@@ -34,5 +34,5 @@ export function CheckoutConsentDialog({ open, onOpenChange, planName, price, con
             onConsentTextOutdated();
         }
     }
-    return (_jsx(Modal, { open: open, onOpenChange: onOpenChange, title: t("billing-foundation.consent.title"), testId: "checkout-consent-dialog", children: _jsxs("div", { className: "flex flex-col gap-4", children: [_jsx(Heading, { variant: "page", children: t("billing-foundation.consent.title") }), _jsxs("div", { className: "flex flex-col gap-1", "data-testid": "checkout-consent-summary", children: [_jsxs(Text, { children: [planName, " \u2014 ", price.amount] }), price.renewalKey !== undefined && (_jsx(Text, { variant: "muted", children: t(price.renewalKey, { count: price.count }) })), _jsx(Text, { variant: "muted", children: t("billing-foundation.consent.cancelAnytime") })] }), _jsxs("div", { className: "flex flex-wrap gap-4", children: [_jsx(Link, { href: legalLinks.terms, target: "_blank", children: t("billing-foundation.consent.link.terms") }), _jsx(Link, { href: legalLinks.withdrawal, target: "_blank", children: t("billing-foundation.consent.link.withdrawal") }), _jsx(Link, { href: legalLinks.privacy, target: "_blank", children: t("billing-foundation.consent.link.privacy") })] }), _jsx(Field, { id: "consent-early-performance", label: texts.earlyPerformance, layout: "inline", children: _jsx(Input, { kind: "boolean", id: "consent-early-performance", name: "consent-early-performance", value: earlyPerformance, onChange: setEarlyPerformance, disabled: submitting }) }), _jsx(Field, { id: "consent-withdrawal-loss", label: texts.withdrawalLoss, layout: "inline", children: _jsx(Input, { kind: "boolean", id: "consent-withdrawal-loss", name: "consent-withdrawal-loss", value: withdrawalLoss, onChange: setWithdrawalLoss, disabled: submitting }) }), errorText !== null && (_jsx(Banner, { variant: "error", testId: "checkout-consent-error", children: errorText })), _jsxs("div", { className: "flex justify-end gap-2", children: [_jsx(Button, { variant: "secondary", disabled: submitting, onClick: () => onOpenChange(false), testId: "checkout-consent-cancel", children: t("billing-foundation.consent.back") }), _jsx(Button, { disabled: !earlyPerformance || !withdrawalLoss || submitting, loading: submitting, onClick: order, testId: "checkout-consent-order", children: t("billing-foundation.consent.order") })] })] }) }));
+    return (_jsx(Modal, { open: open, onOpenChange: onOpenChange, title: t("billing-foundation.consent.title"), testId: "checkout-consent-dialog", children: _jsxs("div", { className: "flex flex-col gap-4", children: [_jsxs("div", { className: "flex flex-col gap-1", "data-testid": "checkout-consent-summary", children: [_jsxs(Text, { children: [planName, " \u2014 ", price.amount] }), price.renewalKey !== undefined && (_jsxs(_Fragment, { children: [_jsx(Text, { variant: "muted", children: t(price.renewalKey, price.count !== undefined ? { count: price.count } : undefined) }), _jsx(Text, { variant: "muted", children: t("billing-foundation.consent.cancelAnytime") })] }))] }), _jsxs("div", { className: "flex flex-wrap gap-4", children: [_jsx(Link, { href: legalLinks.terms, target: "_blank", children: t("billing-foundation.consent.link.terms") }), _jsx(Link, { href: legalLinks.withdrawal, target: "_blank", children: t("billing-foundation.consent.link.withdrawal") }), _jsx(Link, { href: legalLinks.privacy, target: "_blank", children: t("billing-foundation.consent.link.privacy") })] }), _jsx(Field, { id: "consent-early-performance", label: texts.earlyPerformance, layout: "inline", children: _jsx(Input, { kind: "boolean", id: "consent-early-performance", name: "consent-early-performance", value: earlyPerformance, onChange: setEarlyPerformance, disabled: submitting }) }), _jsx(Field, { id: "consent-withdrawal-loss", label: texts.withdrawalLoss, layout: "inline", children: _jsx(Input, { kind: "boolean", id: "consent-withdrawal-loss", name: "consent-withdrawal-loss", value: withdrawalLoss, onChange: setWithdrawalLoss, disabled: submitting }) }), errorText !== null && (_jsx(Banner, { variant: "error", testId: "checkout-consent-error", children: errorText })), _jsxs("div", { className: "flex justify-end gap-2", children: [_jsx(Button, { variant: "secondary", disabled: submitting, onClick: () => onOpenChange(false), testId: "checkout-consent-cancel", children: t("billing-foundation.consent.back") }), _jsx(Button, { disabled: !earlyPerformance || !withdrawalLoss || submitting, loading: submitting, onClick: order, testId: "checkout-consent-order", children: t("billing-foundation.consent.order") })] })] }) }));
 }

package/dist/billing-foundation/web/index.d.ts

@@ -1,4 +1,6 @@
 export { BILLING_PLANS_SCREEN_ID, type BillingPlanAction, BillingPlanActions, SubscriptionFoundationHandlers, SubscriptionFoundationQueries, type SubscriptionStatus, SubscriptionStatuses, } from "../constants.js";
-export type { BillingPlanBenefit, BillingPlanCatalog, BillingPlansResult, BillingPlanView, } from "../types.js";
+export { CONSENT_LOCALES, type ConsentLocale, resolveConsentLocale, } from "../consumer-protection/consent-locale.js";
+export type { BillingPlanBenefit, BillingPlanCatalog, BillingPlansResult, BillingPlanView, LegalLinkSet, } from "../types.js";
 export { BillingPlansPanel } from "./billing-plans-panel.js";
+export { CheckoutConsentDialog, type CheckoutConsentDialogProps, type CheckoutConsentPayload, CONSENT_TEXT_OUTDATED_CODE, } from "./checkout-consent-dialog.js";
 export { type BillingFoundationClientOptions, billingFoundationClient } from "./client-plugin.js";

package/dist/billing-foundation/web/index.js

@@ -4,5 +4,7 @@
 // the server side (createBillingFoundationFeature) lives under
 // `@cosmicdrift/kumiko-bundled-features/billing-foundation` and has no React deps.
 export { BILLING_PLANS_SCREEN_ID, BillingPlanActions, SubscriptionFoundationHandlers, SubscriptionFoundationQueries, SubscriptionStatuses, } from "../constants.js";
+export { CONSENT_LOCALES, resolveConsentLocale, } from "../consumer-protection/consent-locale.js";
 export { BillingPlansPanel } from "./billing-plans-panel.js";
+export { CheckoutConsentDialog, CONSENT_TEXT_OUTDATED_CODE, } from "./checkout-consent-dialog.js";
 export { billingFoundationClient } from "./client-plugin.js";

package/dist/legal-pages/constants.d.ts

@@ -4,6 +4,8 @@ export type LegalPageRoute = {
     readonly slug: string;
     readonly lang: string;
     readonly titleFallback: string;
+    /** Prepend the page title as `<h1>` to the rendered body. Default false. */
+    readonly titleHeading?: boolean;
 };
 export type LegalRequiredBlock = {
     readonly slug: string;

package/dist/legal-pages/feature.js

@@ -1,5 +1,6 @@
 import { computeRevisionEtag, etagMatches } from "@cosmicdrift/kumiko-framework/api";
 import { defineFeature, SYSTEM_TENANT_ID, } from "@cosmicdrift/kumiko-framework/engine";
+import { escapeHtml } from "@cosmicdrift/kumiko-headless";
 import { cachedSecurePageResponse, redirectToCanonicalPath, slashVariantOf, } from "../page-render/index.js";
 import { LEGAL_REQUIRED_BLOCKS, LEGAL_ROUTES, } from "./constants.js";
 import { runLegalPagesBootCheck } from "./lib/boot-check.js";
@@ -85,9 +86,13 @@ export function createLegalPagesFeature(opts = {}) {
                             extra,
                         });
                     }
+                    const title = data.title || route.titleFallback;
+                    const renderedBody = renderMarkdownToHtml(data.content);
                     const html = wrapLayout({
-                        title: data.title || route.titleFallback,
-                        bodyHtml: renderMarkdownToHtml(data.content),
+                        title,
+                        bodyHtml: route.titleHeading
+                            ? `<h1>${escapeHtml(title)}</h1>${renderedBody}`
+                            : renderedBody,
                         lang: route.lang,
                         slug: route.slug,
                     });

package/dist/renderer-simple/simple-renderer.js

@@ -1,4 +1,5 @@
 import { escapeHtml, escapeHtmlAttr } from "@cosmicdrift/kumiko-headless";
+import { renderSafeMarkdown } from "../page-render/index.js";
 const DEFAULT_PRIMARY_COLOR = "#2563eb";
 const HEX_COLOR_PATTERN = /^#(?:[0-9a-fA-F]{3,4}|[0-9a-fA-F]{6}|[0-9a-fA-F]{8})$/;
 function isHttpUrl(value) {
@@ -95,6 +96,13 @@ function renderSection(section, primaryColor) {
     if ("text" in section) {
         return `<p style="margin:0 0 16px;color:#333;font-size:14px;line-height:1.5">${escapeHtml(section.text)}</p>`;
     }
+    if ("heading" in section) {
+        return `<h2 style="margin:24px 0 12px;color:#111;font-size:16px;font-weight:600">${escapeHtml(section.heading)}</h2>`;
+    }
+    if ("markdown" in section) {
+        const markdownHtml = renderSafeMarkdown(section.markdown);
+        return `<div style="color:#333;font-size:14px;line-height:1.5">${markdownHtml}</div>`;
+    }
     if ("button" in section) {
         return `<p style="margin:0 0 16px"><a href="${escapeHtml(section.button.url)}" style="display:inline-block;padding:10px 24px;background:${escapeHtmlAttr(primaryColor)};color:#fff;text-decoration:none;border-radius:4px;font-size:14px">${escapeHtml(section.button.label)}</a></p>`;
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-bundled-features",
-  "version": "0.343.0",
+  "version": "0.344.0",
   "description": "Built-in features — tenant, user, auth, delivery. The stuff you'd rewrite anyway, already typed.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -503,12 +503,12 @@
     }
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-dispatcher-live": "0.343.0",
-    "@cosmicdrift/kumiko-framework": "0.343.0",
-    "@cosmicdrift/kumiko-headless": "0.343.0",
-    "@cosmicdrift/kumiko-renderer": "0.343.0",
-    "@cosmicdrift/kumiko-renderer-web": "0.343.0",
-    "@cosmicdrift/kumiko-types": "0.343.0",
+    "@cosmicdrift/kumiko-dispatcher-live": "0.344.0",
+    "@cosmicdrift/kumiko-framework": "0.344.0",
+    "@cosmicdrift/kumiko-headless": "0.344.0",
+    "@cosmicdrift/kumiko-renderer": "0.344.0",
+    "@cosmicdrift/kumiko-renderer-web": "0.344.0",
+    "@cosmicdrift/kumiko-types": "0.344.0",
     "@mollie/api-client": "^4.5.0",
     "@node-rs/argon2": "^2.0.2",
     "@types/mailparser": "^3.4.6",
@@ -1025,8 +1025,8 @@
   ],
   "devDependencies": {
     "@testing-library/user-event": "^14.6.1",
-    "@cosmicdrift/kumiko-locale-de": "0.343.0",
-    "@cosmicdrift/kumiko-locale-es": "0.343.0",
+    "@cosmicdrift/kumiko-locale-de": "0.344.0",
+    "@cosmicdrift/kumiko-locale-es": "0.344.0",
     "jsqr": "^1.4.0"
   }
 }

package/src/billing-foundation/changes.json

@@ -1,4 +1,11 @@
 [
+  {
+    "version": "0.344.0",
+    "type": "breaking",
+    "title": "Consumer-protection gaps - per-locale legal links, gate order, confirmation mail, exports",
+    "detail": "All changes below apply only when `createBillingFoundationFeature` gets `consumerProtection`. Apps without it behave as before.\n`ConsumerProtectionOptions.legalLinks` takes either one `LegalLinkSet` or one set per consent locale (`{ de, en }`, both required). `BillingPlansResult.consumerProtection.legalLinks` is now always `Record<\"de\" | \"en\", LegalLinkSet>`; a single set is returned for both locales. Code that reads `legalLinks.terms` from the billing-plans result must read `legalLinks[locale].terms`. `CheckoutConsentDialog` picks the set for the consent locale.\n`FALLBACK_CONSENT_LOCALE` is now `\"en\"` (was `\"de\"`). A locale other than de/en, or none, resolves to English in `resolveConsentLocale`, the consent gate, the confirmation mail's VAT note and the termination record.\n`create-checkout-session` with consumer protection now checks in this order: provider, billing enabled, redirect origins, price and subscription gates, then the live price (new `UnprocessableError` `price_unavailable` when the provider cannot return it), then the consent, then the provider call. A missing consent no longer hides a disabled provider, an existing subscription or an unknown price. Its payload schema is strict, so unknown fields are rejected. `assertCheckoutAllowed` and `startProviderCheckout` split `openCheckout` in checkout-core.\nNew option `ConsumerProtectionOptions.oneOffItemLabel(ctx, priceId)`: the server resolves the label of a one-off item (for example a credit pack). It is stored on the consent event as `itemLabelKey` / `itemLabelParams` and shown in the confirmation mail as \"Leistung\" / \"Item\". The client cannot set it.\nThe terms text block is read from the system tenant, not from the buyer's tenant, in the consent gate and the confirmation mail. A tenant-owned block with the same slug no longer changes `termsHash` or the mailed text.\nThe confirmation mail shows dates in the recipient's time zone (user zone, else tenant zone, else UTC) with the zone name, renders the terms as Markdown with real headings and shows the translated plan name (`catalog.tierLabelKey`, looked up through the registry i18n, so the key must be qualified with the registering feature; untranslated keys fall back to the raw tier). Its opening sentence starts with a capital letter.\nNew exports: `consentPayloadSchema`, `ConsentPayload`, `OrderItem`, `CONSENT_LOCALES`, `ConsentLocale`, `resolveConsentLocale`, `LegalLinkSet`. The `/web` entry adds `CheckoutConsentDialog`, `CheckoutConsentDialogProps`, `CheckoutConsentPayload`, `CONSENT_TEXT_OUTDATED_CODE`, `resolveConsentLocale`, `ConsentLocale` and `LegalLinkSet`. `CheckoutConsentDialog` `price.count` is optional, and the \"cancel at any time\" note only shows for a recurring price (`price.renewalKey` set).\nThe checkout and cancel dialogs no longer repeat the modal title as a heading, and the cancel-contract button is hidden once a cancellation is scheduled.",
+    "migration": "Only apps that pass consumerProtection are affected. BillingPlansResult.consumerProtection.legalLinks is now keyed by locale (legalLinks.de / legalLinks.en). FALLBACK_CONSENT_LOCALE changed from de to en. create-checkout-session rejects unknown payload fields when consumer protection is on."
+  },
   {
     "version": "0.341.0",
     "type": "improvement",

package/src/legal-pages/changes.json

@@ -1,4 +1,10 @@
 [
+  {
+    "version": "0.344.0",
+    "type": "improvement",
+    "title": "Optional title heading on legal pages",
+    "detail": "`LegalPageRoute` has an optional `titleHeading` flag. When `true`, the page body starts with an `<h1>` holding the escaped page title. The default (`false`) leaves the body unchanged."
+  },
   {
     "version": "0.335.0",
     "type": "fix",

package/src/renderer-simple/changes.json

@@ -1,4 +1,10 @@
 [
+  {
+    "version": "0.344.0",
+    "type": "improvement",
+    "title": "Heading and Markdown sections in the simple mail renderer",
+    "detail": "`createSimpleRenderer` accepts two more section kinds: `{ heading: string }` (rendered as an escaped `<h2>`) and `{ markdown: string }` (rendered with the hardened Markdown renderer; raw HTML is escaped and unsafe link targets are replaced by `#`). Existing section kinds render as before."
+  },
   {
     "version": "0.341.0",
     "type": "improvement",