@cosmicdrift/kumiko-bundled-features 0.346.0 → 0.347.0

package/dist/auth-email-password/handlers/signup-confirm.write.d.ts

@@ -1,4 +1,4 @@
-import { type SessionUser } from "@cosmicdrift/kumiko-framework/engine";
+import { type SessionUser, type TenantId } from "@cosmicdrift/kumiko-framework/engine";
 import * as z from "zod";
 import { type LoginHandlerOptions, type LoginResult } from "./login.write.js";
 export type SignupConfirmData = {
@@ -9,11 +9,23 @@ export type SignupConfirmData = {
         readonly entityType: string;
         readonly id: string;
     };
-} | Exclude<LoginResult, {
+} | (Exclude<LoginResult, {
     readonly kind: "auth-session";
-}>;
+}> & {
+    readonly signup: {
+        readonly roles: readonly string[];
+        readonly tenantId: TenantId;
+        readonly tenantKey: string;
+        readonly handover?: ClaimedHandover;
+    };
+});
 export type SignupConfirmOptions = Pick<LoginHandlerOptions, "mfaStatusChecker">;
+type ClaimedHandover = {
+    readonly entityType: string;
+    readonly id: string;
+};
 export declare function createSignupConfirmHandler(opts?: SignupConfirmOptions): import("@cosmicdrift/kumiko-types/define-handler").WriteHandlerDefinition<"signup-confirm", z.ZodObject<{
     token: z.ZodString;
     password: z.ZodString;
 }, z.core.$strip>, SignupConfirmData, import("@cosmicdrift/kumiko-types/event-type-map").KumikoEventTypeMap>;
+export {};

package/dist/auth-email-password/handlers/signup-confirm.write.js

@@ -168,7 +168,18 @@ export function createSignupConfirmHandler(opts = {}) {
                     await deleteSignupHandover(ctx.redis, event.payload.token);
                 if (mfaGate !== undefined) {
                     committed = true;
-                    return { isSuccess: true, data: mfaGate };
+                    return {
+                        isSuccess: true,
+                        data: {
+                            ...mfaGate,
+                            signup: {
+                                roles: session.roles,
+                                tenantId: provisioned.tenantId,
+                                tenantKey,
+                                ...(handover !== undefined && { handover }),
+                            },
+                        },
+                    };
                 }
                 committed = true;
                 return {

package/dist/auth-email-password/web/auth-client.d.ts

@@ -116,6 +116,7 @@ export type SignupConfirmResult = ({
     readonly kind: "signed-in";
 } & SignupConfirmSuccess) | {
     readonly kind: "mfa-pending";
+    readonly landingPath?: string;
 };
 export declare function confirmSignup(token: string, password: string): Promise<{
     ok: true;

package/dist/auth-email-password/web/auth-client.js

@@ -232,7 +232,13 @@ export async function confirmSignup(token, password) {
         // @cast-boundary engine-payload
         const body = (await res.json());
         if (body.mfaRequired === true || body.mfaSetupRequired === true) {
-            return { ok: true, data: { kind: "mfa-pending" } };
+            return {
+                ok: true,
+                data: {
+                    kind: "mfa-pending",
+                    ...(typeof body.landingPath === "string" && { landingPath: body.landingPath }),
+                },
+            };
         }
         return { ok: true, data: { kind: "signed-in", ...body } };
     }

package/dist/auth-email-password/web/signup-complete-screen.js

@@ -22,6 +22,7 @@ import { useState } from "react";
 import { confirmSignup } from "./auth-client.js";
 import { passwordPairIssue, resolvePostAuthHref } from "./auth-form-logic.js";
 import { AuthCard, useUrlToken } from "./auth-form-primitives.js";
+import { buildLoginRedirectUrl } from "./auth-redirect.js";
 export function SignupCompleteScreen({ title, token: tokenProp, loggedInHref = "/", loginHref = "/login", }) {
     const t = useTranslation();
     const { Form, Field, Input, Button, Banner, Link } = usePrimitives();
@@ -49,7 +50,9 @@ export function SignupCompleteScreen({ title, token: tokenProp, loggedInHref = "
         if (res.ok) {
             if (res.data.kind === "mfa-pending") {
                 setMfaPending(true);
-                setContinueHref(loginHref);
+                setContinueHref(res.data.landingPath === undefined
+                    ? loginHref
+                    : buildLoginRedirectUrl(loginHref, res.data.landingPath, window.location.origin));
                 return;
             }
             // Cookies are already set (auto-login). Show a confirmation with an

package/dist/personal-access-tokens/constants.d.ts

@@ -14,6 +14,7 @@ export declare const PatHandlers: {
 export declare const PatQueries: {
     readonly mine: "personal-access-tokens:query:mine";
     readonly availableScopes: "personal-access-tokens:query:available-scopes";
+    readonly availability: "personal-access-tokens:query:availability";
 };
 export declare const PAT_PREFIX_DISPLAY_LENGTH = 12;
 export type PatRateLimit = {

package/dist/personal-access-tokens/constants.js

@@ -26,6 +26,7 @@ export const PatHandlers = {
 export const PatQueries = {
     mine: "personal-access-tokens:query:mine",
     availableScopes: "personal-access-tokens:query:available-scopes",
+    availability: "personal-access-tokens:query:availability",
 };
 // Only the first chars of a minted token are stored (alongside the hash) so the
 // UI can show "kpat_ab12…" for recognition without ever holding the secret.

package/dist/personal-access-tokens/feature.d.ts

@@ -13,6 +13,10 @@ export type PersonalAccessTokensOptions = {
     readonly toggleable?: {
         readonly default: boolean;
     };
+    /** Screen (same-feature id or `<feature>:screen:<id>`, must not be gated itself)
+     *  shown in place of the token screens when the tenant's tier excludes the
+     *  feature, e.g. an upgrade notice. Default: the standard "unavailable" notice. */
+    readonly lockedFallbackScreen?: string;
     readonly mfaVerifier?: CreatePatOptions["mfaVerifier"];
     readonly autoRevokeOnPasswordChange?: (userId: string) => Promise<number>;
 };

package/dist/personal-access-tokens/feature.js

@@ -3,6 +3,7 @@ import { PAT_TOKEN_PREFIX } from "@cosmicdrift/kumiko-framework/api";
 import { deriveEntityTableMeta } from "@cosmicdrift/kumiko-framework/db";
 import { defineFeature } from "@cosmicdrift/kumiko-framework/engine";
 import { API_TOKEN_ENTITY_NAME, PAT_DEFAULT_RATE_LIMIT, PAT_FEATURE, } from "./constants.js";
+import { availabilityQuery } from "./handlers/availability.query.js";
 import { buildAvailableScopesQuery } from "./handlers/available-scopes.query.js";
 import { createPatCreateHandler } from "./handlers/create.write.js";
 import { listPatQuery } from "./handlers/list.query.js";
@@ -105,12 +106,14 @@ export function createPersonalAccessTokensFeature(options) {
         };
         const queries = {
             mine: r.queryHandler(listPatQuery),
+            availability: r.queryHandler(availabilityQuery),
             availableScopes: r.queryHandler(buildAvailableScopesQuery(scopes)),
         };
         // Declarative screens — list-with-revoke + mint-with-reveal. The app
         // places `patListScreen` via r.nav in its logged-in settings area.
-        r.screen(patListScreen);
-        r.screen(createPatMintScreen(scopes));
+        const lockedFallback = options.lockedFallbackScreen === undefined ? {} : { fallback: options.lockedFallbackScreen };
+        r.screen({ ...patListScreen, ...lockedFallback });
+        r.screen({ ...createPatMintScreen(scopes), ...lockedFallback });
         r.translations({ keys: { ...PAT_FEATURE_I18N, ...patScopeOptionTranslations(scopes) } });
         // rateLimit flows into feature.exports so run-prod-app builds the
         // limiter from the same declaration — single source of truth. `scopes`

package/dist/personal-access-tokens/handlers/availability.query.d.ts

@@ -0,0 +1,4 @@
+import * as z from "zod";
+export declare const availabilityQuery: import("@cosmicdrift/kumiko-types/define-handler").QueryHandlerDefinition<"availability", z.ZodObject<{}, z.core.$strip>, {
+    enabled: boolean;
+}, import("@cosmicdrift/kumiko-types/event-type-map").KumikoEventTypeMap>;

package/dist/personal-access-tokens/handlers/availability.query.js

@@ -0,0 +1,17 @@
+import { defineQueryHandler } from "@cosmicdrift/kumiko-framework/engine";
+import * as z from "zod";
+// Screen gate probe: the dispatcher's feature gate rejects every handler of a
+// toggleable feature the tenant's tier does not include, so this query only
+// answers for tenants that may use tokens — a rejection makes the screens'
+// visibleWhen fall back instead of rendering an unusable token list.
+export const availabilityQuery = defineQueryHandler({
+    name: "availability",
+    schema: z.object({}),
+    access: {
+        openToAll: {
+            reason: "constant answer that only exists to be gated by the feature toggle; it carries no user or tenant data",
+        },
+    },
+    description: "Reports that personal access tokens are available to the caller's tenant; fails with feature_disabled when the tenant's tier excludes them. The token screens use it to decide whether to render.",
+    handler: async () => ({ enabled: true }),
+});

package/dist/personal-access-tokens/screens.js

@@ -1,9 +1,17 @@
 import { i18nKey, MAX_LIST_LIMIT, } from "@cosmicdrift/kumiko-framework/engine";
 import { PAT_MINT_SCREEN_ID, PAT_SCREEN_ID, PatHandlers, PatQueries } from "./constants.js";
 const PAT_STATUS_OPTION_KEY_PREFIX = "pat.list.status.";
+// Both screens render only for tenants whose tier includes the feature; the
+// availability query is rejected by the feature gate otherwise.
+const PAT_SCREEN_VISIBLE_WHEN = {
+    query: PatQueries.availability,
+    field: "enabled",
+    eq: true,
+};
 export const patListScreen = {
     id: PAT_SCREEN_ID,
     type: "projectionList",
+    visibleWhen: PAT_SCREEN_VISIBLE_WHEN,
     query: PatQueries.mine,
     // The `mine` handler honours `limit` only (no offset/total), so a pager would
     // show page 1 forever: send one max-size request and render no pager.
@@ -76,6 +84,7 @@ export function createPatMintScreen(scopes) {
     return {
         id: PAT_MINT_SCREEN_ID,
         type: "secretMint",
+        visibleWhen: PAT_SCREEN_VISIBLE_WHEN,
         handler: PatHandlers.create,
         fields: {
             name: { type: "text", required: true, maxLength: 120 },

package/dist/step-dispatcher/webhook-runner.js

@@ -184,6 +184,8 @@ export async function performWebhookDispatch(spec, deps) {
             signal: AbortSignal.timeout(deps.requestTimeoutMs ?? WEBHOOK_REQUEST_TIMEOUT_MS),
             body: spec.body !== undefined ? JSON.stringify(spec.body) : undefined,
         });
+        // Only the status is used; an unread body would pin the socket until the timeout fires.
+        await res.body?.cancel().catch(() => { });
         if (!res.ok) {
             return { ok: false, error: `HTTP ${res.status}: ${res.statusText}` };
         }

package/dist/tier-engine/feature.js

@@ -200,6 +200,7 @@ export function createTierEngineFeature(opts = {}) {
                 ],
             },
             submitLabel: "tier-admin.submit",
+            successMessage: "tier-admin.success",
             cancelTarget: false,
             description: "tier-admin.screen.subtitle",
             access: { roles: ["SystemAdmin"] },

package/dist/tier-engine/i18n.js

@@ -18,5 +18,6 @@ export const TIER_ENGINE_I18N = {
     "tier-engine:entity:__action-form__:field:tenantId": { en: "Tenant" },
     "tier-engine:entity:__action-form__:field:tier": { en: "New tier" },
     "tier-admin.submit": { en: "Assign tier" },
+    "tier-admin.success": { en: "Tier assigned: {tenantId} → {tier}" },
 };
 export const defaultTranslations = translationsByLocaleFromKeys(TIER_ENGINE_I18N);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-bundled-features",
-  "version": "0.346.0",
+  "version": "0.347.0",
   "description": "Built-in features — tenant, user, auth, delivery. The stuff you'd rewrite anyway, already typed.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -503,12 +503,12 @@
     }
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-dispatcher-live": "0.346.0",
-    "@cosmicdrift/kumiko-framework": "0.346.0",
-    "@cosmicdrift/kumiko-headless": "0.346.0",
-    "@cosmicdrift/kumiko-renderer": "0.346.0",
-    "@cosmicdrift/kumiko-renderer-web": "0.346.0",
-    "@cosmicdrift/kumiko-types": "0.346.0",
+    "@cosmicdrift/kumiko-dispatcher-live": "0.347.0",
+    "@cosmicdrift/kumiko-framework": "0.347.0",
+    "@cosmicdrift/kumiko-headless": "0.347.0",
+    "@cosmicdrift/kumiko-renderer": "0.347.0",
+    "@cosmicdrift/kumiko-renderer-web": "0.347.0",
+    "@cosmicdrift/kumiko-types": "0.347.0",
     "@mollie/api-client": "^4.5.0",
     "@node-rs/argon2": "^2.0.2",
     "@types/mailparser": "^3.4.6",
@@ -1025,8 +1025,8 @@
   ],
   "devDependencies": {
     "@testing-library/user-event": "^14.6.1",
-    "@cosmicdrift/kumiko-locale-de": "0.346.0",
-    "@cosmicdrift/kumiko-locale-es": "0.346.0",
+    "@cosmicdrift/kumiko-locale-de": "0.347.0",
+    "@cosmicdrift/kumiko-locale-es": "0.347.0",
     "jsqr": "^1.4.0"
   }
 }

package/src/auth-email-password/changes.json

@@ -1,4 +1,10 @@
 [
+  {
+    "version": "0.347.0",
+    "type": "fix",
+    "title": "Signup-confirm under an MFA policy returns the signup landing path and the activation screen forwards it to login as next",
+    "detail": "Signup with an MFA requirement keeps its landing path\nWhen the MFA policy asks for a factor at self-registration, `/auth/signup-confirm` now also returns the `landingPath` that `auth.postAuthLanding` resolves for the signup flow (including a claimed handover). `SignupCompleteScreen` passes it to the login link as `?next=`, so the login that follows can land where a signup without MFA would have."
+  },
   {
     "version": "0.345.0",
     "type": "fix",

package/src/personal-access-tokens/changes.json

@@ -1,4 +1,10 @@
 [
+  {
+    "version": "0.347.0",
+    "type": "improvement",
+    "title": "API-token screens hide behind the tier gate and can fall back to an upgrade screen via lockedFallbackScreen",
+    "detail": "Token screens follow the tier gate of personal-access-tokens\nThe list and mint screens carry a `visibleWhen` on the new `personal-access-tokens:query:availability` probe. For a tenant whose tier excludes the feature (`toggleable`), the dispatcher already rejected every token handler with `feature_disabled`; now the screens also show the unavailable notice instead of an empty list with a broken Create button. A new option `lockedFallbackScreen` names a screen (for example an upgrade notice) to show in its place. Without `toggleable` nothing changes: the feature stays always on."
+  },
   {
     "version": "0.336.0",
     "type": "fix",

package/src/step-dispatcher/changes.json

@@ -1,4 +1,10 @@
 [
+  {
+    "version": "0.347.0",
+    "type": "fix",
+    "title": "Webhook dispatch cancels the unread response body so a stalling receiver cannot hold the connection",
+    "detail": "Webhook dispatch releases the connection right after the status\nThe step-dispatcher only needs the response status, so it now cancels the unread response body instead of leaving the socket open until the 10 s request timeout fires."
+  },
   {
     "version": "0.346.0",
     "type": "fix",