@cosmicdrift/kumiko-bundled-features 0.350.0 → 0.352.0

package/dist/delivery/feature.d.ts

@@ -1,5 +1,6 @@
 import { type FeatureDefinition } from "@cosmicdrift/kumiko-framework/engine";
 export type DeliveryFeatureOptions = {
     readonly access?: readonly string[];
+    readonly attemptLogRetentionDays?: number | false;
 };
 export declare function createDeliveryFeature(options?: DeliveryFeatureOptions): FeatureDefinition;

package/dist/delivery/feature.js

@@ -1,7 +1,9 @@
-import { upsertByPk } from "@cosmicdrift/kumiko-framework/bun-db";
+import { updateMany, upsertByPk } from "@cosmicdrift/kumiko-framework/bun-db";
 import { access, defineFeature, i18nKey, } from "@cosmicdrift/kumiko-framework/engine";
-import { DELIVERY_ATTEMPT_EVENT, DELIVERY_CHANNEL_CELL_COMPONENT, DELIVERY_CHANNEL_EXTENSION, DELIVERY_ERROR_CELL_COMPONENT, DELIVERY_LOG_SCREEN_ID, DELIVERY_STATUS_CELL_COMPONENT, DELIVERY_TIME_CELL_COMPONENT, DELIVERY_TYPE_CELL_COMPONENT, DeliveryJobNames, DeliveryQueries, } from "./constants.js";
-import { deliveryAttemptSchema } from "./events.js";
+import { ConsumerLagError } from "@cosmicdrift/kumiko-framework/pipeline";
+import { resolveAttemptLogRetentionDays, runAttemptLogRetention } from "./attempt-log-retention.js";
+import { DELIVERY_ATTEMPT_ADDRESS_ERASED_EVENT, DELIVERY_ATTEMPT_EVENT, DELIVERY_CHANNEL_CELL_COMPONENT, DELIVERY_CHANNEL_EXTENSION, DELIVERY_ERROR_CELL_COMPONENT, DELIVERY_LOG_SCREEN_ID, DELIVERY_STATUS_CELL_COMPONENT, DELIVERY_TIME_CELL_COMPONENT, DELIVERY_TYPE_CELL_COMPONENT, DeliveryJobNames, DeliveryQueries, } from "./constants.js";
+import { deliveryAttemptAddressErasedSchema, deliveryAttemptSchema } from "./events.js";
 import { logQuery } from "./handlers/log.query.js";
 import { preferencesQuery } from "./handlers/preferences.query.js";
 import { resubscribeAddressWrite } from "./handlers/resubscribe-address.write.js";
@@ -12,8 +14,10 @@ import { unsubscribeUserWrite } from "./handlers/unsubscribe-user.write.js";
 import { DELIVERY_I18N } from "./i18n.js";
 import { deliveryRenderJob, deliverySendJob } from "./jobs.js";
 import { deliveryAttemptsTable, deliveryAttemptsTableMeta, notificationAddressOptOutEntity, notificationAddressOptOutsTable, notificationPreferenceEntity, notificationPreferencesTable, } from "./tables.js";
+const ATTEMPT_LOG_RETENTION_ESCAPE_HATCH_REASON = "prunes delivery attempt events and log rows of every tenant";
 export function createDeliveryFeature(options) {
     const resolvedAccess = options?.access ?? access.admin;
+    const attemptLogRetentionDays = resolveAttemptLogRetentionDays(options?.attemptLogRetentionDays);
     return defineFeature("delivery", (r) => {
         r.describe("The notification dispatch core: call `ctx.notify(notificationType, { to, route, data, priority, idempotencyKey })` from any handler to fan out a notification across all registered channels (email, in-app, push). It stores per-user channel preferences in the `notification-preference` entity, opt-outs for no-account recipient addresses in `notification-address-opt-out` (keyed by a blind-index hash, never the plaintext address), logs every attempt to `store_delivery_attempts`, and enforces idempotency and rate-limiting \u2014 add `channel-email`, `channel-in-app`, or `channel-push` on top to actually send anything. Unsubscribe/resubscribe links are served by `createUnsubscribeRoutes({ secret })` mounted via the app's `extraRoutes` at `/api/delivery/unsubscribe` and `/api/delivery/resubscribe`: `GET /unsubscribe?token=` renders a confirmation page (no write), `POST /unsubscribe` performs the opt-out (RFC 8058 one-click, token from the form body or query), `POST /resubscribe` undoes it (JSON `{token}` or form body only, never the query — reachable by a mail-client link prefetcher) — sign links with `signUnsubscribeToken` / `signAddressUnsubscribeToken` using the same secret. `channel-email` sets `List-Unsubscribe` / `List-Unsubscribe-Post` automatically when a message's `data.unsubscribeUrl` points at the unsubscribe route.");
         r.uiHints({
@@ -54,6 +58,11 @@ export function createDeliveryFeature(options) {
                 recipientAddress: { personal: { of: "recipientId", whenAbsent: "tenant" } },
             },
         });
+        // Written when the recipient is forgotten: clears the address on the projection row and, being
+        // an event, survives a projection rebuild (a plain UPDATE would be undone by the replay).
+        r.defineEvent("attempt-address-erased", deliveryAttemptAddressErasedSchema, {
+            piiFields: "none",
+        });
         // Inline projection that materialises every delivery attempt into
         // deliveryAttemptsTable. Runs in the SAME transaction as the low-level
         // append(), so callers see their write immediately — no dispatcher
@@ -89,6 +98,9 @@ export function createDeliveryFeature(options) {
                         confirmed: p.confirmed ?? null,
                     });
                 },
+                [DELIVERY_ATTEMPT_ADDRESS_ERASED_EVENT]: async (event, tx) => {
+                    await updateMany(tx, deliveryAttemptsTable, { recipientAddress: null }, { id: event.aggregateId });
+                },
             },
         });
         // Extension point: delivery-channels (email/in-app/push). Renderer-
@@ -106,6 +118,30 @@ export function createDeliveryFeature(options) {
         // from the delivery-service, hence manual trigger.
         r.job(DeliveryJobNames.render, { trigger: { manual: true }, retries: 3, backoff: "exponential" }, deliveryRenderJob);
         r.job(DeliveryJobNames.send, { trigger: { manual: true }, retries: 3, backoff: "exponential" }, deliverySendJob);
+        if (attemptLogRetentionDays !== undefined) {
+            r.job({
+                name: DeliveryJobNames.attemptLogRetention,
+                trigger: { cron: "15 3 * * *" },
+                concurrency: "skip",
+                escapeHatch: { reason: ATTEMPT_LOG_RETENTION_ESCAPE_HATCH_REASON },
+                handler: async (_payload, ctx) => {
+                    const db = ctx.db.unsafeRaw(); // @cast-boundary db-operator — jobs never run inside a DbTx
+                    try {
+                        const pruned = await runAttemptLogRetention(db, {
+                            olderThanDays: attemptLogRetentionDays,
+                        });
+                        ctx.log.info("delivery attempt log pruned", pruned);
+                    }
+                    catch (error) {
+                        if (!(error instanceof ConsumerLagError))
+                            throw error;
+                        ctx.log.warn("delivery attempt log retention postponed: an event consumer lags", {
+                            consumer: error.laggingConsumer,
+                        });
+                    }
+                },
+            });
+        }
         const handlers = {
             setPreference: r.writeHandler(setPreferenceWrite),
             unsubscribeAddress: r.writeHandler(unsubscribeAddressWrite),

package/dist/delivery/handlers/log.query.d.ts

@@ -1,5 +1,4 @@
 import { type DeliveryErrorCode, type NotifyPriority } from "@cosmicdrift/kumiko-framework/engine";
-import { Temporal } from "temporal-polyfill";
 import * as z from "zod";
 import type { DeliveryStatusValue } from "../constants.js";
 export declare const logQuery: import("@cosmicdrift/kumiko-framework/engine").PagedQueryHandlerDefinition<"log", z.ZodObject<{
@@ -22,5 +21,5 @@ export declare const logQuery: import("@cosmicdrift/kumiko-framework/engine").Pa
     error: DeliveryErrorCode | null;
     priority: NotifyPriority;
     confirmed: boolean | null;
-    createdAt: Temporal.Instant;
+    createdAt: globalThis.Temporal.Instant;
 }, import("@cosmicdrift/kumiko-types/event-type-map").KumikoEventTypeMap>;

package/dist/delivery/handlers/log.query.js

@@ -2,7 +2,7 @@ import { selectMany } from "@cosmicdrift/kumiko-framework/bun-db";
 import { decodeKeysetCursor, encodeKeysetCursor, } from "@cosmicdrift/kumiko-framework/db";
 import { access, definePagedQueryHandler, isDeliveryErrorCode, isUuid, MAX_LIST_LIMIT, SYSTEM_USER_ID, } from "@cosmicdrift/kumiko-framework/engine";
 import { InternalError } from "@cosmicdrift/kumiko-framework/errors";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import * as z from "zod";
 import { decryptStoredPii } from "../../shared/index.js";
 import { resolveUserDisplayNames, USER_FEATURE } from "../../user/index.js";

package/dist/delivery/index.d.ts

@@ -1,8 +1,9 @@
 export { hashUnsubscribeAddress } from "./address-opt-out.js";
+export { type AttemptLogRetentionOptions, DEFAULT_ATTEMPT_LOG_RETENTION_DAYS, runAttemptLogRetention, } from "./attempt-log-retention.js";
 export { type ChatWebhookChannelOptions, chatMessageText, createChatWebhookChannel, resolveChatWebhookTarget, toChannelResult, } from "./chat-webhook-channel.js";
 export { type ChatSendFailureCode, type ChatSendResult, type ChatWebhookRequest, type ChatWebhookResponse, type ChatWebhookTarget, chatConnectionNameSchema, chatWebhookUrlSchema, checkChatWebhookTarget, DEFAULT_CHAT_TIMEOUT_MS, postChatWebhook, truncateChars, } from "./chat-webhook-sender.js";
 export type { DeliveryStatusValue } from "./constants.js";
-export { DELIVERY_CHANNEL_EXTENSION, DELIVERY_FEATURE, DELIVERY_LOG_SCREEN_ID, DELIVERY_UNSUBSCRIBE_PATH, DeliveryErrors, DeliveryHandlers, DeliveryJobs, DeliveryQueries, DeliveryStatus, } from "./constants.js";
+export { DELIVERY_ATTEMPT_ADDRESS_ERASED_EVENT, DELIVERY_CHANNEL_EXTENSION, DELIVERY_FEATURE, DELIVERY_LOG_SCREEN_ID, DELIVERY_UNSUBSCRIBE_PATH, DeliveryErrors, DeliveryHandlers, DeliveryJobs, DeliveryQueries, DeliveryStatus, } from "./constants.js";
 export { collectChannels, createDeliveryService, type DeliveryServiceOptions, type KillSwitchResolver, type RateLimitConfig, } from "./delivery-service.js";
 export { createDeliveryFeature, type DeliveryFeatureOptions } from "./feature.js";
 export { createDeliveryNotifyFactory } from "./notify-factory.js";

package/dist/delivery/index.js

@@ -1,7 +1,8 @@
 export { hashUnsubscribeAddress } from "./address-opt-out.js";
+export { DEFAULT_ATTEMPT_LOG_RETENTION_DAYS, runAttemptLogRetention, } from "./attempt-log-retention.js";
 export { chatMessageText, createChatWebhookChannel, resolveChatWebhookTarget, toChannelResult, } from "./chat-webhook-channel.js";
 export { chatConnectionNameSchema, chatWebhookUrlSchema, checkChatWebhookTarget, DEFAULT_CHAT_TIMEOUT_MS, postChatWebhook, truncateChars, } from "./chat-webhook-sender.js";
-export { DELIVERY_CHANNEL_EXTENSION, DELIVERY_FEATURE, DELIVERY_LOG_SCREEN_ID, DELIVERY_UNSUBSCRIBE_PATH, DeliveryErrors, DeliveryHandlers, DeliveryJobs, DeliveryQueries, DeliveryStatus, } from "./constants.js";
+export { DELIVERY_ATTEMPT_ADDRESS_ERASED_EVENT, DELIVERY_CHANNEL_EXTENSION, DELIVERY_FEATURE, DELIVERY_LOG_SCREEN_ID, DELIVERY_UNSUBSCRIBE_PATH, DeliveryErrors, DeliveryHandlers, DeliveryJobs, DeliveryQueries, DeliveryStatus, } from "./constants.js";
 export { collectChannels, createDeliveryService, } from "./delivery-service.js";
 export { createDeliveryFeature } from "./feature.js";
 export { createDeliveryNotifyFactory } from "./notify-factory.js";

package/dist/delivery/mask-recipient-address.d.ts

@@ -0,0 +1 @@
+export declare function maskRecipientAddress(address: string | null): string | null;

package/dist/delivery/mask-recipient-address.js

@@ -0,0 +1,41 @@
+import { isPiiCiphertext } from "@cosmicdrift/kumiko-framework/crypto";
+const MASK = "***";
+const VISIBLE_TAIL_LENGTH = 4;
+const MIN_LENGTH_FOR_VISIBLE_TAIL = 8;
+function maskedUrl(address) {
+    if (!URL.canParse(address))
+        return undefined;
+    const url = new URL(address);
+    if (url.protocol !== "http:" && url.protocol !== "https:")
+        return undefined;
+    return `${url.origin}/${MASK}`;
+}
+function maskedEmail(address) {
+    const parts = address.split("@");
+    const [local, domain] = parts;
+    if (parts.length !== 2 || !local || domain === undefined)
+        return undefined;
+    return `${local.charAt(0)}${MASK}@${domain}`;
+}
+// The attempt log is an audit trail, not a contact list: it keeps enough of the address to
+// recognise where a message went, never the full value. URLs go first because webhook URLs can
+// contain an "@" and their path carries the secret.
+export function maskRecipientAddress(address) {
+    if (address === null)
+        return null;
+    return maskPlainAddress(address);
+}
+function maskPlainAddress(address) {
+    // isPiiCiphertext is a type predicate; its false branch would narrow `string` to `never`.
+    if (isPiiCiphertext(address))
+        return MASK;
+    return maskStructuredOrTail(address);
+}
+function maskStructuredOrTail(address) {
+    const structured = maskedUrl(address) ?? maskedEmail(address);
+    if (structured !== undefined)
+        return structured;
+    if (address.length < MIN_LENGTH_FOR_VISIBLE_TAIL)
+        return MASK;
+    return `${MASK}${address.slice(-VISIBLE_TAIL_LENGTH)}`;
+}

package/dist/delivery/public-names.d.ts

@@ -34,4 +34,6 @@ export declare const DELIVERY_ATTEMPT_EVENT: "delivery:event:attempt";
 export declare const DeliveryJobNames: {
     readonly render: "render";
     readonly send: "send";
+    readonly attemptLogRetention: "attempt-log-retention";
 };
+export declare const DELIVERY_ATTEMPT_ADDRESS_ERASED_EVENT: "delivery:event:attempt-address-erased";

package/dist/delivery/public-names.js

@@ -48,4 +48,7 @@ export const DELIVERY_ATTEMPT_EVENT = "delivery:event:attempt";
 export const DeliveryJobNames = {
     render: "render",
     send: "send",
+    attemptLogRetention: "attempt-log-retention",
 };
+// Clears recipientAddress on an attempt row after its recipient was forgotten.
+export const DELIVERY_ATTEMPT_ADDRESS_ERASED_EVENT = "delivery:event:attempt-address-erased";

package/dist/delivery/types.d.ts

@@ -34,6 +34,7 @@ export type DeliveryChannel = {
     readonly name: string;
     readonly mode: DeliveryChannelMode;
     resolve?(userId: string, ctx: ChannelContext): Promise<string | null>;
+    readonly addressKind?: "connection-name";
     render?(message: ChannelMessage, ctx: ChannelContext): Promise<RenderedMessage>;
     send(address: string, message: ChannelMessage, ctx: ChannelContext, rendered?: RenderedMessage): Promise<ChannelResult>;
 };

package/dist/delivery/types.js

@@ -4,13 +4,17 @@ import { DELIVERY_CHANNEL_EXTENSION } from "./constants.js";
 //   queued — sent asynchronously via the delivery.send job; channels with a
 //            render() additionally run through delivery.render first.
 export const DELIVERY_CHANNEL_MODES = ["inline", "queued"];
+function hasOptionalHooks(o) {
+    return ((!("render" in o) || o.render === undefined || typeof o.render === "function") &&
+        (!("resolve" in o) || o.resolve === undefined || typeof o.resolve === "function") &&
+        (!("addressKind" in o) || o.addressKind === undefined || o.addressKind === "connection-name"));
+}
 export function isDeliveryChannelPlugin(o) {
     return (typeof o === "object" &&
         o !== null &&
         "mode" in o &&
         DELIVERY_CHANNEL_MODES.some((mode) => mode === o.mode) &&
-        (!("render" in o) || o.render === undefined || typeof o.render === "function") &&
-        (!("resolve" in o) || o.resolve === undefined || typeof o.resolve === "function") &&
+        hasOptionalHooks(o) &&
         "send" in o &&
         typeof o.send === "function");
 }

package/dist/feature-toggles/handlers/set.write.js

@@ -1,7 +1,7 @@
 import { insertOne, selectMany } from "@cosmicdrift/kumiko-framework/bun-db";
 import { defineWriteHandler, SYSTEM_TENANT_ID } from "@cosmicdrift/kumiko-framework/engine";
 import { UnprocessableError, VersionConflictError, writeFailure, } from "@cosmicdrift/kumiko-framework/errors";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import * as z from "zod";
 import { FEATURE_TOGGLE_AGGREGATE_TYPE, FEATURE_TOGGLE_CROSS_TENANT_REASON, FEATURE_TOGGLE_SET_EVENT_NAME, FeatureToggleErrors, } from "../constants.js";
 import { globalFeatureStateTable } from "../global-feature-state-table.js";

package/dist/form-draft/db/queries/cleanup.d.ts

@@ -1,6 +1,6 @@
 import type { DbConnection } from "@cosmicdrift/kumiko-framework/db";
 import type { TenantId } from "@cosmicdrift/kumiko-framework/engine";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import type { FormDraftBlob } from "../../schemas.js";
 export type StaleDraftRow = {
     readonly id: string;

package/dist/form-draft/db/queries/cleanup.js

@@ -1,5 +1,5 @@
 import { unsafeReadRetrying } from "@cosmicdrift/kumiko-framework/bun-db";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 // COALESCE(modified_at, inserted_at) — a draft's "last touched" timestamp is
 // modified_at once the upsert path (save.write.ts) has updated it at least
 // once; a draft saved exactly once (create, never updated) has no

package/dist/form-draft/db/queries/owned-file-refs.d.ts

@@ -1,6 +1,6 @@
 import type { DbRunner } from "@cosmicdrift/kumiko-framework/db";
 import type { TenantId } from "@cosmicdrift/kumiko-framework/engine";
-import type { Temporal } from "temporal-polyfill";
+import type { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 export declare function filterOwnedStorageKeys(db: DbRunner, tenantId: TenantId, ownerId: string, candidateKeys: readonly string[], draftInsertedAt: Temporal.Instant, isCreateMode: boolean): Promise<readonly string[]>;
 export type OwnedFileRef = {
     readonly id: string;

package/dist/form-draft/lookup.d.ts

@@ -1,6 +1,6 @@
 import type { TenantDb } from "@cosmicdrift/kumiko-framework/db";
 import type { TenantId } from "@cosmicdrift/kumiko-framework/engine";
-import type { Temporal } from "temporal-polyfill";
+import type { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import type { FormDraftBlob } from "./schemas.js";
 export type FormDraftRow = {
     readonly id: string;

package/dist/inbound-mail-foundation/handlers/ingest-message.write.js

@@ -23,7 +23,7 @@ import { countWhere } from "@cosmicdrift/kumiko-framework/bun-db";
 import { configuredPiiSubjectKms, encryptPiiFieldValues, } from "@cosmicdrift/kumiko-framework/crypto";
 import { acquireNamespacedAdvisoryLock } from "@cosmicdrift/kumiko-framework/db";
 import { InternalError } from "@cosmicdrift/kumiko-framework/errors";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import * as z from "zod";
 import { inboundMessageAggregateId, mailThreadAggregateId } from "../aggregate-id.js";
 import { INBOUND_MESSAGE_PII_FIELDS, inboundMessageEntity, MAIL_THREAD_PII_FIELDS, mailThreadEntity, seenMessageTable, } from "../entities.js";

package/dist/inbound-mail-foundation/oauth-access-token.d.ts

@@ -1,6 +1,6 @@
 import { type DbConnection } from "@cosmicdrift/kumiko-framework/db";
 import type { SecretsContext } from "@cosmicdrift/kumiko-framework/secrets";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import { type InboundMailContext, type InboundMailProviderPlugin, type MailAccountRecord, type OAuthTokenSet } from "./types.js";
 /** Shared by the OAuth callback and the refresh path so both write the slot identically. */
 export declare function inboundRefreshTokenSecretOptions(accountId: string): {

package/dist/inbound-mail-foundation/oauth-access-token.js

@@ -17,7 +17,7 @@
 // so the read always reflects the latest committed write.
 import { transaction } from "@cosmicdrift/kumiko-framework/bun-db";
 import { acquireNamespacedAdvisoryLock } from "@cosmicdrift/kumiko-framework/db";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import { InboundMailAuthMethods, inboundCredentialSecretKey } from "./constants.js";
 import { InboundAuthError, } from "./types.js";
 // 'inoa' as ASCII — disjoint from the other fixed advisory-lock namespaces.

package/dist/inbound-mail-foundation/oauth-state.d.ts

@@ -1,4 +1,4 @@
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 export type OAuthStatePayload = {
     readonly tenantId: string;
     /** null = shared-Postfach, sonst persönliches Postfach dieses Users. */

package/dist/inbound-mail-foundation/oauth-state.js

@@ -10,7 +10,7 @@
 // Muster: auth-email-password/signed-token.ts (HMAC-SHA256, purpose im
 // HMAC-Input, timing-safe compare, Expiry im Klartext-Segment).
 import { createHmac, randomUUID, timingSafeEqual } from "node:crypto";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 const STATE_PURPOSE = "inbound-mail-oauth-connect";
 function sign(input, secret) {
     return createHmac("sha256", secret).update(input).digest("base64url");

package/dist/inbound-mail-foundation/watch-supervisor.js

@@ -45,7 +45,7 @@
 // exceeded) tears down the local watcher instead of racing a new holder.
 import { fetchOne, insertOne, selectMany, updateMany } from "@cosmicdrift/kumiko-framework/bun-db";
 import { configuredPiiSubjectKms, decryptPiiFieldValues, } from "@cosmicdrift/kumiko-framework/crypto";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import { InboundMailAccountStatuses, InboundMailFoundationHandlers } from "./constants.js";
 import { MAIL_ACCOUNT_PII_FIELDS, syncCursorTable } from "./entities.js";
 import { createOAuthAccessTokenManager, usesFoundationManagedOAuth, } from "./oauth-access-token.js";

package/dist/inbound-provider-imap/feature.js

@@ -26,7 +26,7 @@ import { INBOUND_MAIL_PROVIDER_EXTENSION, InboundAuthError, inboundCredentialSec
 import { requireSecretsContext } from "@cosmicdrift/kumiko-bundled-features/secrets";
 import { defineFeature } from "@cosmicdrift/kumiko-framework/engine";
 import { instantToLegacyDate } from "@cosmicdrift/kumiko-framework/time";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import { parseImapCredentialDocument } from "./credential-document.js";
 import { assertUidValidity, coerceDate, createImapClient, IMAP_MAILBOX, imapMailHostGuard, mapImapError, parseImapCursor, toRawInboundMessage, } from "./imap-client.js";
 const FEATURE_NAME = "inbound-provider-imap";

package/dist/inbound-provider-imap/imap-client.js

@@ -5,9 +5,9 @@ import { BlockedHostError, readAllowedPrivateMailHostsFromEnv, resolveMailConnec
 import { InboundAuthError, InboundCursorInvalidError, InboundTransientError, } from "@cosmicdrift/kumiko-bundled-features/inbound-mail-foundation";
 import { createFallbackLogger } from "@cosmicdrift/kumiko-framework/logging";
 import { legacyDateToInstant } from "@cosmicdrift/kumiko-framework/time";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import { ImapFlow } from "imapflow";
 import { simpleParser } from "mailparser";
-import { Temporal } from "temporal-polyfill";
 export const IMAP_MAILBOX = "INBOX";
 const SNIPPET_MAX = 300;
 const log = createFallbackLogger("inbound-provider-imap");

package/dist/jobs/job-instant.d.ts

@@ -1,2 +1,2 @@
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 export declare function parseJobInstant(iso: string): Temporal.Instant;

package/dist/jobs/job-instant.js

@@ -1,4 +1,4 @@
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 // kumiko-framework#1525: the five value-position Temporal.Instant.from
 // call sites in feature.ts live inside defineApply callbacks with no
 // exported seam, so this thin wrapper gives the ambient-global-independence

package/dist/ledger/entity.d.ts

@@ -40,6 +40,7 @@ export declare const accountEntity: import("@cosmicdrift/kumiko-types/fields").E
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
+        readonly optionsAvailabilityQuery?: string;
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: true;
     };
@@ -160,6 +161,7 @@ export declare const transactionEntity: import("@cosmicdrift/kumiko-types/fields
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
+        readonly optionsAvailabilityQuery?: string;
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: true;
     };
@@ -288,6 +290,7 @@ export declare const scheduleEntity: import("@cosmicdrift/kumiko-types/fields").
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
+        readonly optionsAvailabilityQuery?: string;
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: true;
     };

package/dist/metrics/compute.d.ts

@@ -1,6 +1,6 @@
 import type { WhereObject } from "@cosmicdrift/kumiko-framework/bun-db";
+import type { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import type { TenantDb } from "@cosmicdrift/kumiko-types/tenant-db-types";
-import type { Temporal } from "temporal-polyfill";
 import { type MetricRange } from "./constants.js";
 import type { MetricDefinition, MetricResult } from "./types.js";
 export type MetricRunParams = {

package/dist/metrics/feature.js

@@ -1,6 +1,6 @@
 import { access, defineFeature, defineQueryHandler, } from "@cosmicdrift/kumiko-framework/engine";
 import { InternalError, ValidationError } from "@cosmicdrift/kumiko-framework/errors";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import * as z from "zod";
 import { runMetric } from "./compute.js";
 import { METRIC_RANGES, METRICS_FEATURE, METRICS_SYSTEM_FEATURE, } from "./constants.js";

package/dist/metrics/types.d.ts

@@ -2,8 +2,8 @@ import type { EntityTableMeta } from "@cosmicdrift/kumiko-framework/db";
 import type { HandlerContext } from "@cosmicdrift/kumiko-framework/engine";
 import type { AggregateMeasure, AggregateTimeBucket } from "@cosmicdrift/kumiko-types/aggregate-types";
 import type { SchemaTable } from "@cosmicdrift/kumiko-types/schema-table-types";
+import type { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import type { WhereObject } from "@cosmicdrift/kumiko-types/where-clause-types";
-import type { Temporal } from "temporal-polyfill";
 import type { MetricRange, MetricScope } from "./constants.js";
 /** Maps a payload value (e.g. a folder id) to the values `column` may have (e.g. the folder and its subfolders' loan ids). Runs with the tenant handler context, so reads stay tenant-scoped; the result only narrows. An empty result yields no rows. */
 export type MetricFilterResolver = {

package/dist/metrics/window.d.ts

@@ -1,5 +1,5 @@
 import type { AggregateTimeBucket } from "@cosmicdrift/kumiko-types/aggregate-types";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import type { MetricRange } from "./constants.js";
 import type { MetricDefinition } from "./types.js";
 export type MetricWindow = {

package/dist/metrics/window.js

@@ -1,4 +1,4 @@
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 const RANGE_HOURS = {
     "24h": 24,
     "7d": 7 * 24,

package/dist/personal-access-tokens/expiry.js

@@ -1,4 +1,4 @@
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 export function isExpiredAt(expiresAt) {
     return (expiresAt !== null && expiresAt.epochMilliseconds <= Temporal.Now.instant().epochMilliseconds);
 }

package/dist/personal-access-tokens/handlers/create.write.js

@@ -2,7 +2,7 @@ import { insertOne } from "@cosmicdrift/kumiko-framework/bun-db";
 import { createSystemUser, defineWriteHandler, } from "@cosmicdrift/kumiko-framework/engine";
 import { UnprocessableError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
 import { generateId } from "@cosmicdrift/kumiko-framework/utils";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import * as z from "zod";
 import { encryptForDirectWrite, verifyPassword } from "../../shared/index.js";
 import { UserQueries } from "../../user/index.js";

package/dist/personal-access-tokens/handlers/revoke.write.js

@@ -2,7 +2,7 @@ import { updateMany } from "@cosmicdrift/kumiko-framework/bun-db";
 import { defineWriteHandler } from "@cosmicdrift/kumiko-framework/engine";
 import { UnprocessableError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
 import { generateId } from "@cosmicdrift/kumiko-framework/utils";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import * as z from "zod";
 import { API_TOKEN_ENTITY_NAME, PatErrors } from "../constants.js";
 import { PAT_REVOKED_AGGREGATE_TYPE, PAT_REVOKED_EVENT_QN } from "../pat-revoked-event.js";

package/dist/personal-access-tokens/revoke-for-user.js

@@ -2,7 +2,7 @@ import { transaction, updateMany } from "@cosmicdrift/kumiko-framework/bun-db";
 import { SYSTEM_TENANT_ID } from "@cosmicdrift/kumiko-framework/engine";
 import { append } from "@cosmicdrift/kumiko-framework/event-store";
 import { generateId } from "@cosmicdrift/kumiko-framework/utils";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import { PAT_REVOKED_AGGREGATE_TYPE, PAT_REVOKED_EVENT_QN, patRevokedSchema, } from "./pat-revoked-event.js";
 import { apiTokenTable } from "./schema/api-token.js";
 // A pool has begin(); a tx/savepoint handle does not and is already atomic.

package/dist/renderer-foundation/types.d.ts

@@ -19,6 +19,7 @@ export type RenderRequest = {
 export type RenderResponse = {
     kind: "notification";
     html: string;
+    text?: string;
 } | {
     kind: "mail-html";
     html: string;

package/dist/renderer-simple/feature.js

@@ -16,12 +16,10 @@ export async function adaptToFoundation(req, ctx, renderer = simpleRenderer) {
         throw new RendererError(`renderer-simple supports only kind="notification", got "${req.kind}"`, "invalid_payload");
     }
     const variables = await resolveNotificationVariables(req, ctx);
-    const html = await renderer.render({
-        template: req.payload.template ?? "",
-        variables,
-        locale: req.payload.locale,
-    });
-    return { kind: "notification", html };
+    const input = { template: req.payload.template ?? "", variables, locale: req.payload.locale };
+    const html = await renderer.render(input);
+    const text = renderer.renderText ? await renderer.renderText(input) : undefined;
+    return text === undefined ? { kind: "notification", html } : { kind: "notification", html, text };
 }
 export function createRendererSimpleFeature(options) {
     const renderer = options?.mailBranding

package/dist/renderer-simple/index.d.ts

@@ -1,2 +1,3 @@
 export { createRendererSimpleFeature, type RendererSimpleOptions } from "./feature.js";
+export type { MailBadge, MailChip, MailStage, MailStageState, MailTone } from "./mail-blocks.js";
 export { createSimpleRenderer, type LocalizedText, type MailBranding, simpleRenderer, } from "./simple-renderer.js";

package/dist/renderer-simple/mail-blocks.d.ts

@@ -0,0 +1,21 @@
+export type MailTone = "neutral" | "info" | "success" | "warning" | "danger";
+export type MailStageState = "done" | "current" | "upcoming";
+export type MailBadge = {
+    readonly label: string;
+    readonly tone?: MailTone;
+};
+export type MailStage = {
+    readonly label: string;
+    readonly state: MailStageState;
+};
+export type MailChip = {
+    readonly label: string;
+    readonly tone?: MailTone;
+};
+export declare function parseBadge(value: unknown): MailBadge | undefined;
+export declare function renderBadge(badge: MailBadge): string;
+export declare function renderChips(chips: unknown): string;
+export declare function renderStages(stages: unknown, primaryColor: string): string;
+export declare function badgeText(badge: MailBadge): string;
+export declare function stagesText(stages: unknown): string;
+export declare function chipsText(chips: unknown): string;