@cosmicdrift/kumiko-bundled-features 0.351.0 → 0.352.0

package/dist/renderer-simple/mail-blocks.js

@@ -0,0 +1,107 @@
+import { escapeHtml, escapeHtmlAttr } from "@cosmicdrift/kumiko-headless";
+// Literal types (as const) keep the colors compile-time known, so they can go into style
+// attributes without escaping.
+const TONE_COLORS = {
+    neutral: { bg: "#f3f4f6", fg: "#374151" },
+    info: { bg: "#dbeafe", fg: "#1e40af" },
+    success: { bg: "#dcfce7", fg: "#166534" },
+    warning: { bg: "#fef3c7", fg: "#92400e" },
+    danger: { bg: "#fee2e2", fg: "#991b1b" },
+};
+const STAGE_STATES = ["done", "current", "upcoming"];
+const STAGE_DONE_COLOR = "#16a34a";
+const STAGE_UPCOMING_BG = "#e5e7eb";
+const STAGE_UPCOMING_FG = "#9ca3af";
+function isRecord(value) {
+    return typeof value === "object" && value !== null;
+}
+function isMailTone(value) {
+    return typeof value === "string" && Object.hasOwn(TONE_COLORS, value);
+}
+function toneColors(tone) {
+    return TONE_COLORS[isMailTone(tone) ? tone : "neutral"];
+}
+function isStageState(value) {
+    return STAGE_STATES.some((state) => state === value);
+}
+// Template data is runtime data (variables of a stored template): entries that do not match are
+// skipped instead of failing the whole mail.
+function isStage(value) {
+    return isRecord(value) && typeof value["label"] === "string" && isStageState(value["state"]);
+}
+function isChip(value) {
+    return isRecord(value) && typeof value["label"] === "string";
+}
+export function parseBadge(value) {
+    return isChip(value) && value.label !== "" ? value : undefined;
+}
+function validStages(value) {
+    return Array.isArray(value) ? value.filter(isStage) : [];
+}
+function validChips(value) {
+    return Array.isArray(value) ? value.filter(isChip) : [];
+}
+function pill(chip, margin) {
+    const { bg, fg } = toneColors(chip.tone);
+    return `<span style="display:inline-block;margin:${margin};padding:2px 10px;border-radius:999px;background:${bg};color:${fg};font-size:12px;font-weight:600;line-height:18px">${escapeHtml(chip.label)}</span>`;
+}
+export function renderBadge(badge) {
+    return `<p style="margin:0 0 12px">${pill(badge, "0")}</p>`;
+}
+export function renderChips(chips) {
+    const valid = validChips(chips);
+    if (valid.length === 0)
+        return "";
+    return `<p style="margin:0 0 16px">${valid.map((chip) => pill(chip, "0 6px 6px 0")).join("")}</p>`;
+}
+function stageMarker(stage, position, primaryColor) {
+    const base = "display:inline-block;width:24px;height:24px;line-height:24px;border-radius:12px;text-align:center;font-size:12px;font-weight:700";
+    const primary = escapeHtmlAttr(primaryColor);
+    if (stage.state === "done") {
+        return `<span style="${base};background:${STAGE_DONE_COLOR};color:#fff">&#10003;</span>`;
+    }
+    if (stage.state === "current") {
+        return `<span style="${base};background:#fff;border:2px solid ${primary};line-height:20px;width:20px;height:20px;color:${primary}">${position}</span>`;
+    }
+    return `<span style="${base};background:${STAGE_UPCOMING_BG};color:${STAGE_UPCOMING_FG}">${position}</span>`;
+}
+function stageCell(stage, position, primaryColor) {
+    const labelColor = stage.state === "upcoming" ? STAGE_UPCOMING_FG : "#111";
+    const weight = stage.state === "current" ? 700 : 400;
+    return `<td align="center" valign="top" style="padding:0 4px;font-family:sans-serif">${stageMarker(stage, position, primaryColor)}<div style="margin:4px 0 0;font-size:12px;font-weight:${weight};color:${labelColor}">${escapeHtml(stage.label)}</div></td>`;
+}
+function stageConnector(previous) {
+    const color = previous.state === "done" ? STAGE_DONE_COLOR : STAGE_UPCOMING_BG;
+    return `<td valign="top" style="padding:11px 0 0"><div style="width:24px;height:2px;line-height:2px;font-size:2px;background:${color}">&nbsp;</div></td>`;
+}
+export function renderStages(stages, primaryColor) {
+    const valid = validStages(stages);
+    if (valid.length === 0)
+        return "";
+    const cellsHtml = valid
+        .map((stage, index) => {
+        const previous = valid[index - 1];
+        const connector = previous ? stageConnector(previous) : "";
+        return `${connector}${stageCell(stage, index + 1, primaryColor)}`;
+    })
+        .join("");
+    return `<table role="presentation" cellpadding="0" cellspacing="0" border="0" style="margin:0 0 16px"><tr>${cellsHtml}</tr></table>`;
+}
+const STAGE_TEXT_MARKER = {
+    done: "✓",
+    current: "▶",
+    upcoming: "○",
+};
+export function badgeText(badge) {
+    return `[${badge.label}]`;
+}
+export function stagesText(stages) {
+    return validStages(stages)
+        .map((stage) => `${STAGE_TEXT_MARKER[stage.state]} ${stage.label}`)
+        .join(" → ");
+}
+export function chipsText(chips) {
+    return validChips(chips)
+        .map((chip) => chip.label)
+        .join(" · ");
+}

package/dist/renderer-simple/simple-renderer.js

@@ -1,5 +1,6 @@
 import { escapeHtml, escapeHtmlAttr } from "@cosmicdrift/kumiko-headless";
 import { renderSafeMarkdown } from "../page-render/index.js";
+import { badgeText, chipsText, parseBadge, renderBadge, renderChips, renderStages, stagesText, } from "./mail-blocks.js";
 const DEFAULT_PRIMARY_COLOR = "#2563eb";
 const HEX_COLOR_PATTERN = /^#(?:[0-9a-fA-F]{3,4}|[0-9a-fA-F]{6}|[0-9a-fA-F]{8})$/;
 function isHttpUrl(value) {
@@ -107,6 +108,7 @@ function templateContent(variables) {
     const data = variables; // @cast-boundary render-helper
     // Without structured fields, title + body become the header and a single text section.
     return {
+        badge: parseBadge(data.badge),
         header: data.header ?? data.title,
         sections: data.sections ?? (data.body ? [{ text: data.body }] : undefined),
         footer: data.footer,
@@ -122,6 +124,10 @@ function sectionText(section) {
         return section.markdown;
     if ("button" in section)
         return `${section.button.label}: ${section.button.url}`;
+    if ("stages" in section)
+        return stagesText(section.stages);
+    if ("chips" in section)
+        return chipsText(section.chips);
     return "";
 }
 function renderSection(section, primaryColor) {
@@ -138,6 +144,10 @@ function renderSection(section, primaryColor) {
     if ("button" in section) {
         return `<p style="margin:0 0 16px"><a href="${escapeHtml(section.button.url)}" style="display:inline-block;padding:10px 24px;background:${escapeHtmlAttr(primaryColor)};color:#fff;text-decoration:none;border-radius:4px;font-size:14px">${escapeHtml(section.button.label)}</a></p>`;
     }
+    if ("stages" in section)
+        return renderStages(section.stages, primaryColor);
+    if ("chips" in section)
+        return renderChips(section.chips);
     return "";
 }
 // Simple Renderer: turns structured email template data into HTML with inline CSS.
@@ -150,11 +160,13 @@ export function createSimpleRenderer(branding) {
     return {
         name: "simple",
         async render(input) {
-            const { header, sections, footer } = templateContent(input.variables);
+            const { badge, header, sections, footer } = templateContent(input.variables);
             const parts = [];
             parts.push('<!DOCTYPE html><html><body style="margin:0;padding:0;font-family:sans-serif">');
             parts.push('<div style="max-width:600px;margin:0 auto;padding:24px">');
             parts.push(renderBrandingHeader(branding, primaryColor, logoUrl));
+            if (badge)
+                parts.push(renderBadge(badge));
             if (header) {
                 parts.push(`<h1 style="margin:0 0 24px;color:#111;font-size:20px;font-weight:600">${escapeHtml(header)}</h1>`);
             }
@@ -171,9 +183,15 @@ export function createSimpleRenderer(branding) {
             return parts.join("");
         },
         async renderText(input) {
-            const { header, sections, footer } = templateContent(input.variables);
+            const { badge, header, sections, footer } = templateContent(input.variables);
             const brandingFooter = brandingFooterLines(branding, input.locale).join("\n");
-            return [header, ...(sections ?? []).map(sectionText), footer, brandingFooter]
+            return [
+                badge ? badgeText(badge) : undefined,
+                header,
+                ...(sections ?? []).map(sectionText),
+                footer,
+                brandingFooter,
+            ]
                 .filter((block) => block !== undefined && block !== "")
                 .join("\n\n");
         },

package/dist/template-resolver/table.d.ts

@@ -42,6 +42,7 @@ export declare const templateResourceEntity: import("@cosmicdrift/kumiko-types/f
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
+        readonly optionsAvailabilityQuery?: string;
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: true;
     };
@@ -143,6 +144,7 @@ export declare const templateResourceEntity: import("@cosmicdrift/kumiko-types/f
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
+        readonly optionsAvailabilityQuery?: string;
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: true;
     };
@@ -195,6 +197,7 @@ export declare const templateResourceEntity: import("@cosmicdrift/kumiko-types/f
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
+        readonly optionsAvailabilityQuery?: string;
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: true;
     };
@@ -237,6 +240,7 @@ export declare const templateResourceEntity: import("@cosmicdrift/kumiko-types/f
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
+        readonly optionsAvailabilityQuery?: string;
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: true;
     };
@@ -284,6 +288,7 @@ export declare const templateResourcesTable: import("@cosmicdrift/kumiko-framewo
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
+        readonly optionsAvailabilityQuery?: string;
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: true;
     };
@@ -385,6 +390,7 @@ export declare const templateResourcesTable: import("@cosmicdrift/kumiko-framewo
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
+        readonly optionsAvailabilityQuery?: string;
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: true;
     };
@@ -437,6 +443,7 @@ export declare const templateResourcesTable: import("@cosmicdrift/kumiko-framewo
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
+        readonly optionsAvailabilityQuery?: string;
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: true;
     };
@@ -479,6 +486,7 @@ export declare const templateResourcesTable: import("@cosmicdrift/kumiko-framewo
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
+        readonly optionsAvailabilityQuery?: string;
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: true;
     };

package/dist/template-resolver/user-content-table.d.ts

@@ -63,6 +63,7 @@ export declare const userContentEntryEntity: import("@cosmicdrift/kumiko-types/f
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
+        readonly optionsAvailabilityQuery?: string;
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: true;
     };
@@ -164,6 +165,7 @@ export declare const userContentEntryEntity: import("@cosmicdrift/kumiko-types/f
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
+        readonly optionsAvailabilityQuery?: string;
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: true;
     };
@@ -232,6 +234,7 @@ export declare const userContentEntriesTable: import("@cosmicdrift/kumiko-framew
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
+        readonly optionsAvailabilityQuery?: string;
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: true;
     };
@@ -333,6 +336,7 @@ export declare const userContentEntriesTable: import("@cosmicdrift/kumiko-framew
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
+        readonly optionsAvailabilityQuery?: string;
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: true;
     };

package/dist/tenant/invitation-table.d.ts

@@ -69,6 +69,7 @@ export declare const tenantInvitationEntity: import("@cosmicdrift/kumiko-types/f
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
+        readonly optionsAvailabilityQuery?: string;
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: true;
     };
@@ -172,6 +173,7 @@ export declare const tenantInvitationsTable: import("@cosmicdrift/kumiko-framewo
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
+        readonly optionsAvailabilityQuery?: string;
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: true;
     };

package/dist/tenant/schema/tenant.d.ts

@@ -66,6 +66,7 @@ export declare const tenantEntity: import("@cosmicdrift/kumiko-types/fields").En
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
+        readonly optionsAvailabilityQuery?: string;
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: true;
     };
@@ -217,6 +218,7 @@ export declare const tenantTable: import("@cosmicdrift/kumiko-framework/db").Ent
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
+        readonly optionsAvailabilityQuery?: string;
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: true;
     };

package/dist/tier-engine/index.d.ts

@@ -3,5 +3,6 @@ export { type AddOnDefinition, type AddOnMap, type ComposeAppInput, type Compose
 export { TIER_ENGINE_FEATURE, TierAssignmentSources, TierEngineHandlers, TierEngineQueries, } from "./constants.js";
 export { tierAssignmentEntity } from "./entity.js";
 export { type CreateTierEngineOptions, createTierEngineFeature, tierEngineFeature, } from "./feature.js";
+export { createTierOptionGate, type TierOptionAvailability, type TierOptionGate, type TierOptionGateDeps, type TierOptionSpec, } from "./tier-option-gate.js";
 export { createTierResolver, type TierResolver, type TierResolverDeps, } from "./tier-resolver.js";
 export { isTrialActive, type TrialPolicy } from "./trial.js";

package/dist/tier-engine/index.js

@@ -11,5 +11,6 @@ export { composeApp, } from "./compose-app.js";
 export { TIER_ENGINE_FEATURE, TierAssignmentSources, TierEngineHandlers, TierEngineQueries, } from "./constants.js";
 export { tierAssignmentEntity } from "./entity.js";
 export { createTierEngineFeature, tierEngineFeature, } from "./feature.js";
+export { createTierOptionGate, } from "./tier-option-gate.js";
 export { createTierResolver, } from "./tier-resolver.js";
 export { isTrialActive } from "./trial.js";

package/dist/tier-engine/tier-option-gate.d.ts

@@ -0,0 +1,32 @@
+import type { EntityTableMeta, SchemaTable, TenantDb } from "@cosmicdrift/kumiko-framework/db";
+import type { WriteHandlerDef } from "@cosmicdrift/kumiko-framework/engine";
+import { type WriteFailure } from "@cosmicdrift/kumiko-framework/errors";
+import { type CapGuardContext, type CapLimitContext } from "../cap-counter/index.js";
+export type TierOptionSpec<TCaps> = {
+    readonly field: string;
+    readonly options: readonly string[];
+    readonly isOptionAllowed: (option: string, caps: TCaps) => boolean;
+    readonly code: string;
+    readonly i18nKey: string;
+    /** Lets an update that resends the unchanged stored value of a no longer allowed
+     *  option pass (edit forms submit the whole row). Without it the stored value is not looked up. */
+    readonly table?: SchemaTable | EntityTableMeta;
+};
+export type TierOptionAvailability = {
+    readonly value: string;
+    readonly disabled: boolean;
+    readonly hint?: string;
+};
+export type TierOptionGateDeps<TTier extends string, TCaps> = {
+    /** Ascending: the first tier that allows an option is the one named as required. */
+    readonly tierOrder: readonly TTier[];
+    readonly capsForTier: (tier: TTier, context: CapLimitContext) => TCaps | Promise<TCaps>;
+    readonly resolveTier: (db: TenantDb) => Promise<TTier>;
+};
+export type TierOptionGate<TTier extends string, TCaps> = {
+    readonly optionAvailability: (db: TenantDb, context: CapLimitContext, spec: Pick<TierOptionSpec<TCaps>, "options" | "isOptionAllowed">, hintFor: (requiredTier: TTier) => string) => Promise<readonly TierOptionAvailability[]>;
+    /** `recordId` is the id of the edited row; with `spec.table` it enables the unchanged-value pass. */
+    readonly checkTierOption: (ctx: CapGuardContext, value: unknown, spec: TierOptionSpec<TCaps>, recordId?: string) => Promise<WriteFailure | null>;
+    readonly withTierOptionGate: (handler: WriteHandlerDef, spec: TierOptionSpec<TCaps>) => WriteHandlerDef;
+};
+export declare function createTierOptionGate<TTier extends string, TCaps>(deps: TierOptionGateDeps<TTier, TCaps>): TierOptionGate<TTier, TCaps>;

package/dist/tier-engine/tier-option-gate.js

@@ -0,0 +1,62 @@
+// Tier-gated options of a select field: one spec drives the availability query the
+// renderer shows (disabled option + "from <tier>" hint) and the write-path check that
+// actually enforces it, so the two cannot drift apart.
+import { UnprocessableError, writeFailure, } from "@cosmicdrift/kumiko-framework/errors";
+import { isPlainObject } from "@cosmicdrift/kumiko-framework/utils";
+import { readPayloadField, } from "../cap-counter/index.js";
+function limitContextOf(ctx) {
+    return ctx.config ? { config: ctx.config } : {};
+}
+function recordIdOf(payload) {
+    return isPlainObject(payload) && typeof payload["id"] === "string" ? payload["id"] : undefined;
+}
+export function createTierOptionGate(deps) {
+    async function capsPerTier(context) {
+        return Promise.all(deps.tierOrder.map(async (tier) => ({ tier, caps: await deps.capsForTier(tier, context) })));
+    }
+    async function optionAvailability(db, context, spec, hintFor) {
+        const currentCaps = await deps.capsForTier(await deps.resolveTier(db), context);
+        const tiers = await capsPerTier(context);
+        return spec.options.map((value) => {
+            if (spec.isOptionAllowed(value, currentCaps))
+                return { value, disabled: false };
+            const required = tiers.find(({ caps }) => spec.isOptionAllowed(value, caps));
+            return required === undefined
+                ? { value, disabled: true }
+                : { value, disabled: true, hint: hintFor(required.tier) };
+        });
+    }
+    async function storedValueMatches(ctx, spec, value, recordId) {
+        if (spec.table === undefined || recordId === undefined)
+            return false;
+        const stored = await ctx.db.fetchOne(spec.table, { id: recordId });
+        return stored?.[spec.field] === value;
+    }
+    async function checkTierOption(ctx, value, spec, recordId) {
+        // skip: an absent or non-string value is the schema's business, not a tier violation.
+        if (typeof value !== "string")
+            return null;
+        const context = limitContextOf(ctx);
+        const currentCaps = await deps.capsForTier(await deps.resolveTier(ctx.db), context);
+        if (spec.isOptionAllowed(value, currentCaps))
+            return null;
+        if (await storedValueMatches(ctx, spec, value, recordId))
+            return null;
+        const required = (await capsPerTier(context)).find(({ caps }) => spec.isOptionAllowed(value, caps));
+        return writeFailure(new UnprocessableError(spec.code, {
+            i18nKey: spec.i18nKey,
+            details: { field: spec.field, value, requiredTier: required?.tier },
+        }));
+    }
+    function withTierOptionGate(handler, spec) {
+        return {
+            ...handler,
+            handler: async (event, ctx) => {
+                const value = readPayloadField(event.payload, spec.field);
+                const failure = await checkTierOption(ctx, value, spec, recordIdOf(event.payload));
+                return failure ?? handler.handler(event, ctx);
+            },
+        };
+    }
+    return { optionAvailability, checkTierOption, withTierOptionGate };
+}

package/dist/user/schema/user.d.ts

@@ -165,6 +165,7 @@ export declare const userEntity: import("@cosmicdrift/kumiko-types/fields").Enti
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
+        readonly optionsAvailabilityQuery?: string;
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: true;
     };
@@ -343,6 +344,7 @@ export declare const userTable: import("@cosmicdrift/kumiko-framework/db").Entit
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
+        readonly optionsAvailabilityQuery?: string;
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: true;
     };

package/dist/user-data-rights/schema/export-job.d.ts

@@ -74,6 +74,7 @@ export declare const exportJobEntity: import("@cosmicdrift/kumiko-types/fields")
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
+        readonly optionsAvailabilityQuery?: string;
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: true;
     };
@@ -249,6 +250,7 @@ export declare const exportJobsTable: import("@cosmicdrift/kumiko-framework/db")
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
+        readonly optionsAvailabilityQuery?: string;
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: true;
     };

package/dist/user-data-rights-defaults/hooks/delivery-attempt.userdata-hook.js

@@ -1,4 +1,5 @@
-import { deliveryAttemptsTable } from "../../delivery/index.js";
+import { appendEventInTenantDb, getStreamVersionInTenantDb, } from "@cosmicdrift/kumiko-framework/event-store";
+import { DELIVERY_ATTEMPT_ADDRESS_ERASED_EVENT, deliveryAttemptsTable, } from "../../delivery/index.js";
 import { featureMounted } from "./feature-mounted.js";
 // userData-Hooks for delivery's attempt log (deferred from #797, closed by
 // #799). deliveryAttempt is an events-only aggregate — the export reads the
@@ -26,9 +27,27 @@ export const deliveryAttemptExportHook = async (ctx) => {
         })),
     };
 };
-export const deliveryAttemptDeleteHook = async () => {
-    // Deliberate no-op: erasure runs via crypto-shredding — the forget pipeline
-    // erases the recipient's DEK, which makes recipientAddress unreadable in
-    // BOTH the append-only events and the projected rows (#799). A read-side
-    // UPDATE here would be wiped on the next projection rebuild anyway.
+// Both strategies erase the address. The DEK shredding of a forget covers KMS deployments; the
+// erase event also covers plaintext mode, and unlike a read-side UPDATE it survives a projection
+// rebuild. Rows without an address are skipped, which makes a second run a no-op.
+export const deliveryAttemptDeleteHook = async (ctx) => {
+    // skip: delivery not mounted — its table doesn't exist, nothing to erase.
+    if (!featureMounted(ctx, "delivery"))
+        return;
+    const rows = await ctx.db.selectMany(deliveryAttemptsTable, {
+        tenantId: ctx.tenantId,
+        recipientId: ctx.userId,
+    });
+    for (const row of rows) {
+        if (row.recipientAddress === null)
+            continue;
+        await appendEventInTenantDb(ctx.db, {
+            aggregateType: "deliveryAttempt",
+            aggregateId: row.id,
+            expectedVersion: await getStreamVersionInTenantDb(ctx.db, row.id),
+            type: DELIVERY_ATTEMPT_ADDRESS_ERASED_EVENT,
+            payload: {},
+            metadata: { userId: "system" },
+        }, { registry: ctx.registry });
+    }
 };

package/dist/waitlist/entity.d.ts

@@ -139,6 +139,7 @@ export declare const waitlistEntryEntity: import("@cosmicdrift/kumiko-types/fiel
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
+        readonly optionsAvailabilityQuery?: string;
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: true;
     };
@@ -355,6 +356,7 @@ export declare const waitlistEntryTable: import("@cosmicdrift/kumiko-framework/d
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
+        readonly optionsAvailabilityQuery?: string;
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: true;
     };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-bundled-features",
-  "version": "0.351.0",
+  "version": "0.352.0",
   "description": "Built-in features — tenant, user, auth, delivery. The stuff you'd rewrite anyway, already typed.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -503,12 +503,12 @@
     }
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-dispatcher-live": "0.351.0",
-    "@cosmicdrift/kumiko-framework": "0.351.0",
-    "@cosmicdrift/kumiko-headless": "0.351.0",
-    "@cosmicdrift/kumiko-renderer": "0.351.0",
-    "@cosmicdrift/kumiko-renderer-web": "0.351.0",
-    "@cosmicdrift/kumiko-types": "0.351.0",
+    "@cosmicdrift/kumiko-dispatcher-live": "0.352.0",
+    "@cosmicdrift/kumiko-framework": "0.352.0",
+    "@cosmicdrift/kumiko-headless": "0.352.0",
+    "@cosmicdrift/kumiko-renderer": "0.352.0",
+    "@cosmicdrift/kumiko-renderer-web": "0.352.0",
+    "@cosmicdrift/kumiko-types": "0.352.0",
     "@mollie/api-client": "^4.5.0",
     "@node-rs/argon2": "^2.0.2",
     "@types/mailparser": "^3.4.6",
@@ -524,7 +524,7 @@
     "nodemailer": "^10.0.13",
     "qrcode": "^1.5.4",
     "react": "^19.2.6",
-    "sharp": "^0.35.4",
+    "sharp": "^0.35.5",
     "stripe": "^22.6.2",
     "tailwind-merge": "^3.6.0",
     "temporal-polyfill": "^0.3.2",
@@ -1025,8 +1025,8 @@
   ],
   "devDependencies": {
     "@testing-library/user-event": "^14.6.1",
-    "@cosmicdrift/kumiko-locale-de": "0.351.0",
-    "@cosmicdrift/kumiko-locale-es": "0.351.0",
+    "@cosmicdrift/kumiko-locale-de": "0.352.0",
+    "@cosmicdrift/kumiko-locale-es": "0.352.0",
     "jsqr": "^1.4.0"
   }
 }

package/src/cap-counter/changes.json

@@ -1,4 +1,32 @@
 [
+  {
+    "version": "0.352.0",
+    "type": "breaking",
+    "title": "Calendar cap reservations are stored in the new store_cap_reservations table",
+    "detail": "Capped writes now insert and delete rows in store_cap_reservations, so they fail until the table exists.",
+    "migration": "Generate and apply a migration with `kumiko-schema generate` — capped writes fail without the new store_cap_reservations table"
+  },
+  {
+    "version": "0.352.0",
+    "type": "improvement",
+    "title": "Reservations expire after 60 minutes and are swept before the next reserve of the same cap"
+  },
+  {
+    "version": "0.352.0",
+    "type": "fix",
+    "title": "withCapEnforcement keeps the wrapped handler's settings (rateLimit, additionalRateLimits) and composes with an inner reserveBeforeTransaction"
+  },
+  {
+    "version": "0.352.0",
+    "type": "improvement",
+    "title": "withRollingCapEnforcement reserves before the handler transaction and releases through the new rolling-released event, so rejected or failed writes no longer consume rolling cap"
+  },
+  {
+    "version": "0.352.0",
+    "type": "improvement",
+    "title": "createValueCapGuard rejects a written number outside the min and max of the tenant's tier",
+    "detail": "A number written by a handler can be bounded per tier\n`createValueCapGuard(resolveTierCaps)` returns `checkValueCap` and `withValueCap`. The spec names the payload field, optional `min` and `max` functions over the tier caps (`undefined` means unbounded), an error code and an i18n key. The value is read from the payload or, for entity updates, from `changes`; an absent or non-numeric value passes. A value below the minimum or above the maximum is rejected with `UnprocessableError` and `details: { field, value, min, max }`. `withValueCap` spreads the wrapped handler, so it composes with `withCapEnforcement`."
+  },
   {
     "version": "0.348.0",
     "type": "fix",

package/src/delivery/changes.json

@@ -1,4 +1,16 @@
 [
+  {
+    "version": "0.352.0",
+    "type": "breaking",
+    "title": "Delivery attempt log stores masked recipient addresses; attempts older than 90 days are pruned",
+    "detail": "The log query, the export and the stored events show masked addresses, and the feature registers the daily attempt-log-retention job.",
+    "migration": "Read recipients from your own data, not from the attempt log, because it only shows masked addresses now. Set `attemptLogRetentionDays` on createDeliveryFeature to another number of days, or to `false` to keep the log, if 90 days does not fit. Schedule nothing extra, the feature registers the cron job itself. Existing full-address entries are removed by the retention job once they are older than the window, or erased when their user is forgotten."
+  },
+  {
+    "version": "0.352.0",
+    "type": "improvement",
+    "title": "Forgetting a user erases the recipient address of their delivery attempts in plaintext mode too, through an event that survives projection rebuilds"
+  },
   {
     "version": "0.343.0",
     "type": "improvement",

package/src/derivatives-sharp/changes.json

@@ -1,4 +1,10 @@
 [
+  {
+    "version": "0.352.0",
+    "type": "fix",
+    "title": "sharp is bumped to 0.35.5 to pick up the librsvg security fix",
+    "detail": "Bump sharp to 0.35.5 (librsvg advisory GHSA-WQ5F-XC86-PV6W)"
+  },
   {
     "version": "0.335.0",
     "type": "fix",

package/src/legal-pages/changes.json

@@ -1,4 +1,10 @@
 [
+  {
+    "version": "0.352.0",
+    "type": "fix",
+    "title": "The legal-pages README imprint example uses a fictional demo identity",
+    "detail": "The legal-pages README seeds its imprint example with a fictional demo identity and address instead of a real person's details."
+  },
   {
     "version": "0.344.0",
     "type": "improvement",

package/src/renderer-simple/changes.json

@@ -1,4 +1,10 @@
 [
+  {
+    "version": "0.352.0",
+    "type": "improvement",
+    "title": "Badge, stages track and chips for the simple mail renderer",
+    "detail": "Use badge, { stages } and { chips } in the template variables; the notification RenderResponse carries the matching plain text in text."
+  },
   {
     "version": "0.344.0",
     "type": "improvement",