@cosmicdrift/kumiko-bundled-features 0.352.0 → 0.354.0

package/dist/auth-mfa/web/mfa-setup-preauth-screen.js

@@ -114,7 +114,7 @@ export function MfaSetupPreauthScreen({ preauthSetupToken, accountLabel, title,
                 }
                 return;
             }
-            onSuccess?.();
+            onSuccess?.(res.data.landingPath);
         }
         catch {
             setError("setup_failed");
@@ -129,7 +129,7 @@ export function MfaSetupPreauthScreen({ preauthSetupToken, accountLabel, title,
     };
     return (_jsxs(AuthCard, { title: title ?? t("auth.mfa.setup.title"), subtitle: subtitle ?? t("auth.mfa.setup.subtitle"), children: [error !== null ? (_jsx(Banner, { variant: "error", children: error === "too_many_attempts" && retryAfterSeconds !== null
                     ? t("auth.mfa.errors.tooManyAttemptsWithSeconds", { seconds: retryAfterSeconds })
-                    : t(reasonToKey(error)) })) : null, !setup && (_jsx(Section, { testId: "mfa-setup-preauth-intro", actions: _jsx(Button, { variant: "primary", onClick: () => void startSetup(), loading: busy, disabled: busy, children: t("auth.mfa.setup.start") }), children: _jsx("span", { className: "text-sm text-muted-foreground", children: t("auth.mfa.setup.intro") }) })), setup && (_jsx(Form, { onSubmit: onSubmit, children: _jsxs(Section, { testId: "mfa-setup-preauth-setup", actions: _jsx(Button, { type: "submit", variant: "primary", loading: busy, disabled: busy || !acknowledged || code.length !== 6, children: t("auth.mfa.setup.confirm") }), children: [_jsxs("div", { className: "flex flex-col items-center gap-2 text-center", children: [_jsx("span", { className: "text-sm font-semibold", children: t("auth.mfa.enable.scanTitle") }), _jsx("div", { className: "h-40 w-40", 
+                    : t(reasonToKey(error)) })) : null, !setup && (_jsxs(Section, { testId: "mfa-setup-preauth-intro", children: [_jsx("span", { className: "text-sm text-muted-foreground", children: t("auth.mfa.setup.intro") }), _jsx("div", { className: "flex justify-end", children: _jsx(Button, { variant: "primary", onClick: () => void startSetup(), loading: busy, disabled: busy, children: t("auth.mfa.setup.start") }) })] })), setup && (_jsx(Form, { onSubmit: onSubmit, children: _jsxs(Section, { testId: "mfa-setup-preauth-setup", children: [_jsxs("div", { className: "flex flex-col items-center gap-2 text-center", children: [_jsx("span", { className: "text-sm font-semibold", children: t("auth.mfa.enable.scanTitle") }), _jsx("div", { className: "h-40 w-40", 
                                     // biome-ignore lint/security/noDangerouslySetInnerHtml: qrcode-generated SVG, no user input
-                                    dangerouslySetInnerHTML: { __html: setup.qrSvg } }), _jsx("span", { className: "text-xs text-muted-foreground", children: t("auth.mfa.enable.manualEntry") }), _jsx("code", { className: "inline-block break-all rounded bg-muted px-3 py-2 font-mono text-sm", children: setup.secretParam })] }), _jsxs("div", { className: "flex flex-col gap-2", children: [_jsx("span", { className: "text-sm font-semibold", children: t("auth.mfa.enable.recoveryTitle") }), _jsx("span", { className: "text-xs text-muted-foreground", children: t("auth.mfa.enable.recoveryHint") }), _jsx("code", { className: "block whitespace-pre-wrap break-all rounded bg-muted px-3 py-2 font-mono text-sm", children: setup.recoveryCodes.join("\n") }), _jsx(Field, { id: "mfa-setup-preauth-ack", label: t("auth.mfa.enable.acknowledge"), children: _jsx(Input, { kind: "boolean", id: "mfa-setup-preauth-ack", name: "mfa-setup-preauth-ack", value: acknowledged, onChange: setAcknowledged }) })] }), _jsx(Field, { id: "mfa-setup-preauth-code", label: t("auth.mfa.enable.code"), required: true, children: _jsx(Input, { kind: "text", id: "mfa-setup-preauth-code", name: "mfa-setup-preauth-code", value: code, onChange: setCode, disabled: busy || !acknowledged, autoComplete: "one-time-code" }) })] }) })), onCancel ? (_jsx("div", { className: "flex justify-center", children: _jsx(Button, { type: "button", variant: "secondary", onClick: onCancel, disabled: busy, children: t("auth.mfa.verify.backToLogin") }) })) : null] }));
+                                    dangerouslySetInnerHTML: { __html: setup.qrSvg } }), _jsx("span", { className: "text-xs text-muted-foreground", children: t("auth.mfa.enable.manualEntry") }), _jsx("code", { className: "inline-block break-all rounded bg-muted px-3 py-2 font-mono text-sm", children: setup.secretParam })] }), _jsxs("div", { className: "flex flex-col gap-2", children: [_jsx("span", { className: "text-sm font-semibold", children: t("auth.mfa.enable.recoveryTitle") }), _jsx("span", { className: "text-xs text-muted-foreground", children: t("auth.mfa.enable.recoveryHint") }), _jsx("code", { className: "block whitespace-pre-wrap break-all rounded bg-muted px-3 py-2 font-mono text-sm", children: setup.recoveryCodes.join("\n") }), _jsx(Field, { id: "mfa-setup-preauth-ack", label: t("auth.mfa.enable.acknowledge"), children: _jsx(Input, { kind: "boolean", id: "mfa-setup-preauth-ack", name: "mfa-setup-preauth-ack", value: acknowledged, onChange: setAcknowledged }) })] }), _jsx(Field, { id: "mfa-setup-preauth-code", label: t("auth.mfa.enable.code"), required: true, children: _jsx(Input, { kind: "text", id: "mfa-setup-preauth-code", name: "mfa-setup-preauth-code", value: code, onChange: setCode, disabled: busy || !acknowledged, autoComplete: "one-time-code" }) }), _jsx("div", { className: "flex justify-end", children: _jsx(Button, { type: "submit", variant: "primary", loading: busy, disabled: busy || !acknowledged || code.length !== 6, children: t("auth.mfa.setup.confirm") }) })] }) })), onCancel ? (_jsx("div", { className: "flex justify-center", children: _jsx(Button, { type: "button", variant: "secondary", onClick: onCancel, disabled: busy, children: t("auth.mfa.verify.backToLogin") }) })) : null] }));
 }

package/dist/auth-mfa/web/mfa-verify-screen.d.ts

@@ -7,7 +7,7 @@ export type MfaVerifyScreenProps = {
     /** Called after the server confirms the code and the session state has
      *  refreshed. Optional — apps that swap this screen back out purely on
      *  session.status changing to "authenticated" don't need it. */
-    readonly onSuccess?: () => void;
+    readonly onSuccess?: (landingPath?: string) => void;
     readonly onCancel?: () => void;
 };
 export declare function MfaVerifyScreen({ challengeToken, title, subtitle, submitLabel, onSuccess, onCancel, }: MfaVerifyScreenProps): ReactNode;

package/dist/auth-mfa/web/mfa-verify-screen.js

@@ -42,7 +42,7 @@ export function MfaVerifyScreen({ challengeToken, title, subtitle, submitLabel,
         if (res.kind === "success") {
             await session.refresh();
             setSubmitting(false);
-            onSuccess?.();
+            onSuccess?.(res.data.landingPath);
             return;
         }
         setSubmitting(false);

package/dist/billing-foundation/billing-info-query.d.ts

@@ -9,12 +9,15 @@ export type BillingInfo<TTier extends string> = {
         readonly tier: string;
         readonly providerName: string;
     } | null;
-    readonly prices: Readonly<Partial<Record<string, string>>>;
+    readonly prices: TierPrices<TTier>;
+};
+export type TierPrices<TTier extends string> = {
+    readonly [K in TTier]?: string;
 };
 export type BillingInfoQueryDeps<TTier extends string> = {
     readonly roles: readonly string[];
     readonly resolveTier: (db: TenantDb, tenantId: TenantId) => Promise<TTier>;
-    readonly getBillingPrices: (ctx: HandlerContext) => Readonly<Partial<Record<string, string>>> | null;
+    readonly getBillingPrices: (ctx: HandlerContext) => TierPrices<TTier> | null;
 };
 export declare function createBillingInfoQueryConfig<TTier extends string>(deps: BillingInfoQueryDeps<TTier>): {
     name: string;

package/dist/billing-foundation/checkout-core.d.ts

@@ -80,6 +80,13 @@ export type OpenCheckoutOptions = {
     readonly baseUrl?: string;
     readonly catalog?: BillingPlanCatalog;
     readonly now: () => Temporal.Instant;
+    /** The caller already ran `assertBillingEnabled` under its own handler name
+     *  (before a costly provider lookup), so the gate is not repeated here. */
+    readonly billingEnabledChecked?: boolean;
+    /** The caller already ran `assertNoActiveSubscription` and passes its result
+     *  (null = tenant has none); mode:"subscription" skips the second read and
+     *  the providerCustomerId check reuses it. */
+    readonly checkedSubscription?: Awaited<ReturnType<typeof getSubscriptionForTenant>>;
 };
 export type OpenCheckoutInput = {
     readonly providerName: string;

package/dist/billing-foundation/checkout-core.js

@@ -249,7 +249,9 @@ export async function assertCheckoutAllowed(ctx, options, input) {
     // Checked before the redirect-origin hardening for every mode — a
     // disabled provider must reject a mode:"payment" checkout just as much
     // as a mode:"subscription" one.
-    await assertBillingEnabled(ctx, plugin, "create-checkout-session");
+    if (options.billingEnabledChecked !== true) {
+        await assertBillingEnabled(ctx, plugin, "create-checkout-session");
+    }
     assertRedirectOrigins([input.successUrl, input.cancelUrl], options.baseUrl);
     const mode = input.mode ?? "subscription";
     // Reused by the providerCustomerId check below to avoid a second lookup
@@ -257,7 +259,10 @@ export async function assertCheckoutAllowed(ctx, options, input) {
     let ownSubscription;
     if (mode === "subscription") {
         assertSubscriptionPriceAllowed(plugin, options.catalog, input);
-        ownSubscription = await assertNoActiveSubscription(ctx, options.now());
+        ownSubscription =
+            options.checkedSubscription !== undefined
+                ? options.checkedSubscription
+                : await assertNoActiveSubscription(ctx, options.now());
     }
     else {
         assertOneOffPriceAllowed(plugin, input);

package/dist/billing-foundation/entities.d.ts

@@ -3,6 +3,7 @@ export declare const subscriptionEntity: import("@cosmicdrift/kumiko-types/field
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -24,6 +25,7 @@ export declare const subscriptionEntity: import("@cosmicdrift/kumiko-types/field
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -45,6 +47,7 @@ export declare const subscriptionEntity: import("@cosmicdrift/kumiko-types/field
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -66,6 +69,7 @@ export declare const subscriptionEntity: import("@cosmicdrift/kumiko-types/field
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -87,6 +91,7 @@ export declare const subscriptionEntity: import("@cosmicdrift/kumiko-types/field
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -141,6 +146,7 @@ export declare const paymentEntity: import("@cosmicdrift/kumiko-types/fields").E
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -162,6 +168,7 @@ export declare const paymentEntity: import("@cosmicdrift/kumiko-types/fields").E
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -183,6 +190,7 @@ export declare const paymentEntity: import("@cosmicdrift/kumiko-types/fields").E
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;

package/dist/billing-foundation/handlers/start-plan-checkout.write.js

@@ -40,7 +40,13 @@ export function createStartPlanCheckoutHandler(options, catalog) {
                 ? await prepareConsent(ctx, consumerProtection, payload.consent, "subscription")
                 : undefined;
             const baseUrl = options.baseUrl ?? "";
-            const result = await openCheckout(ctx, { baseUrl: options.baseUrl, catalog, now: options.now }, {
+            const result = await openCheckout(ctx, {
+                baseUrl: options.baseUrl,
+                catalog,
+                now: options.now,
+                billingEnabledChecked: true,
+                checkedSubscription: existing,
+            }, {
                 providerName,
                 priceId: resolved.priceId,
                 successUrl: joinBaseUrl(baseUrl, catalog.successPath),

package/dist/billing-foundation/projection.d.ts

@@ -3,6 +3,7 @@ export declare const subscriptionsProjectionTable: import("@cosmicdrift/kumiko-f
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -24,6 +25,7 @@ export declare const subscriptionsProjectionTable: import("@cosmicdrift/kumiko-f
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -45,6 +47,7 @@ export declare const subscriptionsProjectionTable: import("@cosmicdrift/kumiko-f
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -66,6 +69,7 @@ export declare const subscriptionsProjectionTable: import("@cosmicdrift/kumiko-f
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -87,6 +91,7 @@ export declare const subscriptionsProjectionTable: import("@cosmicdrift/kumiko-f
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -140,6 +145,7 @@ export declare const paymentsProjectionTable: import("@cosmicdrift/kumiko-framew
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -161,6 +167,7 @@ export declare const paymentsProjectionTable: import("@cosmicdrift/kumiko-framew
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -182,6 +189,7 @@ export declare const paymentsProjectionTable: import("@cosmicdrift/kumiko-framew
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;

package/dist/cap-counter/entity.d.ts

@@ -3,6 +3,7 @@ export declare const capCounterEntity: import("@cosmicdrift/kumiko-types/fields"
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;

package/dist/cap-overview/access.js

@@ -1,4 +1,4 @@
-import { access } from "@cosmicdrift/kumiko-framework/engine";
+import { access, BUILT_IN_MEMBERSHIP_ROLES } from "@cosmicdrift/kumiko-framework/engine";
 // Usage numbers are an operator concern by default; wider visibility is an
 // explicit `usageVisibleTo` opt-in on createCapOverviewFeature. The my-caps
 // screen and the query that fills its cards must carry the SAME rule, or the
@@ -7,14 +7,7 @@ export const DEFAULT_CAP_USAGE_ROLES = access.roles(...access.admin);
 // Roles the engine itself knows (role-assignment.ts ranks). App-declared roles
 // (assignableRole) only exist once the registry is composed, which is after
 // this feature is defined, so they cannot be validated here.
-const BUILT_IN_USAGE_VISIBLE_ROLES = new Set([
-    "User",
-    "Member",
-    "Editor",
-    "Admin",
-    "TenantAdmin",
-    "SystemAdmin",
-]);
+const BUILT_IN_USAGE_VISIBLE_ROLES = new Set(BUILT_IN_MEMBERSHIP_ROLES);
 export function resolveCapUsageRoles(usageVisibleTo) {
     if (usageVisibleTo === undefined)
         return DEFAULT_CAP_USAGE_ROLES;

package/dist/cap-overview/handlers/tenant-caps-list.query.js

@@ -4,7 +4,7 @@ import { definePagedQueryHandler, MAX_LIST_LIMIT, } from "@cosmicdrift/kumiko-fr
 import { InternalError, ValidationError } from "@cosmicdrift/kumiko-framework/errors";
 import * as z from "zod";
 import { subscriptionsProjectionTable } from "../../billing-foundation/index.js";
-import { tenantTable } from "../../tenant/index.js";
+import { decryptTenantNames, tenantTable } from "../../tenant/index.js";
 import { tierAssignmentEntity } from "../../tier-engine/index.js";
 import { capFieldName } from "../constants.js";
 import { computeFraction } from "../usage-math.js";
@@ -115,7 +115,7 @@ export function createTenantCapsListQuery(caps, listCaps) {
                 });
             }
             const db = ctx.systemDb.acknowledgeCrossTenant("cap-overview:tenant-caps:list — SystemAdmin platform-wide tenant overview");
-            const tenants = await selectMany(db, tenantTable, {});
+            const tenants = await decryptTenantNames(await selectMany(db, tenantTable, {}), "cap-overview:tenant-caps:list");
             const assignments = await selectMany(db, tierAssignmentTable, {});
             const subscriptions = await selectMany(db, subscriptionsProjectionTable, {});
             const assignmentByTenant = new Map(assignments.map((row) => [row.tenantId, row]));

package/dist/cap-overview/handlers/tenant-options.query.js

@@ -2,7 +2,7 @@ import { selectMany } from "@cosmicdrift/kumiko-framework/bun-db";
 import { defineQueryHandler } from "@cosmicdrift/kumiko-framework/engine";
 import { InternalError } from "@cosmicdrift/kumiko-framework/errors";
 import * as z from "zod";
-import { tenantTable } from "../../tenant/index.js";
+import { decryptTenantNames, tenantTable } from "../../tenant/index.js";
 export const tenantOptionsQuery = defineQueryHandler({
     name: "tenant-options",
     description: "Returns all tenants as id/name option pairs sorted by name; use it to populate the tenant picker of a platform-wide overview.",
@@ -15,9 +15,8 @@ export const tenantOptionsQuery = defineQueryHandler({
             });
         }
         const db = ctx.systemDb.acknowledgeCrossTenant("cap-overview:tenant-options — SystemAdmin dashboard tenant-filter options");
-        const tenants = await selectMany(db, tenantTable, {}, {
-            orderBy: { col: "name", direction: "asc" },
-        });
-        return { rows: tenants.map((tenant) => ({ value: tenant.id, label: tenant.name })) };
+        const tenants = await decryptTenantNames(await selectMany(db, tenantTable, {}), "cap-overview:tenant-options");
+        const sorted = [...tenants].sort((a, b) => a.name.localeCompare(b.name));
+        return { rows: sorted.map((tenant) => ({ value: tenant.id, label: tenant.name })) };
     },
 });

package/dist/channel-in-app/in-app-channel.js

@@ -18,7 +18,7 @@ export const inAppChannel = {
             data: message.data ? JSON.stringify(message.data) : null,
         });
         if (ctx.sseBroker) {
-            ctx.sseBroker.pushToChannel(tenantChannel(ctx.tenantId), {
+            await ctx.sseBroker.pushToChannel(tenantChannel(ctx.tenantId), {
                 type: "channel-in-app:event:delivered",
                 data: {
                     id: row?.id,

package/dist/channel-in-app/tables.js

@@ -1,5 +1,5 @@
 import { requireEntityTableMeta } from "@cosmicdrift/kumiko-framework/bun-db";
-import { boolean, instant, table as pgTable, serial, sql, text, uuid, } from "@cosmicdrift/kumiko-framework/db";
+import { boolean, index, instant, table as pgTable, serial, sql, text, uuid, } from "@cosmicdrift/kumiko-framework/db";
 export const inAppMessagesTable = pgTable("in_app_messages", {
     id: serial("id").primaryKey(),
     tenantId: uuid("tenant_id").notNull(),
@@ -11,7 +11,9 @@ export const inAppMessagesTable = pgTable("in_app_messages", {
     isRead: boolean("is_read").default(false).notNull(),
     readAt: instant("read_at"),
     createdAt: instant("created_at").default(sql `now()`).notNull(),
-});
+}, 
+// Every inbox, unread-count, mark-all-read and userData export/delete read filters by tenant + user.
+(t) => [index("in_app_messages_tenant_user_created_idx").on(t.tenantId, t.userId, t.createdAt)]);
 // Derived from inAppMessagesTable (table() attaches the meta as a Symbol) so
 // the two can't drift, instead of hand-duplicating the column list.
 export const inAppMessagesTableMeta = requireEntityTableMeta(inAppMessagesTable, "inAppMessagesTable");

package/dist/compliance-profiles/schema/profile-selection.d.ts

@@ -11,14 +11,15 @@ export declare const tenantComplianceProfileEntity: import("@cosmicdrift/kumiko-
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly display?: "radio" | "dropdown";
         readonly optionTones?: {
-            readonly "de-hr-dsgvo-hgb"?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly "eu-dsgvo"?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly "minimal-no-region"?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly "swiss-dsg"?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
+            readonly "de-hr-dsgvo-hgb"?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly "eu-dsgvo"?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly "minimal-no-region"?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly "swiss-dsg"?: "bad" | "neutral" | "ok" | "warn" | undefined;
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
         readonly optionsAvailabilityQuery?: string;
+        readonly conditionalOptions?: readonly import("@cosmicdrift/kumiko-types/fields").SelectConditionalOptions<"de-hr-dsgvo-hgb" | "eu-dsgvo" | "minimal-no-region" | "swiss-dsg">[] | undefined;
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: true;
     };
@@ -52,14 +53,15 @@ export declare const tenantComplianceProfileTable: import("@cosmicdrift/kumiko-f
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly display?: "radio" | "dropdown";
         readonly optionTones?: {
-            readonly "de-hr-dsgvo-hgb"?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly "eu-dsgvo"?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly "minimal-no-region"?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly "swiss-dsg"?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
+            readonly "de-hr-dsgvo-hgb"?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly "eu-dsgvo"?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly "minimal-no-region"?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly "swiss-dsg"?: "bad" | "neutral" | "ok" | "warn" | undefined;
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
         readonly optionsAvailabilityQuery?: string;
+        readonly conditionalOptions?: readonly import("@cosmicdrift/kumiko-types/fields").SelectConditionalOptions<"de-hr-dsgvo-hgb" | "eu-dsgvo" | "minimal-no-region" | "swiss-dsg">[] | undefined;
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: true;
     };

package/dist/compliance-profiles-ops/handlers/tenants-missing-profile.query.js

@@ -3,7 +3,7 @@ import { defineQueryHandler } from "@cosmicdrift/kumiko-framework/engine";
 import { InternalError } from "@cosmicdrift/kumiko-framework/errors";
 import * as z from "zod";
 import { tenantComplianceProfileTable } from "../../compliance-profiles/index.js";
-import { tenantTable } from "../../tenant/index.js";
+import { decryptTenantNames, tenantTable } from "../../tenant/index.js";
 // SystemAdmin platform-wide counterpart to needs-profile (#2089).
 //
 // #2084 stopped needs-profile from nagging a TenantAdmin who can no longer
@@ -28,9 +28,7 @@ export const tenantsMissingProfileQuery = defineQueryHandler({
             });
         }
         const db = ctx.systemDb.acknowledgeCrossTenant("platform operator scans every tenant for a missing compliance-profile selection");
-        const tenants = await db.selectMany(tenantTable, {
-            isEnabled: true,
-        });
+        const tenants = await decryptTenantNames(await db.selectMany(tenantTable, { isEnabled: true }), "compliance-profiles-ops:tenants-missing-profile");
         const profileRows = await db.selectMany(tenantComplianceProfileTable, {});
         const tenantIdsWithProfile = new Set(profileRows.map((row) => row.tenantId));
         return {

package/dist/config/handlers/values.query.d.ts

@@ -1,6 +1,8 @@
 import { type ConfigScope, type ConfigValueSource } from "@cosmicdrift/kumiko-framework/engine";
 import * as z from "zod";
-export declare const valuesQuery: import("@cosmicdrift/kumiko-types/define-handler").QueryHandlerDefinition<"values", z.ZodObject<{}, z.core.$strip>, Record<string, {
+export declare const valuesQuery: import("@cosmicdrift/kumiko-types/define-handler").QueryHandlerDefinition<"values", z.ZodObject<{
+    keys: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$strip>, Record<string, {
     value: string | number | boolean | undefined;
     scope: ConfigScope;
     source: ConfigValueSource;

package/dist/config/handlers/values.query.js

@@ -5,8 +5,10 @@ import { MASKED, redactInheritedCascade, shouldRedactInherited } from "../read-r
 import { hasConfigAccess } from "../write-helpers.js";
 export const valuesQuery = defineQueryHandler({
     name: "values",
-    description: "Returns the effective value, scope and winning source for every config key the caller may read, with encrypted and secret-backed values masked; use it to inspect the current settings.",
-    schema: z.object({}),
+    description: "Returns the effective value, scope and winning source for every config key the caller may read (optionally narrowed to `keys`), with encrypted and secret-backed values masked; use it to inspect the current settings.",
+    schema: z.object({
+        keys: z.array(z.string()).optional(),
+    }),
     // Per-key read access enforced via hasConfigAccess inside the handler.
     access: {
         openToAll: {
@@ -26,7 +28,10 @@ export const valuesQuery = defineQueryHandler({
         const allKeys = registry.getAllConfigKeys();
         const keyDefs = new Map();
         const filteredKeys = [];
+        const requestedKeys = query.payload.keys === undefined ? undefined : new Set(query.payload.keys);
         for (const [qualifiedKey, keyDef] of allKeys) {
+            if (requestedKeys !== undefined && !requestedKeys.has(qualifiedKey))
+                continue;
             if (!hasConfigAccess(keyDef.access.read, query.user.roles))
                 continue;
             keyDefs.set(qualifiedKey, keyDef);

package/dist/config/table.d.ts

@@ -3,6 +3,7 @@ export declare const configValueEntity: import("@cosmicdrift/kumiko-types/fields
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -24,6 +25,7 @@ export declare const configValueEntity: import("@cosmicdrift/kumiko-types/fields
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -45,6 +47,7 @@ export declare const configValueEntity: import("@cosmicdrift/kumiko-types/fields
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -68,6 +71,7 @@ export declare const configValuesTable: import("@cosmicdrift/kumiko-framework/db
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -89,6 +93,7 @@ export declare const configValuesTable: import("@cosmicdrift/kumiko-framework/db
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -110,6 +115,7 @@ export declare const configValuesTable: import("@cosmicdrift/kumiko-framework/db
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;

package/dist/crypto-shredding/handlers/forget-subject.write.d.ts

@@ -19,6 +19,7 @@ export declare const subjectForgottenSchema: z.ZodObject<{
     subjectKey: z.ZodString;
     reason: z.ZodString;
     forgottenBy: z.ZodString;
+    cleanupError: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 export declare const subjectForgetDeniedSchema: z.ZodObject<{
     subjectKeyDigest: z.ZodOptional<z.ZodString>;