@cosmicdrift/kumiko-bundled-features 0.362.0 → 0.364.0

package/dist/template-resolver/web/i18n.js

@@ -6,12 +6,103 @@
 // Keys follow `template-resolver.editor.<slug>`.
 export const defaultTranslations = {
     en: {
+        "template-resolver.documentEditor.button": "Button",
+        "template-resolver.documentEditor.buttonDefaultText": "Confirm",
+        "template-resolver.documentEditor.buttonTarget": "Button target",
+        "template-resolver.documentEditor.buttonText": "Button text",
+        "template-resolver.documentEditor.cancel": "Cancel",
+        "template-resolver.documentEditor.divider": "Divider",
+        "template-resolver.documentEditor.heading3": "Heading 3",
+        "template-resolver.documentEditor.image": "Image",
+        "template-resolver.documentEditor.imageBlock": "Image · inline",
+        "template-resolver.documentEditor.imageAlt": "Alt text (optional)",
+        "template-resolver.documentEditor.insert": "Insert",
+        "template-resolver.documentEditor.insertPlaceholder": "Placeholder",
+        "template-resolver.documentEditor.invalidImageAlt": "The alt text must not contain < or >.",
+        "template-resolver.documentEditor.invalidLink": "This link target is not allowed. Use https, http, mailto, tel or a placeholder.",
+        "template-resolver.documentEditor.invalidResourceKey": "This resource key is not valid.",
+        "template-resolver.documentEditor.link": "Link",
+        "template-resolver.documentEditor.linkHref": "Link target",
+        "template-resolver.documentEditor.linkHrefPlaceholder": "https://",
+        "template-resolver.documentEditor.noVariables": "No matching variables are available here.",
+        "template-resolver.documentEditor.pageBreak": "Page break",
+        "template-resolver.documentEditor.align": "Align",
+        "template-resolver.documentEditor.alignLeft": "Left",
+        "template-resolver.documentEditor.alignCenter": "Centered",
+        "template-resolver.documentEditor.alignRight": "Right",
+        "template-resolver.documentEditor.alignJustify": "Justified",
+        "template-resolver.documentEditor.repeatBarList": "Repeat · {list}",
+        "template-resolver.documentEditor.repeatHeader": "Repeat header row",
+        "template-resolver.documentEditor.paragraph": "Paragraph",
+        "template-resolver.documentEditor.paragraphStyle": "Paragraph style",
+        "template-resolver.documentEditor.placeholder": "Write your text…",
+        "template-resolver.documentEditor.removeLink": "Remove link",
+        "template-resolver.documentEditor.repeat": "Repeat",
+        "template-resolver.documentEditor.repeatList": "List to repeat",
+        "template-resolver.documentEditor.resourceKey": "Resource key",
+        "template-resolver.documentEditor.table": "Table",
         "template-resolver.editor.titleLabel": "Title",
         "template-resolver.editor.contentLabel": "Content",
         "template-resolver.editor.save": "Save",
         "template-resolver.editor.saving": "Saving…",
         "template-resolver.editor.created": "Created.",
         "template-resolver.editor.saved": "Saved.",
+        "templateResolver.errors.document.buttonHrefNotPlaceholder": "The button target “{detail}” must be a placeholder.",
+        "templateResolver.errors.document.disallowedLinkHref": "Link target “{detail}” is not allowed; use https, http, mailto, tel or a placeholder.",
+        "templateResolver.errors.document.documentRequiresHtmlFormat": "This template kind requires the html format, got “{detail}”.",
+        "templateResolver.errors.document.layoutRequiresMjmlFormat": "Mail layouts require the mjml format, got “{detail}”.",
+        "templateResolver.errors.document.layoutInvalidStructure": "The layout may only contain the header, content, signature and footer regions: {detail}.",
+        "templateResolver.errors.document.layoutMissingContentSlot": "The layout needs its content slot: {detail}.",
+        "templateResolver.errors.document.layoutSourceSystemOnly": "Only system layouts may use {detail} source; use the structured html layout.",
+        "templateResolver.errors.template.targetExists": "A template for locale “{detail}” already exists; overwrite it explicitly to replace it.",
+        "templateResolver.warnings.resourceNotUploaded": "Image not uploaded: {detail}",
+        "templateResolver.checks.resourcesResolved": "All images are available",
+        "templateResolver.checks.textPresent": "A plain-text version is present",
+        "templateResolver.checks.sizeUnderCap": "The mail is within the 10 MiB size limit",
+        "templateResolver.checks.requiredPlaceholders": "All required placeholders are used",
+        "templateResolver.errors.preview.renderFailed": "The preview could not be rendered.",
+        "templateResolver.errors.testMail.noChannel": "No email channel is set up, so no test mail can be sent.",
+        "templateResolver.errors.testMail.noAddress": "Your account has no email address to send the test mail to.",
+        "templateResolver.errors.testMail.failed": "The test mail could not be sent.",
+        "templateResolver.errors.resource.tooLarge": "The image is too large.",
+        "templateResolver.errors.resource.unsupportedImage": "This file is not a supported image. Use PNG, JPEG, WebP or GIF.",
+        "templateResolver.errors.template.systemResourcesNeedSystemTenant": "Resource files of system templates can only be imported or exported by a user of the system tenant.",
+        "templateResolver.errors.template.bundleLocalesDiffer": "The locales of this template differ in content format or variables, so they cannot be exported as one bundle.",
+        "templateResolver.errors.collection.kindNotAllowed": "“{detail}” templates are written through their own editor, not through a collection.",
+        "templateResolver.errors.noSystemTemplate": "There is no active system template to reset to.",
+        "templateResolver.errors.noDraft": "There is no draft to discard.",
+        "templateResolver.errors.template.invalidMeta": "The template settings are invalid.",
+        "templateResolver.errors.template.meta.subject.required": "The subject is missing.",
+        "templateResolver.errors.template.meta.subject.invalid": "The subject is invalid (at most 200 characters, no line breaks).",
+        "templateResolver.errors.template.meta.previewText.required": "The preview text is missing.",
+        "templateResolver.errors.template.meta.previewText.invalid": "The preview text is invalid (at most 200 characters, no line breaks).",
+        "templateResolver.errors.template.meta.senderName.required": "The sender name is missing.",
+        "templateResolver.errors.template.meta.senderName.invalid": "The sender name is invalid (at most 80 characters, no line breaks).",
+        "templateResolver.errors.template.meta.replyTo.required": "The reply-to address is missing.",
+        "templateResolver.errors.template.meta.replyTo.invalid": "The reply-to address is not a valid email address.",
+        "templateResolver.errors.template.meta.layoutSlug.required": "The layout is missing.",
+        "templateResolver.errors.template.meta.layoutSlug.invalid": "The chosen layout is invalid.",
+        "templateResolver.errors.template.meta.fileName.required": "The file name is missing.",
+        "templateResolver.errors.template.meta.fileName.invalid": "The file name is invalid: no slashes, quotes, semicolons or two dots in a row.",
+        "templateResolver.errors.template.unknownPlaceholders": "Unknown placeholders: {detail}",
+        "templateResolver.errors.template.missingRequiredPlaceholders": "Required placeholders are not used: {detail}",
+        "templateResolver.errors.document.embeddedContent": "<{detail}> elements are not allowed in template bodies.",
+        "templateResolver.errors.document.unsafeAttributeValue": "The attribute value “{detail}” must not contain < or >.",
+        "templateResolver.errors.document.eventHandlerAttribute": "Inline event handler “{detail}” is not allowed.",
+        "templateResolver.errors.document.externalImageSource": "Images must reference an uploaded resource; image source “{detail}” is not allowed.",
+        "templateResolver.errors.document.imageWithoutResource": "Images must reference an uploaded resource.",
+        "templateResolver.errors.document.invalidReferenceName": "“{detail}” is not a valid name.",
+        "templateResolver.errors.document.scriptElement": "<script> elements are not allowed in template bodies.",
+        "templateResolver.errors.attachment.unsupportedType": "Attachments must be a PDF, PNG or JPEG file.",
+        "templateResolver.errors.attachment.limit": "A template can have at most {max} attachments.",
+        "templateResolver.errors.attachment.invalid": "The attachment needs a template, a key and a valid file name.",
+        "templateResolver.errors.attachment.pdfTemplateMissing": "There is no PDF template “{slug}” for this tenant or the system.",
+        "template-resolver.documentEditor.htmlSource": "HTML source",
+        "template-resolver.documentEditor.removeBlock": "Remove block",
+        "template-resolver.documentEditor.list": "List",
+        "template-resolver.documentEditor.more": "More",
+        "template-resolver.documentEditor.showHtml": "HTML",
+        "template-resolver.documentEditor.underline": "Underline",
         "template-resolver.editor.saveFailed": "Save failed.",
         "template-resolver.editor.networkError": "Network error while saving.",
         "template-resolver.editor.loading": "Loading current version…",

package/dist/template-resolver/web/index.d.ts

@@ -1 +1,6 @@
+export { PDF_DEFAULT_MARGIN_MM, PDF_FOOTER_MARGIN_MM, PDF_HEADER_MARGIN_MM, PDF_ORIENTATIONS, PDF_PAGE_FORMATS, } from "../pdf-constants.js";
+export { TemplateResolverErrors, TemplateResolverHandlers, TemplateResolverQueries, } from "../qualified-names.js";
 export { textBlocksClient } from "./client-plugin.js";
+export { DocumentContentEditor } from "./document-editor.js";
+export { type DocumentEditorChrome, type DocumentEditorHandle, type DocumentEditorProps, type DocumentResourcePreview, type DocumentToolbarBlock, MAIL_DOCUMENT_BLOCKS, PDF_DOCUMENT_BLOCKS, } from "./document-toolbar-blocks.js";
+export { PlaceholderLineEditor, type PlaceholderLineEditorProps, } from "./placeholder-line-editor-lazy.js";

package/dist/template-resolver/web/index.js

@@ -4,4 +4,9 @@
 // — the server side (defineFeature) lives in
 // `@cosmicdrift/kumiko-bundled-features/template-resolver` and has no React or
 // DOM deps.
+export { PDF_DEFAULT_MARGIN_MM, PDF_FOOTER_MARGIN_MM, PDF_HEADER_MARGIN_MM, PDF_ORIENTATIONS, PDF_PAGE_FORMATS, } from "../pdf-constants.js";
+export { TemplateResolverErrors, TemplateResolverHandlers, TemplateResolverQueries, } from "../qualified-names.js";
 export { textBlocksClient } from "./client-plugin.js";
+export { DocumentContentEditor } from "./document-editor.js";
+export { MAIL_DOCUMENT_BLOCKS, PDF_DOCUMENT_BLOCKS, } from "./document-toolbar-blocks.js";
+export { PlaceholderLineEditor, } from "./placeholder-line-editor-lazy.js";

package/dist/template-resolver/web/placeholder-line-editor-lazy.d.ts

@@ -0,0 +1,4 @@
+import { type ReactNode } from "react";
+import type { PlaceholderLineEditorProps } from "./placeholder-line-editor.js";
+export type { PlaceholderLineEditorProps } from "./placeholder-line-editor.js";
+export declare function PlaceholderLineEditor(props: PlaceholderLineEditorProps): ReactNode;

package/dist/template-resolver/web/placeholder-line-editor-lazy.js

@@ -0,0 +1,16 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+// @runtime client
+//
+// Lazy boundary for the placeholder line editor: tiptap loads with the chunk,
+// the fallback is a plain text input holding the same `{{name}}` text.
+// Never import placeholder-line-editor statically here.
+import { usePrimitives } from "@cosmicdrift/kumiko-renderer";
+import { lazy, Suspense } from "react";
+const LazyPlaceholderLineEditor = lazy(() => import("./placeholder-line-editor.js"));
+function PlainLineFallback({ id, value, onChange, readOnly = false, "aria-label": ariaLabel, }) {
+    const { Field, Input } = usePrimitives();
+    return (_jsx(Field, { id: id, label: ariaLabel, hideLabel: true, children: _jsx(Input, { kind: "text", id: id, name: id, value: value, onChange: onChange, disabled: readOnly }) }));
+}
+export function PlaceholderLineEditor(props) {
+    return (_jsx(Suspense, { fallback: _jsx(PlainLineFallback, { ...props }), children: _jsx(LazyPlaceholderLineEditor, { ...props }) }));
+}

package/dist/template-resolver/web/placeholder-line-editor.d.ts

@@ -0,0 +1,17 @@
+import { type ReactNode } from "react";
+import type { DocumentEditorHandle } from "./document-toolbar-blocks.js";
+export type PlaceholderLineEditorProps = {
+    readonly id: string;
+    /** Plain text with `{{name}}` placeholders. */
+    readonly value: string;
+    readonly onChange: (value: string) => void;
+    readonly variableLabels?: Readonly<Record<string, string>>;
+    /** Placeholders shown as system chips (a different tint). */
+    readonly systemVariables?: readonly string[];
+    readonly readOnly?: boolean;
+    /** Drops the input frame so the line sits flat inside a label/value row. */
+    readonly flat?: boolean;
+    readonly onEditorReady?: (handle: DocumentEditorHandle) => void;
+    readonly "aria-label": string;
+};
+export default function PlaceholderLineEditor({ id, value, onChange, variableLabels, systemVariables, readOnly, flat, onEditorReady, "aria-label": ariaLabel, }: PlaceholderLineEditorProps): ReactNode;

package/dist/template-resolver/web/placeholder-line-editor.js

@@ -0,0 +1,94 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+// @runtime client
+//
+// Single-line editor for plain-text fields that carry {{placeholders}}
+// (subject, preheader). The stored value stays plain text; placeholders show
+// as chips while editing. Lives in the same lazy chunk as the document editor.
+import { cn } from "@cosmicdrift/kumiko-renderer-web";
+import { Extension, Node } from "@tiptap/core";
+import { UndoRedo } from "@tiptap/extensions";
+import { EditorContent, useEditor } from "@tiptap/react";
+import StarterKit from "@tiptap/starter-kit";
+import { useMemo, useState } from "react";
+import { DocumentVariable } from "../document-schema.js";
+import { createVariableView } from "./document-editor-extensions.js";
+import { createEditorHandle } from "./editor-handle.js";
+import { contentToLine, lineToContent, singleLine } from "./placeholder-text.js";
+import { useStableByKey } from "./use-stable-by-key.js";
+const LineDocument = Node.create({ name: "doc", topNode: true, content: "paragraph" });
+// One line only: Enter must not split the paragraph.
+const BlockLineBreaks = Extension.create({
+    name: "blockLineBreaks",
+    addKeyboardShortcuts() {
+        return { Enter: () => true, "Shift-Enter": () => true, "Mod-Enter": () => true };
+    },
+});
+const NO_LABELS = {};
+const NO_NAMES = [];
+function LineEditorBody({ id, initialValue, onChange, variableLabels, systemVariables, readOnly, flat, onEditorReady, ariaLabel, }) {
+    const extensions = useMemo(() => [
+        LineDocument,
+        StarterKit.configure({
+            document: false,
+            blockquote: false,
+            bold: false,
+            bulletList: false,
+            code: false,
+            codeBlock: false,
+            dropcursor: false,
+            gapcursor: false,
+            hardBreak: false,
+            heading: false,
+            horizontalRule: false,
+            italic: false,
+            link: false,
+            listItem: false,
+            listKeymap: false,
+            orderedList: false,
+            strike: false,
+            trailingNode: false,
+            underline: false,
+            undoRedo: false,
+        }),
+        DocumentVariable.extend({
+            addNodeView: () => createVariableView(variableLabels, systemVariables, flat),
+        }),
+        UndoRedo,
+        BlockLineBreaks,
+    ], [variableLabels, systemVariables, flat]);
+    const editor = useEditor({
+        extensions,
+        content: {
+            type: "doc",
+            content: [{ type: "paragraph", content: lineToContent(initialValue) }],
+        },
+        editable: !readOnly,
+        immediatelyRender: false,
+        editorProps: {
+            attributes: { id, role: "textbox", "aria-label": ariaLabel, "aria-multiline": "false" },
+            transformPastedText: singleLine,
+            // Rich pastes would bring several paragraphs; only their text is kept.
+            transformPastedHTML: (html) => singleLine(html.replace(/<[^>]*>/g, " ")),
+        },
+        onCreate: ({ editor: created }) => onEditorReady?.(createEditorHandle(created)),
+        onUpdate: ({ editor: e }) => onChange(contentToLine(e.getJSON().content?.[0]?.content)),
+    });
+    return (_jsx(EditorContent, { editor: editor, className: cn("flex items-center bg-transparent text-base md:text-sm", flat ? "min-h-10" : "min-h-9 rounded-md border border-input px-3", "[&_.ProseMirror]:w-full [&_.ProseMirror]:whitespace-nowrap [&_.ProseMirror]:outline-none", "[&_p]:m-0", readOnly && "opacity-60") }));
+}
+export default function PlaceholderLineEditor({ id, value, onChange, variableLabels = NO_LABELS, systemVariables = NO_NAMES, readOnly = false, flat = false, onEditorReady, "aria-label": ariaLabel, }) {
+    const stableLabels = useStableByKey(variableLabels, JSON.stringify(variableLabels));
+    const stableSystem = useStableByKey(systemVariables, systemVariables.join("\n"));
+    // The text is the source of truth. Typing reports it through onChange and
+    // keeps `emitted` equal to `value`; any other value (async load, reset)
+    // remounts the editor body on the new text.
+    const [emitted, setEmitted] = useState(value);
+    const [epoch, setEpoch] = useState(0);
+    if (value !== emitted) {
+        setEmitted(value);
+        setEpoch((current) => current + 1);
+    }
+    return (_jsx(LineEditorBody, { id: id, initialValue: value, onChange: (next) => {
+            setEmitted(next);
+            onChange(next);
+        }, variableLabels: stableLabels, systemVariables: stableSystem, readOnly: readOnly, flat: flat, onEditorReady: onEditorReady, ariaLabel: ariaLabel }, `${epoch}-${readOnly}-${JSON.stringify(stableLabels)}`));
+}

package/dist/template-resolver/web/placeholder-text.d.ts

@@ -0,0 +1,4 @@
+import type { JSONContent } from "@tiptap/core";
+export declare function lineToContent(text: string): JSONContent[];
+export declare function contentToLine(nodes: readonly JSONContent[] | undefined): string;
+export declare function singleLine(text: string): string;

package/dist/template-resolver/web/placeholder-text.js

@@ -0,0 +1,34 @@
+import { isDocumentReferenceName } from "../document-schema.js";
+const PLACEHOLDER_TOKEN = /\{\{([^{}]*)\}\}/g;
+// Names the schema refuses stay plain text, so a typo never becomes a chip
+// that the server would reject.
+export function lineToContent(text) {
+    const content = [];
+    let cursor = 0;
+    const pushText = (value) => {
+        if (value !== "")
+            content.push({ type: "text", text: value });
+    };
+    for (const match of text.matchAll(PLACEHOLDER_TOKEN)) {
+        const name = match[1] ?? "";
+        if (!isDocumentReferenceName(name))
+            continue;
+        pushText(text.slice(cursor, match.index));
+        content.push({ type: "variable", attrs: { name } });
+        cursor = match.index + match[0].length;
+    }
+    pushText(text.slice(cursor));
+    return content;
+}
+export function contentToLine(nodes) {
+    return (nodes ?? [])
+        .map((node) => {
+        if (node.type === "variable")
+            return `{{${String(node.attrs?.["name"])}}}`;
+        return node.type === "text" ? (node.text ?? "") : "";
+    })
+        .join("");
+}
+export function singleLine(text) {
+    return text.replace(/\s*[\r\n]+\s*/g, " ");
+}

package/dist/template-resolver/web/use-stable-by-key.d.ts

@@ -0,0 +1 @@
+export declare function useStableByKey<T>(value: T, key: string): T;

package/dist/template-resolver/web/use-stable-by-key.js

@@ -0,0 +1,13 @@
+// @runtime client
+import { useState } from "react";
+// Callers often pass fresh object literals every render; this keeps the first
+// value for as long as the content key is unchanged, so memoized extension
+// lists (and the editor built from them) are not rebuilt on every render.
+export function useStableByKey(value, key) {
+    const [stored, setStored] = useState({ key, value });
+    if (stored.key !== key) {
+        setStored({ key, value });
+        return value;
+    }
+    return stored.value;
+}

package/dist/tenant/handlers/add-member.write.d.ts

@@ -3,4 +3,4 @@ export declare const addMemberWrite: import("@cosmicdrift/kumiko-types/define-ha
     userId: z.ZodString;
     tenantId: z.ZodString;
     roles: z.ZodArray<z.ZodString>;
-}, z.core.$strip>, import("@cosmicdrift/kumiko-types/hooks").SaveContext, import("@cosmicdrift/kumiko-types/event-type-map").KumikoEventTypeMap>;
+}, z.core.$strip>, import("@cosmicdrift/kumiko-types/hooks").SaveContext, import("@cosmicdrift/kumiko-types/event-type-map").KumikoEventTypeMap, undefined>;

package/dist/tenant/handlers/cancel-invitation.write.d.ts

@@ -4,4 +4,4 @@ export declare const cancelInvitationWrite: import("@cosmicdrift/kumiko-types/de
 }, z.core.$strip>, {
     id: string;
     alreadyDone: boolean;
-}, import("@cosmicdrift/kumiko-types/event-type-map").KumikoEventTypeMap>;
+}, import("@cosmicdrift/kumiko-types/event-type-map").KumikoEventTypeMap, undefined>;

package/dist/tenant/handlers/create.write.d.ts

@@ -3,4 +3,4 @@ export declare const createWrite: import("@cosmicdrift/kumiko-types/define-handl
     id: z.ZodOptional<z.ZodUUID>;
     key: z.ZodString;
     name: z.ZodString;
-}, z.core.$strip>, import("@cosmicdrift/kumiko-types/hooks").SaveContext, import("@cosmicdrift/kumiko-types/event-type-map").KumikoEventTypeMap>;
+}, z.core.$strip>, import("@cosmicdrift/kumiko-types/hooks").SaveContext, import("@cosmicdrift/kumiko-types/event-type-map").KumikoEventTypeMap, undefined>;

package/dist/tenant/handlers/remove-member.write.d.ts

@@ -5,4 +5,4 @@ export declare const removeMemberWrite: import("@cosmicdrift/kumiko-types/define
 }, z.core.$strip>, {
     userId: string;
     tenantId: string;
-}, import("@cosmicdrift/kumiko-types/event-type-map").KumikoEventTypeMap>;
+}, import("@cosmicdrift/kumiko-types/event-type-map").KumikoEventTypeMap, undefined>;

package/dist/tenant/handlers/team-list.query.js

@@ -3,6 +3,7 @@ import { access, definePagedQueryHandler, MAX_LIST_LIMIT, } from "@cosmicdrift/k
 import { InternalError } from "@cosmicdrift/kumiko-framework/errors";
 import { parseRoles } from "@cosmicdrift/kumiko-framework/utils";
 import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
+import { errorCodeOf, isOneOf } from "@cosmicdrift/kumiko-types/type-guards";
 import * as z from "zod";
 import { userSessionTable } from "../../sessions/index.js";
 import { decryptStoredPii, mapWithConcurrency } from "../../shared/index.js";
@@ -15,7 +16,7 @@ const KMS_POOL_CONCURRENCY = 4;
 // the wire already names a TeamRow field directly.
 const SORT_FIELDS = ["email", "status", "createdAt", "lastSeenAt"];
 function isSortField(value) {
-    return SORT_FIELDS.includes(value);
+    return isOneOf(SORT_FIELDS, value);
 }
 // Nulls (no session yet, invitation rows) sort last regardless of
 // direction — "unknown" reads as "least recent", not as a magic minimum
@@ -109,7 +110,7 @@ export const teamListQuery = definePagedQueryHandler({
                 // ponytail: lean sample apps (admin-console) mount auth without
                 // sessions — store_user_sessions never gets pushed. Integration tests
                 // may seed the table without mounting the feature; prod mounts both.
-                if (err.code !== "42P01")
+                if (errorCodeOf(err) !== "42P01")
                     throw err;
             }
         }

package/dist/tenant/handlers/toggle-enabled.write.d.ts

@@ -1,7 +1,7 @@
 import * as z from "zod";
 export declare const enableWrite: import("@cosmicdrift/kumiko-types/define-handler").WriteHandlerDefinition<"disable" | "enable", z.ZodObject<{
     id: z.ZodUUID;
-}, z.core.$strip>, import("@cosmicdrift/kumiko-types/hooks").SaveContext, import("@cosmicdrift/kumiko-types/event-type-map").KumikoEventTypeMap>;
+}, z.core.$strip>, import("@cosmicdrift/kumiko-types/hooks").SaveContext, import("@cosmicdrift/kumiko-types/event-type-map").KumikoEventTypeMap, undefined>;
 export declare const disableWrite: import("@cosmicdrift/kumiko-types/define-handler").WriteHandlerDefinition<"disable" | "enable", z.ZodObject<{
     id: z.ZodUUID;
-}, z.core.$strip>, import("@cosmicdrift/kumiko-types/hooks").SaveContext, import("@cosmicdrift/kumiko-types/event-type-map").KumikoEventTypeMap>;
+}, z.core.$strip>, import("@cosmicdrift/kumiko-types/hooks").SaveContext, import("@cosmicdrift/kumiko-types/event-type-map").KumikoEventTypeMap, undefined>;

package/dist/tenant/handlers/update-member-roles.write.d.ts

@@ -7,4 +7,4 @@ export declare const updateMemberRolesWrite: import("@cosmicdrift/kumiko-types/d
     userId: string;
     roles: readonly string[];
     tenantId: string;
-}, import("@cosmicdrift/kumiko-types/event-type-map").KumikoEventTypeMap>;
+}, import("@cosmicdrift/kumiko-types/event-type-map").KumikoEventTypeMap, undefined>;

package/dist/tenant/handlers/update.write.d.ts

@@ -5,4 +5,4 @@ export declare const updateWrite: import("@cosmicdrift/kumiko-types/define-handl
     changes: z.ZodObject<{
         name: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>;
-}, z.core.$strip>, import("@cosmicdrift/kumiko-types/hooks").SaveContext, import("@cosmicdrift/kumiko-types/event-type-map").KumikoEventTypeMap>;
+}, z.core.$strip>, import("@cosmicdrift/kumiko-types/hooks").SaveContext, import("@cosmicdrift/kumiko-types/event-type-map").KumikoEventTypeMap, undefined>;

package/dist/tenant/seeding.js

@@ -31,7 +31,7 @@ import { fetchOne } from "@cosmicdrift/kumiko-framework/bun-db";
 import { createEventStoreExecutor, createTenantDb, } from "@cosmicdrift/kumiko-framework/db";
 import { createSystemUser, HookPhases, } from "@cosmicdrift/kumiko-framework/engine";
 import { getUnscopedAggregateStreamMaxVersion } from "@cosmicdrift/kumiko-framework/event-store";
-import { createLifecycleHooks } from "@cosmicdrift/kumiko-framework/pipeline";
+import { createDeferringNotify, createLifecycleHooks, } from "@cosmicdrift/kumiko-framework/pipeline";
 import { TestUsers } from "@cosmicdrift/kumiko-framework/stack";
 import { assertAssignableMembershipRoles } from "./membership-roles.js";
 import { tenantMembershipEntity, tenantMembershipsTable } from "./membership-table.js";
@@ -62,9 +62,31 @@ const executor = createEventStoreExecutor(tenantMembershipsTable, tenantMembersh
 // dispatcher's sink and flush post-commit. Without a sink (fixture / plain
 // Connection) they still fire immediately — there is no outer TX to wait for.
 //
+function buildSeedHookNotify(context, scopedUser, targetTenantId, notifyTiming) {
+    const notifyFactory = context._notifyFactory;
+    if (!notifyFactory)
+        return context.notify;
+    if (notifyTiming === "inline")
+        return notifyFactory(scopedUser, targetTenantId);
+    // Still inside the caller's write tx: delivery DB work must not wait for an app-pool slot.
+    const notifyInsideTransaction = (context._notifyInTransactionFactory ?? notifyFactory)(scopedUser, targetTenantId);
+    const scheduleAfterCommit = context.scheduleAfterCommit;
+    if (!scheduleAfterCommit)
+        return notifyInsideTransaction;
+    return createDeferringNotify({
+        registry: context.registry,
+        tenantId: targetTenantId,
+        notifyAfterCommit: notifyFactory(scopedUser, targetTenantId),
+        notifyNow: notifyInsideTransaction,
+        scheduleAfterCommit,
+    });
+}
 // `runner` comes from the caller, which already holds a declared DbRunner —
 // a TenantDb exposes no runner back out to feature code.
-function scopeSeedHookContext(context, targetTenantId, runner) {
+function scopeSeedHookContext(context, targetTenantId, runner, 
+// The afterCommit sink is snapshotted when it flushes, so a hook scheduled from inside an
+// afterCommit-phase hook would be dropped: that phase must notify inline.
+notifyTiming) {
     const db = createTenantDb(runner, targetTenantId, "system", context.tracer, context.meter, context.signal);
     // HandlerContext carries `user`; AppContext only `systemUser`. Prefer the
     // live handler user when present so notify/hasFeature keep a real SessionUser.
@@ -73,8 +95,8 @@ function scopeSeedHookContext(context, targetTenantId, runner) {
     const scopedUser = baseUser
         ? { ...baseUser, tenantId: targetTenantId }
         : undefined;
-    const notify = context._notifyFactory && scopedUser
-        ? context._notifyFactory(scopedUser, targetTenantId)
+    const notify = scopedUser
+        ? buildSeedHookNotify(context, scopedUser, targetTenantId, notifyTiming)
         : context.notify;
     const features = context.effectiveFeatures;
     const hasFeature = features
@@ -109,9 +131,12 @@ target) {
     const lifecycle = createLifecycleHooks(hooks.registry);
     const scopedContext = target === undefined
         ? hooks.context
-        : scopeSeedHookContext(hooks.context, target.tenantId, target.db);
+        : scopeSeedHookContext(hooks.context, target.tenantId, target.db, "deferUntilCommit");
+    const afterCommitContext = target === undefined
+        ? hooks.context
+        : scopeSeedHookContext(hooks.context, target.tenantId, target.db, "inline");
     await lifecycle.runPostSave(pseudoType, entityData, scopedContext, HookPhases.inTransaction);
-    const runAfterCommit = () => lifecycle.runPostSave(pseudoType, entityData, scopedContext, HookPhases.afterCommit);
+    const runAfterCommit = () => lifecycle.runPostSave(pseudoType, entityData, afterCommitContext, HookPhases.afterCommit);
     if (scopedContext.scheduleAfterCommit) {
         scopedContext.scheduleAfterCommit(runAfterCommit);
     }

package/dist/tenant-handover/handlers/claim.write.d.ts

@@ -11,4 +11,4 @@ export declare function createClaimTenantHandoverHandler(opts?: ClaimTenantHando
     sourceTenantId: string;
     destinationTenantId: string;
     movedEntities: Readonly<Record<string, number>>;
-}, import("@cosmicdrift/kumiko-types/event-type-map").KumikoEventTypeMap>;
+}, import("@cosmicdrift/kumiko-types/event-type-map").KumikoEventTypeMap, undefined>;

package/dist/tenant-lifecycle/handlers/cancel-destruction.write.d.ts

@@ -2,5 +2,5 @@ import * as z from "zod";
 export declare const cancelDestructionWrite: import("@cosmicdrift/kumiko-types/define-handler").WriteHandlerDefinition<"cancel-destruction", z.ZodObject<{}, z.core.$strip>, {
     tenantId: string;
     status: "active";
-    gracePeriodEnd: string | null;
-}, import("@cosmicdrift/kumiko-types/event-type-map").KumikoEventTypeMap>;
+    gracePeriodEnd: null;
+}, import("@cosmicdrift/kumiko-types/event-type-map").KumikoEventTypeMap, undefined>;

package/dist/tenant-lifecycle/handlers/cancel-destruction.write.js

@@ -52,12 +52,13 @@ export const cancelDestructionWrite = defineWriteHandler({
             type: DESTRUCTION_CANCELLED_EVENT_QN,
             payload: { cancelledBy: event.user.id },
         });
+        const gracePeriodEnd = null;
         return {
             isSuccess: true,
             data: {
                 tenantId,
                 status: "active",
-                gracePeriodEnd: null,
+                gracePeriodEnd,
             },
         };
     },

package/dist/tenant-lifecycle/handlers/request-destruction.write.d.ts

@@ -3,4 +3,4 @@ export declare const requestDestructionWrite: import("@cosmicdrift/kumiko-types/
     tenantId: string;
     status: "destroyRequested";
     gracePeriodEnd: string;
-}, import("@cosmicdrift/kumiko-types/event-type-map").KumikoEventTypeMap>;
+}, import("@cosmicdrift/kumiko-types/event-type-map").KumikoEventTypeMap, undefined>;

package/dist/tier-engine/feature.js

@@ -239,7 +239,8 @@ export function createTierEngineFeature(opts = {}) {
         };
         const publishAssignmentChange = (tenantId) => {
             const message = { tenantId };
-            busHolder.bus?.publish(CACHE_SYNC_TOPICS.tierAssignment, message);
+            // The writer already updated its own cache; only other pods need to re-read.
+            busHolder.bus?.publish(CACHE_SYNC_TOPICS.tierAssignment, message, { remoteOnly: true });
         };
         // Trial: zeit-abgeleitet aus tenant.inserted_at (≈ Signup), live am
         // Feature-Gate geprüft — NICHT im Resolver-Cache. Der Resolver ist
@@ -404,12 +405,17 @@ export function createTierEngineFeature(opts = {}) {
                     }
                     const isNewerThanSnapshot = (tenantId) => (latestTicket.get(tenantId) ?? 0) > startedAtTicket;
                     for (const tenantId of [...cache.keys()]) {
-                        if (!loaded.has(tenantId) && !isNewerThanSnapshot(tenantId))
+                        if (!loaded.has(tenantId) && !isNewerThanSnapshot(tenantId)) {
                             cache.delete(tenantId);
+                            latestTicket.set(tenantId, startedAtTicket);
+                        }
                     }
                     for (const [tenantId, features] of loaded) {
-                        if (!isNewerThanSnapshot(tenantId))
+                        if (!isNewerThanSnapshot(tenantId)) {
                             cache.set(tenantId, features);
+                            // Makes a single reload that started before this snapshot discard its older result.
+                            latestTicket.set(tenantId, startedAtTicket);
+                        }
                     }
                 };
                 busHolder.bus = deps.cacheSync;

package/dist/tier-engine/handlers/set-tenant-tier.write.d.ts

@@ -19,4 +19,4 @@ export declare function createSetTenantTierWrite(opts?: SetTenantTierOptions): i
     tenantId: string;
     tier: string;
     isNew: boolean;
-}, import("@cosmicdrift/kumiko-types/event-type-map").KumikoEventTypeMap>;
+}, import("@cosmicdrift/kumiko-types/event-type-map").KumikoEventTypeMap, undefined>;

package/dist/user/db/queries/stream-tenant-backfill.js

@@ -26,8 +26,8 @@
 import { asRawClient, transaction, unsafeReadRetrying } from "@cosmicdrift/kumiko-framework/bun-db";
 import { SYSTEM_TENANT_ID } from "@cosmicdrift/kumiko-framework/engine";
 export async function backfillUserStreamTenants(db) {
-    const candidates = (await unsafeReadRetrying(db, `SELECT DISTINCT "aggregate_id" FROM "kumiko_events"
-      WHERE "aggregate_type" = 'user' AND "tenant_id" <> $1::uuid`, [SYSTEM_TENANT_ID]));
+    const candidates = await unsafeReadRetrying(db, `SELECT DISTINCT "aggregate_id" FROM "kumiko_events"
+      WHERE "aggregate_type" = 'user' AND "tenant_id" <> $1::uuid`, [SYSTEM_TENANT_ID]);
     let aggregatesMigrated = 0;
     let eventsMigrated = 0;
     const failed = [];
@@ -50,10 +50,10 @@ async function migrateAggregate(db, aggregateId) {
         const raw = asRawClient(tx);
         // Global id order = commit-adjacent replay order; merges a split stream
         // (legacy tenant + SYSTEM) into one consistent version sequence.
-        const events = (await raw.unsafe(`SELECT "id" FROM "kumiko_events"
+        const events = await raw.unsafe(`SELECT "id" FROM "kumiko_events"
         WHERE "aggregate_type" = 'user' AND "aggregate_id" = $1::uuid
         ORDER BY "id" ASC
-        FOR UPDATE`, [aggregateId]));
+        FOR UPDATE`, [aggregateId]);
         // Phase 1: negative interim versions — real versions are always >= 1, so
         // nothing can collide with events_aggregate_version_uq mid-migration.
         for (const [i, ev] of events.entries()) {

package/dist/user/handlers/create.write.d.ts

@@ -6,4 +6,4 @@ export declare const createWrite: import("@cosmicdrift/kumiko-types/define-handl
     locale: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
     timezone: z.ZodOptional<z.ZodString>;
     roles: z.ZodOptional<z.ZodUnion<readonly [z.ZodArray<z.ZodString>, z.ZodPipe<z.ZodString, z.ZodTransform<string[], string>>]>>;
-}, z.core.$strip>, import("@cosmicdrift/kumiko-types/hooks").SaveContext, import("@cosmicdrift/kumiko-types/event-type-map").KumikoEventTypeMap>;
+}, z.core.$strip>, import("@cosmicdrift/kumiko-types/hooks").SaveContext, import("@cosmicdrift/kumiko-types/event-type-map").KumikoEventTypeMap, undefined>;

package/dist/user/handlers/detail.query.js

@@ -1,4 +1,5 @@
 import { access, defineEntityDetailHandler, } from "@cosmicdrift/kumiko-framework/engine";
+import { isPlainObject } from "@cosmicdrift/kumiko-types/type-guards";
 import { userEntity } from "../schema/user.js";
 import { attachTenantLabels, dbForList } from "./list.query.js";
 // Only SystemAdmins can read arbitrary users. Tenant-level "Admin" does NOT
@@ -14,7 +15,7 @@ export const detailQuery = {
     ...baseDetail,
     handler: async (query, ctx) => {
         const result = await baseDetail.handler?.(query, ctx);
-        if (result === null || typeof result !== "object")
+        if (!isPlainObject(result))
             return result;
         if (!ctx.registry.features.has("tenant"))
             return result;

package/dist/user/handlers/update.write.d.ts

@@ -12,4 +12,4 @@ export declare const updateWrite: import("@cosmicdrift/kumiko-types/define-handl
         emailVerified: z.ZodOptional<z.ZodBoolean>;
         roles: z.ZodOptional<z.ZodUnion<readonly [z.ZodArray<z.ZodString>, z.ZodPipe<z.ZodString, z.ZodTransform<string[], string>>]>>;
     }, z.core.$strip>;
-}, z.core.$strip>, unknown, import("@cosmicdrift/kumiko-types/event-type-map").KumikoEventTypeMap>;
+}, z.core.$strip>, unknown, import("@cosmicdrift/kumiko-types/event-type-map").KumikoEventTypeMap, undefined>;