@cosmicdrift/kumiko-bundled-features 0.368.0 → 0.370.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-bundled-features",
-  "version": "0.368.0",
+  "version": "0.370.0",
   "description": "Built-in features — tenant, user, auth, delivery. The stuff you'd rewrite anyway, already typed.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -62,6 +62,10 @@
       "types": "./dist/crypto-shredding/index.d.ts",
       "default": "./dist/crypto-shredding/index.js"
     },
+    "./crypto-shredding/env": {
+      "types": "./dist/crypto-shredding/env/index.d.ts",
+      "default": "./dist/crypto-shredding/env/index.js"
+    },
     "./config/web": {
       "types": "./dist/config/web/index.d.ts",
       "default": "./dist/config/web/index.js"
@@ -234,10 +238,6 @@
       "types": "./dist/document-ingest-foundation/index.d.ts",
       "default": "./dist/document-ingest-foundation/index.js"
     },
-    "./file-provider-s3-env": {
-      "types": "./dist/file-provider-s3-env/index.d.ts",
-      "default": "./dist/file-provider-s3-env/index.js"
-    },
     "./file-provider-inmemory": {
       "types": "./dist/file-provider-inmemory/index.d.ts",
       "default": "./dist/file-provider-inmemory/index.js"
@@ -406,10 +406,6 @@
       "types": "./dist/renderer-pdf/index.d.ts",
       "default": "./dist/renderer-pdf/index.js"
     },
-    "./files-provider-s3": {
-      "types": "./dist/files-provider-s3/index.d.ts",
-      "default": "./dist/files-provider-s3/index.js"
-    },
     "./rate-limiting": {
       "types": "./dist/rate-limiting/index.d.ts",
       "default": "./dist/rate-limiting/index.js"
@@ -482,10 +478,22 @@
       "types": "./dist/renderer-foundation/index.d.ts",
       "default": "./dist/renderer-foundation/index.js"
     },
+    "./account-security": {
+      "types": "./dist/account-security/index.d.ts",
+      "default": "./dist/account-security/index.js"
+    },
+    "./host-routing": {
+      "types": "./dist/host-routing/index.d.ts",
+      "default": "./dist/host-routing/index.js"
+    },
     "./legal-pages": {
       "types": "./dist/legal-pages/index.d.ts",
       "default": "./dist/legal-pages/index.js"
     },
+    "./legal-pages/constants": {
+      "types": "./dist/legal-pages/constants.d.ts",
+      "default": "./dist/legal-pages/constants.js"
+    },
     "./legal-pages/web": {
       "types": "./dist/legal-pages/web/index.d.ts",
       "default": "./dist/legal-pages/web/index.js"
@@ -528,12 +536,12 @@
     }
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-dispatcher-live": "0.368.0",
-    "@cosmicdrift/kumiko-framework": "0.368.0",
-    "@cosmicdrift/kumiko-headless": "0.368.0",
-    "@cosmicdrift/kumiko-renderer": "0.368.0",
-    "@cosmicdrift/kumiko-renderer-web": "0.368.0",
-    "@cosmicdrift/kumiko-types": "0.368.0",
+    "@cosmicdrift/kumiko-dispatcher-live": "0.370.0",
+    "@cosmicdrift/kumiko-framework": "0.370.0",
+    "@cosmicdrift/kumiko-headless": "0.370.0",
+    "@cosmicdrift/kumiko-renderer": "0.370.0",
+    "@cosmicdrift/kumiko-renderer-web": "0.370.0",
+    "@cosmicdrift/kumiko-types": "0.370.0",
     "@mollie/api-client": "^4.5.0",
     "@node-rs/argon2": "^2.0.2",
     "@tiptap/core": "3.31.3",
@@ -612,6 +620,10 @@
         "types": "./dist/crypto-shredding/index.d.ts",
         "default": "./dist/crypto-shredding/index.js"
       },
+      "./crypto-shredding/env": {
+        "types": "./dist/crypto-shredding/env/index.d.ts",
+        "default": "./dist/crypto-shredding/env/index.js"
+      },
       "./config/web": {
         "types": "./dist/config/web/index.d.ts",
         "default": "./dist/config/web/index.js"
@@ -784,10 +796,6 @@
         "types": "./dist/document-ingest-foundation/index.d.ts",
         "default": "./dist/document-ingest-foundation/index.js"
       },
-      "./file-provider-s3-env": {
-        "types": "./dist/file-provider-s3-env/index.d.ts",
-        "default": "./dist/file-provider-s3-env/index.js"
-      },
       "./file-provider-inmemory": {
         "types": "./dist/file-provider-inmemory/index.d.ts",
         "default": "./dist/file-provider-inmemory/index.js"
@@ -956,10 +964,6 @@
         "types": "./dist/renderer-pdf/index.d.ts",
         "default": "./dist/renderer-pdf/index.js"
       },
-      "./files-provider-s3": {
-        "types": "./dist/files-provider-s3/index.d.ts",
-        "default": "./dist/files-provider-s3/index.js"
-      },
       "./rate-limiting": {
         "types": "./dist/rate-limiting/index.d.ts",
         "default": "./dist/rate-limiting/index.js"
@@ -1032,10 +1036,22 @@
         "types": "./dist/renderer-foundation/index.d.ts",
         "default": "./dist/renderer-foundation/index.js"
       },
+      "./account-security": {
+        "types": "./dist/account-security/index.d.ts",
+        "default": "./dist/account-security/index.js"
+      },
+      "./host-routing": {
+        "types": "./dist/host-routing/index.d.ts",
+        "default": "./dist/host-routing/index.js"
+      },
       "./legal-pages": {
         "types": "./dist/legal-pages/index.d.ts",
         "default": "./dist/legal-pages/index.js"
       },
+      "./legal-pages/constants": {
+        "types": "./dist/legal-pages/constants.d.ts",
+        "default": "./dist/legal-pages/constants.js"
+      },
       "./legal-pages/web": {
         "types": "./dist/legal-pages/web/index.d.ts",
         "default": "./dist/legal-pages/web/index.js"
@@ -1086,12 +1102,12 @@
   ],
   "devDependencies": {
     "@testing-library/user-event": "^14.6.1",
-    "@cosmicdrift/kumiko-locale-de": "0.368.0",
-    "@cosmicdrift/kumiko-locale-es": "0.368.0",
-    "@cosmicdrift/kumiko-renderer-mail-html": "0.368.0",
+    "@cosmicdrift/kumiko-locale-de": "0.370.0",
+    "@cosmicdrift/kumiko-locale-es": "0.370.0",
+    "@cosmicdrift/kumiko-renderer-mail-html": "0.370.0",
     "jsqr": "^1.4.0",
     "unpdf": "^1.8.1",
-    "@cosmicdrift/kumiko-testing": "0.368.0"
+    "@cosmicdrift/kumiko-testing": "0.370.0"
   },
   "peerDependencies": {
     "@cosmicdrift/kumiko-testing": ">=0.366.0 <1.0.0"

package/src/account-security/changes.json

@@ -0,0 +1,8 @@
+[
+  {
+    "version": "0.370.0",
+    "type": "improvement",
+    "title": "createAccountSecurityFeature bundles the self-service screen for MFA and own sessions",
+    "detail": "createAccountSecurityFeature({ nav?, access? }) registers account-security:screen:account-security, a dashboard that embeds the auth-mfa enable, regenerate and disable screens and the sessions list of the signed-in user. It owns no handlers; mount it next to auth-mfa and sessions, or let composeAuthStack({ mfa }) mount it. Without nav the screen is dormant (no sidebar entry); nav takes { order?, parent? } with order 90 by default. access defaults to every signed-in user. Apps with a local copy of this screen replace it with the bundled feature."
+  }
+]

package/src/auth-email-password/changes.json

@@ -1,4 +1,10 @@
 [
+  {
+    "version": "0.370.0",
+    "type": "improvement",
+    "title": "createAuthEmailPasswordFeature carries its env schema type",
+    "detail": "createAuthEmailPasswordFeature returns the feature typed with authEmailPasswordEnvSchema, so composeEnvSchema types JWT_SECRET and JWT_ISSUER."
+  },
   {
     "version": "0.366.0",
     "type": "fix",

package/src/auth-foundation/changes.json

@@ -1,4 +1,12 @@
 [
+  {
+    "version": "0.370.0",
+    "type": "breaking",
+    "title": "The deprecated authFoundationFeature constant is removed",
+    "detail": "authFoundationFeature was kept next to createAuthFoundationFeature() for one release. Mount the feature by calling createAuthFoundationFeature().",
+    "migration": "Run bun kumiko-upgrade --apply. It replaces authFoundationFeature with createAuthFoundationFeature().",
+    "codemod": "scripts/codemod/feature-factory.ts"
+  },
   {
     "version": "0.165.1",
     "type": "improvement",

package/src/auth-mfa/changes.json

@@ -1,4 +1,10 @@
 [
+  {
+    "version": "0.370.0",
+    "type": "improvement",
+    "title": "MFA token secrets are optional and bound at boot",
+    "detail": "setupTokenSecret and challengeTokenSecret on createAuthMfaFeature are optional. Unset, the boot binds them through bindMfaTokenSecretsFromFeature(feature)(masterSecret, env): MFA_SETUP_TOKEN_SECRET and MFA_CHALLENGE_TOKEN_SECRET from env when set, otherwise derived from the master secret. mfaTokenSecretsEnvSchema declares both variables and the feature registers it next to the secrets master-key slot. A handler called before the binding throws instead of signing with an empty key."
+  },
   {
     "version": "0.357.0",
     "type": "improvement",

package/src/auth-mfa-user-data/changes.json

@@ -1 +1,10 @@
-[]
+[
+  {
+    "version": "0.370.0",
+    "type": "breaking",
+    "title": "The deprecated authMfaUserDataFeature constant is removed",
+    "detail": "authMfaUserDataFeature was kept next to createAuthMfaUserDataFeature() for one release. Mount the feature by calling createAuthMfaUserDataFeature().",
+    "migration": "Run bun kumiko-upgrade --apply. It replaces authMfaUserDataFeature with createAuthMfaUserDataFeature().",
+    "codemod": "scripts/codemod/feature-factory.ts"
+  }
+]

package/src/billing-foundation/changes.json

@@ -1,4 +1,12 @@
 [
+  {
+    "version": "0.370.0",
+    "type": "breaking",
+    "title": "The deprecated billingFoundationFeature constant is removed",
+    "detail": "billingFoundationFeature was kept next to createBillingFoundationFeature() for one release. Mount the feature by calling createBillingFoundationFeature().",
+    "migration": "Run bun kumiko-upgrade --apply. It replaces billingFoundationFeature with createBillingFoundationFeature().",
+    "codemod": "scripts/codemod/feature-factory.ts"
+  },
   {
     "version": "0.365.0",
     "type": "fix",

package/src/cap-counter/changes.json

@@ -1,4 +1,12 @@
 [
+  {
+    "version": "0.370.0",
+    "type": "breaking",
+    "title": "The deprecated capCounterFeature constant is removed",
+    "detail": "capCounterFeature was kept next to createCapCounterFeature() for one release. Mount the feature by calling createCapCounterFeature().",
+    "migration": "Run bun kumiko-upgrade --apply. It replaces capCounterFeature with createCapCounterFeature().",
+    "codemod": "scripts/codemod/feature-factory.ts"
+  },
   {
     "version": "0.368.0",
     "type": "improvement",

package/src/channel-email/changes.json

@@ -1,4 +1,17 @@
 [
+  {
+    "version": "0.370.0",
+    "type": "improvement",
+    "title": "smtpEnvSchema declares the SMTP_* variables",
+    "detail": "smtpEnvSchema covers SMTP_HOST, SMTP_PORT, SMTP_SECURE, SMTP_USER, SMTP_PASS and SMTP_FROM, all optional, and createChannelEmailFeature registers it. It lives next to createSmtpTransportFromEnv, which reads these variables."
+  },
+  {
+    "version": "0.369.0",
+    "type": "breaking",
+    "title": "The tenant mail transport applies per notification",
+    "detail": "r.notification(name, { tenantTransport: true }) marks a notification whose mails go through the tenant's own mail transport. channel-email consults its tenantTransport resolver only for these (also under a renamedFrom name); every other notification, such as password reset or sign-in mails, always takes the app transport, even when the tenant has a provider. With tenantTransport set, transport may be omitted: a mail that then has no transport fails with missing_credentials instead of throwing. The template test mail (template-resolver send-test) now gets the tenant config in its channel context and uses the template's notification, so it leaves through the same transport as the real mail.",
+    "migration": "Apps that pass tenantTransport to createChannelEmailFeature add `tenantTransport: true` to every r.notification whose mails should go through the tenant's provider; without the flag those mails now go through the app transport. Apps without an app SMTP server can drop transport and keep tenantTransport."
+  },
   {
     "version": "0.367.0",
     "type": "improvement",

package/src/compliance-profiles-ops/changes.json

@@ -0,0 +1,10 @@
+[
+  {
+    "version": "0.370.0",
+    "type": "breaking",
+    "title": "The deprecated complianceProfilesOpsFeature constant is removed",
+    "detail": "complianceProfilesOpsFeature was kept next to createComplianceProfilesOpsFeature() for one release. Mount the feature by calling createComplianceProfilesOpsFeature().",
+    "migration": "Run bun kumiko-upgrade --apply. It replaces complianceProfilesOpsFeature with createComplianceProfilesOpsFeature().",
+    "codemod": "scripts/codemod/feature-factory.ts"
+  }
+]

package/src/crypto-shredding/changes.json

@@ -1,4 +1,10 @@
 [
+  {
+    "version": "0.370.0",
+    "type": "improvement",
+    "title": "kmsEnvSchema declares the subject-key KMS variables",
+    "detail": "kmsEnvSchema lists the 13 KMS slots (PLATFORM_KEK, its rotation predecessor and versions, KUMIKO_BLIND_INDEX_KEY, SUBJECT_KEYS_DATABASE_URL, the _CIPHERTEXT twins and the Key Manager coordinates), all optional. createCryptoShreddingFeature registers it, so composeEnvSchema picks it up."
+  },
   {
     "version": "0.368.0",
     "type": "fix",

package/src/custom-fields/changes.json

@@ -1,4 +1,12 @@
 [
+  {
+    "version": "0.370.0",
+    "type": "breaking",
+    "title": "The deprecated customFieldsFeature constant is removed",
+    "detail": "customFieldsFeature was kept next to createCustomFieldsFeature() for one release. Mount the feature by calling createCustomFieldsFeature().",
+    "migration": "Run bun kumiko-upgrade --apply. It replaces customFieldsFeature with createCustomFieldsFeature().",
+    "codemod": "scripts/codemod/feature-factory.ts"
+  },
   {
     "version": "0.364.0",
     "type": "fix",

package/src/delivery/changes.json

@@ -1,4 +1,16 @@
 [
+  {
+    "version": "0.370.0",
+    "type": "improvement",
+    "title": "Unsubscribe confirmation, result and link-invalid pages look like the tenant's mails",
+    "detail": "The pages behind a mail's unsubscribe link now show the tenant's brand row (logo from managed-pages branding or the initial tile, name, brand suffix), the accent color, the site band and the mail footer (footer text, imprint, privacy) in a centered card with the bundled IBM Plex Sans font served same-origin, no external font CDN. Every state (confirm, unsubscribed with undo, subscribed again, failed, link invalid or expired) is translated in en, de and es and fits 375 px. The page answers with its own CSP (default-src 'none', the style block by sha256 hash, font-src 'self', img-src 'self' data: plus the logo's https origin, form-action 'self'). A browser GET or form POST with an invalid or expired token now gets a 400 HTML page instead of JSON (expired tokens keep the tenant's look and the mail's language, forged ones get the plain page in the Accept-Language language); JSON and one-click requests answer as before. Mail renderers can implement the new optional RendererPlugin.readMailChrome (renderer-mail-html does) which the system-only query delivery:query:unsubscribePageChrome reads. renderUnsubscribeResultPage takes an optional chrome and the new kind \"invalid\" for an app's own dead links; apps with their own CSP need style-src 'unsafe-inline' and the logo origin for it."
+  },
+  {
+    "version": "0.369.0",
+    "type": "improvement",
+    "title": "Unsubscribe links in dev and a reusable result page",
+    "detail": "runDevApp accepts unsubscribe: { secret, tenantOrigin? } like runProdApp, mounts the unsubscribe routes and signs the links (base URL from auth.mail.baseUrl or APP_BASE_URL). Both share resolveUnsubscribeWiring from server-runtime. delivery exports renderUnsubscribeResultPage({ kind: \"unsubscribed\" | \"resubscribed\" | \"failed\", locale, resubscribeToken? }), the page the unsubscribe routes answer with, for apps that serve their own (e.g. legacy) unsubscribe links; without a resubscribeToken it offers no undo button."
+  },
   {
     "version": "0.367.0",
     "type": "improvement",

package/src/derivatives-sharp/changes.json

@@ -1,4 +1,12 @@
 [
+  {
+    "version": "0.370.0",
+    "type": "breaking",
+    "title": "The deprecated derivativesSharpFeature constant is removed",
+    "detail": "derivativesSharpFeature was kept next to createDerivativesSharpFeature() for one release. Mount the feature by calling createDerivativesSharpFeature().",
+    "migration": "Run bun kumiko-upgrade --apply. It replaces derivativesSharpFeature with createDerivativesSharpFeature().",
+    "codemod": "scripts/codemod/feature-factory.ts"
+  },
   {
     "version": "0.352.0",
     "type": "fix",

package/src/document-ingest-foundation/changes.json

@@ -1,4 +1,12 @@
 [
+  {
+    "version": "0.370.0",
+    "type": "breaking",
+    "title": "The deprecated documentIngestFoundationFeature constant is removed",
+    "detail": "documentIngestFoundationFeature was kept next to createDocumentIngestFoundationFeature() for one release. Mount the feature by calling createDocumentIngestFoundationFeature().",
+    "migration": "Run bun kumiko-upgrade --apply. It replaces documentIngestFoundationFeature with createDocumentIngestFoundationFeature().",
+    "codemod": "scripts/codemod/feature-factory.ts"
+  },
   {
     "version": "0.365.0",
     "type": "fix",

package/src/file-derivatives/changes.json

@@ -1,4 +1,12 @@
 [
+  {
+    "version": "0.370.0",
+    "type": "breaking",
+    "title": "The deprecated fileDerivativesFeature constant is removed",
+    "detail": "fileDerivativesFeature was kept next to createFileDerivativesFeature() for one release. Mount the feature by calling createFileDerivativesFeature().",
+    "migration": "Run bun kumiko-upgrade --apply. It replaces fileDerivativesFeature with createFileDerivativesFeature().",
+    "codemod": "scripts/codemod/feature-factory.ts"
+  },
   {
     "version": "0.313.0",
     "type": "fix",

package/src/file-foundation/changes.json

@@ -1,4 +1,12 @@
 [
+  {
+    "version": "0.370.0",
+    "type": "breaking",
+    "title": "The deprecated fileFoundationFeature constant is removed",
+    "detail": "fileFoundationFeature was kept next to createFileFoundationFeature() for one release. Mount the feature by calling createFileFoundationFeature().",
+    "migration": "Run bun kumiko-upgrade --apply. It replaces fileFoundationFeature with createFileFoundationFeature().",
+    "codemod": "scripts/codemod/feature-factory.ts"
+  },
   {
     "version": "0.364.0",
     "type": "fix",

package/src/file-provider-inmemory/changes.json

@@ -1 +1,10 @@
-[]
+[
+  {
+    "version": "0.370.0",
+    "type": "breaking",
+    "title": "The deprecated fileProviderInMemoryFeature constant is removed",
+    "detail": "fileProviderInMemoryFeature was kept next to createFileProviderInMemoryFeature() for one release. Mount the feature by calling createFileProviderInMemoryFeature().",
+    "migration": "Run bun kumiko-upgrade --apply. It replaces fileProviderInMemoryFeature with createFileProviderInMemoryFeature().",
+    "codemod": "scripts/codemod/feature-factory.ts"
+  }
+]

package/src/file-provider-s3/changes.json

@@ -1,4 +1,26 @@
 [
+  {
+    "version": "0.370.0",
+    "type": "improvement",
+    "title": "s3EnvSchema and createS3EnvSchema declare the S3 provider variables",
+    "detail": "s3EnvSchema covers S3_BUCKET, S3_REGION, S3_ACCESS_KEY, S3_SECRET_KEY, S3_ENDPOINT and S3_FORCE_PATH_STYLE; createFileProviderS3Feature({ fromEnv: true }) registers it. createS3EnvSchema({ prefix }) builds the same block under another prefix, for example RELEASES_S3_. The endpoint must use https unless the host is loopback, and a blank endpoint counts as unset."
+  },
+  {
+    "version": "0.370.0",
+    "type": "breaking",
+    "title": "The file-provider-s3-env and files-provider-s3 subpaths are removed",
+    "detail": "Both deprecated re-export subpaths of the S3 merge are gone. The env-driven provider is createFileProviderS3Feature({ fromEnv: true }) from @cosmicdrift/kumiko-bundled-features/file-provider-s3 and replaces fileProviderS3EnvFeature. S3ProviderConfig, createS3Provider, createS3ProviderFromEnv, parseS3EnvConfig and resolveForcePathStyle come from @cosmicdrift/kumiko-bundled-features/file-provider-s3/lib.",
+    "migration": "Run bun kumiko-upgrade --apply. It rewrites fileProviderS3EnvFeature to createFileProviderS3Feature({ fromEnv: true }) and moves files-provider-s3 imports to file-provider-s3/lib.",
+    "codemod": "scripts/codemod/s3-imports.ts"
+  },
+  {
+    "version": "0.370.0",
+    "type": "breaking",
+    "title": "The deprecated fileProviderS3Feature constant is removed",
+    "detail": "fileProviderS3Feature was kept next to createFileProviderS3Feature() for one release. Mount the feature by calling createFileProviderS3Feature().",
+    "migration": "Run bun kumiko-upgrade --apply. It replaces fileProviderS3Feature with createFileProviderS3Feature().",
+    "codemod": "scripts/codemod/feature-factory.ts"
+  },
   {
     "version": "0.368.0",
     "type": "breaking",

package/src/folders/changes.json

@@ -1,4 +1,12 @@
 [
+  {
+    "version": "0.370.0",
+    "type": "breaking",
+    "title": "The deprecated foldersFeature constant is removed",
+    "detail": "foldersFeature was kept next to createFoldersFeature() for one release. Mount the feature by calling createFoldersFeature().",
+    "migration": "Run bun kumiko-upgrade --apply. It replaces foldersFeature with createFoldersFeature().",
+    "codemod": "scripts/codemod/feature-factory.ts"
+  },
   {
     "version": "0.354.0",
     "type": "fix",

package/src/folders-user-data/changes.json

@@ -1 +1,10 @@
-[]
+[
+  {
+    "version": "0.370.0",
+    "type": "breaking",
+    "title": "The deprecated foldersUserDataFeature constant is removed",
+    "detail": "foldersUserDataFeature was kept next to createFoldersUserDataFeature() for one release. Mount the feature by calling createFoldersUserDataFeature().",
+    "migration": "Run bun kumiko-upgrade --apply. It replaces foldersUserDataFeature with createFoldersUserDataFeature().",
+    "codemod": "scripts/codemod/feature-factory.ts"
+  }
+]

package/src/form-draft/changes.json

@@ -1,4 +1,12 @@
 [
+  {
+    "version": "0.370.0",
+    "type": "breaking",
+    "title": "The deprecated formDraftFeature constant is removed",
+    "detail": "formDraftFeature was kept next to createFormDraftFeature() for one release. Mount the feature by calling createFormDraftFeature().",
+    "migration": "Run bun kumiko-upgrade --apply. It replaces formDraftFeature with createFormDraftFeature().",
+    "codemod": "scripts/codemod/feature-factory.ts"
+  },
   {
     "version": "0.353.0",
     "type": "fix",

package/src/form-draft-user-data/changes.json

@@ -1 +1,10 @@
-[]
+[
+  {
+    "version": "0.370.0",
+    "type": "breaking",
+    "title": "The deprecated formDraftUserDataFeature constant is removed",
+    "detail": "formDraftUserDataFeature was kept next to createFormDraftUserDataFeature() for one release. Mount the feature by calling createFormDraftUserDataFeature().",
+    "migration": "Run bun kumiko-upgrade --apply. It replaces formDraftUserDataFeature with createFormDraftUserDataFeature().",
+    "codemod": "scripts/codemod/feature-factory.ts"
+  }
+]

package/src/foundation-shared/changes.json

@@ -1 +1,8 @@
-[]
+[
+  {
+    "version": "0.370.0",
+    "type": "improvement",
+    "title": "buildInfoEnvSchema and demoAdminEnvSchema",
+    "detail": "buildInfoEnvSchema declares BUILD_VERSION and BUILD_TIME. demoAdminEnvSchema declares the seed logins DEMO_ADMIN_EMAIL and DEMO_SYSADMIN_EMAIL (required), their passwords (optional, at least 16 characters) and an optional DEMO_TENANT_ID. Apps add both through extend."
+  }
+]

package/src/host-routing/changes.json

@@ -0,0 +1,8 @@
+[
+  {
+    "version": "0.370.0",
+    "type": "improvement",
+    "title": "createHostRoutingFeature and createHostDispatch route tenants by host or path",
+    "detail": "One HostRoutingOptions object ({ tenantBy: \"host\" } or { tenantBy: \"path\", tenantPathPrefix }, plus baseDomain, apex, tenant, unknownTenant?, hosts?, locales?) drives both halves. createHostRoutingFeature registers an authoritative Host-header tenant resolver in host mode and, in both modes, an existence check that admits only enabled, active tenants. apexAnonymousTenantId gives anonymous apex calls a tenant (e.g. SYSTEM_TENANT_ID); without it the apex answers tenant_required. createHostDispatch is a runProdApp hostDispatch: HTML file and optional CSP per surface (without csp the runProdApp default applies), a 301 from the default-locale prefix to the unprefixed path, and 404 for unknown tenants and hosts. toDevHostDispatch(dispatch, { entries, staticDir }) from @cosmicdrift/kumiko-dev-server plugs the same decision into the dev server. Apps with their own routing feature and hostDispatch move to these; app-specific redirects or custom domains wrap the dispatch function."
+  }
+]

package/src/inbound-mail-foundation/changes.json

@@ -1,4 +1,12 @@
 [
+  {
+    "version": "0.370.0",
+    "type": "breaking",
+    "title": "The deprecated inboundMailFoundationFeature constant is removed",
+    "detail": "inboundMailFoundationFeature was kept next to createInboundMailFoundationFeature() for one release. Mount the feature by calling createInboundMailFoundationFeature().",
+    "migration": "Run bun kumiko-upgrade --apply. It replaces inboundMailFoundationFeature with createInboundMailFoundationFeature().",
+    "codemod": "scripts/codemod/feature-factory.ts"
+  },
   {
     "version": "0.366.0",
     "type": "improvement",

package/src/inbound-provider-imap/changes.json

@@ -1,4 +1,12 @@
 [
+  {
+    "version": "0.370.0",
+    "type": "breaking",
+    "title": "The deprecated inboundProviderImapFeature constant is removed",
+    "detail": "inboundProviderImapFeature was kept next to createInboundProviderImapFeature() for one release. Mount the feature by calling createInboundProviderImapFeature().",
+    "migration": "Run bun kumiko-upgrade --apply. It replaces inboundProviderImapFeature with createInboundProviderImapFeature().",
+    "codemod": "scripts/codemod/feature-factory.ts"
+  },
   {
     "version": "0.354.0",
     "type": "fix",

package/src/inbound-provider-inmemory/changes.json

@@ -1 +1,10 @@
-[]
+[
+  {
+    "version": "0.370.0",
+    "type": "breaking",
+    "title": "The deprecated inboundProviderInMemoryFeature constant is removed",
+    "detail": "inboundProviderInMemoryFeature was kept next to createInboundProviderInMemoryFeature() for one release. Mount the feature by calling createInboundProviderInMemoryFeature().",
+    "migration": "Run bun kumiko-upgrade --apply. It replaces inboundProviderInMemoryFeature with createInboundProviderInMemoryFeature().",
+    "codemod": "scripts/codemod/feature-factory.ts"
+  }
+]

package/src/ledger/changes.json

@@ -1,4 +1,12 @@
 [
+  {
+    "version": "0.370.0",
+    "type": "breaking",
+    "title": "The deprecated ledgerFeature constant is removed",
+    "detail": "ledgerFeature was kept next to createLedgerFeature() for one release. Mount the feature by calling createLedgerFeature().",
+    "migration": "Run bun kumiko-upgrade --apply. It replaces ledgerFeature with createLedgerFeature().",
+    "codemod": "scripts/codemod/feature-factory.ts"
+  },
   {
     "version": "0.364.0",
     "type": "fix",

package/src/legal-pages/changes.json

@@ -1,4 +1,10 @@
 [
+  {
+    "version": "0.370.0",
+    "type": "improvement",
+    "title": "legal-pages serves terms of service, ships a layout helper and a boot seed",
+    "detail": "createLegalPagesFeature({ terms: true }) adds /legal/nutzungsbedingungen and /legal/terms (slug terms, de/en, never boot-required). createLegalPagesLayout({ siteName, css?, stylesheetHrefs?, headerHtml?, footerHtml?, contentClass? }) builds a wrapLayout with the app's chrome. legalContentSeed({ blocks } | { path }) returns a seed for runProdApp seeds that writes the blocks into SYSTEM_TENANT and updates existing ones, so the JSON stays authoritative. legalPagePath(routes, slug, lang) from the client-safe ./legal-pages/constants subpath gives static sites the same paths. Defaults are unchanged."
+  },
   {
     "version": "0.352.0",
     "type": "fix",

package/src/mail-foundation/changes.json

@@ -1 +1,10 @@
-[]
+[
+  {
+    "version": "0.370.0",
+    "type": "breaking",
+    "title": "The deprecated mailFoundationFeature constant is removed",
+    "detail": "mailFoundationFeature was kept next to createMailFoundationFeature() for one release. Mount the feature by calling createMailFoundationFeature().",
+    "migration": "Run bun kumiko-upgrade --apply. It replaces mailFoundationFeature with createMailFoundationFeature().",
+    "codemod": "scripts/codemod/feature-factory.ts"
+  }
+]

package/src/mail-transport-inmemory/changes.json

@@ -1 +1,10 @@
-[]
+[
+  {
+    "version": "0.370.0",
+    "type": "breaking",
+    "title": "The deprecated mailTransportInMemoryFeature constant is removed",
+    "detail": "mailTransportInMemoryFeature was kept next to createMailTransportInMemoryFeature() for one release. Mount the feature by calling createMailTransportInMemoryFeature().",
+    "migration": "Run bun kumiko-upgrade --apply. It replaces mailTransportInMemoryFeature with createMailTransportInMemoryFeature().",
+    "codemod": "scripts/codemod/feature-factory.ts"
+  }
+]

package/src/mail-transport-smtp/changes.json

@@ -1,4 +1,19 @@
 [
+  {
+    "version": "0.370.0",
+    "type": "breaking",
+    "title": "The deprecated mailTransportSmtpFeature constant is removed",
+    "detail": "mailTransportSmtpFeature was kept next to createMailTransportSmtpFeature() for one release. Mount the feature by calling createMailTransportSmtpFeature().",
+    "migration": "Run bun kumiko-upgrade --apply. It replaces mailTransportSmtpFeature with createMailTransportSmtpFeature().",
+    "codemod": "scripts/codemod/feature-factory.ts"
+  },
+  {
+    "version": "0.369.0",
+    "type": "breaking",
+    "title": "Tenant admins edit their own SMTP server on the Email sending screen",
+    "detail": "mail-foundation's provider key and the SMTP keys (host, port, SSL/TLS, user name, sender address) carry settings masks, so the generated Settings-Hub shows tenant admins one Email sending form: the provider choice, the chosen provider's connection fields and its password, each field with a help text and every label in English, German and Spanish, saved together by one Save button in one /api/batch. Switching the provider swaps the fields at once; fields of a provider that is not selected are not saved. A selector owner's selection screen (`<owner>-tenant-selection`) now carries the plugins' config keys (field id `<owner>-<key>`) and secrets (field id `<plugin>-<key>`, listed in the new ConfigEditScreenDefinition.secretKeys) behind a visible condition on the provider field; the separate `<plugin>-tenant` and `<plugin>-tenant-secrets` screens and their dashboard panels are gone, and so is the `config.settings.saveProvider` label. A secret with its own writeRoles stays on the global secrets screen. Boot validation checks every secretKeys field (tenant scope, writeOnly text, declared secret). The configEdit renderer loads secretKeys fields from secrets:query:list (set or unset, no preview), writes them with secrets:write:set or secrets:write:delete in the same batch, and leaves hidden fields out. The provider key is no longer required: empty means the tenant has no own server and the platform sends, so readiness no longer reports it as missing (createTransportForTenant still throws on an empty provider). The provider and SMTP keys are written by TenantAdmin and the system identity, no longer by SystemAdmin, because a platform-level provider would reach every tenant without that tenant's password. The secrets set and delete handlers also admit the system identity, so server code stores a tenant secret via dispatchSystemWrite through the same key and value checks as an admin; the settings screens keep showing only the human roles. The provider choice shows each plugin's `<feature>.settings` name, also for a plugin without settings of its own, and keeps the English name when a locale feature mounted earlier declares the same key in its own language only. A MailTransportPlugin with `selectableInSettings: false` stays allowed on the server but is not offered in the form; the in-memory transport sets it, because apps mount it next to smtp in production and a tenant admin picking it would drop every mail. A plugin's secrets section takes an optional `<feature>.settings.secrets` title (SMTP password under \"SMTP sign-in\").",
+    "migration": "E2E specs that used the testIds `dashboard-panel-<plugin>-tenant`, `dashboard-panel-<plugin>-tenant-secrets` or the separate secret input of these screens address the fields of `<owner>-tenant-selection` instead (one Save). Code that wrote these keys as a SystemAdmin user writes them as the tenant's TenantAdmin or via dispatchSystemWrite. Apps that relied on readiness flagging an empty provider check it themselves."
+  },
   {
     "version": "0.326.1",
     "type": "fix",

package/src/notes-history/changes.json

@@ -1,4 +1,12 @@
 [
+  {
+    "version": "0.370.0",
+    "type": "breaking",
+    "title": "The deprecated notesHistoryFeature constant is removed",
+    "detail": "notesHistoryFeature was kept next to createNotesHistoryFeature() for one release. Mount the feature by calling createNotesHistoryFeature().",
+    "migration": "Run bun kumiko-upgrade --apply. It replaces notesHistoryFeature with createNotesHistoryFeature().",
+    "codemod": "scripts/codemod/feature-factory.ts"
+  },
   {
     "version": "0.358.0",
     "type": "fix",