@cosmicdrift/kumiko-bundled-features 0.372.0 → 0.374.0

package/dist/auth-email-password/i18n.js

@@ -37,6 +37,7 @@ export const defaultTranslations = {
         "auth.errors.invalidSignupToken": "Activation link is invalid or expired. Please request a new one.",
         "auth.errors.signupEmailAlreadyRegistered": "An account already exists for this email. Please sign in or reset your password.",
         "auth.errors.unknownError": "Something went wrong. Please try again.",
+        "auth.errors.tooManyRequests": "Too many requests. Please wait briefly.",
         "auth.errors.originNotAllowed": "Requests from this origin are not allowed.",
         "auth.forgotPassword.title": "Reset password",
         "auth.forgotPassword.intro": "Enter your email. If an account exists, we'll send you a reset link.",

package/dist/auth-email-password/web/client-actions.d.ts

@@ -0,0 +1,2 @@
+import type { ClientActionHandler } from "@cosmicdrift/kumiko-renderer";
+export declare const emailPasswordClientActions: Readonly<Record<string, ClientActionHandler>>;

package/dist/auth-email-password/web/client-actions.js

@@ -0,0 +1,23 @@
+// @runtime client
+// Handlers for RowAction `kind: "clientAction"`: an admin screen lists users and
+// triggers the same public mail flows the login screens use.
+import { requestEmailVerification, requestPasswordReset, } from "./auth-client.js";
+function failureMessageKey(failure) {
+    return failure.reason === "rate_limited"
+        ? "auth.errors.tooManyRequests"
+        : "auth.errors.unknownError";
+}
+function emailFlowHandler(flow) {
+    return async (payload) => {
+        const email = payload["email"];
+        if (typeof email !== "string" || email === "") {
+            return { ok: false, message: "auth.errors.invalidBody" };
+        }
+        const result = await flow(email);
+        return result.ok ? { ok: true } : { ok: false, message: failureMessageKey(result.error) };
+    };
+}
+export const emailPasswordClientActions = {
+    "auth-email-password:request-password-reset": emailFlowHandler(requestPasswordReset),
+    "auth-email-password:request-email-verification": emailFlowHandler(requestEmailVerification),
+};

package/dist/auth-email-password/web/client-plugin.d.ts

@@ -1,4 +1,4 @@
-import type { TranslationsByLocale } from "@cosmicdrift/kumiko-renderer";
+import type { ClientActionHandler, TranslationsByLocale } from "@cosmicdrift/kumiko-renderer";
 import type { ComponentType, ReactNode } from "react";
 import { type AuthGateOptions, type MfaSetupComponentProps, type MfaVerifyComponentProps } from "./auth-gate.tsx";
 import type { LoginScreenProps } from "./login-screen.tsx";
@@ -41,5 +41,6 @@ export type EmailPasswordClientFeature = {
         children: ReactNode;
     }>[];
     readonly translations: TranslationsByLocale;
+    readonly clientActions: Readonly<Record<string, ClientActionHandler>>;
 };
 export declare function emailPasswordClient(options?: EmailPasswordClientOptions): EmailPasswordClientFeature;

package/dist/auth-email-password/web/client-plugin.js

@@ -6,6 +6,7 @@
 // Strings pro Locale, pro Key.
 import { defaultTranslations, mergeTranslations } from "../i18n.js";
 import { makeSessionAuthGate, } from "./auth-gate.js";
+import { emailPasswordClientActions } from "./client-actions.js";
 export function emailPasswordClient(options = {}) {
     const translations = mergeTranslations(defaultTranslations, options.translations ?? {});
     return {
@@ -22,5 +23,6 @@ export function emailPasswordClient(options = {}) {
             }),
         ],
         translations,
+        clientActions: emailPasswordClientActions,
     };
 }

package/dist/cap-overview/handlers/tenant-caps-list.query.d.ts

@@ -8,14 +8,20 @@ type TenantCapsListRow = {
     readonly [capField: string]: unknown;
 };
 export declare function createTenantCapsListQuery(caps: readonly CapSpec[], listCaps: readonly string[]): import("@cosmicdrift/kumiko-framework/engine").PagedQueryHandlerDefinition<"tenant-caps:list", z.ZodObject<{
-    cursor: z.ZodOptional<z.ZodString>;
     limit: z.ZodDefault<z.ZodNumber>;
-    sort: z.ZodOptional<z.ZodString>;
+    offset: z.ZodOptional<z.ZodNumber>;
+    search: z.ZodOptional<z.ZodString>;
+    sort: z.ZodOptional<z.ZodEnum<{
+        billing: "billing";
+        name: "name";
+        tier: "tier";
+    }>>;
     sortDirection: z.ZodOptional<z.ZodEnum<{
         asc: "asc";
         desc: "desc";
     }>>;
-    search: z.ZodOptional<z.ZodString>;
+    totalCount: z.ZodOptional<z.ZodBoolean>;
+    cursor: z.ZodOptional<z.ZodNever>;
     filters: z.ZodOptional<z.ZodArray<z.ZodObject<{
         field: z.ZodString;
         op: z.ZodEnum<{
@@ -27,6 +33,5 @@ export declare function createTenantCapsListQuery(caps: readonly CapSpec[], list
         }>;
         value: z.ZodUnknown;
     }, z.core.$strip>>>;
-    totalCount: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strip>, TenantCapsListRow, import("@cosmicdrift/kumiko-types/event-type-map").KumikoEventTypeMap>;
 export {};

package/dist/cap-overview/handlers/tenant-caps-list.query.js

@@ -1,7 +1,6 @@
-import { buildEntityTable, decodeCursor, encodeCursor, selectMany, } from "@cosmicdrift/kumiko-framework/db";
-import { definePagedQueryHandler, MAX_LIST_LIMIT, } from "@cosmicdrift/kumiko-framework/engine";
+import { buildEntityTable, selectMany } from "@cosmicdrift/kumiko-framework/db";
+import { definePagedQueryHandler, pagedListSchema, pageRows, } from "@cosmicdrift/kumiko-framework/engine";
 import { InternalError, ValidationError } from "@cosmicdrift/kumiko-framework/errors";
-import { isOneOf } from "@cosmicdrift/kumiko-types/type-guards";
 import * as z from "zod";
 import { subscriptionsProjectionTable } from "../../billing-foundation/index.js";
 import { decryptTenantNames, tenantTable } from "../../tenant/index.js";
@@ -33,9 +32,6 @@ async function resolveLimitsByTenantAndCap(caps, tenants, configFor) {
     }));
     return new Map(entries);
 }
-function isSortableField(field) {
-    return isOneOf(SORTABLE_FIELDS, field);
-}
 // tier is a plain string with no defined ordering — lt/gt have no meaning
 // on it and are rejected rather than silently treated as "no filter".
 function assertSupportedTierFilterOp(op) {
@@ -93,16 +89,10 @@ export function createTenantCapsListQuery(caps, listCaps) {
     return definePagedQueryHandler({
         name: "tenant-caps:list",
         description: "Lists every tenant on the platform with its tier, billing provider/status and per-cap usage, paged, searchable by name and filterable by tier; use it as the operator-wide capacity overview.",
-        schema: z.object({
-            cursor: z.string().optional(),
-            limit: z.number().int().min(1).max(MAX_LIST_LIMIT).default(50),
-            sort: z.string().optional(),
-            sortDirection: z.enum(["asc", "desc"]).optional(),
-            search: z.string().optional(),
+        schema: pagedListSchema(SORTABLE_FIELDS).extend({
             filters: z
                 .array(z.object({ field: z.string(), op: FILTER_OP, value: z.unknown() }))
                 .optional(),
-            totalCount: z.boolean().optional(),
         }),
         access: { roles: ["SystemAdmin"] },
         escapeHatch: {
@@ -122,60 +112,28 @@ export function createTenantCapsListQuery(caps, listCaps) {
             const subscriptions = await selectMany(db, subscriptionsProjectionTable, {});
             const assignmentByTenant = new Map(assignments.map((row) => [row.tenantId, row]));
             const subscriptionByTenant = new Map(subscriptions.map((row) => [row.tenantId, row]));
-            // Case-insensitive substring search has no `ilike` operator in the
-            // query builder (only `like`, SQL-LIKE case-sensitive) — filtered here
-            // in JS, same as tenant/team-list.query.ts's search.
-            const search = query.payload.search?.trim().toLowerCase();
             const tierFilter = extractTierFilter(query.payload.filters ?? []);
             const merged = tenants
-                .filter((tenant) => search === undefined || search === "" || tenant.name.toLowerCase().includes(search))
                 .map((tenant) => {
                 const assignment = assignmentByTenant.get(tenant.id);
                 return {
+                    id: tenant.id,
                     tenantId: tenant.id,
                     name: tenant.name,
                     tier: assignment?.tier ?? "",
-                    source: assignment?.source ?? null,
                     billing: billingLabel(subscriptionByTenant.get(tenant.id), assignment?.source ?? null),
                 };
             })
                 .filter((row) => matchesTierFilter(row.tier, tierFilter));
-            const sortField = query.payload.sort ?? "name";
-            if (!isSortableField(sortField)) {
-                throw new ValidationError({
-                    fields: [
-                        {
-                            path: "sort",
-                            code: "unsupported_field",
-                            i18nKey: "cap-overview.errors.sortFieldUnsupported",
-                            params: { field: sortField },
-                        },
-                    ],
-                });
-            }
-            const sortDirection = query.payload.sortDirection ?? "asc";
-            const directionMultiplier = sortDirection === "asc" ? 1 : -1;
-            const sorted = [...merged].sort((a, b) => a[sortField].localeCompare(b[sortField]) * directionMultiplier);
-            // ponytail: base64-wrapped offset, not a SQL keyset — rows come from a
-            // JS merge of three tables (tenant/tier-assignment/subscription), same
-            // rationale as tenant/team-list.query.ts. Holds up to tier-engine's
-            // documented "single-pass scan" scale (a few thousand tenants); past
-            // that the fix is a real combined read-projection, not a cursor
-            // bolted onto this merge.
-            const offset = query.payload.cursor ? Number(decodeCursor(query.payload.cursor)) : 0;
-            if (!Number.isInteger(offset) || offset < 0) {
-                throw new ValidationError({
-                    fields: [
-                        {
-                            path: "cursor",
-                            code: "invalid_cursor",
-                            i18nKey: "cap-overview.errors.invalidCursor",
-                        },
-                    ],
-                });
-            }
-            const limit = query.payload.limit;
-            const page = sorted.slice(offset, offset + limit);
+            // Search and paging run in memory because the rows are a JS merge of
+            // three tables (tenant/tier-assignment/subscription), same rationale as
+            // tenant/team-list.query.ts. Holds up to tier-engine's documented
+            // "single-pass scan" scale (a few thousand tenants); past that the fix
+            // is a real combined read-projection.
+            const { rows: page, total } = pageRows(merged, query.payload, {
+                searchFields: ["name"],
+                defaultSort: "name",
+            });
             // Usage is computed only for this page's tenant ids, never for the
             // full tenant set; caps without usageBatch still cost one query per
             // tenant of the page, so those run in parallel.
@@ -212,12 +170,7 @@ export function createTenantCapsListQuery(caps, listCaps) {
                     ...capFields,
                 };
             });
-            const nextCursor = offset + limit < sorted.length ? encodeCursor(String(offset + limit)) : null;
-            return {
-                rows,
-                nextCursor,
-                ...(query.payload.totalCount === true && { total: merged.length }),
-            };
+            return { rows, nextCursor: null, ...(total !== undefined && { total }) };
         },
     });
 }

package/dist/cap-overview/i18n.js

@@ -15,11 +15,9 @@ export const CAP_OVERVIEW_I18N = {
     "cap-overview.errors.progressPrimitiveMissing": {
         en: "Usage bar unavailable — Progress primitive is not registered.",
     },
-    "cap-overview.errors.invalidCursor": { en: "The pagination cursor is invalid." },
     "cap-overview.errors.filterFieldUnsupported": {
         en: "Filtering by this field is not supported, or tier was filtered more than once.",
     },
-    "cap-overview.errors.sortFieldUnsupported": { en: "Sorting by this field is not supported." },
     "cap-overview.errors.tenantOverrideRequiresSystemAdmin": {
         en: "Only SystemAdmin may query another tenant's data.",
     },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-bundled-features",
-  "version": "0.372.0",
+  "version": "0.374.0",
   "description": "Built-in features — tenant, user, auth, delivery. The stuff you'd rewrite anyway, already typed.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -536,12 +536,12 @@
     }
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-dispatcher-live": "0.372.0",
-    "@cosmicdrift/kumiko-framework": "0.372.0",
-    "@cosmicdrift/kumiko-headless": "0.372.0",
-    "@cosmicdrift/kumiko-renderer": "0.372.0",
-    "@cosmicdrift/kumiko-renderer-web": "0.372.0",
-    "@cosmicdrift/kumiko-types": "0.372.0",
+    "@cosmicdrift/kumiko-dispatcher-live": "0.374.0",
+    "@cosmicdrift/kumiko-framework": "0.374.0",
+    "@cosmicdrift/kumiko-headless": "0.374.0",
+    "@cosmicdrift/kumiko-renderer": "0.374.0",
+    "@cosmicdrift/kumiko-renderer-web": "0.374.0",
+    "@cosmicdrift/kumiko-types": "0.374.0",
     "@mollie/api-client": "^4.5.0",
     "@node-rs/argon2": "^2.0.2",
     "@tiptap/core": "3.31.3",
@@ -1102,12 +1102,12 @@
   ],
   "devDependencies": {
     "@testing-library/user-event": "^14.6.1",
-    "@cosmicdrift/kumiko-locale-de": "0.372.0",
-    "@cosmicdrift/kumiko-locale-es": "0.372.0",
-    "@cosmicdrift/kumiko-renderer-mail-html": "0.372.0",
+    "@cosmicdrift/kumiko-locale-de": "0.374.0",
+    "@cosmicdrift/kumiko-locale-es": "0.374.0",
+    "@cosmicdrift/kumiko-renderer-mail-html": "0.374.0",
     "jsqr": "^1.4.0",
     "unpdf": "^1.8.1",
-    "@cosmicdrift/kumiko-testing": "0.372.0"
+    "@cosmicdrift/kumiko-testing": "0.374.0"
   },
   "peerDependencies": {
     "@cosmicdrift/kumiko-testing": ">=0.366.0 <1.0.0"

package/src/auth-email-password/changes.json

@@ -1,4 +1,10 @@
 [
+  {
+    "version": "0.374.0",
+    "type": "improvement",
+    "title": "Client actions for password reset and email verification",
+    "detail": "emailPasswordClient registers auth-email-password:request-password-reset and auth-email-password:request-email-verification for clientAction row actions."
+  },
   {
     "version": "0.370.0",
     "type": "improvement",

package/src/cap-overview/changes.json

@@ -1,4 +1,11 @@
 [
+  {
+    "version": "0.374.0",
+    "type": "breaking",
+    "title": "tenant-caps:list pages by offset and rejects cursor",
+    "detail": "The cap overview list showed page 1 on every page because the pager sends offset and the query only read cursor. tenant-caps:list now takes offset like the pager; a cursor in the payload is rejected with a 400 validation error and sort is an enum of the sortable fields. The unused cap-overview.errors.invalidCursor and sortFieldUnsupported keys are gone.",
+    "migration": "Callers of cap-overview:query:tenant-caps:list must send offset instead of cursor, and only a sortable field name as sort. Apps that override the removed i18n keys cap-overview.errors.invalidCursor or cap-overview.errors.sortFieldUnsupported can delete them. No caller in the kumiko-enterprise, kumiko-platform, kumiko-studio or app repos sends a cursor or defines these keys."
+  },
   {
     "version": "0.365.0",
     "type": "fix",