@cosmicdrift/kumiko-bundled-features 0.374.0 → 0.377.0

package/dist/account-security/constants.d.ts

@@ -1,4 +1,5 @@
 export declare const ACCOUNT_SECURITY_FEATURE = "account-security";
 export declare const ACCOUNT_SECURITY_SCREEN_ID = "account-security";
 export declare const ACCOUNT_SECURITY_SCREEN_QN = "account-security:screen:account-security";
+export declare const ACCOUNT_SECURITY_SCREEN_TITLE_KEY = "screen:account-security.title";
 export declare const ACCOUNT_SECURITY_NAV_LABEL = "account-security:nav.accountSecurity";

package/dist/account-security/constants.js

@@ -2,4 +2,5 @@
 export const ACCOUNT_SECURITY_FEATURE = "account-security";
 export const ACCOUNT_SECURITY_SCREEN_ID = "account-security";
 export const ACCOUNT_SECURITY_SCREEN_QN = `${ACCOUNT_SECURITY_FEATURE}:screen:${ACCOUNT_SECURITY_SCREEN_ID}`;
+export const ACCOUNT_SECURITY_SCREEN_TITLE_KEY = `screen:${ACCOUNT_SECURITY_SCREEN_ID}.title`;
 export const ACCOUNT_SECURITY_NAV_LABEL = `${ACCOUNT_SECURITY_FEATURE}:nav.accountSecurity`;

package/dist/account-security/index.d.ts

@@ -1,3 +1,3 @@
-export { ACCOUNT_SECURITY_FEATURE, ACCOUNT_SECURITY_NAV_LABEL, ACCOUNT_SECURITY_SCREEN_ID, ACCOUNT_SECURITY_SCREEN_QN, } from "./constants.ts";
+export { ACCOUNT_SECURITY_FEATURE, ACCOUNT_SECURITY_NAV_LABEL, ACCOUNT_SECURITY_SCREEN_ID, ACCOUNT_SECURITY_SCREEN_QN, ACCOUNT_SECURITY_SCREEN_TITLE_KEY, } from "./constants.ts";
 export { type AccountSecurityFeatureOptions, type AccountSecurityNavOptions, accountSecurityMfaStatusVisibility, createAccountSecurityFeature, } from "./feature.ts";
 export { ACCOUNT_SECURITY_I18N } from "./i18n.ts";

package/dist/account-security/index.js

@@ -1,3 +1,3 @@
-export { ACCOUNT_SECURITY_FEATURE, ACCOUNT_SECURITY_NAV_LABEL, ACCOUNT_SECURITY_SCREEN_ID, ACCOUNT_SECURITY_SCREEN_QN, } from "./constants.js";
+export { ACCOUNT_SECURITY_FEATURE, ACCOUNT_SECURITY_NAV_LABEL, ACCOUNT_SECURITY_SCREEN_ID, ACCOUNT_SECURITY_SCREEN_QN, ACCOUNT_SECURITY_SCREEN_TITLE_KEY, } from "./constants.js";
 export { accountSecurityMfaStatusVisibility, createAccountSecurityFeature, } from "./feature.js";
 export { ACCOUNT_SECURITY_I18N } from "./i18n.js";

package/dist/admin-shell/web/client-plugin.d.ts

@@ -1,5 +1,5 @@
 import { type TranslationsByLocale } from "@cosmicdrift/kumiko-renderer";
-import type { ClientFeatureDefinition } from "@cosmicdrift/kumiko-renderer-web";
+import type { ClientFeatureDefinition } from "@cosmicdrift/kumiko-renderer/web";
 export type AdminShellClientOptions = {
     readonly translations?: TranslationsByLocale;
 };

package/dist/audit/web/client-plugin.d.ts

@@ -1,5 +1,5 @@
 import { type TranslationsByLocale } from "@cosmicdrift/kumiko-renderer";
-import type { ClientFeatureDefinition } from "@cosmicdrift/kumiko-renderer-web";
+import type { ClientFeatureDefinition } from "@cosmicdrift/kumiko-renderer/web";
 export type AuditClientOptions = {
     readonly translations?: TranslationsByLocale;
 };

package/dist/auth-email-password/mail-notifications.js

@@ -1,6 +1,6 @@
 import { QnTypes, qn, templateVariable, } from "@cosmicdrift/kumiko-framework/engine";
 import { hasMailTranslationKey, listMailLocales, mailT, resolveMailLocale, } from "@cosmicdrift/kumiko-framework/i18n";
-import { escapeHtml, escapeHtmlAttr } from "@cosmicdrift/kumiko-headless";
+import { escapeHtml, escapeHtmlAttr } from "@cosmicdrift/kumiko-renderer/headless";
 import { AUTH_EMAIL_PASSWORD_FEATURE } from "./constants.js";
 export const AUTH_MAIL_KINDS = {
     passwordReset: { name: "password-reset", translationKey: "reset" },

package/dist/auth-email-password/web/auth-client.js

@@ -8,8 +8,8 @@
 // Die dispatcher-live nutzt denselben readCsrfToken-Helper; wir
 // reuse'n ihn hier, damit die Konstanten (Cookie-Name, Header-Name)
 // nicht divergieren.
-import { CSRF_HEADER_NAME, readCsrfToken } from "@cosmicdrift/kumiko-dispatcher-live";
 import { parseRoles } from "@cosmicdrift/kumiko-framework/utils";
+import { CSRF_HEADER_NAME, readCsrfToken } from "@cosmicdrift/kumiko-renderer/live";
 export function csrfHeader() {
     const token = readCsrfToken();
     return token !== undefined ? { [CSRF_HEADER_NAME]: token } : {};

package/dist/auth-email-password/web/auth-form-primitives.js

@@ -15,7 +15,7 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 // Link-Styles laufen über das Link-Primitive (variant="button"/"muted") —
 // die früheren authButtonClass/authMutedLinkClass sind dorthin gewandert.
 import { usePrimitives } from "@cosmicdrift/kumiko-renderer";
-import { BareFormProvider, cn } from "@cosmicdrift/kumiko-renderer-web";
+import { BareFormProvider, cn } from "@cosmicdrift/kumiko-renderer/web";
 import { createContext, useContext, useEffect, useState } from "react";
 const defaultAuthShell = (card) => (_jsx("div", { className: "min-h-screen flex items-center justify-center bg-background px-4", children: card }));
 const AuthShellContext = createContext(null);

package/dist/auth-email-password/web/default-topbar-actions.js

@@ -6,7 +6,7 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 // ThemeToggle → UserMenu (rechts). Apps mit eigener Anordnung
 // importieren weiter die Einzelkomponenten direkt — DefaultTopbarActions
 // ist Convenience, kein Muss.
-import { ThemeToggle } from "@cosmicdrift/kumiko-renderer-web";
+import { ThemeToggle } from "@cosmicdrift/kumiko-renderer/web";
 import { TenantSwitcher } from "./tenant-switcher.js";
 import { UserMenu } from "./user-menu.js";
 export function DefaultTopbarActions({ tenantName, extras, lightIcon, darkIcon, } = {}) {

package/dist/auth-email-password/web/index.js

@@ -3,7 +3,7 @@
 // Wird über den Sub-Path-Export `@cosmicdrift/kumiko-bundled-features/auth-email-
 // password/web` konsumiert — die Server-Seite (defineFeature) lebt in
 // `@cosmicdrift/kumiko-bundled-features/auth-email-password` und hat keine
-// React-/DOM-Deps. Trennung bleibt sauber so wie renderer vs renderer-web.
+// React-/DOM-Deps. Trennung bleibt sauber so wie renderer vs renderer/web.
 export { defaultTranslations, mergeTranslations } from "../i18n.js";
 export { AuthRequestError, confirmAccountUnlock, confirmSignup, requestAccountUnlock, requestEmailVerification, requestPasswordReset, requestSignup, resetPassword, toLoginResponse, verifyEmail, } from "./auth-client.js";
 export { AuthCard, AuthShellProvider, useAuthShell } from "./auth-form-primitives.js";

package/dist/auth-email-password/web/session.js

@@ -9,8 +9,8 @@ import { jsx as _jsx } from "react/jsx-runtime";
 // eine Dependency weniger im Browser-Bundle haben. Die Consumer leben
 // unter `<SessionProvider>`; der `useSession()`-Hook liefert den State
 // und die Transitions.
-import { readCsrfToken } from "@cosmicdrift/kumiko-dispatcher-live";
 import { CurrentUserProvider, useSessionEndedSignal, } from "@cosmicdrift/kumiko-renderer";
+import { readCsrfToken } from "@cosmicdrift/kumiko-renderer/live";
 import { createContext, useCallback, useContext, useEffect, useMemo, useState, } from "react";
 import { AuthRequestError, fetchCurrentUser, fetchTenants, login as loginApi, logout as logoutApi, switchTenant as switchTenantApi, } from "./auth-client.js";
 // Exported so screens that render on BOTH authenticated and anonymous public

package/dist/auth-email-password/web/tenant-menu-items.js

@@ -3,7 +3,7 @@ import { Fragment as _Fragment, jsx as _jsx, jsxs as _jsxs } from "react/jsx-run
 // Tenant choices as dropdown entries — the TenantSwitcher's list for a user
 // menu that carries the shell controls. Renders nothing for a single tenant.
 import { useTranslation } from "@cosmicdrift/kumiko-renderer";
-import { DropdownMenuCheckboxItem, DropdownMenuLabel, DropdownMenuSeparator, } from "@cosmicdrift/kumiko-renderer-web";
+import { DropdownMenuCheckboxItem, DropdownMenuLabel, DropdownMenuSeparator, } from "@cosmicdrift/kumiko-renderer/web";
 import { useSession } from "./session.js";
 export function TenantMenuItems({ tenantName }) {
     const t = useTranslation();

package/dist/auth-email-password/web/tenant-switcher.js

@@ -15,7 +15,7 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 // der Host den Resolver rein (kommt z.B. aus einer useTenantNames()-
 // Hook die einmalig am App-Boot geladen wird).
 import { useTranslation } from "@cosmicdrift/kumiko-renderer";
-import { cn, DropdownMenu, DropdownMenuCheckboxItem, DropdownMenuContent, DropdownMenuLabel, DropdownMenuTrigger, } from "@cosmicdrift/kumiko-renderer-web";
+import { cn, DropdownMenu, DropdownMenuCheckboxItem, DropdownMenuContent, DropdownMenuLabel, DropdownMenuTrigger, } from "@cosmicdrift/kumiko-renderer/web";
 import { Building2, ChevronDown } from "lucide-react";
 import { useCallback, useState } from "react";
 import { useSession } from "./session.js";

package/dist/auth-email-password/web/user-menu.js

@@ -10,7 +10,7 @@ import { Fragment as _Fragment, jsx as _jsx, jsxs as _jsxs } from "react/jsx-run
 // Component außerhalb des AuthGate einhängen ohne dass ein harter
 // Fehler entsteht.
 import { useTranslation } from "@cosmicdrift/kumiko-renderer";
-import { cn, DropdownMenu, DropdownMenuContent, DropdownMenuItem, DropdownMenuLabel, DropdownMenuSeparator, DropdownMenuTrigger, SidebarMenu, SidebarMenuButton, SidebarMenuItem, } from "@cosmicdrift/kumiko-renderer-web";
+import { cn, DropdownMenu, DropdownMenuContent, DropdownMenuItem, DropdownMenuLabel, DropdownMenuSeparator, DropdownMenuTrigger, SidebarMenu, SidebarMenuButton, SidebarMenuItem, } from "@cosmicdrift/kumiko-renderer/web";
 import { ChevronDown, ChevronsUpDown, LogOut } from "lucide-react";
 import { useSession } from "./session.js";
 function initials(value) {

package/dist/auth-foundation/env.d.ts

@@ -0,0 +1,9 @@
+import * as z from "zod";
+/** Env block behind `auth.admin` and `auth.mail`: the first admin login and the public app URL
+ *  the mail links and the Origin guard derive from. Unset keys leave the matching option to
+ *  explicit values; an app spreads `.shape` into its env schema and passes the parsed values on. */
+export declare const authEnvSchema: z.ZodObject<{
+    APP_BASE_URL: z.ZodOptional<z.ZodURL>;
+    AUTH_ADMIN_EMAIL: z.ZodOptional<z.ZodEmail>;
+    AUTH_ADMIN_PASSWORD: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;

package/dist/auth-foundation/env.js

@@ -0,0 +1,21 @@
+import * as z from "zod";
+const ADMIN_PASSWORD_MIN_LENGTH = 16;
+/** Env block behind `auth.admin` and `auth.mail`: the first admin login and the public app URL
+ *  the mail links and the Origin guard derive from. Unset keys leave the matching option to
+ *  explicit values; an app spreads `.shape` into its env schema and passes the parsed values on. */
+export const authEnvSchema = z.object({
+    APP_BASE_URL: z
+        .url()
+        .optional()
+        .describe("Public https URL of the app; auth mail links, the Origin guard and unsubscribe links use it."),
+    AUTH_ADMIN_EMAIL: z
+        .email()
+        .optional()
+        .describe("Login of the admin seeded through `auth.admin`."),
+    AUTH_ADMIN_PASSWORD: z
+        .string()
+        .min(ADMIN_PASSWORD_MIN_LENGTH)
+        .optional()
+        .describe("Password of the admin seeded through `auth.admin`. Generate with: openssl rand -hex 24")
+        .meta({ kumiko: { pulumi: { generator: "openssl rand -hex 24", secret: true } } }),
+});

package/dist/auth-foundation/index.d.ts

@@ -1,3 +1,4 @@
+export { authEnvSchema } from "./env.ts";
 export { createAuthFoundationFeature, type ResolvedTenantResolver, resolveSessionStore, resolveTenantExistence, resolveTenantResolver, resolveTokenVerifier, } from "./feature.ts";
 export { resolveAnonymousAccessFromRegistry } from "./resolve-anonymous-access.ts";
 export { type AuthProviderBuildDeps, type AuthProviderPlugin, type AuthVerifier, EXT_SESSION_STORE, EXT_TENANT_EXISTENCE, EXT_TENANT_RESOLVER, EXT_TOKEN_VERIFIER, isAuthProviderPlugin, isSessionStoreProvider, isTenantExistenceProvider, isTenantResolverProvider, isTenantResolverTrust, isValidTokenShape, type SessionMassRevoker, type SessionStore, type SessionStoreProvider, type TenantExistenceProvider, type TenantExistsFn, type TenantResolverFn, type TenantResolverProvider, type TenantResolverTrust, type TokenShape, tokenShapeKey, tokenShapeMatches, } from "./types.ts";

package/dist/auth-foundation/index.js

@@ -1,4 +1,5 @@
 // Public API of the auth-foundation bundled-feature.
+export { authEnvSchema } from "./env.js";
 export { createAuthFoundationFeature, resolveSessionStore, resolveTenantExistence, resolveTenantResolver, resolveTokenVerifier, } from "./feature.js";
 export { resolveAnonymousAccessFromRegistry } from "./resolve-anonymous-access.js";
 export { EXT_SESSION_STORE, EXT_TENANT_EXISTENCE, EXT_TENANT_RESOLVER, EXT_TOKEN_VERIFIER, isAuthProviderPlugin, isSessionStoreProvider, isTenantExistenceProvider, isTenantResolverProvider, isTenantResolverTrust, isValidTokenShape, tokenShapeKey, tokenShapeMatches, } from "./types.js";

package/dist/auth-mfa/schema/user-mfa.d.ts

@@ -13,7 +13,7 @@ export declare const userMfaEntity: import("@cosmicdrift/kumiko-types/fields").E
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -36,7 +36,7 @@ export declare const userMfaEntity: import("@cosmicdrift/kumiko-types/fields").E
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -59,7 +59,7 @@ export declare const userMfaEntity: import("@cosmicdrift/kumiko-types/fields").E
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -114,7 +114,7 @@ export declare const userMfaTable: import("@cosmicdrift/kumiko-framework/db").En
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -137,7 +137,7 @@ export declare const userMfaTable: import("@cosmicdrift/kumiko-framework/db").En
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -160,7 +160,7 @@ export declare const userMfaTable: import("@cosmicdrift/kumiko-framework/db").En
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {

package/dist/billing-foundation/consumer-protection/confirmation-mail.js

@@ -1,4 +1,4 @@
-import { escapeHtml, escapeHtmlAttr } from "@cosmicdrift/kumiko-headless";
+import { escapeHtml, escapeHtmlAttr } from "@cosmicdrift/kumiko-renderer/headless";
 import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import { Marked } from "marked";
 import { isAllowedDocumentLinkHref, isDocumentPlaceholderHref, } from "../../template-resolver/index.js";

package/dist/billing-foundation/consumer-protection/termination-pages.js

@@ -1,7 +1,7 @@
 // Public § 312k pages (/legal/kuendigen, /legal/cancel): form → review → confirm,
 // no JavaScript. Every echoed value goes through escapeHtml/escapeHtmlAttr.
 import { getSessionCookies } from "@cosmicdrift/kumiko-framework/api";
-import { escapeHtml, escapeHtmlAttr } from "@cosmicdrift/kumiko-headless";
+import { escapeHtml, escapeHtmlAttr } from "@cosmicdrift/kumiko-renderer/headless";
 import { isOneOf } from "@cosmicdrift/kumiko-types/type-guards";
 import { getCookie } from "hono/cookie";
 import { redirectToCanonicalPath, securePageHeaders, slashVariantOf, wrapInLayout, } from "../../page-render/index.js";

package/dist/billing-foundation/contact-card.d.ts

@@ -0,0 +1,2 @@
+/** Shared by boot validation and the panel (defense in depth); keep free of server imports. */
+export declare function isContactCardHref(href: string): boolean;

package/dist/billing-foundation/contact-card.js

@@ -0,0 +1,16 @@
+// @runtime client
+/** Shared by boot validation and the panel (defense in depth); keep free of server imports. */
+export function isContactCardHref(href) {
+    if (href !== href.trim())
+        return false;
+    let url;
+    try {
+        url = new URL(href);
+    }
+    catch {
+        return false;
+    }
+    if (url.protocol === "https:")
+        return true;
+    return url.protocol === "mailto:" && url.pathname !== "";
+}

package/dist/billing-foundation/entities.d.ts

@@ -13,7 +13,7 @@ export declare const subscriptionEntity: import("@cosmicdrift/kumiko-types/field
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -36,7 +36,7 @@ export declare const subscriptionEntity: import("@cosmicdrift/kumiko-types/field
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -59,7 +59,7 @@ export declare const subscriptionEntity: import("@cosmicdrift/kumiko-types/field
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -82,7 +82,7 @@ export declare const subscriptionEntity: import("@cosmicdrift/kumiko-types/field
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -105,7 +105,7 @@ export declare const subscriptionEntity: import("@cosmicdrift/kumiko-types/field
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -161,7 +161,7 @@ export declare const paymentEntity: import("@cosmicdrift/kumiko-types/fields").E
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -184,7 +184,7 @@ export declare const paymentEntity: import("@cosmicdrift/kumiko-types/fields").E
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -207,7 +207,7 @@ export declare const paymentEntity: import("@cosmicdrift/kumiko-types/fields").E
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {

package/dist/billing-foundation/handlers/billing-plans.query.js

@@ -10,7 +10,7 @@ const billingPlansSchema = z.object({}).strict();
 export function createBillingPlansQuery(options, catalog) {
     return {
         name: "billing-plans",
-        description: "Lists the purchasable plans with live price, benefits, the caller's current tier and which action (checkout | switch | current | unavailable | paymentPending) each plan offers.",
+        description: "Lists the purchasable plans with live price, benefits, the caller's current tier and which action (checkout | switch | current | unavailable | paymentPending) each plan offers, plus the optional price-less contact card.",
         schema: billingPlansSchema,
         access: { roles: catalog.viewRoles },
         handler: async (_query, ctx) => {

package/dist/billing-foundation/index.d.ts

@@ -12,5 +12,5 @@ export { getSubscriptionForTenant, type SubscriptionView } from "./get-subscript
 export { paymentsProjectionTable, subscriptionsProjectionTable } from "./projection.ts";
 export { billingPlansPanel, createBillingPlansScreen } from "./screens.ts";
 export { createSubscriptionTierSync, effectiveTierFromSubscription, SUBSCRIPTION_WEBHOOK_PATH, type SubscriptionTierSyncDeps, type TierSyncResult, } from "./subscription-tier-sync.ts";
-export { type BillingFoundationOptions, type BillingPlanBenefit, type BillingPlanCatalog, type BillingPlanPrice, type BillingPlansResult, type BillingPlanView, type ConsumerProtectionOptions, KNOWN_RECURRING_INTERVALS, type LegalLinkSet, type PaymentEvent, type ProviderPrice, type ProviderSubscriptionSnapshot, type RecurringInterval, type SubscriptionEvent, type SubscriptionProviderPlugin, } from "./types.ts";
+export { type BillingFoundationOptions, type BillingPlanBenefit, type BillingPlanCatalog, type BillingPlanContactCard, type BillingPlanPrice, type BillingPlansResult, type BillingPlanView, type ConsumerProtectionOptions, KNOWN_RECURRING_INTERVALS, type LegalLinkSet, type PaymentEvent, type ProviderPrice, type ProviderSubscriptionSnapshot, type RecurringInterval, type SubscriptionEvent, type SubscriptionProviderPlugin, } from "./types.ts";
 export { createSubscriptionWebhookRoute, type SubscriptionWebhookRouteOptions, } from "./webhook-handler.ts";

package/dist/billing-foundation/plan-catalog.js

@@ -159,5 +159,6 @@ export async function buildBillingPlans(ctx, plugin, catalog, now) {
         subscription,
         canPurchase,
         plans,
+        ...(catalog.contact !== undefined && { contact: catalog.contact }),
     };
 }

package/dist/billing-foundation/projection.d.ts

@@ -13,7 +13,7 @@ export declare const subscriptionsProjectionTable: import("@cosmicdrift/kumiko-f
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -36,7 +36,7 @@ export declare const subscriptionsProjectionTable: import("@cosmicdrift/kumiko-f
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -59,7 +59,7 @@ export declare const subscriptionsProjectionTable: import("@cosmicdrift/kumiko-f
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -82,7 +82,7 @@ export declare const subscriptionsProjectionTable: import("@cosmicdrift/kumiko-f
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -105,7 +105,7 @@ export declare const subscriptionsProjectionTable: import("@cosmicdrift/kumiko-f
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -160,7 +160,7 @@ export declare const paymentsProjectionTable: import("@cosmicdrift/kumiko-framew
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -183,7 +183,7 @@ export declare const paymentsProjectionTable: import("@cosmicdrift/kumiko-framew
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -206,7 +206,7 @@ export declare const paymentsProjectionTable: import("@cosmicdrift/kumiko-framew
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {

package/dist/billing-foundation/types.d.ts

@@ -259,6 +259,13 @@ export type BillingPlanBenefit = {
     readonly labelKey: string;
     readonly params?: Readonly<Record<string, string | number>>;
 };
+/** Price-less card (e.g. "Enterprise · Contact us"); `href` must be an absolute https: or mailto: URL. */
+export type BillingPlanContactCard = {
+    readonly labelKey: string;
+    readonly benefits: readonly BillingPlanBenefit[];
+    readonly actionLabelKey: string;
+    readonly href: string;
+};
 export type BillingPlanCatalog<TTier extends string = string> = {
     /** Purchasable tiers, in display order. */
     readonly plans: readonly TTier[];
@@ -280,6 +287,8 @@ export type BillingPlanCatalog<TTier extends string = string> = {
     readonly returnPath?: string;
     /** Defaults to the only registered provider exposing `priceToTier`. */
     readonly providerName?: string;
+    /** Rendered as the last card, no price, visible to `viewRoles` regardless of `purchaseRoles`. */
+    readonly contact?: BillingPlanContactCard;
 };
 export type LegalLinkSet = {
     readonly terms: string;
@@ -368,6 +377,8 @@ export type BillingPlansResult = {
     } | null;
     readonly canPurchase: boolean;
     readonly plans: readonly BillingPlanView[];
+    /** Present only when `catalog.contact` is configured. */
+    readonly contact?: BillingPlanContactCard;
     /** Present only when `consumerProtection` is configured. */
     readonly consumerProtection?: {
         readonly consentTexts: Readonly<Record<"de" | "en", {

package/dist/billing-foundation/validate-options.js

@@ -5,6 +5,7 @@
 import * as z from "zod";
 import { isTerminationScope, TERMINATION_SCOPES } from "./constants.js";
 import { CONSENT_LOCALES } from "./consumer-protection/consent-locale.js";
+import { isContactCardHref } from "./contact-card.js";
 import { isLegalLinkSet, } from "./types.js";
 function isRootRelativePath(path) {
     return path.startsWith("/") && !path.startsWith("//");
@@ -60,6 +61,16 @@ function validateLegalLinkSet(set, path) {
         }
     }
 }
+function validateContactCard(contact) {
+    for (const key of ["labelKey", "actionLabelKey"]) {
+        if (contact[key].trim() === "") {
+            throw new Error(`createBillingFoundationFeature: catalog.contact.${key} must not be empty.`);
+        }
+    }
+    if (!isContactCardHref(contact.href)) {
+        throw new Error(`createBillingFoundationFeature: catalog.contact.href "${contact.href}" must be an absolute https: or mailto: URL.`);
+    }
+}
 function validateBaseUrl(baseUrl) {
     let parsed;
     try {
@@ -114,4 +125,6 @@ export function validateOptions(options) {
     if (catalog.viewRoles.length === 0) {
         throw new Error("createBillingFoundationFeature: catalog.viewRoles must not be empty.");
     }
+    if (catalog.contact !== undefined)
+        validateContactCard(catalog.contact);
 }

package/dist/billing-foundation/web/billing-contact-plan.d.ts

@@ -0,0 +1,5 @@
+import type { ReactNode } from "react";
+import type { BillingPlanContactCard } from "../types.ts";
+export declare function BillingContactPlan({ contact, }: {
+    readonly contact: BillingPlanContactCard;
+}): ReactNode;

package/dist/billing-foundation/web/billing-contact-plan.js

@@ -0,0 +1,17 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+// @runtime client
+import { useLocale, useTranslation } from "@cosmicdrift/kumiko-renderer";
+import { PlanCard } from "@cosmicdrift/kumiko-renderer/web";
+import { isContactCardHref } from "../contact-card.js";
+import { localizedParams } from "./localized-params.js";
+export function BillingContactPlan({ contact, }) {
+    const t = useTranslation();
+    const locale = useLocale().locale();
+    if (!isContactCardHref(contact.href))
+        return null;
+    return (_jsx(PlanCard, { title: t(contact.labelKey), features: contact.benefits.map((benefit) => t(benefit.labelKey, localizedParams(benefit.params, locale))), ctaLink: {
+            label: t(contact.actionLabelKey),
+            href: contact.href,
+            target: new URL(contact.href).protocol === "https:" ? "_blank" : undefined,
+        }, testId: "billing-plan-card-contact" }));
+}

package/dist/billing-foundation/web/billing-plans-panel.js

@@ -1,12 +1,14 @@
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 // @runtime client
-import { toInstant } from "@cosmicdrift/kumiko-headless";
 import { useLocale, useMutation, usePrimitives, useQuery, useTranslation, } from "@cosmicdrift/kumiko-renderer";
-import { formatMoney, PlanCard, PlanGrid, } from "@cosmicdrift/kumiko-renderer-web";
+import { toInstant } from "@cosmicdrift/kumiko-renderer/headless";
+import { formatMoney, PlanCard, PlanGrid, } from "@cosmicdrift/kumiko-renderer/web";
 import { useState } from "react";
 import { BillingPlanActions, SubscriptionFoundationHandlers, SubscriptionFoundationQueries, SubscriptionStatuses, } from "../constants.js";
+import { BillingContactPlan } from "./billing-contact-plan.js";
 import { CancelContractDialog } from "./cancel-contract-dialog.js";
 import { CheckoutConsentDialog } from "./checkout-consent-dialog.js";
+import { localizedParams } from "./localized-params.js";
 function intervalKey(price) {
     if (price === null || price.interval === null)
         return undefined;
@@ -21,16 +23,6 @@ function renewalKey(price) {
         ? `billing-foundation.consent.renewsEvery.${price.interval}`
         : `billing-foundation.consent.renews.${price.interval}`;
 }
-function localizedParams(params, locale) {
-    if (params === undefined)
-        return undefined;
-    const localized = {};
-    for (const [key, value] of Object.entries(params)) {
-        localized[key] =
-            typeof value === "number" ? new Intl.NumberFormat(locale).format(value) : value;
-    }
-    return localized;
-}
 /** Which action the plan "would" offer if it weren't blocked — mirrors
  *  plan-catalog.ts's own decision tree, since `unavailable` collapses both
  *  "would checkout" and "would switch" into one action and the disabled CTA
@@ -189,7 +181,7 @@ export function BillingPlansPanel(_props) {
                         date: toInstant(result.subscription.cancelAt).toLocaleString(locale, {
                             dateStyle: "medium",
                         }),
-                    }), " ", t("billing-foundation.plans.switchRequiresReactivation")] })), consumerProtection !== undefined && canManage && result.subscription?.cancelAt == null && (_jsx("div", { children: _jsx(Button, { variant: "secondary", onClick: () => setCancelOpen(true), testId: "billing-plans-cancel-contract", children: t("billing-foundation.cancel.open") }) })), _jsxs(PlanGrid, { testId: "billing-plans-grid", children: [!currentTierInPlans && (_jsx(PlanCard, { title: t(result.currentTier.labelKey), current: true, testId: "billing-plan-card-current", features: result.currentTier.benefits.map((benefit) => t(benefit.labelKey, localizedParams(benefit.params, locale))), secondaryAction: manageOrReactivateAction(canManage, result.subscription, t, handleManage, redirecting) })), visiblePlans.map((plan) => (_jsx(PlanCard, { testId: `billing-plan-card-${plan.tier}`, ...toCardProps(plan) }, plan.tier)))] }), consumerProtection !== undefined &&
+                    }), " ", t("billing-foundation.plans.switchRequiresReactivation")] })), consumerProtection !== undefined && canManage && result.subscription?.cancelAt == null && (_jsx("div", { children: _jsx(Button, { variant: "secondary", onClick: () => setCancelOpen(true), testId: "billing-plans-cancel-contract", children: t("billing-foundation.cancel.open") }) })), _jsxs(PlanGrid, { testId: "billing-plans-grid", children: [!currentTierInPlans && (_jsx(PlanCard, { title: t(result.currentTier.labelKey), current: true, testId: "billing-plan-card-current", features: result.currentTier.benefits.map((benefit) => t(benefit.labelKey, localizedParams(benefit.params, locale))), secondaryAction: manageOrReactivateAction(canManage, result.subscription, t, handleManage, redirecting) })), visiblePlans.map((plan) => (_jsx(PlanCard, { testId: `billing-plan-card-${plan.tier}`, ...toCardProps(plan) }, plan.tier))), result.contact !== undefined && _jsx(BillingContactPlan, { contact: result.contact })] }), consumerProtection !== undefined &&
                 consentPlan !== undefined &&
                 consentPlan.price !== null && (_jsx(CheckoutConsentDialog, { open: true, onOpenChange: (open) => {
                     if (!open)

package/dist/billing-foundation/web/cancel-contract-dialog.js

@@ -1,8 +1,8 @@
 import { Fragment as _Fragment, jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 // @runtime client
-import { toInstant } from "@cosmicdrift/kumiko-headless";
 import { useLocale, useMutation, usePrimitives, useTranslation, } from "@cosmicdrift/kumiko-renderer";
-import { ModeSwitch } from "@cosmicdrift/kumiko-renderer-web";
+import { toInstant } from "@cosmicdrift/kumiko-renderer/headless";
+import { ModeSwitch } from "@cosmicdrift/kumiko-renderer/web";
 import { useState } from "react";
 import { SubscriptionFoundationHandlers } from "../constants.js";
 const DECLARATION_TYPES = [

package/dist/billing-foundation/web/checkout-consent-dialog.d.ts

@@ -1,4 +1,4 @@
-import type { WriteResult } from "@cosmicdrift/kumiko-headless";
+import type { WriteResult } from "@cosmicdrift/kumiko-renderer/headless";
 import { type ReactNode } from "react";
 import type { BillingPlansResult } from "../types.ts";
 export declare const CONSENT_TEXT_OUTDATED_CODE = "consent_text_outdated";

package/dist/billing-foundation/web/checkout-consent-dialog.js

@@ -1,4 +1,5 @@
 import { Fragment as _Fragment, jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+// @runtime client
 import { useLocale, usePrimitives, useTranslation } from "@cosmicdrift/kumiko-renderer";
 import { useState } from "react";
 import { resolveConsentLocale } from "../consumer-protection/consent-locale.js";