@cosmicdrift/kumiko-bundled-features 0.374.0 → 0.377.0

package/dist/inbound-mail-foundation/entities.d.ts

@@ -15,7 +15,7 @@ export declare const mailAccountEntity: import("@cosmicdrift/kumiko-types/fields
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -38,7 +38,7 @@ export declare const mailAccountEntity: import("@cosmicdrift/kumiko-types/fields
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -61,7 +61,7 @@ export declare const mailAccountEntity: import("@cosmicdrift/kumiko-types/fields
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -84,7 +84,7 @@ export declare const mailAccountEntity: import("@cosmicdrift/kumiko-types/fields
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -107,7 +107,7 @@ export declare const mailAccountEntity: import("@cosmicdrift/kumiko-types/fields
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -130,7 +130,7 @@ export declare const mailAccountEntity: import("@cosmicdrift/kumiko-types/fields
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -153,7 +153,7 @@ export declare const mailAccountEntity: import("@cosmicdrift/kumiko-types/fields
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -196,7 +196,7 @@ export declare const inboundMessageEntity: import("@cosmicdrift/kumiko-types/fie
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -219,7 +219,7 @@ export declare const inboundMessageEntity: import("@cosmicdrift/kumiko-types/fie
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -242,7 +242,7 @@ export declare const inboundMessageEntity: import("@cosmicdrift/kumiko-types/fie
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -265,7 +265,7 @@ export declare const inboundMessageEntity: import("@cosmicdrift/kumiko-types/fie
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -288,7 +288,7 @@ export declare const inboundMessageEntity: import("@cosmicdrift/kumiko-types/fie
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -311,7 +311,7 @@ export declare const inboundMessageEntity: import("@cosmicdrift/kumiko-types/fie
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -334,7 +334,7 @@ export declare const inboundMessageEntity: import("@cosmicdrift/kumiko-types/fie
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -357,7 +357,7 @@ export declare const inboundMessageEntity: import("@cosmicdrift/kumiko-types/fie
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -380,7 +380,7 @@ export declare const inboundMessageEntity: import("@cosmicdrift/kumiko-types/fie
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -418,7 +418,7 @@ export declare const inboundMessageEntity: import("@cosmicdrift/kumiko-types/fie
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -441,7 +441,7 @@ export declare const inboundMessageEntity: import("@cosmicdrift/kumiko-types/fie
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -468,7 +468,7 @@ export declare const mailThreadEntity: import("@cosmicdrift/kumiko-types/fields"
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -491,7 +491,7 @@ export declare const mailThreadEntity: import("@cosmicdrift/kumiko-types/fields"
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -557,7 +557,7 @@ export declare const syncCursorEntity: import("@cosmicdrift/kumiko-types/fields"
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -580,7 +580,7 @@ export declare const syncCursorEntity: import("@cosmicdrift/kumiko-types/fields"
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -603,7 +603,7 @@ export declare const syncCursorEntity: import("@cosmicdrift/kumiko-types/fields"
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -647,7 +647,7 @@ export declare const seenMessageEntity: import("@cosmicdrift/kumiko-types/fields
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -670,7 +670,7 @@ export declare const seenMessageEntity: import("@cosmicdrift/kumiko-types/fields
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {

package/dist/inbound-mail-foundation/feature.js

@@ -51,8 +51,10 @@ import { ingestMessageHandler } from "./handlers/ingest-message.write.js";
 import { listAccountsQuery } from "./handlers/list-accounts.query.js";
 import { listMessagesQuery } from "./handlers/list-messages.query.js";
 import { updateAccountHandler } from "./handlers/update-account.write.js";
+import { INBOUND_MAIL_FOUNDATION_I18N } from "./i18n.js";
 import { applyInboundMessageReceived, applyMailAccountConnected, applyMailAccountDisconnected, applyMailAccountUpdated, applyMailThreadUpdated, inboundMessagesProjectionTable, mailAccountsProjectionTable, mailThreadsProjectionTable, } from "./projection.js";
 import { runInboundMailRetention } from "./retention-sweep.js";
+import { mailAccountEditScreen, mailAccountListScreen } from "./screens.js";
 import { INBOUND_MAIL_TENANT_DESTROY_ARCHIVE_REASON, inboundMessageTenantDestroyHook, mailAccountTenantDestroyHook, mailThreadTenantDestroyHook, } from "./tenant-destroy-hook.js";
 export function createInboundMailFoundationFeature() {
     return defineFeature(INBOUND_MAIL_FOUNDATION_FEATURE, (r) => {
@@ -141,6 +143,11 @@ export function createInboundMailFoundationFeature() {
         // List-Queries (PII-decrypted, scope-gefiltert).
         r.queryHandler(listAccountsQuery);
         r.queryHandler(listMessagesQuery);
+        // Declarative mailbox admin: list (rename, disconnect) and rename form.
+        // The app places `mailAccountListScreen` via r.nav in its settings area.
+        r.screen(mailAccountListScreen);
+        r.screen(mailAccountEditScreen);
+        r.translations({ keys: INBOUND_MAIL_FOUNDATION_I18N });
         // Entity-genaue GDPR-Destroy-Hooks — der gdpr-storage-Boot-Validator
         // prueft die EXT_TENANT_DATA-Registrierung pro tenant-subject-Entity.
         r.useExtension(EXT_TENANT_DATA, "mail-account", {

package/dist/inbound-mail-foundation/i18n.d.ts

@@ -0,0 +1,3 @@
+export declare const INBOUND_MAIL_FOUNDATION_I18N: Readonly<Record<string, {
+    readonly en: string;
+}>>;

package/dist/inbound-mail-foundation/i18n.js

@@ -0,0 +1,35 @@
+import { ACTION_FORM_ENTITY } from "@cosmicdrift/kumiko-framework/ui-types";
+import { fieldLabelKey } from "@cosmicdrift/kumiko-renderer/headless";
+import { INBOUND_MAIL_FOUNDATION_FEATURE, InboundMailAccountStatuses } from "./constants.js";
+import { MAIL_ACCOUNT_EDIT_SCREEN_ID, MAIL_ACCOUNT_LIST_SCREEN_ID, MAIL_ACCOUNT_STATUS_OPTION_KEY_PREFIX, } from "./screens.js";
+const formFieldKey = (field) => fieldLabelKey(INBOUND_MAIL_FOUNDATION_FEATURE, ACTION_FORM_ENTITY, field);
+export const INBOUND_MAIL_FOUNDATION_I18N = {
+    [`screen:${MAIL_ACCOUNT_LIST_SCREEN_ID}.title`]: { en: "Mailboxes" },
+    [`screen:${MAIL_ACCOUNT_EDIT_SCREEN_ID}.title`]: { en: "Edit mailbox" },
+    "inboundMail.accounts.col.name": { en: "Name" },
+    "inboundMail.accounts.col.address": { en: "Address" },
+    "inboundMail.accounts.col.provider": { en: "Provider" },
+    "inboundMail.accounts.col.status": { en: "Status" },
+    "inboundMail.accounts.col.connected": { en: "Connected" },
+    [`${MAIL_ACCOUNT_STATUS_OPTION_KEY_PREFIX}${InboundMailAccountStatuses.active}`]: {
+        en: "Active",
+    },
+    [`${MAIL_ACCOUNT_STATUS_OPTION_KEY_PREFIX}${InboundMailAccountStatuses.authError}`]: {
+        en: "Sign-in failed",
+    },
+    [`${MAIL_ACCOUNT_STATUS_OPTION_KEY_PREFIX}${InboundMailAccountStatuses.degraded}`]: {
+        en: "Interrupted",
+    },
+    [`${MAIL_ACCOUNT_STATUS_OPTION_KEY_PREFIX}${InboundMailAccountStatuses.disconnected}`]: {
+        en: "Disconnected",
+    },
+    "inboundMail.accounts.edit": { en: "Rename" },
+    "inboundMail.accounts.edit.submit": { en: "Save" },
+    "inboundMail.accounts.disconnect": { en: "Disconnect" },
+    "inboundMail.accounts.disconnect.confirm": {
+        en: "Disconnect this mailbox? No new mail is fetched; stored mail is kept.",
+    },
+    [formFieldKey("accountId")]: { en: "Mailbox" },
+    [formFieldKey("displayName")]: { en: "Name" },
+    [formFieldKey("reason")]: { en: "Reason" },
+};

package/dist/inbound-mail-foundation/index.d.ts

@@ -8,5 +8,6 @@ export { createOAuthAccessTokenManager, inboundRefreshTokenSecretOptions, type O
 export { type OAuthStatePayload, signOAuthState, type VerifyOAuthStateResult, verifyOAuthState, } from "./oauth-state.ts";
 export { inboundMessagesProjectionTable, mailAccountsProjectionTable, mailThreadsProjectionTable, } from "./projection.ts";
 export { resolveInboundProviderForAccount, resolveInboundProviderForKey, } from "./provider-factory.ts";
+export { MAIL_ACCOUNT_EDIT_SCREEN_ID, MAIL_ACCOUNT_LIST_SCREEN_ID, } from "./screens.ts";
 export { InboundAuthError, InboundCursorInvalidError, type InboundFetchResult, type InboundMailContext, type InboundMailProviderPlugin, type InboundOAuthFlow, InboundRateLimitError, InboundTransientError, isInboundAuthError, isInboundCursorInvalidError, isInboundMailProviderPlugin, isInboundRateLimitError, isInboundTransientError, type MailAccountRecord, type OAuthTokenSet, type RawInboundMessage, type SyncCursorPayload, } from "./types.ts";
 export { createInboundMailSupervisor, type InboundMailSupervisor, type InboundMailSupervisorDeps, } from "./watch-supervisor.ts";

package/dist/inbound-mail-foundation/index.js

@@ -9,5 +9,6 @@ export { createOAuthAccessTokenManager, inboundRefreshTokenSecretOptions, usesFo
 export { signOAuthState, verifyOAuthState, } from "./oauth-state.js";
 export { inboundMessagesProjectionTable, mailAccountsProjectionTable, mailThreadsProjectionTable, } from "./projection.js";
 export { resolveInboundProviderForAccount, resolveInboundProviderForKey, } from "./provider-factory.js";
+export { MAIL_ACCOUNT_EDIT_SCREEN_ID, MAIL_ACCOUNT_LIST_SCREEN_ID, } from "./screens.js";
 export { InboundAuthError, InboundCursorInvalidError, InboundRateLimitError, InboundTransientError, isInboundAuthError, isInboundCursorInvalidError, isInboundMailProviderPlugin, isInboundRateLimitError, isInboundTransientError, } from "./types.js";
 export { createInboundMailSupervisor, } from "./watch-supervisor.js";

package/dist/inbound-mail-foundation/projection.d.ts

@@ -13,7 +13,7 @@ export declare const mailAccountsProjectionTable: import("@cosmicdrift/kumiko-fr
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -36,7 +36,7 @@ export declare const mailAccountsProjectionTable: import("@cosmicdrift/kumiko-fr
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -59,7 +59,7 @@ export declare const mailAccountsProjectionTable: import("@cosmicdrift/kumiko-fr
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -82,7 +82,7 @@ export declare const mailAccountsProjectionTable: import("@cosmicdrift/kumiko-fr
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -105,7 +105,7 @@ export declare const mailAccountsProjectionTable: import("@cosmicdrift/kumiko-fr
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -128,7 +128,7 @@ export declare const mailAccountsProjectionTable: import("@cosmicdrift/kumiko-fr
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -151,7 +151,7 @@ export declare const mailAccountsProjectionTable: import("@cosmicdrift/kumiko-fr
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -191,7 +191,7 @@ export declare const inboundMessagesProjectionTable: import("@cosmicdrift/kumiko
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -214,7 +214,7 @@ export declare const inboundMessagesProjectionTable: import("@cosmicdrift/kumiko
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -237,7 +237,7 @@ export declare const inboundMessagesProjectionTable: import("@cosmicdrift/kumiko
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -260,7 +260,7 @@ export declare const inboundMessagesProjectionTable: import("@cosmicdrift/kumiko
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -283,7 +283,7 @@ export declare const inboundMessagesProjectionTable: import("@cosmicdrift/kumiko
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -306,7 +306,7 @@ export declare const inboundMessagesProjectionTable: import("@cosmicdrift/kumiko
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -329,7 +329,7 @@ export declare const inboundMessagesProjectionTable: import("@cosmicdrift/kumiko
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -352,7 +352,7 @@ export declare const inboundMessagesProjectionTable: import("@cosmicdrift/kumiko
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -375,7 +375,7 @@ export declare const inboundMessagesProjectionTable: import("@cosmicdrift/kumiko
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -413,7 +413,7 @@ export declare const inboundMessagesProjectionTable: import("@cosmicdrift/kumiko
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -436,7 +436,7 @@ export declare const inboundMessagesProjectionTable: import("@cosmicdrift/kumiko
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -461,7 +461,7 @@ export declare const mailThreadsProjectionTable: import("@cosmicdrift/kumiko-fra
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -484,7 +484,7 @@ export declare const mailThreadsProjectionTable: import("@cosmicdrift/kumiko-fra
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {

package/dist/inbound-mail-foundation/screens.d.ts

@@ -0,0 +1,7 @@
+import { type ProjectionListScreenDefinition } from "@cosmicdrift/kumiko-framework/engine";
+import type { ActionFormScreenDefinition } from "@cosmicdrift/kumiko-framework/ui-types";
+export declare const MAIL_ACCOUNT_LIST_SCREEN_ID = "mail-accounts";
+export declare const MAIL_ACCOUNT_EDIT_SCREEN_ID = "mail-account-edit";
+export declare const MAIL_ACCOUNT_STATUS_OPTION_KEY_PREFIX = "inboundMail.accounts.status.";
+export declare const mailAccountListScreen: ProjectionListScreenDefinition;
+export declare const mailAccountEditScreen: ActionFormScreenDefinition;

package/dist/inbound-mail-foundation/screens.js

@@ -0,0 +1,86 @@
+import { i18nKey, MAX_LIST_LIMIT, } from "@cosmicdrift/kumiko-framework/engine";
+import { InboundMailAccountStatuses, InboundMailFoundationHandlers, InboundMailFoundationQueries, } from "./constants.js";
+export const MAIL_ACCOUNT_LIST_SCREEN_ID = "mail-accounts";
+export const MAIL_ACCOUNT_EDIT_SCREEN_ID = "mail-account-edit";
+export const MAIL_ACCOUNT_STATUS_OPTION_KEY_PREFIX = "inboundMail.accounts.status.";
+// Same roles as the update/disconnect handlers: a screen rule wider than the
+// handlers would only render actions that 403.
+const MAIL_ACCOUNT_ADMIN_ACCESS = { roles: ["SystemAdmin", "TenantAdmin"] };
+// Several mailboxes per tenant, one row each. The bound query already filters
+// personal mailboxes the caller neither owns nor administers and returns no
+// credential: the secret lives in the secrets feature, never in the row.
+// dormant: the consuming app places the list in its own settings nav.
+export const mailAccountListScreen = {
+    id: MAIL_ACCOUNT_LIST_SCREEN_ID,
+    type: "projectionList",
+    agent: { expose: false },
+    query: InboundMailFoundationQueries.listAccounts,
+    pagination: false,
+    pageSize: MAX_LIST_LIMIT,
+    columns: [
+        { field: "displayName", label: i18nKey("inboundMail.accounts.col.name"), sortable: false },
+        { field: "address", label: i18nKey("inboundMail.accounts.col.address"), sortable: false },
+        {
+            field: "provider",
+            label: i18nKey("inboundMail.accounts.col.provider"),
+            sortable: false,
+            hideOnNarrow: true,
+        },
+        {
+            field: "status",
+            label: i18nKey("inboundMail.accounts.col.status"),
+            sortable: false,
+            renderer: { format: "enumOption", keyPrefix: MAIL_ACCOUNT_STATUS_OPTION_KEY_PREFIX },
+        },
+        {
+            field: "connectedAt",
+            label: i18nKey("inboundMail.accounts.col.connected"),
+            sortable: false,
+            hideOnNarrow: true,
+            renderer: { format: "timestamp" },
+        },
+    ],
+    rowActions: [
+        {
+            kind: "navigate",
+            id: "edit",
+            label: i18nKey("inboundMail.accounts.edit"),
+            screen: MAIL_ACCOUNT_EDIT_SCREEN_ID,
+            params: { map: { accountId: "id", displayName: "displayName" } },
+            visible: { field: "status", ne: InboundMailAccountStatuses.disconnected },
+        },
+        {
+            kind: "writeHandler",
+            id: "disconnect",
+            label: i18nKey("inboundMail.accounts.disconnect"),
+            handler: InboundMailFoundationHandlers.disconnectAccount,
+            payload: { map: { accountId: "id" } },
+            style: "danger",
+            confirm: i18nKey("inboundMail.accounts.disconnect.confirm"),
+            visible: { field: "status", ne: InboundMailAccountStatuses.disconnected },
+        },
+    ],
+    access: MAIL_ACCOUNT_ADMIN_ACCESS,
+    dormant: true,
+};
+// The reason is the audit label update-account requires; it is not in the
+// layout, so the default is what gets written.
+export const mailAccountEditScreen = {
+    id: MAIL_ACCOUNT_EDIT_SCREEN_ID,
+    type: "actionForm",
+    agent: { expose: false },
+    handler: InboundMailFoundationHandlers.updateAccount,
+    fields: {
+        accountId: { type: "text", required: true },
+        displayName: { type: "text", required: true, maxLength: 200 },
+        reason: { type: "text", default: "tenant_admin" },
+    },
+    layout: {
+        sections: [{ fields: [{ field: "accountId", readOnly: true }, "displayName"] }],
+    },
+    submitLabel: i18nKey("inboundMail.accounts.edit.submit"),
+    redirect: MAIL_ACCOUNT_LIST_SCREEN_ID,
+    cancelTarget: MAIL_ACCOUNT_LIST_SCREEN_ID,
+    access: MAIL_ACCOUNT_ADMIN_ACCESS,
+    dormant: true,
+};

package/dist/inbound-mail-foundation/types.d.ts

@@ -8,7 +8,7 @@ import { INBOUND_MAIL_PROVIDER_EXTENSION, type InboundMailAccountStatus } from "
  *   config   — tenant config reads (host/port/... of the plugins)
  *   registry — extension lookup in the factory (not plugin-internal)
  *   secrets  — tenant secret reads (IMAP password, OAuth refresh token)
- *   _userId  — audit identity for secret reads. Handler path: the dispatcher
+ *   auditUserId  — audit identity for secret reads. Handler path: the dispatcher
  *              sets the caller user ID; worker path: system identity.
  *   metricsFor — metrics handle of a feature by name, same behavior as
  *              HandlerContext.metricsFor: unregistered metrics are a silent
@@ -18,7 +18,7 @@ export type InboundMailContext = {
     readonly config?: ConfigAccessor;
     readonly registry?: Registry;
     readonly secrets?: import("@cosmicdrift/kumiko-framework/secrets").SecretsContext;
-    readonly _userId?: string | undefined;
+    readonly auditUserId?: string | undefined;
     readonly metricsFor?: (featureName: string) => MetricsHandle;
 };
 /**