@cosmicdrift/kumiko-bundled-features 0.374.0 → 0.377.0

package/dist/template-resolver/user-content-table.d.ts

@@ -14,7 +14,7 @@ export declare const userContentEntryEntity: import("@cosmicdrift/kumiko-types/f
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -37,7 +37,7 @@ export declare const userContentEntryEntity: import("@cosmicdrift/kumiko-types/f
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -89,7 +89,7 @@ export declare const userContentEntryEntity: import("@cosmicdrift/kumiko-types/f
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -112,7 +112,7 @@ export declare const userContentEntryEntity: import("@cosmicdrift/kumiko-types/f
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -135,7 +135,7 @@ export declare const userContentEntryEntity: import("@cosmicdrift/kumiko-types/f
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -200,7 +200,7 @@ export declare const userContentEntriesTable: import("@cosmicdrift/kumiko-framew
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -223,7 +223,7 @@ export declare const userContentEntriesTable: import("@cosmicdrift/kumiko-framew
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -275,7 +275,7 @@ export declare const userContentEntriesTable: import("@cosmicdrift/kumiko-framew
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -298,7 +298,7 @@ export declare const userContentEntriesTable: import("@cosmicdrift/kumiko-framew
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -321,7 +321,7 @@ export declare const userContentEntriesTable: import("@cosmicdrift/kumiko-framew
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {

package/dist/template-resolver/web/client-plugin.d.ts

@@ -1,5 +1,5 @@
 import type { TreeNode } from "@cosmicdrift/kumiko-framework/engine";
-import { type ClientFeatureDefinition } from "@cosmicdrift/kumiko-renderer-web";
+import { type ClientFeatureDefinition } from "@cosmicdrift/kumiko-renderer/web";
 export type BlockSummary = {
     readonly slug: string;
     readonly locale: string;

package/dist/template-resolver/web/client-plugin.js

@@ -1,5 +1,5 @@
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
-import { EMPTY_VALUE_PLACEHOLDER } from "@cosmicdrift/kumiko-headless";
+import { EMPTY_VALUE_PLACEHOLDER } from "@cosmicdrift/kumiko-renderer/headless";
 // @runtime client
 // Client feature factory for the text-block content tree. Apps mount it via
 // createKumikoApp({ clientFeatures: [textBlocksClient()] }); it loads the
@@ -12,9 +12,9 @@ import { EMPTY_VALUE_PLACEHOLDER } from "@cosmicdrift/kumiko-headless";
 // **State**: TreeNode.state = "filled" when content is set, otherwise "stub"
 // (a hint that the slug exists but is empty).
 import { useShellUser } from "@cosmicdrift/kumiko-bundled-features/auth-email-password/web";
-import { CSRF_HEADER_NAME, readCsrfToken } from "@cosmicdrift/kumiko-dispatcher-live";
 import { ContentPreview, useAppFeatures, useContentEditor, useDispatcher, usePrimitives, useQuery, useTranslation, } from "@cosmicdrift/kumiko-renderer";
-import { PlainContentEditor, RichContentEditor, } from "@cosmicdrift/kumiko-renderer-web";
+import { CSRF_HEADER_NAME, readCsrfToken } from "@cosmicdrift/kumiko-renderer/live";
+import { PlainContentEditor, RichContentEditor, } from "@cosmicdrift/kumiko-renderer/web";
 import { useEffect, useId, useState } from "react";
 import { collectionHandlerName, collectionQueryName, TemplateResolverHandlers, TemplateResolverQueries, } from "../qualified-names.js";
 import { DocumentBlocksContext, DocumentContentEditor } from "./document-editor.js";

package/dist/template-resolver/web/document-tiptap-editor.js

@@ -6,7 +6,7 @@ import { Fragment as _Fragment, jsx as _jsx, jsxs as _jsxs } from "react/jsx-run
 // collection is rendered. Variables are inserted as `variable` nodes only,
 // never as `{{name}}` text, so the sanitizer's schema keeps them.
 import { TextareaContentEditor, usePrimitives, useTranslation, VariableChips, } from "@cosmicdrift/kumiko-renderer";
-import { cn } from "@cosmicdrift/kumiko-renderer-web";
+import { cn } from "@cosmicdrift/kumiko-renderer/web";
 import { isOneOf } from "@cosmicdrift/kumiko-types/type-guards";
 import { EditorContent, useEditor, useEditorState } from "@tiptap/react";
 import { BubbleMenu } from "@tiptap/react/menus";

package/dist/template-resolver/web/document-toolbar-blocks.d.ts

@@ -1,6 +1,6 @@
 import type { ContentEditorProps } from "@cosmicdrift/kumiko-renderer";
 import type { ReactNode } from "react";
-export type DocumentToolbarBlock = "image" | "table" | "button" | "divider" | "repeat" | "pageBreak" | "align" | "steps";
+import type { DocumentToolbarBlock } from "../document-blocks.ts";
 /** Imperative access for an outside panel (placeholder list, resource list). */
 export type DocumentEditorHandle = {
     readonly insertPlaceholder: (name: string) => void;
@@ -35,7 +35,4 @@ export type DocumentEditorProps = ContentEditorProps & {
     /** Called with the handle once the editor exists and with null when it is destroyed (unmount or rebuild), so a held handle never outlives its editor. */
     readonly onEditorReady?: (handle: DocumentEditorHandle | null) => void;
 };
-export declare const MAIL_DOCUMENT_BLOCKS: readonly ["image", "table", "button", "divider", "repeat", "steps"];
-export declare const PDF_DOCUMENT_BLOCKS: readonly ["align", "image", "table", "divider", "repeat", "steps", "pageBreak"];
-/** Block set for a template-resource kind; every kind except "document-pdf" gets the mail set. */
-export declare function documentBlocksForKind(kind: string | undefined): readonly DocumentToolbarBlock[];
+export { type DocumentToolbarBlock, documentBlocksForKind, MAIL_DOCUMENT_BLOCKS, PDF_DOCUMENT_BLOCKS, } from "../document-blocks.ts";

package/dist/template-resolver/web/document-toolbar-blocks.js

@@ -1,21 +1 @@
-export const MAIL_DOCUMENT_BLOCKS = [
-    "image",
-    "table",
-    "button",
-    "divider",
-    "repeat",
-    "steps",
-];
-export const PDF_DOCUMENT_BLOCKS = [
-    "align",
-    "image",
-    "table",
-    "divider",
-    "repeat",
-    "steps",
-    "pageBreak",
-];
-/** Block set for a template-resource kind; every kind except "document-pdf" gets the mail set. */
-export function documentBlocksForKind(kind) {
-    return kind === "document-pdf" ? PDF_DOCUMENT_BLOCKS : MAIL_DOCUMENT_BLOCKS;
-}
+export { documentBlocksForKind, MAIL_DOCUMENT_BLOCKS, PDF_DOCUMENT_BLOCKS, } from "../document-blocks.js";

package/dist/template-resolver/web/i18n.js

@@ -66,6 +66,20 @@ export const defaultTranslations = {
         "templateResolver.checks.sizeUnderCap": "The mail is within the 10 MiB size limit",
         "templateResolver.checks.requiredPlaceholders": "All required placeholders are used",
         "templateResolver.errors.preview.renderFailed": "The preview could not be rendered.",
+        "templateResolver.errors.patch.unknownBlock": "The block {blockId} does not exist in the template.",
+        "templateResolver.errors.patch.blockRemoved": "The block {blockId} was already removed by an earlier step.",
+        "templateResolver.errors.patch.textNotFound": "The text {find} was not found in the block.",
+        "templateResolver.errors.patch.textAmbiguous": "The text {find} occurs {count} times in the block; use a longer text.",
+        "templateResolver.errors.patch.blockNotAllowed": "The block type {type} is not available in {kind} templates.",
+        "templateResolver.errors.patch.blockTypeMismatch": "This step needs a {expected} block, but the block is a {actual}.",
+        "templateResolver.errors.patch.invalidResourceKey": "The image key {resource} is not valid.",
+        "templateResolver.errors.patch.invalidButtonHref": "A button target must be a placeholder in double curly braces.",
+        "templateResolver.errors.patch.invalidVariableName": "The variable name {name} is not valid.",
+        "templateResolver.errors.patch.invalidVariableDefinition": "The definition of the variable {name} is not valid.",
+        "templateResolver.errors.patch.invalidDocument": "The change would produce an invalid document.",
+        "templateResolver.errors.patch.invalidMetaKey": "The meta key {key} is not allowed.",
+        "templateResolver.errors.patch.variablesDeclaredByFeature": "The variables of {slug} are fixed by the application and cannot be changed.",
+        "templateResolver.errors.patch.requiredPlaceholderRemoved": "The change removes required placeholders: {names}",
         "templateResolver.errors.testMail.noChannel": "No email channel is set up, so no test mail can be sent.",
         "templateResolver.errors.testMail.noAddress": "Your account has no email address to send the test mail to.",
         "templateResolver.errors.testMail.failed": "The test mail could not be sent.",

package/dist/template-resolver/web/placeholder-line-editor.js

@@ -4,16 +4,16 @@ import { jsx as _jsx } from "react/jsx-runtime";
 // Single-line editor for plain-text fields that carry {{placeholders}}
 // (subject, preheader). The stored value stays plain text; placeholders show
 // as chips while editing. Lives in the same lazy chunk as the document editor.
-import { cn } from "@cosmicdrift/kumiko-renderer-web";
+import { cn } from "@cosmicdrift/kumiko-renderer/web";
 import { Extension, Node } from "@tiptap/core";
 import { Placeholder, UndoRedo } from "@tiptap/extensions";
 import { EditorContent, useEditor } from "@tiptap/react";
 import StarterKit from "@tiptap/starter-kit";
 import { useMemo, useState } from "react";
 import { DocumentVariable } from "../document-schema.js";
+import { contentToLine, lineToContent, singleLine } from "../placeholder-text.js";
 import { createVariableView } from "./document-editor-extensions.js";
 import { createEditorHandle } from "./editor-handle.js";
-import { contentToLine, lineToContent, singleLine } from "./placeholder-text.js";
 import { useStableByKey } from "./use-stable-by-key.js";
 const LineDocument = Node.create({ name: "doc", topNode: true, content: "paragraph" });
 // One line only: Enter must not split the paragraph.

package/dist/tenant/invitation-table.d.ts

@@ -21,7 +21,7 @@ export declare const tenantInvitationEntity: import("@cosmicdrift/kumiko-types/f
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -44,7 +44,7 @@ export declare const tenantInvitationEntity: import("@cosmicdrift/kumiko-types/f
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -92,7 +92,7 @@ export declare const tenantInvitationEntity: import("@cosmicdrift/kumiko-types/f
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -151,7 +151,7 @@ export declare const tenantInvitationsTable: import("@cosmicdrift/kumiko-framewo
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -174,7 +174,7 @@ export declare const tenantInvitationsTable: import("@cosmicdrift/kumiko-framewo
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -222,7 +222,7 @@ export declare const tenantInvitationsTable: import("@cosmicdrift/kumiko-framewo
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {

package/dist/tenant/membership-table.d.ts

@@ -13,7 +13,7 @@ export declare const tenantMembershipEntity: import("@cosmicdrift/kumiko-types/f
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -36,7 +36,7 @@ export declare const tenantMembershipEntity: import("@cosmicdrift/kumiko-types/f
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -61,7 +61,7 @@ export declare const tenantMembershipsTable: import("@cosmicdrift/kumiko-framewo
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -84,7 +84,7 @@ export declare const tenantMembershipsTable: import("@cosmicdrift/kumiko-framewo
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {

package/dist/tenant/schema/tenant.d.ts

@@ -15,7 +15,7 @@ export declare const tenantEntity: import("@cosmicdrift/kumiko-types/fields").En
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -38,7 +38,7 @@ export declare const tenantEntity: import("@cosmicdrift/kumiko-types/fields").En
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -105,7 +105,7 @@ export declare const tenantEntity: import("@cosmicdrift/kumiko-types/fields").En
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -175,7 +175,7 @@ export declare const tenantTable: import("@cosmicdrift/kumiko-framework/db").Ent
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -198,7 +198,7 @@ export declare const tenantTable: import("@cosmicdrift/kumiko-framework/db").Ent
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -265,7 +265,7 @@ export declare const tenantTable: import("@cosmicdrift/kumiko-framework/db").Ent
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {

package/dist/tenant/web/client-plugin.d.ts

@@ -1,5 +1,5 @@
 import { type TranslationsByLocale } from "@cosmicdrift/kumiko-renderer";
-import type { ClientFeatureDefinition } from "@cosmicdrift/kumiko-renderer-web";
+import type { ClientFeatureDefinition } from "@cosmicdrift/kumiko-renderer/web";
 export type TenantClientOptions = {
     readonly translations?: TranslationsByLocale;
 };

package/dist/tenant/web/member-status-cell.js

@@ -5,7 +5,7 @@ import { jsx as _jsx } from "react/jsx-runtime";
 // screens.ts). The list frame itself is the generic declarative
 // projectionList renderer — only this one cell stays TSX.
 import { useTranslation } from "@cosmicdrift/kumiko-renderer";
-import { StatusBadge } from "@cosmicdrift/kumiko-renderer-web";
+import { StatusBadge } from "@cosmicdrift/kumiko-renderer/web";
 import { translateOrRaw } from "../../shared/web/translate-or-raw.js";
 const STATUS_TONE = {
     active: "ok",

package/dist/tier-engine/entity.d.ts

@@ -14,7 +14,7 @@ export declare const tierAssignmentEntity: import("@cosmicdrift/kumiko-types/fie
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {

package/dist/tier-engine/tier-resolver.d.ts

@@ -21,7 +21,7 @@ export declare function createTierResolver<TTier extends string, TCaps>(deps: Ti
             readonly sensitive?: boolean;
             readonly writeOnly?: boolean;
             readonly readAsInstruction?: boolean;
-            readonly format?: "email" | "url" | "phone" | "password";
+            readonly format?: "email" | "url" | "phone" | "password" | "month";
             readonly default?: string;
             readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
             readonly multiline?: boolean | {

package/dist/tier-engine/web/client-plugin.d.ts

@@ -1,5 +1,5 @@
 import { type TranslationsByLocale } from "@cosmicdrift/kumiko-renderer";
-import type { ClientFeatureDefinition } from "@cosmicdrift/kumiko-renderer-web";
+import type { ClientFeatureDefinition } from "@cosmicdrift/kumiko-renderer/web";
 export type TierEngineClientOptions = {
     /** Per-key overrides over the default bundles (de/en). */
     readonly translations?: TranslationsByLocale;

package/dist/user/schema/user.d.ts

@@ -42,7 +42,7 @@ export declare const userEntity: import("@cosmicdrift/kumiko-types/fields").Enti
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -65,7 +65,7 @@ export declare const userEntity: import("@cosmicdrift/kumiko-types/fields").Enti
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -88,7 +88,7 @@ export declare const userEntity: import("@cosmicdrift/kumiko-types/fields").Enti
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -111,7 +111,7 @@ export declare const userEntity: import("@cosmicdrift/kumiko-types/fields").Enti
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -143,7 +143,7 @@ export declare const userEntity: import("@cosmicdrift/kumiko-types/fields").Enti
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -210,7 +210,7 @@ export declare const userEntity: import("@cosmicdrift/kumiko-types/fields").Enti
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -235,7 +235,7 @@ export declare const userTable: import("@cosmicdrift/kumiko-framework/db").Entit
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -258,7 +258,7 @@ export declare const userTable: import("@cosmicdrift/kumiko-framework/db").Entit
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -281,7 +281,7 @@ export declare const userTable: import("@cosmicdrift/kumiko-framework/db").Entit
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -304,7 +304,7 @@ export declare const userTable: import("@cosmicdrift/kumiko-framework/db").Entit
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -336,7 +336,7 @@ export declare const userTable: import("@cosmicdrift/kumiko-framework/db").Entit
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {
@@ -403,7 +403,7 @@ export declare const userTable: import("@cosmicdrift/kumiko-framework/db").Entit
         readonly sensitive?: boolean;
         readonly writeOnly?: boolean;
         readonly readAsInstruction?: boolean;
-        readonly format?: "email" | "url" | "phone" | "password";
+        readonly format?: "email" | "url" | "phone" | "password" | "month";
         readonly default?: string;
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly multiline?: boolean | {

package/dist/user-data-rights/env.d.ts

@@ -0,0 +1,5 @@
+import * as z from "zod";
+/** Optional dedicated HMAC key of the anonymous deletion-confirmation links. */
+export declare const deletionTokenSecretEnvSchema: z.ZodObject<{
+    DELETION_TOKEN_SECRET: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;

package/dist/user-data-rights/env.js

@@ -0,0 +1,11 @@
+import * as z from "zod";
+const MIN_DELETION_TOKEN_SECRET_LENGTH = 32;
+/** Optional dedicated HMAC key of the anonymous deletion-confirmation links. */
+export const deletionTokenSecretEnvSchema = z.object({
+    DELETION_TOKEN_SECRET: z
+        .string()
+        .min(MIN_DELETION_TOKEN_SECRET_LENGTH)
+        .optional()
+        .describe("Dedicated HMAC secret for the anonymous deletion-confirmation links. Unset: derived from JWT_SECRET.")
+        .meta({ kumiko: { pulumi: { generator: "openssl rand -hex 24", secret: true } } }),
+});

package/dist/user-data-rights/feature.js

@@ -7,6 +7,7 @@ import { isPlainObject } from "@cosmicdrift/kumiko-types/type-guards";
 import { createConfigAccessor } from "../config/index.js";
 import { validateGdprHookCompleteness, validateGdprPiiHookCoverage } from "./boot-checks.js";
 import { EXPORT_SECTION_EXTENSION_NAME, PRIVACY_CENTER_SCREEN_ID, STATUS_OPTION_KEY_PREFIX, USER_ME_QUERY, UserDataRightsHandlers, } from "./constants.js";
+import { deletionTokenSecretEnvSchema } from "./env.js";
 import { cancelDeletionWrite } from "./handlers/cancel-deletion.write.js";
 import { createConfirmDeletionByTokenHandler } from "./handlers/confirm-deletion-by-token.write.js";
 import { downloadAttemptListQuery } from "./handlers/download-attempt-list.query.js";
@@ -57,6 +58,7 @@ export function createUserDataRightsFeature(opts = {}) {
             recommended: false,
         });
         r.requires({ features: ["user", "data-retention", "compliance-profiles", "sessions"] });
+        r.envSchema(deletionTokenSecretEnvSchema);
         r.usesApi("compliance.forTenant");
         r.usesApi("retention.policyFor");
         // S2.U6 — restrict-account ruft sessions.revokeAllForUser cross-feature.
@@ -430,7 +432,7 @@ export function createUserDataRightsFeature(opts = {}) {
                 // SYSTEM_USER_ID ist die framework-weite Konvention. Der job-
                 // Discriminator wird via handlerName="user-data-rights:run-export-
                 // jobs" im Secret-Read-Audit erfasst.
-                const exportUserId = ctx._userId ?? SYSTEM_USER_ID;
+                const exportUserId = SYSTEM_USER_ID;
                 const exportDb = ctx.db.unsafeRaw(); // @cast-boundary db-operator — jobs never run inside a DbTx
                 const exportRegistry = ctx.registry;
                 // JobContext carries ctx.meter (raw), not ctx.metrics — that bound
@@ -512,7 +514,7 @@ export function createUserDataRightsFeature(opts = {}) {
                     throw new Error("run-forget-cleanup: ctx.registry required (JobContext incomplete)");
                 }
                 const T = (await import("@cosmicdrift/kumiko-framework/time")).getTemporal();
-                const forgetUserId = ctx._userId ?? SYSTEM_USER_ID;
+                const forgetUserId = SYSTEM_USER_ID;
                 const forgetDb = ctx.db.unsafeRaw(); // @cast-boundary db-operator — jobs never run inside a DbTx
                 const forgetRegistry = ctx.registry;
                 const tenantModel = await resolveAppTenantModel({

package/dist/user-data-rights/index.d.ts

@@ -1,4 +1,5 @@
 export { TENANT_MODEL_CONFIG_KEY } from "./constants.ts";
+export { deletionTokenSecretEnvSchema } from "./env.ts";
 export { createUserDataRightsFeature, type UserDataRightsOptions } from "./feature.ts";
 export type { SendDeletionVerificationEmailFn } from "./handlers/request-deletion-by-email.write.ts";
 export { denyIfTargetOutsideAdminTenant, TARGET_USER_NOT_IN_ADMIN_TENANT, } from "./lib/deny-if-target-outside-admin-tenant.ts";

package/dist/user-data-rights/index.js

@@ -1,4 +1,5 @@
 export { TENANT_MODEL_CONFIG_KEY } from "./constants.js";
+export { deletionTokenSecretEnvSchema } from "./env.js";
 export { createUserDataRightsFeature } from "./feature.js";
 export { denyIfTargetOutsideAdminTenant, TARGET_USER_NOT_IN_ADMIN_TENANT, } from "./lib/deny-if-target-outside-admin-tenant.js";
 export { isSystemAdminActor } from "./lib/is-admin-actor.js";

package/dist/user-data-rights/lib/mail-transport-resolver.js

@@ -14,6 +14,6 @@ export function makeTenantMailTransportResolver(ctx) {
         }
         const config = createConfigAccessor(ctx.registry, ctx.configResolver, tenantId, // @cast-boundary engine-payload: TenantId brand
         ctx.userId, ctx.db);
-        return createTransportForTenant({ config, registry: ctx.registry, secrets: ctx.secrets, _userId: ctx.userId }, tenantId, ctx.handlerName);
+        return createTransportForTenant({ config, registry: ctx.registry, secrets: ctx.secrets, auditUserId: ctx.userId }, tenantId, ctx.handlerName);
     };
 }

package/dist/user-data-rights/lib/storage-provider-resolver.js

@@ -15,6 +15,6 @@ export function makeTenantStorageProviderResolver(ctx) {
         }
         const config = createConfigAccessor(ctx.registry, ctx.configResolver, tenantId, // @cast-boundary engine-payload: TenantId brand
         ctx.userId, ctx.db);
-        return createFileProviderForTenant({ config, registry: ctx.registry, secrets: ctx.secrets, _userId: ctx.userId }, tenantId, ctx.handlerName);
+        return createFileProviderForTenant({ config, registry: ctx.registry, secrets: ctx.secrets, auditUserId: ctx.userId }, tenantId, ctx.handlerName);
     };
 }

package/dist/user-data-rights/mail-notifications.js

@@ -1,6 +1,6 @@
 import { QnTypes, qn, templateVariable, } from "@cosmicdrift/kumiko-framework/engine";
 import { hasMailTranslationKey, listMailLocales, mailT, resolveMailLocale, } from "@cosmicdrift/kumiko-framework/i18n";
-import { escapeHtml } from "@cosmicdrift/kumiko-headless";
+import { escapeHtml } from "@cosmicdrift/kumiko-renderer/headless";
 import { mailParagraph } from "../shared/index.js";
 import { USER_DATA_RIGHTS_FEATURE } from "./constants.js";
 const ALL_GDPR_MAIL_KINDS = [