@cosmicdrift/kumiko-bundled-features 0.377.0 → 0.379.0

package/dist/tenant/{constants.js → web/constants.js}

@@ -1,8 +1,5 @@
-// @runtime client
-// Pure string constants — `@runtime client` so browser code (e.g. the
-// MemberStatusCell column renderer) can import them too (see
-// auth-email-password/constants.ts for the rationale). Runtime imports
-// client → server can keep using them as well.
+// Pure string constants, client-safe because they live under web/ (see
+// auth-email-password/web/constants.ts); server code may import them too.
 // Feature name
 export const TENANT_FEATURE = "tenant";
 export const MEMBERS_SCREEN_ID = "members";
@@ -55,7 +52,7 @@ export const TenantQueries = {
     tenantDirectory: "tenant:query:tenant-directory",
     activeTenantIds: "tenant:query:active-tenant-ids",
     resolveUserIds: "tenant:query:resolve-user-ids",
-    // Pending Invitations für den aktuellen Tenant (Admin-UI-Liste).
+    // Pending invitations of the current tenant (admin UI list).
     invitations: "tenant:query:invitations",
     // Combined active-members + pending-invitations list backing /members.
     teamList: "tenant:query:team:list",

package/dist/tenant/web/index.js

@@ -1,4 +1,3 @@
-// @runtime client
 export { tenantClient } from "./client-plugin.js";
 export { MemberRolesCell } from "./member-roles-cell.js";
 export { MemberStatusCell } from "./member-status-cell.js";

package/dist/tenant/web/member-roles-cell.js

@@ -1,4 +1,3 @@
-// @runtime client
 // Column-renderer for the /members screen's roles column — `roles` is a
 // `readonly string[]` on TeamRow (see team-list.query.ts), and DataTable has
 // no default array-to-cell formatting, so this joins it into one string.

package/dist/tenant/web/member-status-cell.js

@@ -1,5 +1,4 @@
 import { jsx as _jsx } from "react/jsx-runtime";
-// @runtime client
 // Column-renderer for the /members screen's status column, registered via
 // `tenantClient()`'s `columnRenderers` map (screen.columns[].renderer in
 // screens.ts). The list frame itself is the generic declarative

package/dist/tenant-lifecycle/stages.js

@@ -1,5 +1,5 @@
 import { configuredPiiSubjectKms, subjectIdToKey, } from "@cosmicdrift/kumiko-framework/crypto";
-import { createEventStoreExecutor, createTenantDb, selectMany, WritePurposes, } from "@cosmicdrift/kumiko-framework/db";
+import { createEventStoreExecutor, createTenantDataDestroyDb, createTenantDb, selectMany, WritePurposes, } from "@cosmicdrift/kumiko-framework/db";
 import { createSystemUser, EXT_EXTERNAL_RESOURCE, EXT_INFRA_RESOURCE, EXT_SEARCH_ADAPTER, EXT_STORAGE_PROVIDER, EXT_TENANT_DATA, extensionUsageEscapeHatchReason, isTenantDataExtensionHooks, isTenantResourceExtensionHooks, } from "@cosmicdrift/kumiko-framework/engine";
 import { createFallbackLogger } from "@cosmicdrift/kumiko-framework/logging";
 import { createEscapeHatchReporter, UNATTRIBUTED_ACTOR, } from "@cosmicdrift/kumiko-framework/pipeline";
@@ -55,10 +55,9 @@ async function runTenantDataHooks(ctx) {
             log: ctx.escapeHatchAuditLog ?? createFallbackLogger("tenant-lifecycle"),
         });
         const hookCtx = {
-            db: createTenantDb({
+            db: createTenantDataDestroyDb({
                 db: ctx.db,
                 tenantId: ctx.tenantId,
-                mode: "tenant",
                 grants: {
                     unsafeRaw: reason !== undefined ? { reason } : undefined,
                     report,

package/dist/tier-engine/entity.d.ts

@@ -1,4 +1,4 @@
-import { type TierAssignmentSource } from "./constants.ts";
+import { type TierAssignmentSource } from "./web/constants.ts";
 export declare const tierAssignmentEntity: import("@cosmicdrift/kumiko-types/fields").EntityDefinition<{
     readonly tier: {
         readonly type: "text";

package/dist/tier-engine/entity.js

@@ -1,5 +1,5 @@
 import { createEntity, createSelectField, createTextField, } from "@cosmicdrift/kumiko-framework/engine";
-import { TierAssignmentSources } from "./constants.js";
+import { TierAssignmentSources } from "./web/constants.js";
 // tier-assignment — pro Plattform-Tenant genau ein Aggregat. Aggregate-ID
 // wird deterministisch aus tenantId abgeleitet (uuidv5, siehe aggregate-id.ts).
 //

package/dist/tier-engine/feature.js

@@ -49,13 +49,13 @@ import { getTemporal } from "@cosmicdrift/kumiko-framework/time";
 import * as z from "zod";
 import { tenantTable } from "../tenant/index.js";
 import { tierAssignmentAggregateId } from "./aggregate-id.js";
-import { TIER_ADMIN_SCREEN_ID, TIER_ENGINE_FEATURE, TierAssignmentSources, TierEngineHandlers, } from "./constants.js";
 import { tierAssignmentEntity } from "./entity.js";
 import { getActiveTierQuery } from "./handlers/active-tier.query.js";
 import { getTenantTierQuery } from "./handlers/get-tenant-tier.query.js";
 import { createSetTenantTierWrite } from "./handlers/set-tenant-tier.write.js";
-import { TIER_ENGINE_I18N } from "./i18n.js";
 import { isTrialActive } from "./trial.js";
+import { TIER_ADMIN_SCREEN_ID, TIER_ENGINE_FEATURE, TierAssignmentSources, TierEngineHandlers, } from "./web/constants.js";
+import { TIER_ENGINE_I18N } from "./web/i18n.js";
 // Drizzle-table for the tier-assignment-entity. Built once at module-load
 // from the entity definition — same shape buildEntityTable would produce
 // in the App's drizzle/schema.generated.ts.

package/dist/tier-engine/handlers/set-tenant-tier.write.js

@@ -3,8 +3,8 @@ import { defineWriteHandler } from "@cosmicdrift/kumiko-framework/engine";
 import * as z from "zod";
 import { requireForTenant } from "../../shared/index.js";
 import { tierAssignmentAggregateId } from "../aggregate-id.js";
-import { TierAssignmentSources } from "../constants.js";
 import { tierAssignmentEntity } from "../entity.js";
+import { TierAssignmentSources } from "../web/constants.js";
 // SystemAdmin setzt das Tier eines BELIEBIGEN Tenants — manueller Grant ohne
 // Billing. Cross-tenant, daher SystemAdmin-only (kein TenantAdmin: sonst
 // Gratis-Self-Upgrade).

package/dist/tier-engine/index.d.ts

@@ -1,8 +1,8 @@
 export { tierAssignmentAggregateId } from "./aggregate-id.ts";
 export { type AddOnDefinition, type AddOnMap, type ComposeAppInput, type ComposedApp, composeApp, type TierDefinition, type TierMap, } from "./compose-app.ts";
-export { isTierAssignmentSource, TIER_ENGINE_FEATURE, type TierAssignmentSource, TierAssignmentSources, TierEngineHandlers, TierEngineQueries, } from "./constants.ts";
 export { tierAssignmentEntity } from "./entity.ts";
 export { type CreateTierEngineOptions, createTierEngineFeature, } from "./feature.ts";
 export { createTierOptionGate, type TierOptionAvailability, type TierOptionGate, type TierOptionGateDeps, type TierOptionSpec, } from "./tier-option-gate.ts";
 export { createTierResolver, type TierResolver, type TierResolverDeps, } from "./tier-resolver.ts";
 export { isTrialActive, type TrialPolicy } from "./trial.ts";
+export { isTierAssignmentSource, TIER_ENGINE_FEATURE, type TierAssignmentSource, TierAssignmentSources, TierEngineHandlers, TierEngineQueries, } from "./web/constants.ts";

package/dist/tier-engine/index.js

@@ -8,9 +8,9 @@
 //   - `TierEngineHandlers` / `TierEngineQueries` — qualified handler names
 export { tierAssignmentAggregateId } from "./aggregate-id.js";
 export { composeApp, } from "./compose-app.js";
-export { isTierAssignmentSource, TIER_ENGINE_FEATURE, TierAssignmentSources, TierEngineHandlers, TierEngineQueries, } from "./constants.js";
 export { tierAssignmentEntity } from "./entity.js";
 export { createTierEngineFeature, } from "./feature.js";
 export { createTierOptionGate, } from "./tier-option-gate.js";
 export { createTierResolver, } from "./tier-resolver.js";
 export { isTrialActive } from "./trial.js";
+export { isTierAssignmentSource, TIER_ENGINE_FEATURE, TierAssignmentSources, TierEngineHandlers, TierEngineQueries, } from "./web/constants.js";

package/dist/tier-engine/web/client-plugin.js

@@ -1,10 +1,9 @@
-// @runtime client
 // Client-feature factory for tier-engine. Supplies the default translations
 // for the declarative tier-admin actionForm (registered server-side via
 // r.screen in the feature); the app places the screen only via r.nav.
 import { mergeTranslations, translationsByLocaleFromKeys, } from "@cosmicdrift/kumiko-renderer";
-import { TIER_ENGINE_FEATURE } from "../constants.js";
-import { TIER_ENGINE_I18N } from "../i18n.js";
+import { TIER_ENGINE_FEATURE } from "./constants.js";
+import { TIER_ENGINE_I18N } from "./i18n.js";
 const defaultTranslations = translationsByLocaleFromKeys(TIER_ENGINE_I18N);
 export function tierEngineClient(options) {
     return {

package/dist/tier-engine/{constants.js → web/constants.js}

@@ -1,4 +1,3 @@
-// @runtime client
 // Pure string-literal QNs/ids — imported by both server (feature.ts) and
 // client (web/client-plugin.tsx). Marked `client`, the most permissive
 // category in the kumiko isolation model (runtime may import client, client
@@ -30,6 +29,6 @@ export const TierEngineQueries = {
     getTenantTier: "tier-engine:query:get-tenant-tier",
     tierOptions: "tier-engine:query:tier-options",
 };
-// Screen-id für den manuellen Tier-Grant-Screen. Apps referenzieren ihn
-// qualifiziert in r.nav: `tier-engine:screen:tier-admin`.
+// Screen id of the manual tier-grant screen. Apps reference it qualified in
+// r.nav: `tier-engine:screen:tier-admin`.
 export const TIER_ADMIN_SCREEN_ID = "tier-admin";

package/dist/tier-engine/{i18n.js → web/i18n.js}

@@ -1,4 +1,3 @@
-// @runtime client
 // Server + client i18n for the tier-admin actionForm. Single source of
 // truth: r.translations({ keys: TIER_ENGINE_I18N }) registers these
 // server-side, web/client-plugin derives the client-side locale bundle

package/dist/tier-engine/web/index.js

@@ -1,4 +1,3 @@
-// @runtime client
 // Public exports für die Browser-Seite des tier-engine Features. Konsumiert
 // über `@cosmicdrift/kumiko-bundled-features/tier-engine/web` — die
 // Server-Seite (createTierEngineFeature) lebt unter

package/dist/user/handlers/create.write.js

@@ -5,9 +5,9 @@ import { canonicalizeLocaleTag, isValidLocaleTag } from "@cosmicdrift/kumiko-fra
 import { isValidIanaTimeZone } from "@cosmicdrift/kumiko-framework/time";
 import { parseRoles } from "@cosmicdrift/kumiko-framework/utils";
 import * as z from "zod";
-import { UserErrors } from "../constants.js";
 import { rolesInputSchema } from "../roles-input-schema.js";
 import { userEntity, userTable } from "../schema/user.js";
+import { UserErrors } from "../web/constants.js";
 const crud = createEventStoreExecutor(userTable, userEntity, { entityName: "user" });
 // Only the Auth features (running as SYSTEM) or a SystemAdmin may create users.
 //

package/dist/user/handlers/update-roles.js

@@ -2,8 +2,8 @@ import { acquireNamespacedAdvisoryLock, createEventStoreExecutor, fetchOne, sele
 import { createSystemUser, findForbiddenRoleAssignment, SYSTEM_TENANT_ID, } from "@cosmicdrift/kumiko-framework/engine";
 import { AccessDeniedError, ConflictError, InternalError, NotFoundError, writeFailure, } from "@cosmicdrift/kumiko-framework/errors";
 import { parseRoles } from "@cosmicdrift/kumiko-framework/utils";
-import { UserErrors } from "../constants.js";
 import { USER_STATUS, userEntity, userTable } from "../schema/user.js";
+import { UserErrors } from "../web/constants.js";
 const crud = createEventStoreExecutor(userTable, userEntity, { entityName: "user" });
 const REVOKE_ALL_SESSIONS_QN = "sessions:write:user-session:revoke-all-for-user";
 // Serializes last-SystemAdmin demotion checks globally inside the write TX

package/dist/user/handlers/update.write.js

@@ -4,9 +4,9 @@ import { AccessDeniedError, InternalError, writeFailure, } from "@cosmicdrift/ku
 import { canonicalizeLocaleTag, isValidLocaleTag } from "@cosmicdrift/kumiko-framework/i18n";
 import { isValidIanaTimeZone } from "@cosmicdrift/kumiko-framework/time";
 import * as z from "zod";
-import { UserErrors } from "../constants.js";
 import { rolesInputSchema } from "../roles-input-schema.js";
 import { userEntity, userTable } from "../schema/user.js";
+import { UserErrors } from "../web/constants.js";
 import { applyUserRolesUpdate } from "./update-roles.js";
 const crud = createEventStoreExecutor(userTable, userEntity, { entityName: "user" });
 const SYSTEM_ADMIN_DEMOTION_COUNT_REASON = "on a SystemAdmin demotion, a jsonb @> prefilter over the global users table counts remaining active SystemAdmins";

package/dist/user/index.d.ts

@@ -1,8 +1,8 @@
 export { UserCommandSchemas } from "./command-schemas.ts";
-export { USER_FEATURE, UserErrors, UserHandlers, UserQueries } from "./constants.ts";
 export { backfillUserStreamTenants, type UserStreamBackfillResult, } from "./db/queries/stream-tenant-backfill.ts";
 export { createUserFeature } from "./feature.ts";
 export { isPrincipalBlocked, isPrincipalRowBlocked, principalStatusPlugin, } from "./principal-status.ts";
 export { resolveUserDisplayNames } from "./resolve-display-names.ts";
 export type { UserStatus } from "./schema/user.ts";
 export { USER_ANONYMIZED_DISPLAY_NAME, USER_ANONYMIZED_EMAIL_DOMAIN, USER_ANONYMIZED_EMAIL_PREFIX, USER_DELETED_DISPLAY_NAME, USER_DELETED_EMAIL_PREFIX, USER_STATUS, userEntity, userTable, } from "./schema/user.ts";
+export { USER_FEATURE, UserErrors, UserHandlers, UserQueries } from "./web/constants.ts";

package/dist/user/index.js

@@ -1,7 +1,7 @@
 export { UserCommandSchemas } from "./command-schemas.js";
-export { USER_FEATURE, UserErrors, UserHandlers, UserQueries } from "./constants.js";
 export { backfillUserStreamTenants, } from "./db/queries/stream-tenant-backfill.js";
 export { createUserFeature } from "./feature.js";
 export { isPrincipalBlocked, isPrincipalRowBlocked, principalStatusPlugin, } from "./principal-status.js";
 export { resolveUserDisplayNames } from "./resolve-display-names.js";
 export { USER_ANONYMIZED_DISPLAY_NAME, USER_ANONYMIZED_EMAIL_DOMAIN, USER_ANONYMIZED_EMAIL_PREFIX, USER_DELETED_DISPLAY_NAME, USER_DELETED_EMAIL_PREFIX, USER_STATUS, userEntity, userTable, } from "./schema/user.js";
+export { USER_FEATURE, UserErrors, UserHandlers, UserQueries } from "./web/constants.js";

package/dist/user/invited-global-roles.d.ts

@@ -1,5 +1,5 @@
 import { type DbRunner } from "@cosmicdrift/kumiko-framework/db";
-import { type GlobalRole } from "./constants.ts";
+import { type GlobalRole } from "./web/constants.ts";
 export declare function parseInvitedGlobalRoles(raw: unknown): readonly GlobalRole[];
 export declare function grantInvitedGlobalRoles(db: DbRunner, options: {
     readonly userId: string;

package/dist/user/invited-global-roles.js

@@ -2,8 +2,8 @@ import { createEventStoreExecutor, createTenantDb, fetchOne, } from "@cosmicdrif
 import { createSystemUser, SYSTEM_TENANT_ID } from "@cosmicdrift/kumiko-framework/engine";
 import { NotFoundError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
 import { parseRoles } from "@cosmicdrift/kumiko-framework/utils";
-import { GLOBAL_ROLE_OPTIONS } from "./constants.js";
 import { userEntity, userTable } from "./schema/user.js";
+import { GLOBAL_ROLE_OPTIONS } from "./web/constants.js";
 const userExecutor = createEventStoreExecutor(userTable, userEntity, { entityName: "user" });
 function isGlobalRole(role) {
     return GLOBAL_ROLE_OPTIONS.some((option) => option === role);

package/dist/user/schema/user.js

@@ -1,6 +1,6 @@
 import { buildEntityTable } from "@cosmicdrift/kumiko-framework/db";
 import { access, createBooleanField, createDerivedField, createEntity, createMultiSelectField, createSelectField, createTextField, createTimestampField, createTzField, } from "@cosmicdrift/kumiko-framework/engine";
-import { GLOBAL_ROLE_OPTIONS } from "../constants.js";
+import { GLOBAL_ROLE_OPTIONS } from "../web/constants.js";
 /**
  * User-Lifecycle-Status (S2.U1). Single source of truth — Auth-Middleware
  * (S2.U6), Forget-Job (S2.U5) und Restriction-Handler nutzen diese

package/dist/user/{constants.js → web/constants.js}

@@ -1,4 +1,3 @@
-// @runtime client
 // Feature name
 export const USER_FEATURE = "user";
 /** Assignable global (cross-tenant) roles on user.roles — SystemAdmin is the

package/dist/user-data-rights/env.js

@@ -6,6 +6,6 @@ export const deletionTokenSecretEnvSchema = z.object({
         .string()
         .min(MIN_DELETION_TOKEN_SECRET_LENGTH)
         .optional()
-        .describe("Dedicated HMAC secret for the anonymous deletion-confirmation links. Unset: derived from JWT_SECRET.")
+        .describe("Dedicated HMAC secret for the anonymous deletion-confirmation links. At least 32 characters. Unset: the anonymous deletion-confirmation flow stays off; there is no fallback to JWT_SECRET.")
         .meta({ kumiko: { pulumi: { generator: "openssl rand -hex 24", secret: true } } }),
 });

package/dist/user-data-rights/feature.js

@@ -6,7 +6,6 @@ import { createMetricsHandle, createNoopMetricsHandle, } from "@cosmicdrift/kumi
 import { isPlainObject } from "@cosmicdrift/kumiko-types/type-guards";
 import { createConfigAccessor } from "../config/index.js";
 import { validateGdprHookCompleteness, validateGdprPiiHookCoverage } from "./boot-checks.js";
-import { EXPORT_SECTION_EXTENSION_NAME, PRIVACY_CENTER_SCREEN_ID, STATUS_OPTION_KEY_PREFIX, USER_ME_QUERY, UserDataRightsHandlers, } from "./constants.js";
 import { deletionTokenSecretEnvSchema } from "./env.js";
 import { cancelDeletionWrite } from "./handlers/cancel-deletion.write.js";
 import { createConfirmDeletionByTokenHandler } from "./handlers/confirm-deletion-by-token.write.js";
@@ -24,7 +23,6 @@ import { createRequestDeletionByEmailHandler, } from "./handlers/request-deletio
 import { requestExportWrite } from "./handlers/request-export.write.js";
 import { restrictAccountWrite } from "./handlers/restrict-account.write.js";
 import { createRunForgetCleanupHandler } from "./handlers/run-forget-cleanup.write.js";
-import { USER_DATA_RIGHTS_I18N } from "./i18n.js";
 import { isGdprMailDeliveryAvailable, isMailRendererAvailable, isMailTransportAvailable, makeDefaultDeletionExecutedEmail, makeDefaultExportFailedEmail, makeDefaultExportReadyEmail, } from "./lib/default-mailers.js";
 import { makeTenantMailTransportResolver } from "./lib/mail-transport-resolver.js";
 import { resolveAppTenantModel } from "./lib/resolve-tenant-model.js";
@@ -36,6 +34,8 @@ import { downloadAttemptEntity } from "./schema/download-attempt.js";
 import { exportDownloadTokenEntity } from "./schema/download-token.js";
 import { exportJobEntity } from "./schema/export-job.js";
 import { downloadAttemptListScreen, exportJobDetailScreen, exportJobListScreen, } from "./screens.js";
+import { EXPORT_SECTION_EXTENSION_NAME, PRIVACY_CENTER_SCREEN_ID, STATUS_OPTION_KEY_PREFIX, USER_ME_QUERY, UserDataRightsHandlers, } from "./web/constants.js";
+import { USER_DATA_RIGHTS_I18N } from "./web/i18n.js";
 function isMailTransportMountedWithoutDelivery(features) {
     const names = new Set(features.map((feature) => feature.name));
     const hasTransport = [...names].some((name) => name.startsWith("mail-transport-"));
@@ -169,7 +169,7 @@ export function createUserDataRightsFeature(opts = {}) {
         r.translations({ keys: USER_DATA_RIGHTS_I18N });
         registerGdprMails(r);
         // Privacy-center dot-form labels (i18nKey()-marked below), duplicated in
-        // web/i18n.ts's client bundle since privacy-center-screen.tsx renders
+        // web/default-translations.ts's client bundle since privacy-center-screen.tsx renders
         // them client-side.
         r.translations({
             keys: {

package/dist/user-data-rights/index.d.ts

@@ -1,4 +1,3 @@
-export { TENANT_MODEL_CONFIG_KEY } from "./constants.ts";
 export { deletionTokenSecretEnvSchema } from "./env.ts";
 export { createUserDataRightsFeature, type UserDataRightsOptions } from "./feature.ts";
 export type { SendDeletionVerificationEmailFn } from "./handlers/request-deletion-by-email.write.ts";
@@ -12,3 +11,4 @@ export type { UserExportBundle } from "./run-user-export.ts";
 export { runUserExport } from "./run-user-export.ts";
 export { downloadAttemptEntity, downloadAttemptsTable } from "./schema/download-attempt.ts";
 export { ACTIVE_JOB_CONSTRAINT, EXPORT_JOB_STATUS, type ExportJobStatus, exportJobEntity, exportJobsTable, } from "./schema/export-job.ts";
+export { TENANT_MODEL_CONFIG_KEY } from "./web/constants.ts";

package/dist/user-data-rights/index.js

@@ -1,4 +1,3 @@
-export { TENANT_MODEL_CONFIG_KEY } from "./constants.js";
 export { deletionTokenSecretEnvSchema } from "./env.js";
 export { createUserDataRightsFeature } from "./feature.js";
 export { denyIfTargetOutsideAdminTenant, TARGET_USER_NOT_IN_ADMIN_TENANT, } from "./lib/deny-if-target-outside-admin-tenant.js";
@@ -18,3 +17,4 @@ export { policyToStrategy, runForgetCleanup } from "./run-forget-cleanup.js";
 export { runUserExport } from "./run-user-export.js";
 export { downloadAttemptEntity, downloadAttemptsTable } from "./schema/download-attempt.js";
 export { ACTIVE_JOB_CONSTRAINT, EXPORT_JOB_STATUS, exportJobEntity, exportJobsTable, } from "./schema/export-job.js";
+export { TENANT_MODEL_CONFIG_KEY } from "./web/constants.js";

package/dist/user-data-rights/lib/resolve-tenant-model.js

@@ -5,7 +5,7 @@
 // SYSTEM_TENANT_ID reads the system/appOverride value.
 import { SYSTEM_TENANT_ID, } from "@cosmicdrift/kumiko-framework/engine";
 import { createConfigAccessor } from "../../config/index.js";
-import { TENANT_MODEL_CONFIG_KEY } from "../constants.js";
+import { TENANT_MODEL_CONFIG_KEY } from "../web/constants.js";
 export async function resolveAppTenantModel(args) {
     // No resolver (e.g. a unit context) → safe default: never erase tenant-scoped data.
     if (!args.configResolver)

package/dist/user-data-rights/mail-notifications.js

@@ -2,7 +2,7 @@ import { QnTypes, qn, templateVariable, } from "@cosmicdrift/kumiko-framework/en
 import { hasMailTranslationKey, listMailLocales, mailT, resolveMailLocale, } from "@cosmicdrift/kumiko-framework/i18n";
 import { escapeHtml } from "@cosmicdrift/kumiko-renderer/headless";
 import { mailParagraph } from "../shared/index.js";
-import { USER_DATA_RIGHTS_FEATURE } from "./constants.js";
+import { USER_DATA_RIGHTS_FEATURE } from "./web/constants.js";
 const ALL_GDPR_MAIL_KINDS = [
     "exportReady",
     "exportFailed",

package/dist/user-data-rights/web/client-plugin.js

@@ -1,4 +1,3 @@
-// @runtime client
 // Client-feature factory for user-data-rights. Provides the ExportSection
 // extension component for the privacy-center screen (registered server-side
 // declaratively as `type: "projectionDetail"`, see feature.ts — restriction
@@ -15,8 +14,8 @@
 // ../feature.ts) — BREAKING, consumers with `showDeletion: false` (e.g.
 // money-horse) must carry the option over at feature setup.
 import { mergeTranslations } from "@cosmicdrift/kumiko-renderer";
-import { EXPORT_SECTION_EXTENSION_NAME, USER_DATA_RIGHTS_FEATURE } from "../constants.js";
-import { defaultTranslations } from "./i18n.js";
+import { EXPORT_SECTION_EXTENSION_NAME, USER_DATA_RIGHTS_FEATURE } from "./constants.js";
+import { defaultTranslations } from "./default-translations.js";
 import { ExportSection } from "./privacy-center-screen.js";
 import { makePublicDeletionGate } from "./public-deletion-gate.js";
 export function userDataRightsClient(options) {

package/dist/user-data-rights/web/confirm-deletion-screen.js

@@ -1,5 +1,4 @@
 import { Fragment as _Fragment, jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
-// @runtime client
 // ConfirmAccountDeletionScreen — anonymer Apex-Screen Schritt 2. Liest das
 // Token aus dem URL-Fragment (`#token=…`, nie an den Server gesendet — landet
 // so nicht in Proxy-/Access-Logs, fw#1554) und dispatcht beim Bestätigen

package/dist/user-data-rights/{constants.js → web/constants.js}

@@ -1,8 +1,7 @@
-// @runtime client
-// Reine String-Konstanten — client-markiert, damit web/ (z.B. ExportSection)
-// sie importieren darf, ohne das runtime-Barrel des Features (und damit
-// dessen Server-/DOM-freien Code) zu ziehen. Runtime-Code (feature.ts) darf
-// client-Dateien ohnehin importieren.
+// Pure string constants, client-marked so web/ (e.g. ExportSection) may
+// import them without pulling the feature's runtime barrel (and with it its
+// server/DOM-free code). Runtime code (feature.ts) may import client files
+// anyway.
 export const USER_DATA_RIGHTS_FEATURE = "user-data-rights";
 // Registered without r.nav — apps place it via their own r.nav. Qualified:
 // `user-data-rights:screen:privacy-center`.
@@ -35,14 +34,14 @@ export const UserDataRightsHandlers = {
     cancelDeletion: "user-data-rights:write:cancel-deletion",
     restrictAccount: "user-data-rights:write:restrict-account",
 };
-// Fremde QN: der Lifecycle-Status (active / deletionRequested / restricted)
-// kommt aus dem user-Feature. Lokal gepinnt statt das user-runtime-Barrel zu
-// importieren (Runtime-Isolation, wie user-profile). Drift-Schutz: der
-// Screen-Test vergleicht gegen UserQueries.me.
+// Foreign QN: the lifecycle status (active / deletionRequested / restricted)
+// comes from the user feature. Pinned locally instead of importing the user
+// runtime barrel (runtime isolation, like user-profile). Drift protection: the
+// screen test compares against UserQueries.me.
 export const USER_ME_QUERY = "user:query:user:me";
-// Client-safe Mirror von EXPORT_JOB_STATUS (schema/export-job.ts ist
-// server-only via Drizzle-Import). Drift-Schutz: der Screen-Test vergleicht
-// gegen die Schema-Originale.
+// Client-safe mirror of EXPORT_JOB_STATUS (schema/export-job.ts is server-only
+// via its Drizzle import). Drift protection: the screen test compares against
+// the schema original.
 export const EXPORT_JOB_STATUS = {
     Pending: "pending",
     Running: "running",

package/dist/user-data-rights/web/default-translations.d.ts

@@ -0,0 +1,2 @@
+import { type TranslationsByLocale } from "@cosmicdrift/kumiko-renderer";
+export declare const defaultTranslations: TranslationsByLocale;

package/dist/user-data-rights/web/default-translations.js

@@ -0,0 +1,59 @@
+// Default bundle for the apex deletion screens. Apps attach it as a fallback
+// bundle in the LocaleProvider (createPublicSurface clientFeatures or directly)
+// and may override single keys. Keys: `userDataRights.deletion.<step>.<slug>`.
+import { mergeTranslations, translationsByLocaleFromKeys, } from "@cosmicdrift/kumiko-renderer";
+import { USER_DATA_RIGHTS_I18N } from "./i18n.js";
+const apexTranslations = {
+    en: {
+        "userDataRights.deletion.request.title": "Request account deletion",
+        "userDataRights.deletion.request.intro": "Enter the email address of your account. If an account exists, we'll send you a confirmation link to delete it.",
+        "userDataRights.deletion.request.email": "Email",
+        "userDataRights.deletion.request.submit": "Request confirmation link",
+        "userDataRights.deletion.request.submitting": "…",
+        "userDataRights.deletion.request.successTitle": "Email sent",
+        "userDataRights.deletion.request.successBody": "If the email exists in our system, a message with a confirmation link is on its way. Please check your inbox.",
+        "userDataRights.deletion.request.error": "Something went wrong. Please try again.",
+        "userDataRights.deletion.confirm.title": "Confirm account deletion",
+        "userDataRights.deletion.confirm.intro": "Confirming starts the deletion grace period. Until it ends you can cancel the deletion from your logged-in account.",
+        "userDataRights.deletion.confirm.submit": "Confirm deletion",
+        "userDataRights.deletion.confirm.submitting": "…",
+        "userDataRights.deletion.confirm.successTitle": "Deletion scheduled",
+        "userDataRights.deletion.confirm.successBody": "Your account will be deleted after the grace period. You can cancel the deletion from your logged-in account until then.",
+        "userDataRights.deletion.confirm.invalidToken": "The link is invalid or expired. Please request a new one.",
+        "userDataRights.deletion.confirm.missingToken": "No token found in the link. Please open the link from the email again.",
+        "userDataRights.deletion.confirm.error": "Something went wrong. Please try again.",
+        "userDataRights.privacyCenter.errors.generic": "Something went wrong. Please try again.",
+        "userDataRights.privacyCenter.field.status": "Account status",
+        "userDataRights.privacyCenter.field.gracePeriodEnd": "Scheduled deletion date",
+        "userDataRights.privacyCenter.field.status.option.active": "Active",
+        "userDataRights.privacyCenter.field.status.option.restricted": "Restricted",
+        "userDataRights.privacyCenter.field.status.option.deletionRequested": "Deletion requested",
+        "userDataRights.privacyCenter.field.status.option.deleted": "Deleted",
+        "userDataRights.privacyCenter.export.title": "Export your data (Art. 20)",
+        "userDataRights.privacyCenter.export.intro": "Request a copy of your data. It is prepared in the background; once ready you can download it here.",
+        "userDataRights.privacyCenter.export.request": "Request data export",
+        "userDataRights.privacyCenter.export.requesting": "Requesting …",
+        "userDataRights.privacyCenter.export.pending": "Your export is being prepared. Please check back later.",
+        "userDataRights.privacyCenter.export.failed": "The last export failed to build. You can try again.",
+        "userDataRights.privacyCenter.export.ready": "Your export is ready.",
+        "userDataRights.privacyCenter.export.download": "Download export",
+        "userDataRights.privacyCenter.export.availableUntil": "Available until {date}",
+        "userDataRights.privacyCenter.export.requestNew": "Request a new export",
+        "userDataRights.privacyCenter.restriction.title": "Restrict processing (Art. 18)",
+        "userDataRights.privacyCenter.restriction.explainer": "Freeze your account: processing of your data is paused and you are signed out. Lifting the restriction afterwards is only possible via support.",
+        "userDataRights.privacyCenter.restriction.restrict": "Restrict account",
+        "userDataRights.privacyCenter.restriction.dialogTitle": "Restrict your account?",
+        "userDataRights.privacyCenter.restriction.dialogDescription": "You will be signed out immediately and cannot sign in again until support lifts the restriction.",
+        "userDataRights.privacyCenter.deletion.title": "Delete account (Art. 17)",
+        "userDataRights.privacyCenter.deletion.explainer": "Request deletion of your account. Until the grace period ends you can cancel the deletion.",
+        "userDataRights.privacyCenter.deletion.delete": "Delete account",
+        "userDataRights.privacyCenter.deletion.cancel": "Cancel deletion",
+        "userDataRights.privacyCenter.deletion.dialogTitle": "Delete your account?",
+        "userDataRights.privacyCenter.deletion.dialogDescription": "Confirming starts the deletion grace period. You can cancel the deletion until it ends.",
+        "userDataRights.errors.download.notFound": "The download link is invalid or belongs to a different account.",
+        "userDataRights.errors.download.expired": "Your download has expired. Please request a new export.",
+        "userDataRights.errors.download.unavailable": "The export is not yet ready or has failed. Please check the status endpoint.",
+        "userDataRights.errors.download.signedUrlNotSupported": "The download is currently unavailable due to a server configuration issue. The operator has been notified.",
+    },
+};
+export const defaultTranslations = mergeTranslations(translationsByLocaleFromKeys(USER_DATA_RIGHTS_I18N), apexTranslations);

package/dist/user-data-rights/web/i18n.d.ts

@@ -1,2 +1,5 @@
-import { type TranslationsByLocale } from "@cosmicdrift/kumiko-renderer";
-export declare const defaultTranslations: TranslationsByLocale;
+type LocalizedString = {
+    readonly en: string;
+};
+export declare const USER_DATA_RIGHTS_I18N: Readonly<Record<string, LocalizedString>>;
+export {};

package/dist/user-data-rights/web/i18n.js

@@ -1,61 +1,39 @@
-// @runtime client
-// Default-Bundle für die Apex-Deletion-Screens. Apps hängen es als
-// Fallback-Bundle in den LocaleProvider (createPublicSurface clientFeatures
-// oder direkt) und können einzelne Keys überschreiben. Keys: `userDataRights.
-// deletion.<step>.<slug>`.
-import { mergeTranslations, translationsByLocaleFromKeys, } from "@cosmicdrift/kumiko-renderer";
-import { USER_DATA_RIGHTS_I18N } from "../i18n.js";
-const apexTranslations = {
-    en: {
-        "userDataRights.deletion.request.title": "Request account deletion",
-        "userDataRights.deletion.request.intro": "Enter the email address of your account. If an account exists, we'll send you a confirmation link to delete it.",
-        "userDataRights.deletion.request.email": "Email",
-        "userDataRights.deletion.request.submit": "Request confirmation link",
-        "userDataRights.deletion.request.submitting": "…",
-        "userDataRights.deletion.request.successTitle": "Email sent",
-        "userDataRights.deletion.request.successBody": "If the email exists in our system, a message with a confirmation link is on its way. Please check your inbox.",
-        "userDataRights.deletion.request.error": "Something went wrong. Please try again.",
-        "userDataRights.deletion.confirm.title": "Confirm account deletion",
-        "userDataRights.deletion.confirm.intro": "Confirming starts the deletion grace period. Until it ends you can cancel the deletion from your logged-in account.",
-        "userDataRights.deletion.confirm.submit": "Confirm deletion",
-        "userDataRights.deletion.confirm.submitting": "…",
-        "userDataRights.deletion.confirm.successTitle": "Deletion scheduled",
-        "userDataRights.deletion.confirm.successBody": "Your account will be deleted after the grace period. You can cancel the deletion from your logged-in account until then.",
-        "userDataRights.deletion.confirm.invalidToken": "The link is invalid or expired. Please request a new one.",
-        "userDataRights.deletion.confirm.missingToken": "No token found in the link. Please open the link from the email again.",
-        "userDataRights.deletion.confirm.error": "Something went wrong. Please try again.",
-        "userDataRights.privacyCenter.errors.generic": "Something went wrong. Please try again.",
-        "userDataRights.privacyCenter.field.status": "Account status",
-        "userDataRights.privacyCenter.field.gracePeriodEnd": "Scheduled deletion date",
-        "userDataRights.privacyCenter.field.status.option.active": "Active",
-        "userDataRights.privacyCenter.field.status.option.restricted": "Restricted",
-        "userDataRights.privacyCenter.field.status.option.deletionRequested": "Deletion requested",
-        "userDataRights.privacyCenter.field.status.option.deleted": "Deleted",
-        "userDataRights.privacyCenter.export.title": "Export your data (Art. 20)",
-        "userDataRights.privacyCenter.export.intro": "Request a copy of your data. It is prepared in the background; once ready you can download it here.",
-        "userDataRights.privacyCenter.export.request": "Request data export",
-        "userDataRights.privacyCenter.export.requesting": "Requesting …",
-        "userDataRights.privacyCenter.export.pending": "Your export is being prepared. Please check back later.",
-        "userDataRights.privacyCenter.export.failed": "The last export failed to build. You can try again.",
-        "userDataRights.privacyCenter.export.ready": "Your export is ready.",
-        "userDataRights.privacyCenter.export.download": "Download export",
-        "userDataRights.privacyCenter.export.availableUntil": "Available until {date}",
-        "userDataRights.privacyCenter.export.requestNew": "Request a new export",
-        "userDataRights.privacyCenter.restriction.title": "Restrict processing (Art. 18)",
-        "userDataRights.privacyCenter.restriction.explainer": "Freeze your account: processing of your data is paused and you are signed out. Lifting the restriction afterwards is only possible via support.",
-        "userDataRights.privacyCenter.restriction.restrict": "Restrict account",
-        "userDataRights.privacyCenter.restriction.dialogTitle": "Restrict your account?",
-        "userDataRights.privacyCenter.restriction.dialogDescription": "You will be signed out immediately and cannot sign in again until support lifts the restriction.",
-        "userDataRights.privacyCenter.deletion.title": "Delete account (Art. 17)",
-        "userDataRights.privacyCenter.deletion.explainer": "Request deletion of your account. Until the grace period ends you can cancel the deletion.",
-        "userDataRights.privacyCenter.deletion.delete": "Delete account",
-        "userDataRights.privacyCenter.deletion.cancel": "Cancel deletion",
-        "userDataRights.privacyCenter.deletion.dialogTitle": "Delete your account?",
-        "userDataRights.privacyCenter.deletion.dialogDescription": "Confirming starts the deletion grace period. You can cancel the deletion until it ends.",
-        "userDataRights.errors.download.notFound": "The download link is invalid or belongs to a different account.",
-        "userDataRights.errors.download.expired": "Your download has expired. Please request a new export.",
-        "userDataRights.errors.download.unavailable": "The export is not yet ready or has failed. Please check the status endpoint.",
-        "userDataRights.errors.download.signedUrlNotSupported": "The download is currently unavailable due to a server configuration issue. The operator has been notified.",
+export const USER_DATA_RIGHTS_I18N = {
+    "user-data-rights:feature.label": { en: "Privacy" },
+    "user-data-rights:notify.export-ready.label": { en: "Data export ready" },
+    "user-data-rights:notify.export-failed.label": { en: "Data export failed" },
+    "user-data-rights:notify.deletion-requested.label": { en: "Deletion requested" },
+    "user-data-rights:notify.deletion-executed.label": { en: "Deletion completed" },
+    "user-data-rights:nav.exportJobs": { en: "GDPR exports" },
+    "screen:export-job-list.title": { en: "GDPR exports" },
+    "screen:export-job-detail.title": { en: "Export job" },
+    "screen:download-attempt-list.title": { en: "Download attempts" },
+    "screen:privacy-center.title": { en: "Privacy" },
+    "userDataRights.privacyCenter.subtitle": {
+        en: "Logged-in GDPR self-service page where a user requests and downloads a data export (Art. 20), restricts processing of their account (Art. 18) and requests its deletion (Art. 17).",
     },
+    "user-data-rights:entity:export-job:field:userId": { en: "User" },
+    "user-data-rights:entity:export-job:field:status": { en: "Status" },
+    "user-data-rights:entity:export-job:field:requestedAt": { en: "Requested" },
+    "user-data-rights:entity:export-job:field:completedAt": { en: "Completed" },
+    "user-data-rights:entity:export-job:field:expiresAt": { en: "Expires" },
+    "user-data-rights:entity:export-job:field:requestedFromTenantId": {
+        en: "Tenant",
+    },
+    "user-data-rights:entity:export-job:field:startedAt": { en: "Started" },
+    "user-data-rights:entity:export-job:field:downloadStorageKey": {
+        en: "Storage key",
+    },
+    "user-data-rights:entity:export-job:field:bytesWritten": { en: "Bytes" },
+    "user-data-rights:entity:export-job:field:errorMessage": { en: "Error" },
+    "user-data-rights:entity:download-attempt:field:attemptedAt": {
+        en: "Attempted at",
+    },
+    "user-data-rights:entity:download-attempt:field:result": { en: "Result" },
+    "user-data-rights:entity:download-attempt:field:via": { en: "Via" },
+    "user-data-rights:entity:download-attempt:field:ip": { en: "IP" },
+    "user-data-rights:entity:download-attempt:field:attemptedByUserId": {
+        en: "User",
+    },
+    "user-data-rights:entity:download-attempt:field:jobId": { en: "Job" },
 };
-export const defaultTranslations = mergeTranslations(translationsByLocaleFromKeys(USER_DATA_RIGHTS_I18N), apexTranslations);

package/dist/user-data-rights/web/index.d.ts

@@ -1,7 +1,7 @@
 export { type UserDataRightsClientOptions, userDataRightsClient } from "./client-plugin.tsx";
 export type { ConfirmAccountDeletionScreenProps } from "./confirm-deletion-screen.tsx";
 export { ConfirmAccountDeletionScreen } from "./confirm-deletion-screen.tsx";
-export { defaultTranslations } from "./i18n.ts";
+export { defaultTranslations } from "./default-translations.ts";
 export { formatDate } from "./privacy-center-screen.tsx";
 export { makePublicDeletionGate, type PublicDeletionRoutes } from "./public-deletion-gate.tsx";
 export type { RequestAccountDeletionScreenProps } from "./request-deletion-screen.tsx";