@cosmicdrift/kumiko-bundled-features 0.384.0 → 0.385.0

package/dist/auth-email-password/web/auth-form-primitives.js

@@ -1,18 +1,15 @@
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
-// Shared Web-Primitives für die Auth-Screens. Nur noch Layout/Style-
-// Helpers — Form/Field/Input/Button/Banner kommen jetzt über
-// usePrimitives() aus dem Framework-Vertrag, damit Native dieselben
-// Auth-Screens rendern kann (renderer-native registriert eigene
-// Implementations).
+// Shared web primitives for the auth screens. Only layout/style helpers are
+// left here; Form/Field/Input/Button/Banner come through usePrimitives() from
+// the framework contract, so apps and tests can override the implementations
+// via PrimitivesProvider.
 //
-//   <AuthCard>          — Card-Wrapper für die Auth-Screen-Layouts
-//                         (full-screen, zentriert, max-w-sm). Web-only;
-//                         eine Native-Variante landet bei Bedarf
-//                         daneben (z.B. SafeArea + ScrollView).
-//   parseUrlToken       — URL-Param-Helper (window.location.search).
+//   <AuthCard>          — card wrapper for the auth screen layouts
+//                         (full-screen, centered, max-w-sm). Web-only.
+//   parseUrlToken       — URL param helper (window.location.search).
 //
-// Link-Styles laufen über das Link-Primitive (variant="button"/"muted") —
-// die früheren authButtonClass/authMutedLinkClass sind dorthin gewandert.
+// Link styles go through the Link primitive (variant="button"/"muted"); the
+// former authButtonClass/authMutedLinkClass moved there.
 import { usePrimitives } from "@cosmicdrift/kumiko-renderer";
 import { BareFormProvider, cn } from "@cosmicdrift/kumiko-renderer/web";
 import { createContext, useContext, useEffect, useState } from "react";

package/dist/channel-in-app/handlers/unread-count.query.js

@@ -13,7 +13,7 @@ export const unreadCountQuery = defineQueryHandler({
     },
     description: "Counts the calling user's unread in-app notification messages; use it for an inbox badge or to check whether a user has pending notifications.",
     handler: async (query, ctx) => {
-        // bun-db hat keinen aggregate-helper — selectMany alle matching rows,
+        // The query helpers in db/query.ts have no aggregate helper — selectMany alle matching rows,
         // count() in JS. Pragma: unread-counts sind low-cardinality (user-
         // scoped, max ~hunderte rows). Wenn das wachsen sollte: raw .unsafe()
         // mit COUNT(*).

package/dist/custom-fields/db/queries/projection.js

@@ -5,7 +5,7 @@ function quoteTable(tableName) {
 function bindJsonbParam(value) {
     // Scalar JSON primitives can't bind directly to ::jsonb — Postgres rejects a
     // bound boolean/number with "cannot cast type boolean/integer to jsonb" (and
-    // Bun.SQL infers boolean[] candidates). Route them through ::text::jsonb with
+    // the driver may infer array candidates). Route them through ::text::jsonb with
     // a JSON-encoded literal. Objects/arrays/strings already bind as ::jsonb.
     if (typeof value === "boolean" || typeof value === "number") {
         return { sql: "$1::text::jsonb", bound: JSON.stringify(value) };

package/dist/file-derivatives/feature.js

@@ -119,7 +119,7 @@ export function createFileDerivativesFeature(opts = {}) {
                     // answer identically, no name-oracle. fileRefsTable.id is a UUID
                     // column — a malformed id must fail here, not at the DB. Without
                     // this, an anonymous, internet-facing caller can throw a Postgres
-                    // 22P02 on every request (Bun.SQL pools the failed connection), a
+                    // 22P02 on every request (the pooled connection is affected), a
                     // DoS primitive with no auth required.
                     if (!fileRefId || !variant || !VARIANT_NAME_RE.test(variant) || !isUuid(fileRefId)) {
                         return c.text("not found", 404);

package/dist/ledger/web/index.js

@@ -1,7 +1,7 @@
 // Client-safe ledger surface: QN constants, the pure recurring helpers
 // (projection + Soll/Ist merge), and the Zod payload schemas (for client-side
 // pre-validation before dispatch) — nothing else. The full `../ledger` entry
-// re-exports the feature/handlers/executor, which pull bun-db/postgres — a
+// re-exports the feature/handlers/executor, which pull postgres-js — a
 // browser bundle that imports from there fails on Node builtins. A client screen
 // (e.g. a rent-cashflow view) imports the dispatch QNs + the pure forecast/merge
 // from HERE, then dispatches via the renderer's useDispatcher.

package/dist/notes-history/handlers/add-note.write.js

@@ -51,7 +51,7 @@ export function createAddNoteHandler(access = DEFAULT_NOTES_HISTORY_ACCESS, entr
             let authorName = null;
             try {
                 // read_users is tenant-agnostic → ctx.db.unsafeRaw, not the tenant-scoped ctx.db.
-                // Bun.SQL poisons the whole tx after any error inside it, even one that's
+                // postgres-js poisons the whole tx after any error inside it, even one that's
                 // caught — so the lookup runs in a savepoint where available, otherwise directly
                 // (pool statements are their own units).
                 authorName = await runInSavepointIfSupported(ctx.db.unsafeRaw(), async (sp) => {

package/dist/personal-access-tokens/i18n.d.ts

@@ -1,4 +1,5 @@
 import type { PatScopeConfig } from "./web/scopes.ts";
+export declare const patScopeOptionKey: (domain: string, level: "read" | "write") => string;
 type LocalizedString = {
     readonly en: string;
 };

package/dist/personal-access-tokens/i18n.js

@@ -3,6 +3,8 @@ import { fieldLabelKey, fieldOptionLabelKey } from "@cosmicdrift/kumiko-renderer
 import { PAT_FEATURE } from "./web/constants.js";
 const mintFieldKey = (field) => fieldLabelKey(PAT_FEATURE, ACTION_FORM_ENTITY, field);
 const scopeOptionKey = (grant) => fieldOptionLabelKey(PAT_FEATURE, ACTION_FORM_ENTITY, "scopes", grant);
+// The generated scope labels are English only; apps translate them under this key.
+export const patScopeOptionKey = (domain, level) => scopeOptionKey(`${domain}:${level}`);
 export const PAT_FEATURE_I18N = {
     "screen:api-tokens.title": { en: "Personal Access Tokens" },
     "screen:api-token-create.title": { en: "Create a new token" },

package/dist/personal-access-tokens/index.d.ts

@@ -4,6 +4,7 @@ export type { BindPatAutoRevokeOnPasswordChange, PersonalAccessTokensOptions } f
 export { bindPatAutoRevokeOnPasswordChangeFromFeature, createPersonalAccessTokensFeature, } from "./feature.ts";
 export type { CreatePatOptions, PatMfaVerifyResult } from "./handlers/create.write.ts";
 export { hashPatToken, mintPatToken } from "./hash.ts";
+export { patScopeOptionKey } from "./i18n.ts";
 export { PAT_REVOKED_AGGREGATE_TYPE, PAT_REVOKED_EVENT_QN, PAT_REVOKED_EVENT_SHORT, type PatRevokedPayload, patRevokedSchema, } from "./pat-revoked-event.ts";
 export { createPatResolver } from "./resolver.ts";
 export { revokeAllPatTokensForUser } from "./revoke-for-user.ts";

package/dist/personal-access-tokens/index.js

@@ -1,6 +1,7 @@
 import { PAT_DEFAULT_RATE_LIMIT } from "./web/constants.js";
 export { bindPatAutoRevokeOnPasswordChangeFromFeature, createPersonalAccessTokensFeature, } from "./feature.js";
 export { hashPatToken, mintPatToken } from "./hash.js";
+export { patScopeOptionKey } from "./i18n.js";
 export { PAT_REVOKED_AGGREGATE_TYPE, PAT_REVOKED_EVENT_QN, PAT_REVOKED_EVENT_SHORT, patRevokedSchema, } from "./pat-revoked-event.js";
 export { createPatResolver } from "./resolver.js";
 export { revokeAllPatTokensForUser } from "./revoke-for-user.js";

package/dist/shared/run-in-sub-transaction.js

@@ -1,5 +1,5 @@
 // Per-unit sub-transaction (one user, one purged row), nesting-aware across both db shapes:
-//   - top-level connection (Bun.SQL / postgres-js Sql) → `.begin` (BEGIN)
+//   - top-level connection (postgres-js Sql) → `.begin` (BEGIN)
 //   - TransactionSql (inside the dispatcher's outer tx, where every
 //     writeHandler already runs) → `.savepoint` (SAVEPOINT)
 // A TransactionSql has no `.begin`, so the previous unconditional `.begin`

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-bundled-features",
-  "version": "0.384.0",
+  "version": "0.385.0",
   "description": "Built-in features — tenant, user, auth, delivery. The stuff you'd rewrite anyway, already typed.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -544,9 +544,9 @@
     }
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-framework": "0.384.0",
-    "@cosmicdrift/kumiko-renderer": "0.384.0",
-    "@cosmicdrift/kumiko-types": "0.384.0",
+    "@cosmicdrift/kumiko-framework": "0.385.0",
+    "@cosmicdrift/kumiko-renderer": "0.385.0",
+    "@cosmicdrift/kumiko-types": "0.385.0",
     "@mollie/api-client": "^4.5.0",
     "@node-rs/argon2": "^2.0.2",
     "@tiptap/core": "3.31.3",
@@ -1116,15 +1116,15 @@
   ],
   "devDependencies": {
     "@testing-library/user-event": "^14.6.1",
-    "@cosmicdrift/kumiko-locale-de": "0.384.0",
-    "@cosmicdrift/kumiko-locale-es": "0.384.0",
-    "@cosmicdrift/kumiko-renderer-mail-html": "0.384.0",
+    "@cosmicdrift/kumiko-locale-de": "0.385.0",
+    "@cosmicdrift/kumiko-locale-es": "0.385.0",
+    "@cosmicdrift/kumiko-renderer-mail-html": "0.385.0",
     "jsqr": "^1.4.0",
     "unpdf": "^1.8.1",
-    "@cosmicdrift/kumiko-testing": "0.384.0"
+    "@cosmicdrift/kumiko-testing": "0.385.0"
   },
   "peerDependencies": {
-    "@cosmicdrift/kumiko-testing": "0.384.0"
+    "@cosmicdrift/kumiko-testing": "0.385.0"
   },
   "peerDependenciesMeta": {
     "@cosmicdrift/kumiko-testing": {

package/src/auth-email-password/changes.json

@@ -1,4 +1,10 @@
 [
+  {
+    "version": "0.385.0",
+    "type": "improvement",
+    "title": "Denser common-password list, comments name postgres-js as the only driver",
+    "detail": "The common-password list is wrapped densely and split on whitespace; a test pins its 2086 entries. Comments across the bundled features that referred to the removed Bun.SQL driver now name postgres-js. No behavior change."
+  },
   {
     "version": "0.384.0",
     "type": "improvement",

package/src/personal-access-tokens/changes.json

@@ -1,4 +1,11 @@
 [
+  {
+    "version": "0.385.0",
+    "type": "improvement",
+    "title": "patScopeOptionKey for translating token scope labels",
+    "detail": "The scope labels personal-access-tokens generates from `scopes[domain].label` are English only. `patScopeOptionKey(domain, \"read\" | \"write\")` returns their translation key, so an app feature can add the other locales with `r.translations`.",
+    "migration": "Apps that mount personal-access-tokens and set `requiredLocales` with a locale other than `en` translate each generated scope label (`read`, plus `write` where the domain offers it) under `patScopeOptionKey`."
+  },
   {
     "version": "0.372.0",
     "type": "fix",