@cosmicdrift/kumiko-bundled-features 0.387.0 → 0.388.0

package/src/subscription-stripe/changes.json

@@ -1,4 +1,16 @@
 [
+  {
+    "version": "0.388.0",
+    "type": "improvement",
+    "title": "Stripe plugin has a displayName",
+    "detail": "The Stripe plugin sets displayName \"Stripe\", which the provider choice in the billing panel shows."
+  },
+  {
+    "version": "0.388.0",
+    "type": "fix",
+    "title": "A malformed stored credential no longer leaks into the error",
+    "detail": "A stored api-key or webhook-secret that is not valid JSON used to raise the JSON parser's own message, which repeats the value into logs and the webhook 401 body. The error now has a fixed text and names no input. subscription-dodo behaves the same."
+  },
   {
     "version": "0.370.0",
     "type": "improvement",

package/src/template-resolver/changes.json

@@ -1,4 +1,52 @@
 [
+  {
+    "version": "0.388.0",
+    "type": "fix",
+    "title": "Template overrides, key collisions and by-tenant queries",
+    "detail": "link-pdf refuses a key that already holds an inline image (key_in_use). by-tenant no longer runs a query per row, tenant-override-counts selects only the needed columns, and tenant-overrides resolves names beyond the first 200 tenants or users through the new ids filter of the tenant and member directories. Notification preference and form-draft cleanup queries bind array parameters as Postgres array literals."
+  },
+  {
+    "version": "0.388.0",
+    "type": "fix",
+    "title": "Re-seeding keeps archived system templates, drops stale drafts and adds only missing bundle locales",
+    "detail": "A boot-time re-seed no longer reactivates an archived system template and clears an open system draft when the seeded content changes. A bundle with resources seeded with ifExists skip imports only the missing locales instead of overwriting existing system rows. copy-locale fails with version_conflict when its source changed between the upload and the transaction, and releases the uploaded files."
+  },
+  {
+    "version": "0.388.0",
+    "type": "fix",
+    "title": "isCollectionRefusedKind is a type predicate",
+    "detail": "isCollectionRefusedKind accepts unknown and narrows to the refused kinds; tier-engine's isTierAssignmentSource shares the isOneOf implementation. Behavior is unchanged."
+  },
+  {
+    "version": "0.388.0",
+    "type": "fix",
+    "title": "Layout usage list matches the overview",
+    "detail": "The usage query of a mail layout filters the mail rows by the caller's visibility like the overview and logs a warning when the 5000-row limit cuts the result."
+  },
+  {
+    "version": "0.388.0",
+    "type": "fix",
+    "title": "Admin views follow the delivery rule of rendering",
+    "detail": "List, find-by-id, diff-to-system, validate, preview and the document base hide a collection row that a locked system template of the same slug shadows, as mail, PDF and the resolver already do."
+  },
+  {
+    "version": "0.388.0",
+    "type": "fix",
+    "title": "Seeded title key must look like a namespace:key",
+    "detail": "seedSystemTemplate rejects a titleI18nKey without a namespace prefix or with whitespace, so free text cannot pass as a key and show up raw in the UI."
+  },
+  {
+    "version": "0.388.0",
+    "type": "fix",
+    "title": "Failing release keeps the upload error",
+    "detail": "When releasing already uploaded files fails after a refused upload in copy-locale or bundle import, the release error is logged and the original error is returned, and the releases run once."
+  },
+  {
+    "version": "0.388.0",
+    "type": "fix",
+    "title": "Mail layout enums and hex color pattern are exported client-side",
+    "detail": "The layout editor imports the width, font, accent line and button style lists plus the hex pattern from the template-resolver web barrel instead of keeping copies, so editor and server validation cannot drift."
+  },
   {
     "version": "0.384.0",
     "type": "improvement",

package/src/tenant/changes.json

@@ -1,4 +1,10 @@
 [
+  {
+    "version": "0.388.0",
+    "type": "fix",
+    "title": "Tenant directory search contract documented",
+    "detail": "A search returns the first limit matches in tenant-key order, sorted by label afterwards; the handler description now says so."
+  },
   {
     "version": "0.383.0",
     "type": "improvement",

package/src/tenant-lifecycle/changes.json

@@ -1,4 +1,10 @@
 [
+  {
+    "version": "0.388.0",
+    "type": "fix",
+    "title": "Destroy sweep keeps a minimum time slice per tenant",
+    "detail": "With many tenants in destroying state the shared tick budget no longer shrinks a tenant's slice below two seconds, so chunking hooks make progress instead of failing the stage as no-progress attempts."
+  },
   {
     "version": "0.365.0",
     "type": "fix",

package/src/tier-engine/changes.json

@@ -1,4 +1,10 @@
 [
+  {
+    "version": "0.388.0",
+    "type": "fix",
+    "title": "set-tenant-tier no longer accepts source default",
+    "detail": "The source field of set-tenant-tier is limited to manual and billing. The value default is reserved for the signup default tier and made a manual grant look like a billing row that the next sync overwrites."
+  },
   {
     "version": "0.370.0",
     "type": "breaking",

package/src/waitlist/changes.json

@@ -1,4 +1,22 @@
 [
+  {
+    "version": "0.388.0",
+    "type": "fix",
+    "title": "Link-on-signup failures, legacy re-run and purge audit order",
+    "detail": "link-on-signup throws when the entry update fails and the entry is still invited, so the consumer redelivers. The offlot legacy migration skips rows that are already imports. purge writes its audit event before shredding keys."
+  },
+  {
+    "version": "0.388.0",
+    "type": "fix",
+    "title": "Admin notice language comes from adminLocale",
+    "detail": "The admin notice mail used the request locale, which is the entrant's browser language. The new adminLocale option (en, de or es, default en) sets the operator's language."
+  },
+  {
+    "version": "0.388.0",
+    "type": "fix",
+    "title": "Legacy migration dry run counts the streams it would archive",
+    "detail": "The dry run now runs the read-only archive checks and reports archivedStreams without writing; the CLI prints \"would archive\" for it."
+  },
   {
     "version": "0.379.0",
     "type": "improvement",

package/dist/billing-foundation/consumer-protection/stored-user-email.d.ts

@@ -1 +0,0 @@
-export declare function openStoredUserEmail(stored: string, fallbackRequestId: string): Promise<string | null>;

package/dist/billing-foundation/consumer-protection/stored-user-email.js

@@ -1,8 +0,0 @@
-import { PII_ERASED_SENTINEL } from "@cosmicdrift/kumiko-framework/crypto";
-import { decryptStoredPii } from "../../shared/index.js";
-// findForAuth returns the stored column, which is ciphertext under an active KMS;
-// channel-email refuses to mail a ciphertext address. Null for an erased subject.
-export async function openStoredUserEmail(stored, fallbackRequestId) {
-    const email = await decryptStoredPii(stored, "email", fallbackRequestId);
-    return email === PII_ERASED_SENTINEL ? null : email;
-}