@cosmicdrift/kumiko-bundled-features 0.391.0 → 0.392.0

package/dist/template-resolver/table.d.ts

@@ -15,15 +15,15 @@ export declare const templateResourceEntity: import("@cosmicdrift/kumiko-types/f
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly display?: "radio" | "dropdown";
         readonly optionTones?: {
-            readonly "ai-prompt"?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly "document-pdf"?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly "image-snapshot"?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly mail?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly "mail-layout"?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly notification?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly "pdf-layout"?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly snippet?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly "text-block"?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly "ai-prompt"?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly "document-pdf"?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly "image-snapshot"?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly mail?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly "mail-layout"?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly notification?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly "pdf-layout"?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly snippet?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly "text-block"?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
@@ -56,10 +56,10 @@ export declare const templateResourceEntity: import("@cosmicdrift/kumiko-types/f
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly display?: "radio" | "dropdown";
         readonly optionTones?: {
-            readonly html?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly markdown?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly mjml?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly plain?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly html?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly markdown?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly mjml?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly plain?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
@@ -89,8 +89,8 @@ export declare const templateResourceEntity: import("@cosmicdrift/kumiko-types/f
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly display?: "radio" | "dropdown";
         readonly optionTones?: {
-            readonly system?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly tenant?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly system?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly tenant?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
@@ -114,9 +114,9 @@ export declare const templateResourceEntity: import("@cosmicdrift/kumiko-types/f
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly display?: "radio" | "dropdown";
         readonly optionTones?: {
-            readonly active?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly archived?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly draft?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly active?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly archived?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly draft?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
@@ -179,15 +179,15 @@ export declare const templateResourcesTable: import("@cosmicdrift/kumiko-framewo
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly display?: "radio" | "dropdown";
         readonly optionTones?: {
-            readonly "ai-prompt"?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly "document-pdf"?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly "image-snapshot"?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly mail?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly "mail-layout"?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly notification?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly "pdf-layout"?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly snippet?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly "text-block"?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly "ai-prompt"?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly "document-pdf"?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly "image-snapshot"?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly mail?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly "mail-layout"?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly notification?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly "pdf-layout"?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly snippet?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly "text-block"?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
@@ -220,10 +220,10 @@ export declare const templateResourcesTable: import("@cosmicdrift/kumiko-framewo
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly display?: "radio" | "dropdown";
         readonly optionTones?: {
-            readonly html?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly markdown?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly mjml?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly plain?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly html?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly markdown?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly mjml?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly plain?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
@@ -253,8 +253,8 @@ export declare const templateResourcesTable: import("@cosmicdrift/kumiko-framewo
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly display?: "radio" | "dropdown";
         readonly optionTones?: {
-            readonly system?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly tenant?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly system?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly tenant?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
@@ -278,9 +278,9 @@ export declare const templateResourcesTable: import("@cosmicdrift/kumiko-framewo
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly display?: "radio" | "dropdown";
         readonly optionTones?: {
-            readonly active?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly archived?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly draft?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly active?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly archived?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly draft?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;

package/dist/template-resolver/user-content-table.d.ts

@@ -18,15 +18,15 @@ export declare const userContentEntryEntity: import("@cosmicdrift/kumiko-types/f
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly display?: "radio" | "dropdown";
         readonly optionTones?: {
-            readonly "ai-prompt"?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly "document-pdf"?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly "image-snapshot"?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly mail?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly "mail-layout"?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly notification?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly "pdf-layout"?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly snippet?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly "text-block"?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly "ai-prompt"?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly "document-pdf"?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly "image-snapshot"?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly mail?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly "mail-layout"?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly notification?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly "pdf-layout"?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly snippet?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly "text-block"?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
@@ -59,10 +59,10 @@ export declare const userContentEntryEntity: import("@cosmicdrift/kumiko-types/f
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly display?: "radio" | "dropdown";
         readonly optionTones?: {
-            readonly html?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly markdown?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly mjml?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly plain?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly html?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly markdown?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly mjml?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly plain?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
@@ -91,15 +91,15 @@ export declare const userContentEntriesTable: import("@cosmicdrift/kumiko-framew
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly display?: "radio" | "dropdown";
         readonly optionTones?: {
-            readonly "ai-prompt"?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly "document-pdf"?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly "image-snapshot"?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly mail?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly "mail-layout"?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly notification?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly "pdf-layout"?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly snippet?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly "text-block"?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly "ai-prompt"?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly "document-pdf"?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly "image-snapshot"?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly mail?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly "mail-layout"?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly notification?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly "pdf-layout"?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly snippet?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly "text-block"?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
@@ -132,10 +132,10 @@ export declare const userContentEntriesTable: import("@cosmicdrift/kumiko-framew
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly display?: "radio" | "dropdown";
         readonly optionTones?: {
-            readonly html?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly markdown?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly mjml?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly plain?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly html?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly markdown?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly mjml?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly plain?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;

package/dist/tenant/invitation-table.d.ts

@@ -26,10 +26,10 @@ export declare const tenantInvitationEntity: import("@cosmicdrift/kumiko-types/f
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly display?: "radio" | "dropdown";
         readonly optionTones?: {
-            readonly accepted?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly cancelled?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly expired?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly pending?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly accepted?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly cancelled?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly expired?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly pending?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
@@ -96,10 +96,10 @@ export declare const tenantInvitationsTable: import("@cosmicdrift/kumiko-framewo
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly display?: "radio" | "dropdown";
         readonly optionTones?: {
-            readonly accepted?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly cancelled?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly expired?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly pending?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly accepted?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly cancelled?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly expired?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly pending?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;

package/dist/tenant/schema/tenant.d.ts

@@ -23,11 +23,11 @@ export declare const tenantEntity: import("@cosmicdrift/kumiko-types/fields").En
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly display?: "radio" | "dropdown";
         readonly optionTones?: {
-            readonly active?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly destroyFailed?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly destroyRequested?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly destroyed?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly destroying?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly active?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly destroyFailed?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly destroyRequested?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly destroyed?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly destroying?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
@@ -123,11 +123,11 @@ export declare const tenantTable: import("@cosmicdrift/kumiko-framework/db").Ent
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly display?: "radio" | "dropdown";
         readonly optionTones?: {
-            readonly active?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly destroyFailed?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly destroyRequested?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly destroyed?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly destroying?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly active?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly destroyFailed?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly destroyRequested?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly destroyed?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly destroying?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;

package/dist/tier-engine/entity.d.ts

@@ -15,9 +15,9 @@ export declare const tierAssignmentEntity: import("@cosmicdrift/kumiko-types/fie
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly display?: "radio" | "dropdown";
         readonly optionTones?: {
-            readonly billing?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly default?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly manual?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly billing?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly default?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly manual?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;

package/dist/tier-engine/feature.js

@@ -42,6 +42,7 @@
 import { buildEntityTable, createEventStoreExecutor, createTenantDb, fetchOne, selectMany, } from "@cosmicdrift/kumiko-framework/db";
 import { defineEntityCreateHandler, defineEntityListHandler, defineEntityUpdateHandler, defineFeature, defineQueryHandler, HookPhases, SYSTEM_TENANT_ID, TENANT_TIER_RESOLVER_EXT, } from "@cosmicdrift/kumiko-framework/engine";
 import { getUnscopedAggregateStreamMaxVersion } from "@cosmicdrift/kumiko-framework/event-store";
+import { systemScopedRunner } from "@cosmicdrift/kumiko-framework/internal/row-level-security";
 import { createFallbackLogger } from "@cosmicdrift/kumiko-framework/logging";
 import { CACHE_SYNC_TOPICS, isTierAssignmentSyncMessage, } from "@cosmicdrift/kumiko-framework/redis";
 import { getTemporal } from "@cosmicdrift/kumiko-framework/time";
@@ -381,6 +382,9 @@ export function createTierEngineFeature(opts = {}) {
         // post-stack-setup, calls build(deps), wires effectiveFeatures.
         const plugin = {
             build: async (deps) => {
+                // Preloads and bus-driven reloads run outside any request scope and read every
+                // tenant's rows; the enforcing pool would return zero rows and lock paying tenants out.
+                const systemDb = systemScopedRunner(deps.db, "tier cache preloads and reloads assignments and tenant creation times of all tenants");
                 // Always-on set: all non-toggleable features in the registry. Canonical
                 // Kumiko pattern (matches the feature-toggles resolver): only features
                 // that explicitly register `r.toggleable()` are tier-cuttable.
@@ -394,7 +398,7 @@ export function createTierEngineFeature(opts = {}) {
                         computedAlwaysOn.add(feature.name);
                 }
                 alwaysOnHolder.set = computedAlwaysOn;
-                const rows = await selectMany(deps.db, tierAssignmentTable);
+                const rows = await selectMany(systemDb, tierAssignmentTable);
                 for (const row of rows) {
                     cache.set(row.tenantId, mergeAlwaysOn(computedAlwaysOn, featuresForTier(tierMap, row.tier)));
                 }
@@ -402,7 +406,7 @@ export function createTierEngineFeature(opts = {}) {
                 // to the default tier, which would lock paying tenants out meanwhile.
                 const reloadTenant = async (tenantId) => {
                     const ticket = takeTicket(tenantId);
-                    const row = await fetchOne(deps.db, tierAssignmentTable, { tenantId });
+                    const row = await fetchOne(systemDb, tierAssignmentTable, { tenantId });
                     // skip: a newer write or reload for this tenant started meanwhile and owns the entry
                     if (latestTicket.get(tenantId) !== ticket)
                         return;
@@ -416,7 +420,7 @@ export function createTierEngineFeature(opts = {}) {
                 const reloadAllTenants = async () => {
                     ticketCounter += 1;
                     const startedAtTicket = ticketCounter;
-                    const current = await selectMany(deps.db, tierAssignmentTable);
+                    const current = await selectMany(systemDb, tierAssignmentTable);
                     const loaded = new Map();
                     for (const row of current) {
                         loaded.set(row.tenantId, mergeAlwaysOn(computedAlwaysOn, featuresForTier(tierMap, row.tier)));
@@ -491,7 +495,7 @@ export function createTierEngineFeature(opts = {}) {
                         return false;
                     let startedMsPromise = startedMemo.get(tenantId);
                     if (startedMsPromise === undefined) {
-                        startedMsPromise = fetchOne(deps.db, tenantTable, {
+                        startedMsPromise = fetchOne(systemDb, tenantTable, {
                             id: tenantId,
                         }).then((row) => row?.insertedAt?.epochMilliseconds);
                         // Evict on rejection too — a transient DB error must not poison

package/dist/tier-engine/tier-resolver.d.ts

@@ -22,9 +22,9 @@ export declare function createTierResolver<TTier extends string, TCaps>(deps: Ti
             readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
             readonly display?: "radio" | "dropdown";
             readonly optionTones?: {
-                readonly billing?: "bad" | "neutral" | "ok" | "warn" | undefined;
-                readonly default?: "bad" | "neutral" | "ok" | "warn" | undefined;
-                readonly manual?: "bad" | "neutral" | "ok" | "warn" | undefined;
+                readonly billing?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+                readonly default?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+                readonly manual?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
             } | undefined;
             readonly optionsQuery?: string;
             readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;

package/dist/user/schema/user.d.ts

@@ -69,10 +69,10 @@ export declare const userEntity: import("@cosmicdrift/kumiko-types/fields").Enti
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly display?: "radio" | "dropdown";
         readonly optionTones?: {
-            readonly active?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly deleted?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly deletionRequested?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly restricted?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly active?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly deleted?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly deletionRequested?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly restricted?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
@@ -142,10 +142,10 @@ export declare const userTable: import("@cosmicdrift/kumiko-framework/db").Entit
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly display?: "radio" | "dropdown";
         readonly optionTones?: {
-            readonly active?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly deleted?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly deletionRequested?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly restricted?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly active?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly deleted?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly deletionRequested?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly restricted?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;

package/dist/user-data-rights/handlers/download-by-token.query.js

@@ -13,9 +13,9 @@
 //   7. Return {url, expiresAt}
 //
 // **Security:**
-//   - Token-hash comparison via DB-fetchOne is not constant-time, but timing attacks
-//     against SHA256 bytes require >>10k requests plus stable latency and are not
-//     exploitable in a web-app context.
+//   - The hash is matched by a DB equality lookup, not a constant-time comparison. With
+//     256 bits of token randomness a timing leak reveals at most hash prefixes, never
+//     a preimage.
 //   - Invalid tokens return 404 without leaking existence, using the same code path
 //     as a token that was not found.
 //   - The token is tenant-agnostic: UUID + SHA256 makes it globally unique, so no

package/dist/user-data-rights/schema/download-token.js

@@ -12,7 +12,10 @@ import { createBigIntField, createEntity, createTextField, createTimestampField,
 //   3. Plain token remains in worker memory + is passed via
 //      RunExportJobsResult to the notification flow. NEVER plain in DB.
 //   4. The download endpoint hashes the incoming token + looks up the
-//      hash entry. Constant-time comparison against timing attacks.
+//      row by tokenHash equality. This is a plain DB lookup,
+//      not a constant-time comparison: the token carries 256 bits of
+//      randomness, so a timing leak can reveal at most hash prefixes,
+//      never a preimage.
 //
 // **Multi-use within TTL**: Token is not "consumed" on download.
 // Multiple downloads until expiresAt are allowed — better UX for connection
@@ -39,8 +42,7 @@ export const exportDownloadTokenEntity = createEntity({
             personal: false,
             reason: "technical_reference",
         }),
-        // **Hash NICHT plain.** SHA256-hex (64 chars). Atom 4b verifiziert
-        // via konstanter-Zeit-Vergleich.
+        // **Hash, never plain.** SHA256 hex (64 chars), looked up by equality.
         tokenHash: createTextField({
             required: true,
             maxLength: 64,

package/dist/user-data-rights/schema/export-job.d.ts

@@ -31,10 +31,10 @@ export declare const exportJobEntity: import("@cosmicdrift/kumiko-types/fields")
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly display?: "radio" | "dropdown";
         readonly optionTones?: {
-            readonly done?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly failed?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly pending?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly running?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly done?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly failed?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly pending?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly running?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
@@ -141,10 +141,10 @@ export declare const exportJobsTable: import("@cosmicdrift/kumiko-framework/db")
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly display?: "radio" | "dropdown";
         readonly optionTones?: {
-            readonly done?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly failed?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly pending?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly running?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly done?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly failed?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly pending?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly running?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;

package/dist/user-data-rights/token-helpers.d.ts

@@ -12,7 +12,6 @@ export declare function generateDownloadToken(): Promise<{
 /**
  * Hashes a plain token into its database representation. In the verification path,
  * the download endpoint hashes the incoming token and looks up the hash in the
- * database. A constant-time string comparison prevents timing attacks; the caller
- * performs it via `crypto.subtle` or a secure comparison helper.
+ * database (no constant-time comparison, see the header comment).
  */
 export declare function hashDownloadToken(plain: string): Promise<string>;

package/dist/user-data-rights/token-helpers.js

@@ -5,8 +5,10 @@
 //      (SHA256 hex).
 //   2. The database stores ONLY the hash. The plain token remains in worker memory.
 //   3. The notification step sends the plain token to the user by email.
-//   4. The download endpoint hashes the incoming token and compares it with the
-//      database hash using a constant-time comparison to prevent timing attacks.
+//   4. The download endpoint hashes the incoming token and looks up the row
+//      by tokenHash. No constant-time comparison is needed: the token has
+//      256 bits of randomness, so a timing leak reveals at most hash prefixes, never
+//      a preimage.
 //
 // **Multi-use within TTL:** The token is NOT "consumed" on download, so the user
 // can download repeatedly until expiresAt. This matches Google-Takeout (7d) and
@@ -31,8 +33,7 @@ export async function generateDownloadToken() {
 /**
  * Hashes a plain token into its database representation. In the verification path,
  * the download endpoint hashes the incoming token and looks up the hash in the
- * database. A constant-time string comparison prevents timing attacks; the caller
- * performs it via `crypto.subtle` or a secure comparison helper.
+ * database (no constant-time comparison, see the header comment).
  */
 export async function hashDownloadToken(plain) {
     const encoded = new TextEncoder().encode(plain);

package/dist/waitlist/entity.d.ts

@@ -30,10 +30,10 @@ export declare const waitlistEntryEntity: import("@cosmicdrift/kumiko-types/fiel
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly display?: "radio" | "dropdown";
         readonly optionTones?: {
-            readonly invited?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly pending?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly provisioned?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly rejected?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly invited?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly pending?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly provisioned?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly rejected?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
@@ -125,10 +125,10 @@ export declare const waitlistEntryTable: import("@cosmicdrift/kumiko-framework/d
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly display?: "radio" | "dropdown";
         readonly optionTones?: {
-            readonly invited?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly pending?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly provisioned?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly rejected?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly invited?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly pending?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly provisioned?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly rejected?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-bundled-features",
-  "version": "0.391.0",
+  "version": "0.392.0",
   "description": "Built-in features — tenant, user, auth, delivery. The stuff you'd rewrite anyway, already typed.",
   "license": "MIT",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -558,9 +558,9 @@
     }
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-framework": "0.391.0",
-    "@cosmicdrift/kumiko-renderer": "0.391.0",
-    "@cosmicdrift/kumiko-types": "0.391.0",
+    "@cosmicdrift/kumiko-framework": "0.392.0",
+    "@cosmicdrift/kumiko-renderer": "0.392.0",
+    "@cosmicdrift/kumiko-types": "0.392.0",
     "@mollie/api-client": "^4.5.0",
     "@node-rs/argon2": "^2.0.2",
     "@tiptap/core": "^3.31.3",
@@ -1142,17 +1142,17 @@
   ],
   "devDependencies": {
     "@testing-library/user-event": "^14.6.1",
-    "@cosmicdrift/kumiko-locale-de": "0.391.0",
-    "@cosmicdrift/kumiko-locale-es": "0.391.0",
-    "@cosmicdrift/kumiko-locale-fr": "0.391.0",
-    "@cosmicdrift/kumiko-locale-it": "0.391.0",
-    "@cosmicdrift/kumiko-renderer-mail-html": "0.391.0",
+    "@cosmicdrift/kumiko-locale-de": "0.392.0",
+    "@cosmicdrift/kumiko-locale-es": "0.392.0",
+    "@cosmicdrift/kumiko-locale-fr": "0.392.0",
+    "@cosmicdrift/kumiko-locale-it": "0.392.0",
+    "@cosmicdrift/kumiko-renderer-mail-html": "0.392.0",
     "jsqr": "^1.4.0",
     "unpdf": "^1.8.1",
-    "@cosmicdrift/kumiko-testing": "0.391.0"
+    "@cosmicdrift/kumiko-testing": "0.392.0"
   },
   "peerDependencies": {
-    "@cosmicdrift/kumiko-testing": "0.391.0"
+    "@cosmicdrift/kumiko-testing": "0.392.0"
   },
   "peerDependenciesMeta": {
     "@cosmicdrift/kumiko-testing": {

package/src/admin-shell/changes.json

@@ -1,4 +1,10 @@
 [
+  {
+    "version": "0.392.0",
+    "type": "improvement",
+    "title": "includeTenantOverview turns the tenant overview off",
+    "detail": "createAdminShellFeature({ includeTenantOverview: false }) registers neither the tenant overview screen nor its nav and leaves it out of the tenant workspace. The default stays true."
+  },
   {
     "version": "0.363.0",
     "type": "improvement",