@cosmicdrift/kumiko-bundled-features 0.391.0 → 0.392.0

package/src/cap-overview/changes.json

@@ -1,4 +1,16 @@
 [
+  {
+    "version": "0.392.0",
+    "type": "improvement",
+    "title": "Cap amounts follow their unit and a limit of 0 reads \"Not included\"",
+    "detail": "Values with unit \"mb\" show as MB, GB or TB (base 1024), count and tokens use the locale's digit grouping. A limit of 0 or less shows \"Not included\" instead of a 0 bar, also when nothing is measured. caps:usage rows and the tenant-caps list cells now carry the unit of the cap. New key cap-overview.notIncluded in all locale packages."
+  },
+  {
+    "version": "0.392.0",
+    "type": "improvement",
+    "title": "CapCardsPanel can be limited to specific cap keys via params.capKeys",
+    "detail": "A custom dashboard panel with params capKeys as a list of cap ids shows only those cards, in the order of the capsUsage query. Anything other than a list of strings means no limit, and capKeys is not sent to the server. Each limited cap card also shows how much is left (or that nothing is), next to the percent chip, and a limited panel adds a link to the full usage screen."
+  },
   {
     "version": "0.383.0",
     "type": "improvement",

package/src/channel-email/changes.json

@@ -1,4 +1,10 @@
 [
+  {
+    "version": "0.392.0",
+    "type": "improvement",
+    "title": "channel-email publishes its app transport",
+    "detail": "channel-email declares the emailAppTransport extension and registers its app transport under it; findEmailAppTransport(registry) returns that transport, or null when the app has none or does not mount channel-email."
+  },
   {
     "version": "0.388.0",
     "type": "fix",

package/src/foundation-shared/changes.json

@@ -1,4 +1,10 @@
 [
+  {
+    "version": "0.392.0",
+    "type": "improvement",
+    "title": "sanitizeMailDisplayName is shared",
+    "detail": "The display-name sanitizer from channel-email moved to foundation-shared as sanitizeMailDisplayName, so the IMAP sender uses the same rule. No behavior change."
+  },
   {
     "version": "0.370.0",
     "type": "improvement",

package/src/inbound-mail-foundation/changes.json

@@ -1,4 +1,22 @@
 [
+  {
+    "version": "0.392.0",
+    "type": "fix",
+    "title": "Mail polling works with the row-level-security enforcing pool",
+    "detail": "createInboundMailSupervisor opens its own system scope for the cross-tenant reads and writes of accounts, cursors and seen messages. Before, passing the enforcing pool as db made every poll see no accounts."
+  },
+  {
+    "version": "0.392.0",
+    "type": "improvement",
+    "title": "The mail account list links to the IMAP connect form",
+    "detail": "mailAccountListScreen gets a \"Connect mailbox\" toolbar action that opens the screen mail-account-connect-imap. The button shows only when the app mounts inbound-provider-imap, which registers that screen. The Systemcheck fix link for inbound mail now leads to a list where a mailbox can be added."
+  },
+  {
+    "version": "0.392.0",
+    "type": "improvement",
+    "title": "Apps can send from a connected mailbox",
+    "detail": "The provider contract gets an optional send(ctx, account, message). The new server function sendMailFromAccount(ctx, { accountId, message }) is called from an app's own write handler and sends through the provider of the mailbox, with the mailbox address as From and In-Reply-To and References for replies. It returns WriteResult<{ messageIdHeader }>; failures are typed UnprocessableErrors with the reasons mail_send_not_configured, mail_send_login_rejected, mail_send_server_unreachable, mail_send_rejected and mail_send_invalid_message (i18n keys inboundMail.send.errors.*). A missing, disconnected or someone else's personal mailbox answers not found. There is no fallback to the app sender. New exports: sendMailFromAccount, MAIL_SEND_ERRORS, outboundMailMessageSchema, OutboundMailMessage, OutboundMailSent, MailSendNotConfiguredError, MailSendRejectedError. New keys in all locale packages."
+  },
   {
     "version": "0.391.0",
     "type": "improvement",

package/src/inbound-provider-imap/changes.json

@@ -1,4 +1,16 @@
 [
+  {
+    "version": "0.392.0",
+    "type": "improvement",
+    "title": "IMAP mailboxes can be connected from a form",
+    "detail": "The new write handler inbound-provider-imap:write:connect-mailbox (TenantAdmin, SystemAdmin, not exposed to the agent, 10 calls per tenant in 10 minutes) checks the IMAP login before the transaction, then creates a shared mail account and stores host, port, user and password in its credential secret in the same transaction. It always connects with implicit TLS (default port 993); there is no plaintext option, and a secure:false in the payload is ignored. A failed check stores nothing and answers with one of four texts: host not reachable or not allowed, login rejected, TLS failed, no connection. The form screen mail-account-connect-imap has a masked password field and no TLS toggle. New keys in all locale packages."
+  },
+  {
+    "version": "0.392.0",
+    "type": "improvement",
+    "title": "IMAP mailboxes send over their own SMTP server",
+    "detail": "The connect form gets an optional field \"Outgoing server (SMTP)\". Left empty, the IMAP host is used, with smtp. in place of a leading imap.. connect-mailbox now also checks the SMTP login on port 465 (implicit TLS, same user and password, same host guard) and answers a failure with its own text (\"Receiving works, but sending does not: ...\"). The credential document gains smtpHost and smtpPort (default 465). The provider implements send: it sends over SMTP with From = the mailbox address and display name, then stores the same message in the sent folder (special use \\Sent, else Sent, Gesendet or INBOX.Sent); a failed copy is only logged. Accounts stored without smtpHost answer mail_send_not_configured. New keys in all locale packages."
+  },
   {
     "version": "0.390.1",
     "type": "fix",

package/src/mail-foundation/changes.json

@@ -1,4 +1,10 @@
 [
+  {
+    "version": "0.392.0",
+    "type": "improvement",
+    "title": "The mail probe tests the platform sender",
+    "detail": "A tenant without its own mail provider now gets the test mail through the channel-email app transport, the sender its tenant-transport notifications fall back to. The probe reports mail-foundation.probe.send-test-mail.platform-accepted on success and mail-foundation.probe.platform-send-rejected when the platform server rejects it; it is skipped only when neither an own provider nor an app transport exists, and mail-foundation.probe.not-configured now reads \"No email sending set up\". New keys in all locale packages."
+  },
   {
     "version": "0.391.0",
     "type": "improvement",

package/src/readiness/changes.json

@@ -1,4 +1,34 @@
 [
+  {
+    "version": "0.392.0",
+    "type": "improvement",
+    "title": "The paid run is a button next to Start check",
+    "detail": "The system check screen declares run-paid-check as an inline action, so \"Test AI extraction\" shows as a button beside \"Start check\" instead of in the \"More actions\" menu. It stays hidden while the app has no paid probes."
+  },
+  {
+    "version": "0.392.0",
+    "type": "improvement",
+    "title": "The readiness entry exports ProbeTextKeys",
+    "detail": "ProbeTextKeys comes from @cosmicdrift/kumiko-bundled-features/readiness next to ReadinessQueries and ReadinessWrites, so apps can name probe texts without a deep import."
+  },
+  {
+    "version": "0.392.0",
+    "type": "improvement",
+    "title": "The paid probe hint names the button",
+    "detail": "readiness.probe.paid-not-requested now reads \"Only via “Test AI extraction”\" (de „Nur über „KI-Auslesen testen““), the label of the button that starts the paid run."
+  },
+  {
+    "version": "0.392.0",
+    "type": "improvement",
+    "title": "The search probe fails with its own text",
+    "detail": "When the search service throws, the search probe fails with readiness.probe.search.unavailable (\"The search service does not answer\"). The raw error can name the search host, so it goes only to the server log. New key in all locale packages."
+  },
+  {
+    "version": "0.392.0",
+    "type": "improvement",
+    "title": "An empty latest run says why it is empty",
+    "detail": "The latest results and the run detail show \"The check is running. Results appear when it is done.\" while a run is running and \"There is nothing to check for this tenant.\" when a finished run has no rows the caller may see, and \"The run was stopped before it returned results.\" for an abandoned run. Without a run the old text stays. New keys readiness.screen.latest.running, readiness.screen.latest.nothing-to-check and readiness.screen.latest.abandoned in all locale packages."
+  },
   {
     "version": "0.391.0",
     "type": "improvement",

package/src/tier-engine/changes.json

@@ -1,4 +1,10 @@
 [
+  {
+    "version": "0.392.0",
+    "type": "fix",
+    "title": "Tier fallback to the default tier under row-level security",
+    "detail": "With row-level security enabled (the default since 0.390) the boot preload, the bus-driven reloads and the trial gate of the tier-engine resolver ran on the enforcing pool without a tenant scope, read zero rows and dropped every tenant to the default tier, so toggleable features of paying tenants answered 403 feature_disabled. These reads now run in system scope; no app change is needed."
+  },
   {
     "version": "0.388.0",
     "type": "fix",

package/src/workflow-runner/changes.json

@@ -1,4 +1,10 @@
 [
+  {
+    "version": "0.391.1",
+    "type": "improvement",
+    "title": "Regression test for the woken-run due check",
+    "detail": "The event-wakeup integration test now runs the wakeup with the app clock one hour ahead of the database and expects resume-due-runs to complete the run. Nothing changes for apps; the package is only republished."
+  },
   {
     "version": "0.390.0",
     "type": "fix",