@cosmicdrift/kumiko-bundled-features 0.391.1 → 0.392.1

package/dist/admin-shell/feature.d.ts

@@ -15,6 +15,9 @@ export type CreateAdminShellOptions = {
     /** Tenant nav → document-designer:nav:templates, platform nav → document-designer:nav:platform-templates.
      *  Requires document-designer mounted (a separate package, so no import here). Default false. */
     readonly includeDocumentDesigner?: boolean;
+    /** Tenant overview dashboard: screen, nav and the entry in the tenant workspace. Default true.
+     *  Set false when the app ships its own landing screen for tenant admins. */
+    readonly includeTenantOverview?: boolean;
     /** When false, only overview screens + nav are registered — app owns r.workspace(). Default true. */
     readonly registerWorkspaces?: boolean;
     /** Metric list the overview panels are built from — pass the SAME list to

package/dist/admin-shell/feature.js

@@ -6,16 +6,37 @@ import { DEFAULT_METRICS } from "../metrics/index.js";
 import { OVERVIEW_TIME_RANGE, PLATFORM_SCOPE, PLATFORM_TENANT_FILTER, platformOverviewPanels, tenantOverviewPanels, } from "./overview-panels.js";
 import { ADMIN_SHELL_FEATURE, DEFAULT_PLATFORM_WORKSPACE_ID, DEFAULT_TENANT_WORKSPACE_ID, PLATFORM_OVERVIEW_SCREEN_ID, TENANT_OVERVIEW_SCREEN_ID, } from "./web/constants.js";
 import { ADMIN_SHELL_I18N } from "./web/i18n.js";
+function tenantWorkspaceNavIds(options) {
+    return [
+        ...(options.includeTenantOverview === true ? ["admin-shell:nav:tenant-overview"] : []),
+        "tenant:nav:members",
+        "audit:nav:audit-log",
+        ...(options.includeCapOverview ? ["admin-shell:nav:my-caps"] : []),
+        ...(options.includeDocumentDesigner ? ["document-designer:nav:templates"] : []),
+    ];
+}
+function platformWorkspaceNavIds(options) {
+    return [
+        "admin-shell:nav:platform-overview",
+        "admin-shell:nav:tenants",
+        ...(options.includeCapOverview ? ["admin-shell:nav:tenant-caps"] : []),
+        "audit:nav:audit-log-all-tenants",
+        "jobs:nav:job-runs",
+        ...(options.includeDocumentDesigner ? ["document-designer:nav:platform-templates"] : []),
+        ...(options.includeTierAdmin === true ? ["admin-shell:nav:tier-admin"] : []),
+    ];
+}
 export function createAdminShellFeature(options = {}) {
     const tenantWsId = options.workspaceIds?.tenant ?? DEFAULT_TENANT_WORKSPACE_ID;
     const platformWsId = options.workspaceIds?.platform ?? DEFAULT_PLATFORM_WORKSPACE_ID;
     const includeTierAdmin = options.includeTierAdmin ?? true;
     const includeCapOverview = options.includeCapOverview ?? false;
     const includeDocumentDesigner = options.includeDocumentDesigner ?? false;
+    const includeTenantOverview = options.includeTenantOverview ?? true;
     const registerWorkspaces = options.registerWorkspaces ?? true;
     const metrics = options.metrics ?? DEFAULT_METRICS;
     return defineFeature(ADMIN_SHELL_FEATURE, (r) => {
-        r.describe("Registers tenant-admin and platform-admin workspaces with provider nav into owner-feature screens (`tenant:screen:members`, `audit:screen:audit-log`, `audit:screen:audit-log-all-tenants`, `tenant:screen:tenant-list`, `jobs:screen:job-runs`, optional `tier-engine:screen:tier-admin`, optional `cap-overview:screen:my-caps`/`cap-overview:screen:tenant-cap-list`, optional `document-designer` template navs) and the two overview dashboards, built from the metrics list (`metrics` option, default DEFAULT_METRICS). Mount after user, tenant, audit, jobs, metrics and metrics-system; pass `workspaceIds` to match app URL conventions (e.g. Studio `d`/`s`, PublicStatus `admin`/`sysadmin`). Client: `adminShellClient()`, `tenantClient()`, `auditClient()`, `jobsClient()`, optional `tierEngineClient()`.");
+        r.describe("Registers tenant-admin and platform-admin workspaces with provider nav into owner-feature screens (`tenant:screen:members`, `audit:screen:audit-log`, `audit:screen:audit-log-all-tenants`, `tenant:screen:tenant-list`, `jobs:screen:job-runs`, optional `tier-engine:screen:tier-admin`, optional `cap-overview:screen:my-caps`/`cap-overview:screen:tenant-cap-list`, optional `document-designer` template navs) and the two overview dashboards (the tenant one can be dropped with `includeTenantOverview: false`), built from the metrics list (`metrics` option, default DEFAULT_METRICS). Mount after user, tenant, audit, jobs, metrics and metrics-system; pass `workspaceIds` to match app URL conventions (e.g. Studio `d`/`s`, PublicStatus `admin`/`sysadmin`). Client: `adminShellClient()`, `tenantClient()`, `auditClient()`, `jobsClient()`, optional `tierEngineClient()`.");
         r.uiHints({
             displayLabel: "Admin Shell",
             category: "operations",
@@ -34,37 +55,33 @@ export function createAdminShellFeature(options = {}) {
         if (includeDocumentDesigner)
             r.requires({ features: ["document-designer"] });
         r.translations({ keys: ADMIN_SHELL_I18N });
-        const tenantNav = [
-            "admin-shell:nav:tenant-overview",
-            "tenant:nav:members",
-            "audit:nav:audit-log",
-            ...(includeCapOverview ? ["admin-shell:nav:my-caps"] : []),
-            ...(includeDocumentDesigner ? ["document-designer:nav:templates"] : []),
-        ];
-        const platformNav = [
-            "admin-shell:nav:platform-overview",
-            "admin-shell:nav:tenants",
-            ...(includeCapOverview ? ["admin-shell:nav:tenant-caps"] : []),
-            "audit:nav:audit-log-all-tenants",
-            "jobs:nav:job-runs",
-            ...(includeDocumentDesigner ? ["document-designer:nav:platform-templates"] : []),
-            ...(includeTierAdmin ? ["admin-shell:nav:tier-admin"] : []),
-        ];
-        r.screen({
-            id: TENANT_OVERVIEW_SCREEN_ID,
-            type: "dashboard",
-            access: { roles: access.admin },
-            description: "admin-shell.screen.tenant-overview.subtitle",
-            timeRange: OVERVIEW_TIME_RANGE,
-            panels: [...tenantOverviewPanels(metrics, { includeCapOverview })],
+        const tenantNav = tenantWorkspaceNavIds({
+            includeTenantOverview,
+            includeCapOverview,
+            includeDocumentDesigner,
         });
-        r.nav({
-            id: "tenant-overview",
-            label: "admin-shell:nav.tenantOverview",
-            icon: "home",
-            screen: "admin-shell:screen:tenant-overview",
-            order: 1,
+        const platformNav = platformWorkspaceNavIds({
+            includeTierAdmin,
+            includeCapOverview,
+            includeDocumentDesigner,
         });
+        if (includeTenantOverview) {
+            r.screen({
+                id: TENANT_OVERVIEW_SCREEN_ID,
+                type: "dashboard",
+                access: { roles: access.admin },
+                description: "admin-shell.screen.tenant-overview.subtitle",
+                timeRange: OVERVIEW_TIME_RANGE,
+                panels: [...tenantOverviewPanels(metrics, { includeCapOverview })],
+            });
+            r.nav({
+                id: "tenant-overview",
+                label: "admin-shell:nav.tenantOverview",
+                icon: "home",
+                screen: "admin-shell:screen:tenant-overview",
+                order: 1,
+            });
+        }
         r.screen({
             id: PLATFORM_OVERVIEW_SCREEN_ID,
             type: "dashboard",

package/dist/auth-email-password/handlers/invite-accept-with-login.write.js

@@ -25,13 +25,13 @@ import { buildSessionRoles, createSystemUser, defineWriteHandler, } from "@cosmi
 import { InternalError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
 import * as z from "zod";
 import { decryptStoredPii, sessionLocaleField, sessionTimezoneField } from "../../shared/index.js";
-// kumiko-lint-ignore cross-feature-import invite-flow
+// kumiko-lint-ignore cross-feature-import the handler loads the pending invitation and marks it accepted
 import { INVITATION_STATUS, tenantInvitationEntity, tenantInvitationsTable, } from "../../tenant/invitation-table.js";
 // kumiko-lint-ignore cross-feature-import membership grant for a privileged cross-tenant add
 import { grantInvitedMembershipRole } from "../../tenant/invited-membership.js";
 // kumiko-lint-ignore cross-feature-import global roles granted on invite accept live on the user row
 import { grantInvitedGlobalRoles, parseInvitedGlobalRoles, } from "../../user/invited-global-roles.js";
-// kumiko-lint-ignore cross-feature-import login-style password-check
+// kumiko-lint-ignore cross-feature-import the handler verifies the invited email password against the user row, like login
 import { userTable } from "../../user/schema/user.js";
 import { invalidCredentials, invalidInviteToken, inviteEmailMismatch } from "../errors.js";
 import { burnInviteToken, deleteInviteToken, getInvitationIdForToken, unburnInviteToken, } from "../invite-token-store.js";

package/dist/auth-email-password/handlers/invite-signup-complete.write.js

@@ -21,7 +21,7 @@ import { buildSessionRoles, createSystemUser, defineWriteHandler, } from "@cosmi
 import { InternalError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
 import * as z from "zod";
 import { decryptStoredPii, registrationLocaleFromRequest } from "../../shared/index.js";
-// kumiko-lint-ignore cross-feature-import invite-flow
+// kumiko-lint-ignore cross-feature-import the handler loads the pending invitation and marks it accepted
 import { INVITATION_STATUS, tenantInvitationEntity, tenantInvitationsTable, } from "../../tenant/invitation-table.js";
 // kumiko-lint-ignore cross-feature-import reserved-role check owned by tenant-feature
 import { findForbiddenMembershipRole, reservedMembershipRoleError, } from "../../tenant/membership-roles.js";
@@ -29,7 +29,7 @@ import { findForbiddenMembershipRole, reservedMembershipRoleError, } from "../..
 import { seedTenantMembership } from "../../tenant/seeding.js";
 // kumiko-lint-ignore cross-feature-import global roles granted on invite accept live on the user row
 import { parseInvitedGlobalRoles } from "../../user/invited-global-roles.js";
-// kumiko-lint-ignore cross-feature-import existence-check
+// kumiko-lint-ignore cross-feature-import the handler rejects an invitation whose email already has a user row
 import { userTable } from "../../user/schema/user.js";
 import { invalidInviteToken } from "../errors.js";
 import { burnInviteToken, deleteInviteToken, getInvitationIdForToken, unburnInviteToken, } from "../invite-token-store.js";

package/dist/cap-overview/handlers/caps-usage.query.js

@@ -59,6 +59,7 @@ export function createCapsUsageQuery(caps, usageRoles) {
                     id: cap.id,
                     label: cap.label,
                     limit,
+                    ...(cap.unit !== undefined && { unit: cap.unit }),
                     ...(cap.icon !== undefined && { icon: cap.icon }),
                     ...(cap.accentColor !== undefined && { accentColor: cap.accentColor }),
                 };

package/dist/cap-overview/handlers/tenant-caps-list.query.js

@@ -172,10 +172,11 @@ export function createTenantCapsListQuery(caps, listCaps) {
                     const rawUsed = usageByCap.get(cap.id)?.get(row.tenantId);
                     const used = rawUsed === undefined ? 0 : rawUsed;
                     const limit = limitByTenantAndCap.get(tenantCapKey(row.tenantId, cap.id)) ?? null;
+                    const unit = cap.unit !== undefined ? { unit: cap.unit } : {};
                     capFields[capFieldName(cap.id)] =
                         used === null
-                            ? { used: null, limit, fraction: 0 }
-                            : { used, limit, fraction: computeFraction(used, limit) };
+                            ? { used: null, limit, fraction: 0, ...unit }
+                            : { used, limit, fraction: computeFraction(used, limit), ...unit };
                 }
                 return {
                     tenantId: row.tenantId,

package/dist/cap-overview/i18n.js

@@ -10,7 +10,11 @@ export const CAP_OVERVIEW_I18N = {
     "cap-overview.platform.filter.tenant": { en: "Tenant" },
     "cap-overview.cards.empty": { en: "No caps configured for this tenant." },
     "cap-overview.cards.loading": { en: "Loading usage…" },
+    "cap-overview.cards.remaining": { en: "{amount} left" },
+    "cap-overview.cards.noneLeft": { en: "None left" },
+    "cap-overview.cards.viewAll": { en: "View all usage" },
     "cap-overview.notMeasured": { en: "Not measured yet" },
+    "cap-overview.notIncluded": { en: "Not included" },
     "cap-overview.unlimited": { en: "{used} · unlimited" },
     "cap-overview.errors.progressPrimitiveMissing": {
         en: "Usage bar unavailable — Progress primitive is not registered.",

package/dist/cap-overview/types.d.ts

@@ -1,6 +1,7 @@
 import type { TenantDb } from "@cosmicdrift/kumiko-framework/db";
 import type { TenantId } from "@cosmicdrift/kumiko-framework/engine";
 import type { CapLimitContext } from "../cap-counter/index.ts";
+export type CapUnit = "count" | "mb" | "tokens";
 export type CapIconKey = "file" | "hash" | "database" | "users" | "mail" | "gauge";
 export type CapSpec = {
     readonly id: string;
@@ -8,7 +9,7 @@ export type CapSpec = {
     readonly limit: (tier: string, context: CapLimitContext) => number | null | Promise<number | null>;
     readonly usage: (db: TenantDb, tenantId: TenantId) => Promise<number | null>;
     readonly usageBatch?: (db: TenantDb, tenantIds: readonly TenantId[]) => Promise<Map<TenantId, number | null>>;
-    readonly unit?: "count" | "mb" | "tokens";
+    readonly unit?: CapUnit;
     /** Icon chip on the dashboard cards. Optional — omitted renders the card
      *  without an icon, same as before this field existed. */
     readonly icon?: CapIconKey;
@@ -22,6 +23,7 @@ export type CapUsage = {
     readonly used: number | null;
     readonly limit: number | null;
     readonly fraction: number;
+    readonly unit?: CapUnit;
 };
 export type CapUsageWithMeta = CapUsage & {
     readonly id: string;

package/dist/cap-overview/web/cap-amount-format.d.ts

@@ -0,0 +1,3 @@
+import type { CapUnit } from "../types.ts";
+export declare function formatCapAmount(value: number, unit: CapUnit | undefined, locale: string): string;
+export declare function formatCapUsedOfLimit(used: number, limit: number, unit: CapUnit | undefined, locale: string): string;

package/dist/cap-overview/web/cap-amount-format.js

@@ -0,0 +1,30 @@
+const MB_PER_GB = 1024;
+const MB_PER_TB = 1024 * 1024;
+function megabyteUnit(valueInMb) {
+    const magnitude = Math.abs(valueInMb);
+    if (magnitude < MB_PER_GB)
+        return { unit: "megabyte", divisor: 1 };
+    if (magnitude < MB_PER_TB)
+        return { unit: "gigabyte", divisor: MB_PER_GB };
+    return { unit: "terabyte", divisor: MB_PER_TB };
+}
+export function formatCapAmount(value, unit, locale) {
+    try {
+        if (unit === "mb") {
+            const scaled = megabyteUnit(value);
+            return new Intl.NumberFormat(locale, {
+                style: "unit",
+                unit: scaled.unit,
+                unitDisplay: "short",
+                maximumFractionDigits: 1,
+            }).format(value / scaled.divisor);
+        }
+        return new Intl.NumberFormat(locale).format(value);
+    }
+    catch {
+        return String(value);
+    }
+}
+export function formatCapUsedOfLimit(used, limit, unit, locale) {
+    return `${formatCapAmount(used, unit, locale)} / ${formatCapAmount(limit, unit, locale)}`;
+}

package/dist/cap-overview/web/cap-cards-panel.js

@@ -1,10 +1,12 @@
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
-import { usePrimitives, useQuery, useTranslation } from "@cosmicdrift/kumiko-renderer";
+import { useLocale, useNav, usePrimitives, useQuery, useTranslation, } from "@cosmicdrift/kumiko-renderer";
 import { EMPTY_VALUE_PLACEHOLDER } from "@cosmicdrift/kumiko-renderer/headless";
 import { EmptyState, StatCard, StatusBadge, } from "@cosmicdrift/kumiko-renderer/web";
 import { Database, FileText, Gauge, Hash, Mail, Users } from "lucide-react";
+import { formatCapAmount, formatCapUsedOfLimit } from "./cap-amount-format.js";
 import { CapUsageBar } from "./cap-usage-bar.js";
-import { CapOverviewQueries } from "./constants.js";
+import { CapOverviewQueries, MY_CAPS_SCREEN_ID } from "./constants.js";
+import { isCapNotIncluded } from "./usage-math.js";
 // caps:usage's wire tone stays "default"/"warn"/"danger" (matches the
 // server-side thresholds literally); mapped here to the renderer's actual
 // StatusTone vocabulary instead of inventing new CSS ("danger" has no
@@ -28,6 +30,50 @@ const CAP_ICONS = {
 function isMeasured(cap) {
     return cap.used !== null;
 }
+// Boundary check: only an array of strings restricts; anything else means no restriction.
+function readCapKeys(value) {
+    if (!Array.isArray(value))
+        return undefined;
+    return new Set(value.filter((entry) => typeof entry === "string"));
+}
+function ViewAllLink() {
+    const t = useTranslation();
+    const { Link } = usePrimitives();
+    const nav = useNav();
+    const target = { screenId: MY_CAPS_SCREEN_ID };
+    return (_jsx(Link, { href: nav.hrefFor(target), onPress: () => nav.navigate(target), testId: "cap-cards-view-all", children: t("cap-overview.cards.viewAll") }));
+}
+function CapUsageSummaryRow({ cap }) {
+    const t = useTranslation();
+    const locale = useLocale().locale();
+    const remainingText = isMeasured(cap) && cap.limit !== null && cap.limit > 0
+        ? remainingLabel(t, Math.max(cap.limit - cap.used, 0), cap.unit, locale)
+        : undefined;
+    if (cap.percent === null && remainingText === undefined)
+        return null;
+    return (_jsxs("div", { className: "flex items-center gap-2", children: [cap.percent !== null && (_jsx(StatusBadge, { tone: TONE_TO_STATUS[cap.tone], children: `${cap.percent}%` })), remainingText !== undefined && (_jsx("span", { className: "text-sm text-muted-foreground", "data-testid": "cap-card-remaining", children: remainingText }))] }));
+}
+function remainingLabel(t, rest, unit, locale) {
+    return rest > 0
+        ? t("cap-overview.cards.remaining", { amount: formatCapAmount(rest, unit, locale) })
+        : t("cap-overview.cards.noneLeft");
+}
+function CapUsageStat({ cap, footer, }) {
+    const t = useTranslation();
+    const locale = useLocale().locale();
+    const Icon = cap.icon !== undefined ? CAP_ICONS[cap.icon] : undefined;
+    // An unlimited, measured cap has neither a badge nor a bar; StatCard still
+    // wraps any defined child in a spacing div, so pass undefined then.
+    const notIncluded = isCapNotIncluded(cap.limit);
+    const body = !notIncluded && (!isMeasured(cap) || cap.limit !== null) ? (_jsxs("div", { className: "flex flex-col gap-2", children: [_jsx(CapUsageSummaryRow, { cap: cap }), _jsx(CapUsageBar, { usage: cap, showLabel: false }), footer] })) : (footer);
+    return (_jsx(StatCard, { icon: Icon !== undefined ? _jsx(Icon, { className: "size-4" }) : undefined, label: t(cap.label), value: notIncluded
+            ? t("cap-overview.notIncluded")
+            : !isMeasured(cap)
+                ? EMPTY_VALUE_PLACEHOLDER
+                : cap.limit === null
+                    ? formatCapAmount(cap.used, cap.unit, locale)
+                    : formatCapUsedOfLimit(cap.used, cap.limit, cap.unit, locale), ...(cap.accentColor !== undefined && { accentColor: cap.accentColor }), testId: "cap-card", children: body }));
+}
 export function CapCardsPanel({ filterParams }) {
     const t = useTranslation();
     const { Banner } = usePrimitives();
@@ -38,28 +84,22 @@ export function CapCardsPanel({ filterParams }) {
     if (query.error !== null) {
         return (_jsx(Banner, { variant: "error", testId: "cap-cards-panel-error", children: query.error.message }));
     }
-    const rows = query.data?.rows ?? [];
+    const capKeys = readCapKeys(filterParams?.["capKeys"]);
+    const allRows = query.data?.rows ?? [];
+    const rows = capKeys === undefined ? allRows : allRows.filter((row) => capKeys.has(row.id));
     if (!query.loading && rows.length === 0) {
         return _jsx(EmptyState, { title: t("cap-overview.cards.empty"), testId: "cap-cards-panel-empty" });
     }
-    return (_jsxs("div", { 
-        // Arbitrary bracket values (grid-cols-[repeat(...)]) never compiled:
-        // styles.css's Tailwind v4 @source scan only covers renderer/web/src,
-        // renderer/src and samples/**/src (see its comment) — bundled-features
-        // isn't scanned, so a class unique to this file has no generated rule
-        // and silently no-ops (the grid fell back to one implicit column,
-        // stacking every card full-width). Reusing the exact classes
-        // dashboard-body.tsx's own panel grid already uses guarantees the
-        // rule exists, since that file IS in the scanned surface.
-        className: "grid gap-4 sm:grid-cols-2 lg:grid-cols-4", "data-testid": "cap-cards-panel", children: [query.loading && rows.length === 0 && (_jsx("div", { className: "text-sm text-muted-foreground", children: t("cap-overview.cards.loading") })), rows.map((cap) => {
-                const Icon = cap.icon !== undefined ? CAP_ICONS[cap.icon] : undefined;
-                // An unlimited, measured cap has neither a badge nor a bar; StatCard still
-                // wraps any defined child in a spacing div, so pass undefined then.
-                const body = !isMeasured(cap) || cap.limit !== null ? (_jsxs("div", { className: "flex flex-col gap-2", children: [cap.percent !== null && (_jsx("div", { className: "flex items-center justify-between gap-2", children: _jsx(StatusBadge, { tone: TONE_TO_STATUS[cap.tone], children: `${cap.percent}%` }) })), _jsx(CapUsageBar, { usage: cap, showLabel: false })] })) : undefined;
-                return (_jsx(StatCard, { icon: Icon !== undefined ? _jsx(Icon, { className: "size-4" }) : undefined, label: t(cap.label), value: !isMeasured(cap)
-                        ? EMPTY_VALUE_PLACEHOLDER
-                        : cap.limit === null
-                            ? String(cap.used)
-                            : `${cap.used} / ${cap.limit}`, ...(cap.accentColor !== undefined && { accentColor: cap.accentColor }), testId: "cap-card", children: body }, cap.id));
-            })] }));
+    // A single limited card carries the link itself; several share one under the grid.
+    const linkInCard = capKeys !== undefined && rows.length === 1;
+    return (_jsxs("div", { className: "flex flex-col gap-2", children: [_jsxs("div", { 
+                // Arbitrary bracket values (grid-cols-[repeat(...)]) never compiled:
+                // styles.css's Tailwind v4 @source scan only covers renderer/web/src,
+                // renderer/src and samples/**/src (see its comment) — bundled-features
+                // isn't scanned, so a class unique to this file has no generated rule
+                // and silently no-ops (the grid fell back to one implicit column,
+                // stacking every card full-width). Reusing the exact classes
+                // dashboard-body.tsx's own panel grid already uses guarantees the
+                // rule exists, since that file IS in the scanned surface.
+                className: "grid gap-4 sm:grid-cols-2 lg:grid-cols-4", "data-testid": "cap-cards-panel", children: [query.loading && rows.length === 0 && (_jsx("div", { className: "text-sm text-muted-foreground", children: t("cap-overview.cards.loading") })), rows.map((cap) => (_jsx(CapUsageStat, { cap: cap, footer: linkInCard ? _jsx(ViewAllLink, {}) : undefined }, cap.id)))] }), capKeys !== undefined && !linkInCard && _jsx(ViewAllLink, {})] }));
 }

package/dist/cap-overview/web/cap-usage-bar.js

@@ -1,15 +1,20 @@
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
-import { usePrimitives, useTranslation } from "@cosmicdrift/kumiko-renderer";
-import { computeTone } from "./usage-math.js";
+import { useLocale, usePrimitives, useTranslation } from "@cosmicdrift/kumiko-renderer";
+import { formatCapAmount, formatCapUsedOfLimit } from "./cap-amount-format.js";
+import { computeTone, isCapNotIncluded } from "./usage-math.js";
 export function CapUsageBar({ usage, showLabel = true, }) {
     const { Progress, Text, Banner } = usePrimitives();
     const t = useTranslation();
+    const locale = useLocale().locale();
+    if (isCapNotIncluded(usage.limit)) {
+        return (_jsx(Text, { variant: "small", testId: "cap-usage-not-included", children: t("cap-overview.notIncluded") }));
+    }
     if (usage.used === null) {
         return (_jsx(Text, { variant: "small", testId: "cap-usage-not-measured", children: t("cap-overview.notMeasured") }));
     }
     if (usage.limit === null) {
         // A progress bar with no denominator says nothing — show the raw count instead.
-        return showLabel ? (_jsx(Text, { variant: "small", testId: "cap-usage-unlimited", children: t("cap-overview.unlimited", { used: usage.used }) })) : null;
+        return showLabel ? (_jsx(Text, { variant: "small", testId: "cap-usage-unlimited", children: t("cap-overview.unlimited", { used: formatCapAmount(usage.used, usage.unit, locale) }) })) : null;
     }
-    return (_jsxs("div", { className: "flex flex-col gap-1", children: [Progress ? (_jsx(Progress, { value: usage.fraction, tone: computeTone(usage.fraction), testId: "cap-usage-bar" })) : (_jsx(Banner, { variant: "error", testId: "cap-usage-bar-missing-primitive", children: t("cap-overview.errors.progressPrimitiveMissing") })), showLabel && _jsx(Text, { variant: "small", children: `${usage.used} / ${usage.limit}` })] }));
+    return (_jsxs("div", { className: "flex flex-col gap-1", children: [Progress ? (_jsx(Progress, { value: usage.fraction, tone: computeTone(usage.fraction), testId: "cap-usage-bar" })) : (_jsx(Banner, { variant: "error", testId: "cap-usage-bar-missing-primitive", children: t("cap-overview.errors.progressPrimitiveMissing") })), showLabel && (_jsx(Text, { variant: "small", children: formatCapUsedOfLimit(usage.used, usage.limit, usage.unit, locale) }))] }));
 }

package/dist/cap-overview/web/cap-usage-cell.js

@@ -1,6 +1,7 @@
 import { jsx as _jsx } from "react/jsx-runtime";
-import { isPlainObject } from "@cosmicdrift/kumiko-types/type-guards";
+import { isOneOf, isPlainObject } from "@cosmicdrift/kumiko-types/type-guards";
 import { CapUsageBar } from "./cap-usage-bar.js";
+const CAP_UNITS = ["count", "mb", "tokens"];
 function isCapUsage(value) {
     if (!isPlainObject(value))
         return false;
@@ -8,7 +9,8 @@ function isCapUsage(value) {
     const limit = value["limit"];
     return ((typeof used === "number" || used === null) &&
         (typeof limit === "number" || limit === null) &&
-        typeof value["fraction"] === "number");
+        typeof value["fraction"] === "number" &&
+        (value["unit"] === undefined || isOneOf(CAP_UNITS, value["unit"])));
 }
 export function CapUsageCell({ value }) {
     if (!isCapUsage(value))

package/dist/cap-overview/web/usage-math.d.ts

@@ -1,4 +1,5 @@
 import type { CapUsageTone } from "../types.ts";
+export declare function isCapNotIncluded(limit: number | null): boolean;
 export declare function computeFraction(used: number, limit: number | null): number;
 export declare function computeUnclampedFraction(used: number, limit: number | null): number;
 export declare function computeTone(fraction: number): CapUsageTone;

package/dist/cap-overview/web/usage-math.js

@@ -2,10 +2,13 @@ const WARN_THRESHOLD = 0.8;
 const DANGER_THRESHOLD = 1;
 // limit === null means unlimited (no cap to measure against); limit <= 0
 // means "not part of this tier" — both render as 0, never NaN/Infinity.
+export function isCapNotIncluded(limit) {
+    return limit !== null && limit <= 0;
+}
 function rawFraction(used, limit) {
     if (limit === null)
         return 0;
-    if (limit <= 0)
+    if (isCapNotIncluded(limit))
         return 0;
     const fraction = used / limit;
     return Number.isFinite(fraction) ? fraction : 0;

package/dist/channel-email/app-transport.d.ts

@@ -0,0 +1,14 @@
+import type { Registry } from "@cosmicdrift/kumiko-framework/engine";
+import type { EmailTransport } from "./types.ts";
+export declare const EMAIL_APP_TRANSPORT_EXTENSION: "emailAppTransport";
+export declare const EMAIL_APP_TRANSPORT_USAGE: "app";
+export type EmailAppTransport = {
+    readonly transport: EmailTransport | null;
+};
+declare module "@cosmicdrift/kumiko-framework/engine" {
+    interface KumikoExtensionOptionsMap {
+        [EMAIL_APP_TRANSPORT_EXTENSION]: EmailAppTransport;
+    }
+}
+/** The app-wide transport of channel-email, null when the app has none or no channel-email. */
+export declare function findEmailAppTransport(registry: Pick<Registry, "getExtensionUsages">): EmailTransport | null;

package/dist/channel-email/app-transport.js

@@ -0,0 +1,20 @@
+// The app transport otherwise lives only in the channel closure; publishing it lets other
+// features reach the same sender a tenant without its own provider falls back to.
+export const EMAIL_APP_TRANSPORT_EXTENSION = "emailAppTransport";
+export const EMAIL_APP_TRANSPORT_USAGE = "app";
+function isEmailAppTransport(options) {
+    return (typeof options === "object" &&
+        options !== null &&
+        "transport" in options &&
+        typeof options.transport === "object" &&
+        options.transport !== null &&
+        "send" in options.transport &&
+        typeof options.transport.send === "function");
+}
+/** The app-wide transport of channel-email, null when the app has none or no channel-email. */
+export function findEmailAppTransport(registry) {
+    const usage = registry
+        .getExtensionUsages(EMAIL_APP_TRANSPORT_EXTENSION)
+        .find((candidate) => candidate.entityName === EMAIL_APP_TRANSPORT_USAGE);
+    return usage !== undefined && isEmailAppTransport(usage.options) ? usage.options.transport : null;
+}

package/dist/channel-email/feature.js

@@ -1,10 +1,12 @@
 import { DELIVERY_CHANNEL_EXTENSION, EMAIL_CHANNEL_NAME, } from "@cosmicdrift/kumiko-bundled-features/delivery";
 import { defineFeature } from "@cosmicdrift/kumiko-framework/engine";
 import { featureWithEnvSchema } from "@cosmicdrift/kumiko-framework/env";
+import { EMAIL_APP_TRANSPORT_EXTENSION, EMAIL_APP_TRANSPORT_USAGE } from "./app-transport.js";
 import { createEmailChannel } from "./email-channel.js";
 import { smtpEnvSchema } from "./env.js";
 export function createChannelEmailFeature(options) {
     const channel = createEmailChannel(options);
+    const appTransport = options.transport ?? null;
     const feature = defineFeature("channel-email", (r) => {
         r.describe("Wires an `EmailTransport` (typically `mail-transport-smtp` in production, `createInMemoryTransport()` in tests) into the delivery system as the `email` channel. Requires `delivery`; pass an `EmailChannelOptions` with a `transport` and a `resolveEmail` function that maps a user ID to their email address. Mails render from stored templates (`renderer-mail-html`): a notification routed to this channel needs `template` + `meta` on `r.notification`, otherwise its delivery fails. Pass `tenantTransport: tenantMailTransport` (from `mail-foundation`) to send the notifications declared with `tenantTransport: true` through the sending tenant's own configured provider: a broken provider fails the send, a tenant without one uses the app `transport`; every other notification (password reset, sign-in) always goes through the app `transport`. `transport` may be left out when `tenantTransport` is set, but then only notifications declared with `tenantTransport: true` are delivered: every other notification (password reset, sign-in, invitations) fails with `missing_credentials`, so an app without an app SMTP server must mark every notification that should go out or keep an app `transport`. Notifications declared with `unsubscribe: true` get a signed `data.unsubscribeUrl` from delivery, which turns into the `List-Unsubscribe` headers.");
         r.uiHints({
@@ -15,6 +17,10 @@ export function createChannelEmailFeature(options) {
         r.requires({ features: ["delivery"] });
         r.envSchema(smtpEnvSchema);
         r.translations({ keys: { "delivery.channel.email": { en: "Email" } } });
+        r.extendsRegistrar(EMAIL_APP_TRANSPORT_EXTENSION, { onRegister: () => { } });
+        r.useExtension(EMAIL_APP_TRANSPORT_EXTENSION, EMAIL_APP_TRANSPORT_USAGE, {
+            transport: appTransport,
+        });
         r.useExtension(DELIVERY_CHANNEL_EXTENSION, EMAIL_CHANNEL_NAME, {
             mode: channel.mode,
             resolve: channel.resolve,

package/dist/channel-email/index.d.ts

@@ -1,3 +1,4 @@
+export { EMAIL_APP_TRANSPORT_EXTENSION, type EmailAppTransport, findEmailAppTransport, } from "./app-transport.ts";
 export { createEmailChannel, type EmailChannelOptions, type TenantTransportResolver, } from "./email-channel.ts";
 export { smtpEnvSchema } from "./env.ts";
 export { createChannelEmailFeature } from "./feature.ts";

package/dist/channel-email/index.js

@@ -1,3 +1,4 @@
+export { EMAIL_APP_TRANSPORT_EXTENSION, findEmailAppTransport, } from "./app-transport.js";
 export { createEmailChannel, } from "./email-channel.js";
 export { smtpEnvSchema } from "./env.js";
 export { createChannelEmailFeature } from "./feature.js";

package/dist/channel-email/smtp-transport.js

@@ -17,28 +17,11 @@
 // connections open and reuses them. That is enough for small apps; for
 // high-volume apps the caller must layer its own implementation with a
 // dedicated queue (BullMQ + retry) on top.
+import { sanitizeMailDisplayName } from "@cosmicdrift/kumiko-bundled-features/foundation-shared";
 import { createTransport } from "nodemailer";
 import addressparser from "nodemailer/lib/addressparser";
-function isControlCharacter(char) {
-    const code = char.charCodeAt(0);
-    return code <= 0x1f || code === 0x7f;
-}
-// Mail clients often show only the display name: an embedded address ("<", ">", "@") would
-// pass for a foreign sender on the platform's own SPF/DKIM-signed domain.
-function isUnsafeDisplayNameCharacter(char) {
-    return isControlCharacter(char) || char === "<" || char === ">" || char === "@";
-}
-// Control characters in a display name would let a caller inject headers.
-function sanitizedDisplayName(name) {
-    const cleaned = name
-        ?.split("")
-        .map((char) => (isUnsafeDisplayNameCharacter(char) ? " " : char))
-        .join("")
-        .trim();
-    return cleaned === undefined || cleaned === "" ? undefined : cleaned;
-}
 function fromHeader(address, fromName) {
-    const name = sanitizedDisplayName(fromName);
+    const name = sanitizeMailDisplayName(fromName);
     if (name === undefined)
         return address;
     const [parsed] = addressparser(address, { flatten: true });

package/dist/compliance-profiles/schema/profile-selection.d.ts

@@ -11,10 +11,10 @@ export declare const tenantComplianceProfileEntity: import("@cosmicdrift/kumiko-
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly display?: "radio" | "dropdown";
         readonly optionTones?: {
-            readonly "de-hr-dsgvo-hgb"?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly "eu-dsgvo"?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly "minimal-no-region"?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly "swiss-dsg"?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly "de-hr-dsgvo-hgb"?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly "eu-dsgvo"?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly "minimal-no-region"?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly "swiss-dsg"?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
@@ -40,10 +40,10 @@ export declare const tenantComplianceProfileTable: import("@cosmicdrift/kumiko-f
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly display?: "radio" | "dropdown";
         readonly optionTones?: {
-            readonly "de-hr-dsgvo-hgb"?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly "eu-dsgvo"?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly "minimal-no-region"?: "bad" | "neutral" | "ok" | "warn" | undefined;
-            readonly "swiss-dsg"?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly "de-hr-dsgvo-hgb"?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly "eu-dsgvo"?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly "minimal-no-region"?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
+            readonly "swiss-dsg"?: "accent" | "bad" | "critical" | "neutral" | "ok" | "warn" | undefined;
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;

package/dist/foundation-shared/index.d.ts

@@ -2,4 +2,5 @@ export { buildInfoEnvSchema } from "./build-info-env.ts";
 export { requireDefined, requireNonEmpty, requireSecretSet } from "./config-helpers.ts";
 export { demoAdminEnvSchema } from "./demo-admin-env.ts";
 export { isHostAllowlisted, readHostAllowlistFromEnv } from "./host-allowlist.ts";
+export { sanitizeMailDisplayName } from "./mail-display-name.ts";
 export { BlockedHostError, HostResolutionError, MAIL_ALLOWED_PRIVATE_HOSTS_ENV_VAR, type MailConnectTarget, type MailHostGuardOptions, mailAllowedPrivateHostsEnvSchema, readAllowedPrivateMailHostsFromEnv, resolveMailConnectTarget, } from "./mail-host-policy.ts";

package/dist/foundation-shared/index.js

@@ -4,4 +4,5 @@ export { buildInfoEnvSchema } from "./build-info-env.js";
 export { requireDefined, requireNonEmpty, requireSecretSet } from "./config-helpers.js";
 export { demoAdminEnvSchema } from "./demo-admin-env.js";
 export { isHostAllowlisted, readHostAllowlistFromEnv } from "./host-allowlist.js";
+export { sanitizeMailDisplayName } from "./mail-display-name.js";
 export { BlockedHostError, HostResolutionError, MAIL_ALLOWED_PRIVATE_HOSTS_ENV_VAR, mailAllowedPrivateHostsEnvSchema, readAllowedPrivateMailHostsFromEnv, resolveMailConnectTarget, } from "./mail-host-policy.js";

package/dist/foundation-shared/mail-display-name.d.ts

@@ -0,0 +1 @@
+export declare function sanitizeMailDisplayName(name: string | undefined): string | undefined;

package/dist/foundation-shared/mail-display-name.js

@@ -0,0 +1,18 @@
+function isControlCharacter(char) {
+    const code = char.charCodeAt(0);
+    return code <= 0x1f || code === 0x7f;
+}
+// Mail clients often show only the display name: an embedded address ("<", ">", "@") would
+// pass for a foreign sender on the sending domain's own SPF/DKIM-signed mail.
+function isUnsafeDisplayNameCharacter(char) {
+    return isControlCharacter(char) || char === "<" || char === ">" || char === "@";
+}
+// Control characters in a display name would let a caller inject headers.
+export function sanitizeMailDisplayName(name) {
+    const cleaned = name
+        ?.split("")
+        .map((char) => (isUnsafeDisplayNameCharacter(char) ? " " : char))
+        .join("")
+        .trim();
+    return cleaned === undefined || cleaned === "" ? undefined : cleaned;
+}