@cosmicdrift/kumiko-bundled-features 0.400.0 → 0.401.0

package/dist/documents/entity.d.ts

@@ -1,8 +1,10 @@
 import { type EntityDefinition } from "@cosmicdrift/kumiko-framework/engine";
+export type DocumentLinkReadMode = "anyLink" | "allLinks";
 export type DocumentEntityOptions = {
     readonly categories: readonly [string, ...string[]];
     readonly adminRoles: readonly string[];
     readonly readAccess?: NonNullable<EntityDefinition["access"]>["read"];
+    readonly linkReadMode?: DocumentLinkReadMode;
     readonly retention?: EntityDefinition["retention"];
 };
 export declare function createDocumentEntity(options: DocumentEntityOptions): EntityDefinition<{

package/dist/documents/entity.js

@@ -4,6 +4,7 @@ import { DOCUMENT_LINK_ENTITY } from "./constants.js";
 // Readable only through a link to a host the viewer can read, and only when the file's owner is
 // readable too (see EntityDefinition.readGate); readAccess narrows further.
 export function createDocumentEntity(options) {
+    const documentLink = { entity: DOCUMENT_LINK_ENTITY, field: "documentId" };
     return createEntity({
         table: "read_filed_documents",
         softDelete: true,
@@ -15,7 +16,9 @@ export function createDocumentEntity(options) {
         }),
         ...(options.retention !== undefined && { retention: options.retention }),
         readGate: {
-            anyLink: { entity: DOCUMENT_LINK_ENTITY, field: "documentId" },
+            ...(options.linkReadMode === "allLinks"
+                ? { allLinks: documentLink }
+                : { anyLink: documentLink }),
             fileOwner: { field: "file" },
             linkExemptRoles: options.adminRoles,
         },

package/dist/documents/feature.d.ts

@@ -1,16 +1,29 @@
 import { type AccessRule, type EntityDefinition } from "@cosmicdrift/kumiko-framework/engine";
 import { type DocumentCaptureRule } from "./capture.ts";
+import { type DocumentLinkReadMode } from "./entity.ts";
 export type DocumentsFeatureOptions = {
     /** Allowed document categories; they become the options of the category field. */
     readonly categories: readonly [string, ...string[]];
-    /** Entities a document can be linked to. Each needs an update handler, which linking requires. */
+    /** Entities a document can be linked to. Linking needs write access to the target: its update handler, or its entity write roles when it has none. */
     readonly linkTargets: readonly [string, ...string[]];
+    /** Display label per category (de, en); a category without one shows its raw value. */
+    readonly categoryLabels?: Readonly<Record<string, {
+        readonly de: string;
+        readonly en: string;
+    }>>;
     /** Files saved into these fields become documents automatically. */
     readonly capture?: readonly DocumentCaptureRule[];
     /** Retention of the document rows, in the entity's own retention vocabulary. */
     readonly retention?: EntityDefinition["retention"];
     /** Row-level read rule on the document, AND-ed with the link and file-owner gate. */
     readonly readAccess?: NonNullable<EntityDefinition["access"]>["read"];
+    /**
+     * "anyLink" (default): one readable linked record shows the document. "allLinks": the viewer
+     * must read every record it is linked to, so a link to a shared record (a contact) does not
+     * open a document that also hangs off a record of another team. The file-owner check applies
+     * either way.
+     */
+    readonly linkReadMode?: DocumentLinkReadMode;
     /**
      * Who may use the document handlers. One rule applies to read, write and delete; the split form
      * sets them apart. Default TenantAdmin and TenantMember; a missing delete follows write.

package/dist/documents/feature.js

@@ -5,7 +5,7 @@
 import { defineEntityCreateHandler, defineEntityDeleteHandler, defineEntityDetailHandler, defineEntityListHandler, defineEntityUpdateHandler, defineFeature, } from "@cosmicdrift/kumiko-framework/engine";
 import { registerCapture, validateCaptureRules } from "./capture.js";
 import { DEFAULT_ADMIN_ROLES, DEFAULT_DOCUMENT_ACCESS, DEFAULT_EXPIRING_WITHIN_DAYS, DOCUMENT_ENTITY, DOCUMENT_LINK_ENTITY, DOCUMENTS_FEATURE_NAME, } from "./constants.js";
-import { createDocumentEntity, createDocumentLinkEntity } from "./entity.js";
+import { createDocumentEntity, createDocumentLinkEntity, } from "./entity.js";
 import { createDocumentExecutors } from "./executor.js";
 import { createImportDocumentHandler } from "./handlers/import.write.js";
 import { createLinkDocumentHandler, createUnlinkDocumentHandler } from "./handlers/link.write.js";
@@ -32,10 +32,10 @@ function resolveAccess(access) {
     const write = access.write ?? DEFAULT_DOCUMENT_ACCESS;
     return { read: access.read ?? DEFAULT_DOCUMENT_ACCESS, write, delete: access.delete ?? write };
 }
-function categoryOptionLabels(categories) {
+function categoryOptionLabels(categories, labels) {
     return Object.fromEntries(categories.map((category) => [
         `documents:entity:filed-document:field:category:option:${category}`,
-        { en: category, de: category },
+        labels?.[category] ?? { en: category, de: category },
     ]));
 }
 function registerDocuments(r, opts) {
@@ -45,6 +45,7 @@ function registerDocuments(r, opts) {
         categories: opts.categories,
         adminRoles: opts.adminRoles ?? DEFAULT_ADMIN_ROLES,
         ...(opts.readAccess !== undefined && { readAccess: opts.readAccess }),
+        ...(opts.linkReadMode !== undefined && { linkReadMode: opts.linkReadMode }),
         ...(opts.retention !== undefined && { retention: opts.retention }),
     });
     const linkEntity = createDocumentLinkEntity(linkTargets);
@@ -58,11 +59,13 @@ function registerDocuments(r, opts) {
     r.writeHandler(defineEntityCreateHandler(DOCUMENT_ENTITY, documentEntity, {
         access: access.write,
         description: "Files a new document from an uploaded file; it stays invisible to everyone but the admin roles until it is linked to a record.",
+        agent: { risk: "mid" },
     }));
     const writeGuard = createDocumentWriteGuard(executors, opts.adminRoles ?? DEFAULT_ADMIN_ROLES);
     r.writeHandler(defineEntityUpdateHandler(DOCUMENT_ENTITY, documentEntity, {
         access: access.write,
         description: "Edits a document's title, category and dates from the entity-edit envelope; it does not change what the document is linked to.",
+        agent: { risk: "mid" },
     }));
     r.writeHandler(defineEntityDeleteHandler(DOCUMENT_ENTITY, documentEntity, {
         access: access.delete,
@@ -100,12 +103,20 @@ function registerDocuments(r, opts) {
     r.bootCheck((ctx) => validateCaptureRules(ctx, capture, opts.categories, linkTargets));
     r.screen(createDocumentListScreen(access.read, opts.categories));
     r.translations({
-        keys: { ...DOCUMENTS_FEATURE_I18N, ...categoryOptionLabels(opts.categories) },
+        keys: {
+            ...DOCUMENTS_FEATURE_I18N,
+            ...categoryOptionLabels(opts.categories, opts.categoryLabels),
+        },
     });
 }
 export function createDocumentsFeature(opts) {
     if (opts.expiringWithinDays !== undefined && opts.expiringWithinDays < 0) {
         throw new Error("createDocumentsFeature({ expiringWithinDays }) must not be negative.");
     }
+    for (const category of Object.keys(opts.categoryLabels ?? {})) {
+        if (!opts.categories.includes(category)) {
+            throw new Error(`createDocumentsFeature({ categoryLabels }) names "${category}", which is not in categories.`);
+        }
+    }
     return defineFeature(DOCUMENTS_FEATURE_NAME, (r) => registerDocuments(r, opts));
 }

package/dist/documents/handlers/import.write.js

@@ -53,7 +53,7 @@ export function createImportDocumentHandler(args) {
         name: "import",
         schema: importDocumentPayloadSchema,
         access: { roles: [SYSTEM_ROLE] },
-        agent: { expose: false },
+        agent: { expose: false, risk: "high" },
         description: "Creates a document with a caller-chosen id from an existing file, links it to the given records and optionally leaves it deleted; a repeat call with the same id changes nothing, and an id already used by another record fails. The document's createdAt is the time of the import; issuedAt carries the business date. Reserved for the system user, meant for data migrations.",
         handler: async (event, ctx) => {
             const payload = event.payload;

package/dist/documents/handlers/link.write.js

@@ -13,6 +13,7 @@ export function createLinkDocumentHandler(args) {
         name: "link",
         schema: documentLinkPayloadSchema,
         access,
+        agent: { risk: "mid" },
         description: "Makes a document visible on another record by linking it to that record; the caller must be able to read the document and edit the record.",
         handler: async (event, ctx) => {
             const payload = event.payload;
@@ -37,6 +38,7 @@ export function createUnlinkDocumentHandler(args) {
         name: "unlink",
         schema: documentLinkPayloadSchema,
         access,
+        agent: { risk: "mid" },
         description: "Removes a document from a record it was linked to, reporting success when no link existed; the document and its file stay.",
         handler: async (event, ctx) => {
             const payload = event.payload;

package/dist/documents/i18n.js

@@ -18,6 +18,20 @@ export const DOCUMENTS_FEATURE_I18N = {
     "documents:list.expiry.expiring": { en: "Expiring soon", de: "Läuft bald ab" },
     "documents:list.expiry.valid": { en: "Valid", de: "Gültig" },
     "documents:list.expiry.none": { en: "No expiry date", de: "Ohne Ablaufdatum" },
+    "documents:write:link:title": {
+        en: "Link document to record",
+        de: "Dokument mit Datensatz verknüpfen",
+    },
+    "documents:write:link:field:documentId": { en: "Document", de: "Dokument" },
+    "documents:write:link:field:entityType": { en: "Record type", de: "Datensatztyp" },
+    "documents:write:link:field:entityId": { en: "Record", de: "Datensatz" },
+    "documents:write:unlink:title": {
+        en: "Remove document from record",
+        de: "Dokument von Datensatz lösen",
+    },
+    "documents:write:unlink:field:documentId": { en: "Document", de: "Dokument" },
+    "documents:write:unlink:field:entityType": { en: "Record type", de: "Datensatztyp" },
+    "documents:write:unlink:field:entityId": { en: "Record", de: "Datensatz" },
     "documents.errors.unknown-category": {
         en: "Unknown document category",
         de: "Unbekannte Dokumentenkategorie",

package/dist/documents/index.d.ts

@@ -1,6 +1,7 @@
 export { documentIdForFile, documentLinkAggregateId } from "./aggregate-id.ts";
 export type { DocumentCaptureRule } from "./capture.ts";
 export { DEFAULT_ADMIN_ROLES, DEFAULT_DOCUMENT_ACCESS, DOCUMENT_ENTITY, DOCUMENT_LINK_ENTITY, DOCUMENTS_FEATURE_NAME, DOCUMENTS_LIST_SCREEN_ID, DocumentsHandlers, DocumentsQueries, EXPIRY_STATES, type ExpiryState, } from "./constants.ts";
+export type { DocumentLinkReadMode } from "./entity.ts";
 export { createDocumentsFeature, type DocumentsAccess, type DocumentsFeatureOptions, } from "./feature.ts";
 export { forTypeQueryQn } from "./queries/for-record.query.ts";
 export { DOCUMENT_COLUMNS } from "./screens.ts";

package/dist/documents/tab.js

@@ -1,4 +1,4 @@
-import { DocumentsQueries } from "./constants.js";
+import { DOCUMENT_ENTITY, DOCUMENTS_FEATURE_NAME, DocumentsQueries } from "./constants.js";
 import { forTypeQueryQn } from "./queries/for-record.query.js";
 // "Documents" tab for the edit screen of a link target. The tab id is the same on every screen,
 // so deep links like ?tab=documents work across hosts.
@@ -8,7 +8,7 @@ export function documentsTab(entityType) {
         kind: "relatedList",
         title: "documents:tab.title",
         query: forTypeQueryQn(entityType),
-        entity: "documents:document",
+        entity: `${DOCUMENTS_FEATURE_NAME}:${DOCUMENT_ENTITY}`,
         columns: [
             { field: "title", sortable: true },
             { field: "category", sortable: true },

package/dist/documents/target-write-check.js

@@ -9,8 +9,10 @@ function updateHandlerAccessOf(registry, entityType) {
     return undefined;
 }
 // Linking a document changes what readers of the target see, so it needs what saving the target
-// needs: read visibility, the entity's update handler and its row-level write rule. A target that
-// is not visible answers like a missing one.
+// needs: read visibility, a write gate and its row-level write rule. The gate is the entity's
+// update handler; an entity saved only through custom handlers has none, so its declared write
+// roles stand in, and without either the target stays unlinkable. A target that is not visible
+// answers like a missing one.
 export async function canWriteLinkTarget(registry, entityType, entityId, user, db) {
     if (!(await parentRowIsVisible(registry, entityType, entityId, user, db)))
         return false;
@@ -18,8 +20,13 @@ export async function canWriteLinkTarget(registry, entityType, entityId, user, d
     if (entity === undefined)
         return false;
     const updateAccess = updateHandlerAccessOf(registry, entityType);
-    if (updateAccess === undefined || !hasAccess(user, updateAccess))
+    if (updateAccess !== undefined) {
+        if (!hasAccess(user, updateAccess))
+            return false;
+    }
+    else if (!hasAccess(user, { roles: Object.keys(entity.access?.write ?? {}) })) {
         return false;
+    }
     const row = await createEntityExecutor(entityType, entity).executor.detail({ id: entityId }, user, db);
     return row !== null && userCanWriteFieldRow(user, entity.access?.write, row, row);
 }

package/dist/managed-pages/screens/branding-screen.js

@@ -56,7 +56,7 @@ export function createBrandingSettingsScreen(opts) {
                 reason: "is_business_data",
             }),
             logoFile: createImageField({
-                accept: ["image/png", "image/jpeg", "image/webp"],
+                accept: ["png", "jpg", "jpeg", "webp"],
                 personal: false,
                 reason: "is_business_data",
             }),

package/dist/user-data-rights/web/i18n.js

@@ -17,6 +17,10 @@ export const USER_DATA_RIGHTS_I18N = {
     },
     "user-data-rights:entity:export-job:field:userId": { en: "User" },
     "user-data-rights:entity:export-job:field:status": { en: "Status" },
+    "user-data-rights:entity:export-job:field:status:option:pending": { en: "Pending" },
+    "user-data-rights:entity:export-job:field:status:option:running": { en: "Running" },
+    "user-data-rights:entity:export-job:field:status:option:done": { en: "Done" },
+    "user-data-rights:entity:export-job:field:status:option:failed": { en: "Failed" },
     "user-data-rights:entity:export-job:field:requestedAt": { en: "Requested" },
     "user-data-rights:entity:export-job:field:completedAt": { en: "Completed" },
     "user-data-rights:entity:export-job:field:expiresAt": { en: "Expires" },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-bundled-features",
-  "version": "0.400.0",
+  "version": "0.401.0",
   "description": "Built-in features — tenant, user, auth, delivery. The stuff you'd rewrite anyway, already typed.",
   "license": "MIT",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -570,9 +570,9 @@
     }
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-framework": "0.400.0",
-    "@cosmicdrift/kumiko-renderer": "0.400.0",
-    "@cosmicdrift/kumiko-types": "0.400.0",
+    "@cosmicdrift/kumiko-framework": "0.401.0",
+    "@cosmicdrift/kumiko-renderer": "0.401.0",
+    "@cosmicdrift/kumiko-types": "0.401.0",
     "@mollie/api-client": "^4.5.0",
     "@node-rs/argon2": "^2.0.2",
     "@tiptap/core": "^3.31.3",
@@ -1166,17 +1166,17 @@
   ],
   "devDependencies": {
     "@testing-library/user-event": "^14.6.8",
-    "@cosmicdrift/kumiko-locale-de": "0.400.0",
-    "@cosmicdrift/kumiko-locale-es": "0.400.0",
-    "@cosmicdrift/kumiko-locale-fr": "0.400.0",
-    "@cosmicdrift/kumiko-locale-it": "0.400.0",
-    "@cosmicdrift/kumiko-renderer-mail-html": "0.400.0",
+    "@cosmicdrift/kumiko-locale-de": "0.401.0",
+    "@cosmicdrift/kumiko-locale-es": "0.401.0",
+    "@cosmicdrift/kumiko-locale-fr": "0.401.0",
+    "@cosmicdrift/kumiko-locale-it": "0.401.0",
+    "@cosmicdrift/kumiko-renderer-mail-html": "0.401.0",
     "jsqr": "^1.4.0",
     "unpdf": "^1.8.1",
-    "@cosmicdrift/kumiko-testing": "0.400.0"
+    "@cosmicdrift/kumiko-testing": "0.401.0"
   },
   "peerDependencies": {
-    "@cosmicdrift/kumiko-testing": "0.400.0"
+    "@cosmicdrift/kumiko-testing": "0.401.0"
   },
   "peerDependenciesMeta": {
     "@cosmicdrift/kumiko-testing": {