@cosmicdrift/kumiko-bundled-features 0.403.0 → 0.404.1

package/dist/audit/feature.js

@@ -43,7 +43,7 @@ export function createAuditFeature() {
         }));
         r.job({
             name: "escape-hatch-retention",
-            trigger: { cron: "30 3 * * *" },
+            trigger: { maintenance: true },
             concurrency: "skip",
             // pruneEvents needs a transaction-capable connection, which only unsafeRaw() hands a job.
             escapeHatch: {

package/dist/auth-email-password/web/auth-gate.js

@@ -29,6 +29,7 @@ export function createLoginRoute(opts = {}) {
     const LoginComponent = opts.loginScreen ?? LoginScreen;
     const MfaVerifyComponent = opts.mfaVerifyScreen;
     const MfaSetupComponent = opts.mfaSetupScreen;
+    // biome-ignore lint/correctness/noComponentHookFactories: setup-time factory (module scope or makeAuthGate); the route takes no props, so opts are bound here
     function LoginRoute() {
         const { status, refresh, bootstrapFailure, logout } = useSession();
         const { onAuthenticated } = opts;
@@ -107,6 +108,7 @@ function resolveLoginRedirectOrNull(loginUrl, locale, location) {
         return resolveLoginRedirect(loginUrl, locale, location);
     }
     catch (error) {
+        // biome-ignore lint/suspicious/noConsole: the browser console is the only place a broken loginUrl builder shows up, the visitor just sees the built-in login
         console.error("Auth gate: loginUrl could not be resolved, showing the built-in login", error);
         return null;
     }
@@ -116,6 +118,7 @@ export function makeAuthGate(opts = {}) {
     if (typeof loginUrl === "string")
         assertNavigableUrl(loginUrl, "loginUrl");
     const LoginRoute = createLoginRoute(opts);
+    // biome-ignore lint/correctness/noComponentHookFactories: setup-time factory (makeSessionAuthGate or an app's mount function); gates only receive children, so opts are bound here
     function AuthGate({ children }) {
         const { status } = useSession();
         const locale = useLocale().locale();
@@ -145,6 +148,7 @@ export function makeSessionAuthGate(opts = {}) {
     if (postLogoutUrl !== undefined)
         assertNavigableUrl(postLogoutUrl, "postLogoutUrl");
     const AuthGate = makeAuthGate(opts);
+    // biome-ignore lint/correctness/noComponentHookFactories: setup-time factory, called once per emailPasswordClient(); gates only receive children, so opts are bound here
     function SessionAuthGate({ children }) {
         return (_jsx(SessionProvider, { postLogoutUrl: postLogoutUrl, children: _jsx(AuthGate, { children: children }) }));
     }

package/dist/data-retention/feature.js

@@ -41,7 +41,7 @@ export function createDataRetentionFeature() {
         // retention rules are configured but never enforced.
         r.job({
             name: "retention-cleanup",
-            trigger: { cron: "0 3 * * *" },
+            trigger: { maintenance: true },
             perTenant: true,
             concurrency: "skip",
             escapeHatch: {

package/dist/delivery/feature.js

@@ -125,7 +125,7 @@ export function createDeliveryFeature(options) {
         if (attemptLogRetentionDays !== undefined) {
             r.job({
                 name: DeliveryJobNames.attemptLogRetention,
-                trigger: { cron: "15 3 * * *" },
+                trigger: { maintenance: true },
                 concurrency: "skip",
                 escapeHatch: { reason: ATTEMPT_LOG_RETENTION_ESCAPE_HATCH_REASON },
                 handler: async (_payload, ctx) => {

package/dist/feature-toggles/toggle-sync-signal.d.ts

@@ -3,5 +3,5 @@ import type { ToggleSyncSignal } from "./toggle-runtime.ts";
 export type RedisToggleSyncSignal = ToggleSyncSignal & {
     close(): Promise<void>;
 };
-export declare function createRedisToggleSyncSignal(redisUrl: string, clientOptions?: RedisClientOptions, channelPrefix?: string): RedisToggleSyncSignal;
+export declare function createRedisToggleSyncSignal(redisUrl: string, clientOptions?: RedisClientOptions, channelPrefix?: string, channelSubscribePattern?: string | undefined): RedisToggleSyncSignal;
 export declare function createCacheSyncToggleSignal(bus: CacheSyncBus): ToggleSyncSignal;

package/dist/feature-toggles/toggle-sync-signal.js

@@ -1,4 +1,4 @@
-import { CACHE_SYNC_TOPICS, createRedisPubSubSignal, redisChannelPrefixFromEnv, } from "@cosmicdrift/kumiko-framework/redis";
+import { CACHE_SYNC_TOPICS, createRedisPubSubSignal, redisChannelPrefixFromEnv, redisNamespaceFromEnv, } from "@cosmicdrift/kumiko-framework/redis";
 import { isPlainObject } from "@cosmicdrift/kumiko-types/type-guards";
 // Single fixed channel — unlike the SSE broker there's no per-tenant/
 // per-user variance to multiplex, every toggle flip is global.
@@ -13,11 +13,11 @@ function isTogglePayload(value) {
 // the shared cursor's toggle-set event would ever learn about a flip.
 // Standalone Redis transport for callers that want their own connections;
 // createFeatureToggleRuntime builds a cache-sync-bus signal by default.
-export function createRedisToggleSyncSignal(redisUrl, clientOptions, channelPrefix = redisChannelPrefixFromEnv()) {
+export function createRedisToggleSyncSignal(redisUrl, clientOptions, channelPrefix = redisChannelPrefixFromEnv(), channelSubscribePattern = redisNamespaceFromEnv().channelSubscribePattern) {
     const toggleSyncChannel = `${channelPrefix}${TOGGLE_SYNC_CHANNEL_NAME}`;
     const signal = createRedisPubSubSignal({
         redisUrl,
-        channelPattern: toggleSyncChannel,
+        channelPattern: channelSubscribePattern ?? toggleSyncChannel,
         label: "feature-toggles",
         ...(clientOptions ? { clientOptions } : {}),
     });
@@ -26,7 +26,10 @@ export function createRedisToggleSyncSignal(redisUrl, clientOptions, channelPref
             signal.publish(toggleSyncChannel, { featureName, enabled });
         },
         onMessage(listener) {
-            signal.onMessage((_channel, payload) => {
+            signal.onMessage((channel, payload) => {
+                // skip: a wide subscribe pattern also delivers other features' channels
+                if (channel !== toggleSyncChannel)
+                    return;
                 if (!isTogglePayload(payload)) {
                     // biome-ignore lint/suspicious/noConsole: ops-visible fallback — no ctx.obs.log in a raw PubSubSignal handler.
                     console.error(`[kumiko:feature-toggles] dropping malformed cache-sync message on "${toggleSyncChannel}"`);

package/dist/form-draft/feature.js

@@ -34,7 +34,7 @@ function registerFormDraft(r) {
     r.config({ keys: { retentionDays: formDraftRetentionDaysConfig } });
     r.job({
         name: "cleanup",
-        trigger: { cron: "0 3 * * *" },
+        trigger: { maintenance: true },
         concurrency: "skip",
         escapeHatch: { reason: CLEANUP_ESCAPE_HATCH_REASON },
         handler: (payload, ctx) => cleanupDraftsJob(payload, ctx, ctx.db.unsafeRaw()),

package/dist/inbound-mail-foundation/handlers/thread-rollup.js

@@ -70,6 +70,7 @@ export async function appendThreadRollup(ctx, input) {
         // @cast-boundary engine-payload — eigene events, shape via defineEvent
         const previousThread = lastThreadEvent?.payload;
         const previousLastAt = previousThread?.lastMessageAtIso ?? "";
+        // biome-ignore lint/complexity/useMathMinMax: ISO strings compare lexicographically; Math.max would coerce them to NaN
         const newLastAt = receivedAtIso > previousLastAt ? receivedAtIso : previousLastAt;
         const messageCount = await countWhere(threadRollupRunner, inboundMessagesProjectionTable, {
             tenantId,

package/dist/inbound-mail-foundation/retention-job.js

@@ -10,7 +10,7 @@ export function registerInboundMailRetentionJob(r) {
     const INBOUND_MAIL_RETENTION_REASON = "inbound-mail retention runs raw deletes; every statement filters by this run's tenantId";
     r.job({
         name: "inbound-mail-retention",
-        trigger: { cron: "0 3 * * *" },
+        trigger: { maintenance: true },
         perTenant: true,
         concurrency: "skip",
         escapeHatch: { reason: INBOUND_MAIL_RETENTION_REASON },

package/dist/jobs/feature.js

@@ -65,13 +65,12 @@ export function createJobsFeature(options = {}) {
         }, reindexEntityJob);
         // store_job_runs/store_job_run_logs are direct-write, unbounded-growth
         // stores — nothing else purges them.
-        r.job("retention-cleanup", { trigger: { cron: "0 3 * * *" }, concurrency: "skip" }, createRetentionCleanupJob(retentionDays));
+        r.job("retention-cleanup", { trigger: { maintenance: true }, concurrency: "skip" }, createRetentionCleanupJob(retentionDays));
         // Sweeps store_job_runs for rows stuck at status "running" past the
-        // timeout. Hourly matches the timeout's own granularity —
-        // frequent enough to catch a stuck run soon after it crosses the
-        // threshold, cheap enough that an (almost always empty) result set
-        // doesn't matter.
-        r.job("stale-run-sweep", { trigger: { cron: "0 * * * *" }, concurrency: "skip" }, createStaleRunSweepJob(staleRunTimeoutHours, retentionDays));
+        // timeout. Runs in the maintenance window: the timeout is
+        // hours, so a daily pass finds a stuck run at most a day late and a sleeping
+        // app is not woken every hour for it.
+        r.job("stale-run-sweep", { trigger: { maintenance: true }, concurrency: "skip" }, createStaleRunSweepJob(staleRunTimeoutHours, retentionDays));
         const handlers = {
             trigger: r.writeHandler(triggerWrite),
             retry: r.writeHandler(retryWrite),

package/dist/template-resolver/document-sanitizer.js

@@ -131,8 +131,9 @@ export function withParsedDocument(html, read) {
         return read(parsed.body);
     }
     finally {
-        window.happyDOM.abort();
-        window.happyDOM.close();
+        // The window is never reused, so this sync API need not await the teardown promises.
+        void window.happyDOM.abort();
+        void window.happyDOM.close();
     }
 }
 function scanDocumentHtml(html) {

package/dist/template-resolver/web/collection-entry-create-form.js

@@ -11,6 +11,7 @@ const SLUG_INVALID_ISSUE = {
 // `tenantId` is the plugin's SystemAdmin tenant, the one the collection tree lists, so a new entry
 // lands where the tree looks. Same rule as the tree: per-user collections stay on the session tenant.
 export function createCollectionEntryCreateForm(tenantId) {
+    // biome-ignore lint/correctness/noComponentHookFactories: setup-time factory, called once per templateResolverClient(); the resolver slot only passes target/onClose, so tenantId is bound here
     return function BoundCollectionEntryCreateForm(props) {
         return _jsx(CollectionEntryCreateForm, { ...props, tenantId: tenantId });
     };

package/dist/user-data-rights/feature.js

@@ -416,13 +416,13 @@ export function createUserDataRightsFeature(opts = {}) {
         r.metric(EXPORT_CLEANUP_LAST_RUN_TIMESTAMP_METRIC, {
             type: "gauge",
             unit: "seconds",
-            description: "Unix timestamp of the last export storage-cleanup pass that completed. Alert on time() minus this value exceeding the cron interval plus a buffer; the backlog-age gauge alone stays at its last value when the cron stops.",
+            description: "Unix timestamp of the last export storage-cleanup pass that completed. Alert on time() minus this value exceeding one day plus a buffer; the backlog-age gauge alone stays at its last value when the cron stops.",
         });
         // Worker for the asynchronous export pipeline, triggered by a cron job.
         const RUN_EXPORT_JOBS_REASON = "processes pending export jobs across every tenant";
         r.job({
             name: "run-export-jobs",
-            trigger: { cron: "0 3 * * *" },
+            trigger: { maintenance: true },
             concurrency: "skip",
             escapeHatch: { reason: RUN_EXPORT_JOBS_REASON },
             handler: async (_payload, ctx) => {
@@ -509,7 +509,7 @@ export function createUserDataRightsFeature(opts = {}) {
         const RUN_FORGET_CLEANUP_REASON = "executes overdue Art.17 forget requests across every tenant";
         r.job({
             name: "run-forget-cleanup",
-            trigger: { cron: "0 3 * * *" },
+            trigger: { maintenance: true },
             concurrency: "skip",
             escapeHatch: { reason: RUN_FORGET_CLEANUP_REASON },
             handler: async (_payload, ctx) => {

package/dist/user-data-rights/web/public-deletion-gate.js

@@ -4,6 +4,7 @@ import { RequestAccountDeletionScreen } from "./request-deletion-screen.js";
 const centeredShell = (screen) => (_jsx("div", { className: "min-h-screen flex items-center justify-center bg-background px-4", children: screen }));
 export function makePublicDeletionGate(routes) {
     const shell = routes.shell ?? centeredShell;
+    // biome-ignore lint/correctness/noComponentHookFactories: setup-time factory, called once per userDataRightsClient(); gates only receive children, so routes are bound here
     function PublicDeletionGate({ children }) {
         const path = window.location.pathname;
         if (path === routes.requestPath)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-bundled-features",
-  "version": "0.403.0",
+  "version": "0.404.1",
   "description": "Built-in features — tenant, user, auth, delivery. The stuff you'd rewrite anyway, already typed.",
   "license": "MIT",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -570,41 +570,41 @@
     }
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-framework": "0.403.0",
-    "@cosmicdrift/kumiko-renderer": "0.403.0",
-    "@cosmicdrift/kumiko-types": "0.403.0",
-    "@mollie/api-client": "^4.5.0",
-    "@node-rs/argon2": "^2.0.2",
-    "@tiptap/core": "^3.31.3",
-    "@tiptap/extension-link": "^3.31.3",
-    "@tiptap/extension-list": "^3.31.3",
-    "@tiptap/extension-table": "^3.31.3",
-    "@tiptap/html": "^3.31.3",
-    "@tiptap/extensions": "^3.31.3",
-    "@tiptap/pm": "^3.31.3",
-    "@tiptap/react": "^3.31.3",
-    "@tiptap/starter-kit": "^3.31.3",
-    "@types/mailparser": "^3.4.6",
-    "@types/qrcode": "^1.5.5",
+    "@cosmicdrift/kumiko-framework": "0.404.1",
+    "@cosmicdrift/kumiko-renderer": "0.404.1",
+    "@cosmicdrift/kumiko-types": "0.404.1",
+    "@mollie/api-client": "^4.6.0",
+    "@node-rs/argon2": "^2.2.2",
+    "@tiptap/core": "^3.32.1",
+    "@tiptap/extension-link": "^3.32.1",
+    "@tiptap/extension-list": "^3.32.1",
+    "@tiptap/extension-table": "^3.32.1",
+    "@tiptap/html": "^3.32.1",
+    "@tiptap/extensions": "^3.32.1",
+    "@tiptap/pm": "^3.32.1",
+    "@tiptap/react": "^3.32.1",
+    "@tiptap/starter-kit": "^3.32.1",
+    "@types/mailparser": "^3.9.0",
+    "@types/qrcode": "^1.5.6",
     "clsx": "^2.1.1",
     "happy-dom": "^21.0.4",
     "hono": "^4.13.14",
     "imapflow": "^1.7.8",
-    "ioredis": "^5.10.1",
-    "jose": "^6.2.13",
-    "lucide-react": "^1.14.0",
-    "mailparser": "^3.12.4",
-    "marked": "^18.0.3",
-    "nodemailer": "^10.2.1",
+    "ioredis": "^5.11.1",
+    "jose": "^6.2.14",
+    "lucide-react": "^1.65.0",
+    "mailparser": "^3.14.1",
+    "marked": "^18.1.2",
+    "nodemailer": "^10.3.1",
     "pdf-lib": "^1.17.1",
     "qrcode": "^1.5.4",
-    "react": "^19.2.6",
-    "react-dom": "^19.2.6",
+    "react": "^19.3.1",
+    "react-dom": "^19.3.1",
     "sharp": "^0.35.5",
     "stripe": "^22.6.2",
-    "tailwind-merge": "^3.6.0",
+    "tailwind-merge": "^3.7.0",
     "temporal-polyfill": "^0.3.2",
-    "uuid": "^14.0.0",
+    "uuid": "^14.0.3",
     "zod": "^4.6.7"
   },
   "publishConfig": {
@@ -1166,17 +1166,17 @@
   ],
   "devDependencies": {
     "@testing-library/user-event": "^14.6.8",
-    "@cosmicdrift/kumiko-locale-de": "0.403.0",
-    "@cosmicdrift/kumiko-locale-es": "0.403.0",
-    "@cosmicdrift/kumiko-locale-fr": "0.403.0",
-    "@cosmicdrift/kumiko-locale-it": "0.403.0",
-    "@cosmicdrift/kumiko-renderer-mail-html": "0.403.0",
+    "@cosmicdrift/kumiko-locale-de": "0.404.1",
+    "@cosmicdrift/kumiko-locale-es": "0.404.1",
+    "@cosmicdrift/kumiko-locale-fr": "0.404.1",
+    "@cosmicdrift/kumiko-locale-it": "0.404.1",
+    "@cosmicdrift/kumiko-renderer-mail-html": "0.404.1",
     "jsqr": "^1.4.0",
-    "unpdf": "^1.8.1",
-    "@cosmicdrift/kumiko-testing": "0.403.0"
+    "unpdf": "^1.9.1",
+    "@cosmicdrift/kumiko-testing": "0.404.1"
   },
   "peerDependencies": {
-    "@cosmicdrift/kumiko-testing": "0.403.0"
+    "@cosmicdrift/kumiko-testing": "0.404.1"
   },
   "peerDependenciesMeta": {
     "@cosmicdrift/kumiko-testing": {

package/src/documents/changes.json

@@ -0,0 +1,8 @@
+[
+  {
+    "version": "0.404.1",
+    "type": "fix",
+    "title": "Documents recipe has a README and gen-sample-index rejects a primarySample without one",
+    "detail": "feature-reference linked to /en/samples/recipes-documents/, a page the docs site never generated because the recipe had no README.md. The README is added, and gen-sample-index aborts with the feature, the sample and the fix when a primarySample from sample-index.overrides.json has no README.md."
+  }
+]

package/src/feature-toggles/changes.json

@@ -1,4 +1,10 @@
 [
+  {
+    "version": "0.404.0",
+    "type": "improvement",
+    "title": "Feature-toggle Redis signal follows KUMIKO_REDIS_PREFIX",
+    "detail": "createRedisToggleSyncSignal takes an optional channelSubscribePattern (default from KUMIKO_REDIS_PREFIX) and ignores messages from other channels, which a prefix-wide subscription delivers."
+  },
   {
     "version": "0.365.0",
     "type": "fix",

package/src/jobs/changes.json

@@ -1,4 +1,10 @@
 [
+  {
+    "version": "0.404.0",
+    "type": "improvement",
+    "title": "Cleanup jobs run once a day in the maintenance window",
+    "detail": "jobs (stale-run-sweep, hourly before, and retention-cleanup), user-data-rights (export and forget), data-retention, audit escape-hatch-retention, inbound-mail retention, delivery attempt-log-retention and form-draft cleanup use trigger { maintenance: true } instead of 03:00 to 03:30 and hourly crons. Without KUMIKO_MAINTENANCE_WINDOW they all run at 03:00 UTC. A stuck job run is now marked failed at most a day after it crosses the stale timeout."
+  },
   {
     "version": "0.394.0",
     "type": "fix",