@cosmicdrift/kumiko-bundled-features 0.404.0 → 0.404.1

package/dist/auth-email-password/web/auth-gate.js

@@ -29,6 +29,7 @@ export function createLoginRoute(opts = {}) {
     const LoginComponent = opts.loginScreen ?? LoginScreen;
     const MfaVerifyComponent = opts.mfaVerifyScreen;
     const MfaSetupComponent = opts.mfaSetupScreen;
+    // biome-ignore lint/correctness/noComponentHookFactories: setup-time factory (module scope or makeAuthGate); the route takes no props, so opts are bound here
     function LoginRoute() {
         const { status, refresh, bootstrapFailure, logout } = useSession();
         const { onAuthenticated } = opts;
@@ -107,6 +108,7 @@ function resolveLoginRedirectOrNull(loginUrl, locale, location) {
         return resolveLoginRedirect(loginUrl, locale, location);
     }
     catch (error) {
+        // biome-ignore lint/suspicious/noConsole: the browser console is the only place a broken loginUrl builder shows up, the visitor just sees the built-in login
         console.error("Auth gate: loginUrl could not be resolved, showing the built-in login", error);
         return null;
     }
@@ -116,6 +118,7 @@ export function makeAuthGate(opts = {}) {
     if (typeof loginUrl === "string")
         assertNavigableUrl(loginUrl, "loginUrl");
     const LoginRoute = createLoginRoute(opts);
+    // biome-ignore lint/correctness/noComponentHookFactories: setup-time factory (makeSessionAuthGate or an app's mount function); gates only receive children, so opts are bound here
     function AuthGate({ children }) {
         const { status } = useSession();
         const locale = useLocale().locale();
@@ -145,6 +148,7 @@ export function makeSessionAuthGate(opts = {}) {
     if (postLogoutUrl !== undefined)
         assertNavigableUrl(postLogoutUrl, "postLogoutUrl");
     const AuthGate = makeAuthGate(opts);
+    // biome-ignore lint/correctness/noComponentHookFactories: setup-time factory, called once per emailPasswordClient(); gates only receive children, so opts are bound here
     function SessionAuthGate({ children }) {
         return (_jsx(SessionProvider, { postLogoutUrl: postLogoutUrl, children: _jsx(AuthGate, { children: children }) }));
     }

package/dist/inbound-mail-foundation/handlers/thread-rollup.js

@@ -70,6 +70,7 @@ export async function appendThreadRollup(ctx, input) {
         // @cast-boundary engine-payload — eigene events, shape via defineEvent
         const previousThread = lastThreadEvent?.payload;
         const previousLastAt = previousThread?.lastMessageAtIso ?? "";
+        // biome-ignore lint/complexity/useMathMinMax: ISO strings compare lexicographically; Math.max would coerce them to NaN
         const newLastAt = receivedAtIso > previousLastAt ? receivedAtIso : previousLastAt;
         const messageCount = await countWhere(threadRollupRunner, inboundMessagesProjectionTable, {
             tenantId,

package/dist/template-resolver/document-sanitizer.js

@@ -131,8 +131,9 @@ export function withParsedDocument(html, read) {
         return read(parsed.body);
     }
     finally {
-        window.happyDOM.abort();
-        window.happyDOM.close();
+        // The window is never reused, so this sync API need not await the teardown promises.
+        void window.happyDOM.abort();
+        void window.happyDOM.close();
     }
 }
 function scanDocumentHtml(html) {

package/dist/template-resolver/web/collection-entry-create-form.js

@@ -11,6 +11,7 @@ const SLUG_INVALID_ISSUE = {
 // `tenantId` is the plugin's SystemAdmin tenant, the one the collection tree lists, so a new entry
 // lands where the tree looks. Same rule as the tree: per-user collections stay on the session tenant.
 export function createCollectionEntryCreateForm(tenantId) {
+    // biome-ignore lint/correctness/noComponentHookFactories: setup-time factory, called once per templateResolverClient(); the resolver slot only passes target/onClose, so tenantId is bound here
     return function BoundCollectionEntryCreateForm(props) {
         return _jsx(CollectionEntryCreateForm, { ...props, tenantId: tenantId });
     };

package/dist/user-data-rights/web/public-deletion-gate.js

@@ -4,6 +4,7 @@ import { RequestAccountDeletionScreen } from "./request-deletion-screen.js";
 const centeredShell = (screen) => (_jsx("div", { className: "min-h-screen flex items-center justify-center bg-background px-4", children: screen }));
 export function makePublicDeletionGate(routes) {
     const shell = routes.shell ?? centeredShell;
+    // biome-ignore lint/correctness/noComponentHookFactories: setup-time factory, called once per userDataRightsClient(); gates only receive children, so routes are bound here
     function PublicDeletionGate({ children }) {
         const path = window.location.pathname;
         if (path === routes.requestPath)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-bundled-features",
-  "version": "0.404.0",
+  "version": "0.404.1",
   "description": "Built-in features — tenant, user, auth, delivery. The stuff you'd rewrite anyway, already typed.",
   "license": "MIT",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -570,41 +570,41 @@
     }
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-framework": "0.404.0",
-    "@cosmicdrift/kumiko-renderer": "0.404.0",
-    "@cosmicdrift/kumiko-types": "0.404.0",
-    "@mollie/api-client": "^4.5.0",
-    "@node-rs/argon2": "^2.0.2",
-    "@tiptap/core": "^3.31.3",
-    "@tiptap/extension-link": "^3.31.3",
-    "@tiptap/extension-list": "^3.31.3",
-    "@tiptap/extension-table": "^3.31.3",
-    "@tiptap/html": "^3.31.3",
-    "@tiptap/extensions": "^3.31.3",
-    "@tiptap/pm": "^3.31.3",
-    "@tiptap/react": "^3.31.3",
-    "@tiptap/starter-kit": "^3.31.3",
-    "@types/mailparser": "^3.4.6",
-    "@types/qrcode": "^1.5.5",
+    "@cosmicdrift/kumiko-framework": "0.404.1",
+    "@cosmicdrift/kumiko-renderer": "0.404.1",
+    "@cosmicdrift/kumiko-types": "0.404.1",
+    "@mollie/api-client": "^4.6.0",
+    "@node-rs/argon2": "^2.2.2",
+    "@tiptap/core": "^3.32.1",
+    "@tiptap/extension-link": "^3.32.1",
+    "@tiptap/extension-list": "^3.32.1",
+    "@tiptap/extension-table": "^3.32.1",
+    "@tiptap/html": "^3.32.1",
+    "@tiptap/extensions": "^3.32.1",
+    "@tiptap/pm": "^3.32.1",
+    "@tiptap/react": "^3.32.1",
+    "@tiptap/starter-kit": "^3.32.1",
+    "@types/mailparser": "^3.9.0",
+    "@types/qrcode": "^1.5.6",
     "clsx": "^2.1.1",
     "happy-dom": "^21.0.4",
     "hono": "^4.13.14",
     "imapflow": "^1.7.8",
-    "ioredis": "^5.10.1",
-    "jose": "^6.2.13",
-    "lucide-react": "^1.14.0",
-    "mailparser": "^3.12.4",
-    "marked": "^18.0.3",
-    "nodemailer": "^10.2.1",
+    "ioredis": "^5.11.1",
+    "jose": "^6.2.14",
+    "lucide-react": "^1.65.0",
+    "mailparser": "^3.14.1",
+    "marked": "^18.1.2",
+    "nodemailer": "^10.3.1",
     "pdf-lib": "^1.17.1",
     "qrcode": "^1.5.4",
-    "react": "^19.2.6",
-    "react-dom": "^19.2.6",
+    "react": "^19.3.1",
+    "react-dom": "^19.3.1",
     "sharp": "^0.35.5",
     "stripe": "^22.6.2",
-    "tailwind-merge": "^3.6.0",
+    "tailwind-merge": "^3.7.0",
     "temporal-polyfill": "^0.3.2",
-    "uuid": "^14.0.0",
+    "uuid": "^14.0.3",
     "zod": "^4.6.7"
   },
   "publishConfig": {
@@ -1166,17 +1166,17 @@
   ],
   "devDependencies": {
     "@testing-library/user-event": "^14.6.8",
-    "@cosmicdrift/kumiko-locale-de": "0.404.0",
-    "@cosmicdrift/kumiko-locale-es": "0.404.0",
-    "@cosmicdrift/kumiko-locale-fr": "0.404.0",
-    "@cosmicdrift/kumiko-locale-it": "0.404.0",
-    "@cosmicdrift/kumiko-renderer-mail-html": "0.404.0",
+    "@cosmicdrift/kumiko-locale-de": "0.404.1",
+    "@cosmicdrift/kumiko-locale-es": "0.404.1",
+    "@cosmicdrift/kumiko-locale-fr": "0.404.1",
+    "@cosmicdrift/kumiko-locale-it": "0.404.1",
+    "@cosmicdrift/kumiko-renderer-mail-html": "0.404.1",
     "jsqr": "^1.4.0",
-    "unpdf": "^1.8.1",
-    "@cosmicdrift/kumiko-testing": "0.404.0"
+    "unpdf": "^1.9.1",
+    "@cosmicdrift/kumiko-testing": "0.404.1"
   },
   "peerDependencies": {
-    "@cosmicdrift/kumiko-testing": "0.404.0"
+    "@cosmicdrift/kumiko-testing": "0.404.1"
   },
   "peerDependenciesMeta": {
     "@cosmicdrift/kumiko-testing": {

package/src/documents/changes.json

@@ -0,0 +1,8 @@
+[
+  {
+    "version": "0.404.1",
+    "type": "fix",
+    "title": "Documents recipe has a README and gen-sample-index rejects a primarySample without one",
+    "detail": "feature-reference linked to /en/samples/recipes-documents/, a page the docs site never generated because the recipe had no README.md. The README is added, and gen-sample-index aborts with the feature, the sample and the fix when a primarySample from sample-index.overrides.json has no README.md."
+  }
+]