@cosmicdrift/kumiko-samples 0.341.0 → 0.342.0

package/packages/bundled-features/src/auth-mfa/web/mfa-setup-preauth-screen.tsx

@@ -164,106 +164,104 @@ export function MfaSetupPreauthScreen({
       title={title ?? t("auth.mfa.setup.title")}
       subtitle={subtitle ?? t("auth.mfa.setup.subtitle")}
     >
-      <div className="p-6 pt-0 flex flex-col gap-4">
-        {error !== null ? (
-          <Banner variant="error">
-            {error === "too_many_attempts" && retryAfterSeconds !== null
-              ? t("auth.mfa.errors.tooManyAttemptsWithSeconds", { seconds: retryAfterSeconds })
-              : t(reasonToKey(error))}
-          </Banner>
-        ) : null}
+      {error !== null ? (
+        <Banner variant="error">
+          {error === "too_many_attempts" && retryAfterSeconds !== null
+            ? t("auth.mfa.errors.tooManyAttemptsWithSeconds", { seconds: retryAfterSeconds })
+            : t(reasonToKey(error))}
+        </Banner>
+      ) : null}
 
-        {!setup && (
+      {!setup && (
+        <Section
+          testId="mfa-setup-preauth-intro"
+          actions={
+            <Button
+              variant="primary"
+              onClick={() => void startSetup()}
+              loading={busy}
+              disabled={busy}
+            >
+              {t("auth.mfa.setup.start")}
+            </Button>
+          }
+        >
+          <span className="text-sm text-muted-foreground">{t("auth.mfa.setup.intro")}</span>
+        </Section>
+      )}
+
+      {setup && (
+        <Form onSubmit={onSubmit}>
           <Section
-            testId="mfa-setup-preauth-intro"
+            testId="mfa-setup-preauth-setup"
             actions={
               <Button
+                type="submit"
                 variant="primary"
-                onClick={() => void startSetup()}
                 loading={busy}
-                disabled={busy}
+                disabled={busy || !acknowledged || code.length !== 6}
               >
-                {t("auth.mfa.setup.start")}
+                {t("auth.mfa.setup.confirm")}
               </Button>
             }
           >
-            <span className="text-sm text-muted-foreground">{t("auth.mfa.setup.intro")}</span>
-          </Section>
-        )}
+            <div className="flex flex-col items-center gap-2 text-center">
+              <span className="text-sm font-semibold">{t("auth.mfa.enable.scanTitle")}</span>
+              {/* qrcode's own SVG string output, not user input — safe to inline */}
+              <div
+                className="h-40 w-40"
+                // biome-ignore lint/security/noDangerouslySetInnerHtml: qrcode-generated SVG, no user input
+                dangerouslySetInnerHTML={{ __html: setup.qrSvg }}
+              />
+              <span className="text-xs text-muted-foreground">
+                {t("auth.mfa.enable.manualEntry")}
+              </span>
+              <code className="inline-block break-all rounded bg-muted px-3 py-2 font-mono text-sm">
+                {setup.secretParam}
+              </code>
+            </div>
 
-        {setup && (
-          <Form onSubmit={onSubmit}>
-            <Section
-              testId="mfa-setup-preauth-setup"
-              actions={
-                <Button
-                  type="submit"
-                  variant="primary"
-                  loading={busy}
-                  disabled={busy || !acknowledged || code.length !== 6}
-                >
-                  {t("auth.mfa.setup.confirm")}
-                </Button>
-              }
-            >
-              <div className="flex flex-col items-center gap-2 text-center">
-                <span className="text-sm font-semibold">{t("auth.mfa.enable.scanTitle")}</span>
-                {/* qrcode's own SVG string output, not user input — safe to inline */}
-                <div
-                  className="h-40 w-40"
-                  // biome-ignore lint/security/noDangerouslySetInnerHtml: qrcode-generated SVG, no user input
-                  dangerouslySetInnerHTML={{ __html: setup.qrSvg }}
-                />
-                <span className="text-xs text-muted-foreground">
-                  {t("auth.mfa.enable.manualEntry")}
-                </span>
-                <code className="inline-block break-all rounded bg-muted px-3 py-2 font-mono text-sm">
-                  {setup.secretParam}
-                </code>
-              </div>
-
-              <div className="flex flex-col gap-2">
-                <span className="text-sm font-semibold">{t("auth.mfa.enable.recoveryTitle")}</span>
-                <span className="text-xs text-muted-foreground">
-                  {t("auth.mfa.enable.recoveryHint")}
-                </span>
-                <code className="block whitespace-pre-wrap break-all rounded bg-muted px-3 py-2 font-mono text-sm">
-                  {setup.recoveryCodes.join("\n")}
-                </code>
-                <Field id="mfa-setup-preauth-ack" label={t("auth.mfa.enable.acknowledge")}>
-                  <Input
-                    kind="boolean"
-                    id="mfa-setup-preauth-ack"
-                    name="mfa-setup-preauth-ack"
-                    value={acknowledged}
-                    onChange={setAcknowledged}
-                  />
-                </Field>
-              </div>
-
-              <Field id="mfa-setup-preauth-code" label={t("auth.mfa.enable.code")} required>
+            <div className="flex flex-col gap-2">
+              <span className="text-sm font-semibold">{t("auth.mfa.enable.recoveryTitle")}</span>
+              <span className="text-xs text-muted-foreground">
+                {t("auth.mfa.enable.recoveryHint")}
+              </span>
+              <code className="block whitespace-pre-wrap break-all rounded bg-muted px-3 py-2 font-mono text-sm">
+                {setup.recoveryCodes.join("\n")}
+              </code>
+              <Field id="mfa-setup-preauth-ack" label={t("auth.mfa.enable.acknowledge")}>
                 <Input
-                  kind="text"
-                  id="mfa-setup-preauth-code"
-                  name="mfa-setup-preauth-code"
-                  value={code}
-                  onChange={setCode}
-                  disabled={busy || !acknowledged}
-                  autoComplete="one-time-code"
+                  kind="boolean"
+                  id="mfa-setup-preauth-ack"
+                  name="mfa-setup-preauth-ack"
+                  value={acknowledged}
+                  onChange={setAcknowledged}
                 />
               </Field>
-            </Section>
-          </Form>
-        )}
+            </div>
 
-        {onCancel ? (
-          <div className="flex justify-center">
-            <Button type="button" variant="secondary" onClick={onCancel} disabled={busy}>
-              {t("auth.mfa.verify.backToLogin")}
-            </Button>
-          </div>
-        ) : null}
-      </div>
+            <Field id="mfa-setup-preauth-code" label={t("auth.mfa.enable.code")} required>
+              <Input
+                kind="text"
+                id="mfa-setup-preauth-code"
+                name="mfa-setup-preauth-code"
+                value={code}
+                onChange={setCode}
+                disabled={busy || !acknowledged}
+                autoComplete="one-time-code"
+              />
+            </Field>
+          </Section>
+        </Form>
+      )}
+
+      {onCancel ? (
+        <div className="flex justify-center">
+          <Button type="button" variant="secondary" onClick={onCancel} disabled={busy}>
+            {t("auth.mfa.verify.backToLogin")}
+          </Button>
+        </div>
+      ) : null}
     </AuthCard>
   );
 }

package/packages/bundled-features/src/auth-mfa/web/mfa-verify-screen.tsx

@@ -85,33 +85,31 @@ export function MfaVerifyScreen({
       title={title ?? t("auth.mfa.verify.title")}
       subtitle={subtitle ?? t("auth.mfa.verify.subtitle")}
     >
-      <div className="p-6 pt-0 flex flex-col gap-4">
-        <Form onSubmit={onSubmit}>
-          <Field id="mfa-verify-code" label={t("auth.mfa.verify.code")} required>
-            <Input
-              kind="text"
-              id="mfa-verify-code"
-              name="mfa-verify-code"
-              value={code}
-              onChange={setCode}
-              disabled={submitting}
-              required
-              autoComplete="one-time-code"
-            />
-          </Field>
-          {error !== null ? <Banner variant="error">{t(reasonToKey(error))}</Banner> : null}
-          <Button type="submit" loading={submitting} disabled={submitting}>
-            {submitting
-              ? t("auth.mfa.verify.submitting")
-              : (submitLabel ?? t("auth.mfa.verify.submit"))}
+      <Form onSubmit={onSubmit}>
+        <Field id="mfa-verify-code" label={t("auth.mfa.verify.code")} required>
+          <Input
+            kind="text"
+            id="mfa-verify-code"
+            name="mfa-verify-code"
+            value={code}
+            onChange={setCode}
+            disabled={submitting}
+            required
+            autoComplete="one-time-code"
+          />
+        </Field>
+        {error !== null ? <Banner variant="error">{t(reasonToKey(error))}</Banner> : null}
+        <Button type="submit" loading={submitting} disabled={submitting}>
+          {submitting
+            ? t("auth.mfa.verify.submitting")
+            : (submitLabel ?? t("auth.mfa.verify.submit"))}
+        </Button>
+        {onCancel ? (
+          <Button type="button" variant="secondary" onClick={onCancel} disabled={submitting}>
+            {t("auth.mfa.verify.backToLogin")}
           </Button>
-          {onCancel ? (
-            <Button type="button" variant="secondary" onClick={onCancel} disabled={submitting}>
-              {t("auth.mfa.verify.backToLogin")}
-            </Button>
-          ) : null}
-        </Form>
-      </div>
+        ) : null}
+      </Form>
     </AuthCard>
   );
 }

package/packages/bundled-features/src/channel-email/changes.json

@@ -1,4 +1,10 @@
 [
+  {
+    "version": "0.342.0",
+    "type": "improvement",
+    "title": "EmailMessage.fromName sets the From display name",
+    "detail": "channel-email: fromName sets the display name of the From header\n`EmailMessage` gets an optional `fromName`, and the email channel passes `data.fromName` through like `replyTo`. The SMTP transport combines it with the address of `message.from` or the transport default, so `from: \"App <noreply@x>\"` plus `fromName: \"Tenant via veridom\"` sends from `noreply@x` under the new name. Control characters in the name are replaced by spaces before sending, and an empty name behaves like no name. The PII ciphertext guard refuses a ciphertext `fromName`."
+  },
   {
     "version": "0.335.0",
     "type": "fix",

package/packages/bundled-features/src/channel-email/email-channel.ts

@@ -53,11 +53,13 @@ function listUnsubscribeHeaders(
 
 function emailEnvelopeFrom(data: Readonly<Record<string, unknown>> | undefined): {
   from?: string;
+  fromName?: string;
   replyTo?: string;
   headers?: Readonly<Record<string, string>>;
 } {
   if (!data) return {};
   const from = typeof data["from"] === "string" ? data["from"] : undefined;
+  const fromName = typeof data["fromName"] === "string" ? data["fromName"] : undefined;
   const replyTo = typeof data["replyTo"] === "string" ? data["replyTo"] : undefined;
   const autoHeaders = listUnsubscribeHeaders(data);
   const explicitHeaders = stringHeaders(data["headers"]);
@@ -71,7 +73,12 @@ function emailEnvelopeFrom(data: Readonly<Record<string, unknown>> | undefined):
     (!overridesUnsubscribe && autoHeaders) || explicitHeaders
       ? { ...(overridesUnsubscribe ? undefined : autoHeaders), ...explicitHeaders }
       : undefined;
-  return { ...(from && { from }), ...(replyTo && { replyTo }), ...(headers && { headers }) };
+  return {
+    ...(from && { from }),
+    ...(fromName && { fromName }),
+    ...(replyTo && { replyTo }),
+    ...(headers && { headers }),
+  };
 }
 
 export type EmailChannelOptions = {

package/packages/bundled-features/src/channel-email/pii-guard.ts

@@ -12,16 +12,17 @@ const CIPHERTEXT_RE = /kumiko-pii:v\d+:[^"\s<>\\]*/g;
 // blob); ciphertext in subject/body fails loud in dev and is redacted+logged
 // in prod.
 export function guardEmailMessage(message: EmailMessage): EmailMessage {
-  // Every envelope address, not just `to`: a ciphertext From or Reply-To is
+  // Every envelope address, not just `to`: a ciphertext From, From-Name or Reply-To is
   // the same garbage as a ciphertext recipient — refuse rather than mail it.
   for (const [label, address] of [
-    ["recipient", message.to],
-    ["from", message.from],
-    ["reply-to", message.replyTo],
+    ["recipient address", message.to],
+    ["from address", message.from],
+    ["from name", message.fromName],
+    ["reply-to address", message.replyTo],
   ] as const) {
     if (address?.includes(CIPHERTEXT_MARKER)) {
       throw new Error(
-        `[channel-email] refusing to send: ${label} address is a PII ciphertext ` +
+        `[channel-email] refusing to send: ${label} is a PII ciphertext ` +
           `("${PII_CIPHERTEXT_PREFIX}…") — decrypt the stored value before mailing (decryptStoredPii).`,
       );
     }

package/packages/bundled-features/src/channel-email/smtp-transport.ts

@@ -17,6 +17,7 @@
 // dedizierter Queue (BullMQ + retry) drüberlegen.
 
 import { createTransport, type Transporter } from "nodemailer";
+import addressparser from "nodemailer/lib/addressparser";
 import type { EmailMessage, EmailTransport } from "./types.js";
 
 export type SmtpTransportOptions = {
@@ -48,6 +49,31 @@ export type SmtpTransportOptions = {
   readonly servername?: string;
 };
 
+function isControlCharacter(char: string): boolean {
+  const code = char.charCodeAt(0);
+  return code <= 0x1f || code === 0x7f;
+}
+
+// Control characters in a display name would let a caller inject headers.
+function sanitizedDisplayName(name: string | undefined): string | undefined {
+  const cleaned = name
+    ?.split("")
+    .map((char) => (isControlCharacter(char) ? " " : char))
+    .join("")
+    .trim();
+  return cleaned === undefined || cleaned === "" ? undefined : cleaned;
+}
+
+function fromHeader(
+  address: string,
+  fromName: string | undefined,
+): string | { readonly name: string; readonly address: string } {
+  const name = sanitizedDisplayName(fromName);
+  if (name === undefined) return address;
+  const [parsed] = addressparser(address, { flatten: true });
+  return parsed?.address ? { name, address: parsed.address } : address;
+}
+
 export function createSmtpTransport(options: SmtpTransportOptions): EmailTransport {
   const transporter: Transporter = createTransport({
     host: options.host,
@@ -62,7 +88,7 @@ export function createSmtpTransport(options: SmtpTransportOptions): EmailTranspo
   return {
     async send(message: EmailMessage): Promise<void> {
       await transporter.sendMail({
-        from: message.from ?? options.from,
+        from: fromHeader(message.from ?? options.from, message.fromName),
         to: message.to,
         subject: message.subject,
         html: message.html,

package/packages/bundled-features/src/channel-email/types.ts

@@ -7,6 +7,10 @@ export type EmailMessage = {
   // app-wide default). Set when one send must originate from a specific
   // mailbox — a reply from the address the original mail reached, not noreply@.
   readonly from?: string;
+  // Display name for the From header. Combined with the address of `from`
+  // (or the transport default), so a per-tenant sender name needs no
+  // hand-built "Name <addr>" string.
+  readonly fromName?: string;
   // Reply-To header: where a recipient's answer goes when it differs from From.
   readonly replyTo?: string;
   // Extra RFC-5322 headers — In-Reply-To / References thread a reply into the

package/packages/bundled-features/src/waitlist/changes.json

@@ -1,4 +1,10 @@
 [
+  {
+    "version": "0.342.0",
+    "type": "improvement",
+    "title": "Waitlist notifyRecipient may return a promise",
+    "detail": "Waitlist `notifyRecipient` may return a promise, so apps can read the admin address from config"
+  },
   {
     "version": "0.341.0",
     "type": "improvement",

package/packages/bundled-features/src/waitlist/handlers/submit.write.ts

@@ -140,7 +140,7 @@ export function createSubmitHandler(opts: WaitlistOptions) {
       );
 
       await sendBestEffort(ctx, "admin notice", async (notify) => {
-        const adminRecipient = opts.notifyRecipient?.(ctx);
+        const adminRecipient = await opts.notifyRecipient?.(ctx);
         // skip: no admin recipient configured
         if (!adminRecipient) return;
         await notify(WAITLIST_NOTIFICATION_TYPES.adminNotice, {

package/packages/bundled-features/src/waitlist/options.ts

@@ -17,8 +17,9 @@ export type WaitlistInviteOptions =
 
 export type WaitlistOptions = {
   /** Address for an admin notification mail on each new entry. Null, an empty
-   *  string or an absent option sends none. Best effort, never fails the submit. */
-  readonly notifyRecipient?: (ctx: HandlerContext) => string | null;
+   *  string or an absent option sends none. Best effort, never fails the submit,
+   *  also when the resolver throws or rejects. */
+  readonly notifyRecipient?: (ctx: HandlerContext) => string | null | Promise<string | null>;
   /** Default `{ mode: "own-tenant", role: "TenantAdmin" }`. */
   readonly invite?: WaitlistInviteOptions;
   /** Default: 5 submits per IP per 10 minutes. */

package/samples/apps/use-all-bundled/feature-manifest.json

@@ -55,14 +55,39 @@
       "toggleableDefault": null,
       "requires": [
         "tenant",
-        "user"
+        "user",
+        "config"
       ],
       "optionalRequires": [],
       "configReads": [],
       "exposesApis": [],
       "usesApis": [],
       "extensionsUsed": [],
-      "configKeys": [],
+      "configKeys": [
+        {
+          "key": "escape-hatch-retention-days",
+          "qualifiedName": "audit:config:escape-hatch-retention-days",
+          "type": "number",
+          "scope": "system",
+          "default": 90,
+          "encrypted": false,
+          "computed": false,
+          "validated": false,
+          "options": null,
+          "bounds": {
+            "min": 1
+          },
+          "pattern": null,
+          "writeRoles": [
+            "system"
+          ],
+          "readRoles": [
+            "TenantAdmin",
+            "Admin",
+            "SystemAdmin"
+          ]
+        }
+      ],
       "secrets": [],
       "writeHandlers": [],
       "uiHints": {