@cosmicdrift/kumiko-samples 0.374.0 → 0.378.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-samples",
-  "version": "0.374.0",
+  "version": "0.378.0",
   "description": "Source trees of the Kumiko sample recipes, sample apps and bundled features in repo layout, for tooling such as few-shot corpus builds.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",

package/packages/bundled-features/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-bundled-features",
-  "version": "0.374.0",
+  "version": "0.378.0",
   "description": "Built-in features — tenant, user, auth, delivery. The stuff you'd rewrite anyway, already typed.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -137,6 +137,7 @@
     "./template-resolver/web": "./src/template-resolver/web/index.ts",
     "./renderer-foundation": "./src/renderer-foundation/index.ts",
     "./account-security": "./src/account-security/index.ts",
+    "./account-security/constants": "./src/account-security/constants.ts",
     "./host-routing": "./src/host-routing/index.ts",
     "./legal-pages": "./src/legal-pages/index.ts",
     "./legal-pages/constants": "./src/legal-pages/constants.ts",
@@ -152,11 +153,8 @@
     "./workflow-runner": "./src/workflow-runner/index.ts"
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-dispatcher-live": "workspace:*",
     "@cosmicdrift/kumiko-framework": "workspace:*",
-    "@cosmicdrift/kumiko-headless": "workspace:*",
     "@cosmicdrift/kumiko-renderer": "workspace:*",
-    "@cosmicdrift/kumiko-renderer-web": "workspace:*",
     "@cosmicdrift/kumiko-types": "workspace:*",
     "@mollie/api-client": "^4.5.0",
     "@node-rs/argon2": "^2.0.2",
@@ -656,6 +654,10 @@
         "types": "./dist/account-security/index.d.ts",
         "default": "./dist/account-security/index.js"
       },
+      "./account-security/constants": {
+        "types": "./dist/account-security/constants.d.ts",
+        "default": "./dist/account-security/constants.js"
+      },
       "./host-routing": {
         "types": "./dist/host-routing/index.d.ts",
         "default": "./dist/host-routing/index.js"

package/packages/bundled-features/src/account-security/changes.json

@@ -1,4 +1,10 @@
 [
+  {
+    "version": "0.376.0",
+    "type": "improvement",
+    "title": "Client-safe account-security/constants subpath",
+    "detail": "\"@cosmicdrift/kumiko-bundled-features/account-security/constants\" exports ACCOUNT_SECURITY_FEATURE, the screen id and QN, the nav label and the new ACCOUNT_SECURITY_SCREEN_TITLE_KEY without importing server code."
+  },
   {
     "version": "0.370.0",
     "type": "improvement",

package/packages/bundled-features/src/account-security/constants.ts

@@ -3,4 +3,5 @@
 export const ACCOUNT_SECURITY_FEATURE = "account-security";
 export const ACCOUNT_SECURITY_SCREEN_ID = "account-security";
 export const ACCOUNT_SECURITY_SCREEN_QN = `${ACCOUNT_SECURITY_FEATURE}:screen:${ACCOUNT_SECURITY_SCREEN_ID}`;
+export const ACCOUNT_SECURITY_SCREEN_TITLE_KEY = `screen:${ACCOUNT_SECURITY_SCREEN_ID}.title`;
 export const ACCOUNT_SECURITY_NAV_LABEL = `${ACCOUNT_SECURITY_FEATURE}:nav.accountSecurity`;

package/packages/bundled-features/src/account-security/index.ts

@@ -3,6 +3,7 @@ export {
   ACCOUNT_SECURITY_NAV_LABEL,
   ACCOUNT_SECURITY_SCREEN_ID,
   ACCOUNT_SECURITY_SCREEN_QN,
+  ACCOUNT_SECURITY_SCREEN_TITLE_KEY,
 } from "./constants.ts";
 export {
   type AccountSecurityFeatureOptions,

package/packages/bundled-features/src/admin-shell/web/client-plugin.tsx

@@ -1,6 +1,6 @@
 // @runtime client
 import { mergeTranslations, type TranslationsByLocale } from "@cosmicdrift/kumiko-renderer";
-import type { ClientFeatureDefinition } from "@cosmicdrift/kumiko-renderer-web";
+import type { ClientFeatureDefinition } from "@cosmicdrift/kumiko-renderer/web";
 import { ADMIN_SHELL_FEATURE } from "../constants.ts";
 import { defaultTranslations } from "./i18n.ts";
 

package/packages/bundled-features/src/audit/web/client-plugin.tsx

@@ -1,6 +1,6 @@
 // @runtime client
 import { mergeTranslations, type TranslationsByLocale } from "@cosmicdrift/kumiko-renderer";
-import type { ClientFeatureDefinition } from "@cosmicdrift/kumiko-renderer-web";
+import type { ClientFeatureDefinition } from "@cosmicdrift/kumiko-renderer/web";
 import { AUDIT_FEATURE } from "../constants.ts";
 import { defaultTranslations } from "./i18n.ts";
 

package/packages/bundled-features/src/auth-email-password/mail-notifications.ts

@@ -11,7 +11,7 @@ import {
   mailT,
   resolveMailLocale,
 } from "@cosmicdrift/kumiko-framework/i18n";
-import { escapeHtml, escapeHtmlAttr } from "@cosmicdrift/kumiko-headless";
+import { escapeHtml, escapeHtmlAttr } from "@cosmicdrift/kumiko-renderer/headless";
 import { AUTH_EMAIL_PASSWORD_FEATURE } from "./constants.ts";
 
 export const AUTH_MAIL_KINDS = {

package/packages/bundled-features/src/auth-email-password/web/auth-client.ts

@@ -9,8 +9,8 @@
 // reuse'n ihn hier, damit die Konstanten (Cookie-Name, Header-Name)
 // nicht divergieren.
 
-import { CSRF_HEADER_NAME, readCsrfToken } from "@cosmicdrift/kumiko-dispatcher-live";
 import { parseRoles } from "@cosmicdrift/kumiko-framework/utils";
+import { CSRF_HEADER_NAME, readCsrfToken } from "@cosmicdrift/kumiko-renderer/live";
 
 export type TenantSummary = {
   readonly tenantId: string;

package/packages/bundled-features/src/auth-email-password/web/auth-form-primitives.tsx

@@ -15,7 +15,7 @@
 // die früheren authButtonClass/authMutedLinkClass sind dorthin gewandert.
 
 import { usePrimitives } from "@cosmicdrift/kumiko-renderer";
-import { BareFormProvider, cn } from "@cosmicdrift/kumiko-renderer-web";
+import { BareFormProvider, cn } from "@cosmicdrift/kumiko-renderer/web";
 import { createContext, type ReactNode, useContext, useEffect, useState } from "react";
 
 // Wrappt die zentrierte Auth-Card in ihre Umgebung. Default = Fullscreen-

package/packages/bundled-features/src/auth-email-password/web/client-plugin.ts

@@ -48,9 +48,9 @@ export type EmailPasswordClientOptions = {
   readonly translations?: TranslationsByLocale;
 };
 
-// Struktural identisch zur renderer-web ClientFeatureDefinition, aber
-// ohne harte Dep auf @cosmicdrift/kumiko-renderer-web — so bleibt das Feature auch
-// für React-Native-Renderer (wenn sie kommen) nutzbar.
+// Structurally identical to the renderer/web ClientFeatureDefinition, but
+// without a hard dependency on @cosmicdrift/kumiko-renderer/web, so the feature
+// stays usable by other renderers.
 export type EmailPasswordClientFeature = {
   readonly name: "auth-email-password";
   readonly providers: readonly ComponentType<{ children: ReactNode }>[];

package/packages/bundled-features/src/auth-email-password/web/default-topbar-actions.tsx

@@ -6,7 +6,7 @@
 // importieren weiter die Einzelkomponenten direkt — DefaultTopbarActions
 // ist Convenience, kein Muss.
 
-import { ThemeToggle } from "@cosmicdrift/kumiko-renderer-web";
+import { ThemeToggle } from "@cosmicdrift/kumiko-renderer/web";
 import type { ReactNode } from "react";
 import { TenantSwitcher } from "./tenant-switcher.tsx";
 import { UserMenu } from "./user-menu.tsx";

package/packages/bundled-features/src/auth-email-password/web/index.ts

@@ -3,7 +3,7 @@
 // Wird über den Sub-Path-Export `@cosmicdrift/kumiko-bundled-features/auth-email-
 // password/web` konsumiert — die Server-Seite (defineFeature) lebt in
 // `@cosmicdrift/kumiko-bundled-features/auth-email-password` und hat keine
-// React-/DOM-Deps. Trennung bleibt sauber so wie renderer vs renderer-web.
+// React-/DOM-Deps. Trennung bleibt sauber so wie renderer vs renderer/web.
 
 export { defaultTranslations, mergeTranslations } from "../i18n.ts";
 export type {

package/packages/bundled-features/src/auth-email-password/web/session.tsx

@@ -9,12 +9,12 @@
 // unter `<SessionProvider>`; der `useSession()`-Hook liefert den State
 // und die Transitions.
 
-import { readCsrfToken } from "@cosmicdrift/kumiko-dispatcher-live";
 import {
   type CurrentUser,
   CurrentUserProvider,
   useSessionEndedSignal,
 } from "@cosmicdrift/kumiko-renderer";
+import { readCsrfToken } from "@cosmicdrift/kumiko-renderer/live";
 import {
   createContext,
   type ReactNode,

package/packages/bundled-features/src/auth-email-password/web/tenant-menu-items.tsx

@@ -7,7 +7,7 @@ import {
   DropdownMenuCheckboxItem,
   DropdownMenuLabel,
   DropdownMenuSeparator,
-} from "@cosmicdrift/kumiko-renderer-web";
+} from "@cosmicdrift/kumiko-renderer/web";
 import type { ReactNode } from "react";
 import { useSession } from "./session.tsx";
 

package/packages/bundled-features/src/auth-email-password/web/tenant-switcher.tsx

@@ -22,7 +22,7 @@ import {
   DropdownMenuContent,
   DropdownMenuLabel,
   DropdownMenuTrigger,
-} from "@cosmicdrift/kumiko-renderer-web";
+} from "@cosmicdrift/kumiko-renderer/web";
 import { Building2, ChevronDown } from "lucide-react";
 import { type ReactNode, useCallback, useState } from "react";
 import { useSession } from "./session.tsx";

package/packages/bundled-features/src/auth-email-password/web/user-menu.tsx

@@ -21,7 +21,7 @@ import {
   SidebarMenu,
   SidebarMenuButton,
   SidebarMenuItem,
-} from "@cosmicdrift/kumiko-renderer-web";
+} from "@cosmicdrift/kumiko-renderer/web";
 import { ChevronDown, ChevronsUpDown, LogOut } from "lucide-react";
 import type { ReactNode } from "react";
 import { useSession } from "./session.tsx";

package/packages/bundled-features/src/auth-foundation/changes.json

@@ -1,4 +1,10 @@
 [
+  {
+    "version": "0.376.0",
+    "type": "improvement",
+    "title": "authEnvSchema for auth.admin and auth.mail",
+    "detail": "authEnvSchema declares APP_BASE_URL, AUTH_ADMIN_EMAIL and AUTH_ADMIN_PASSWORD with descriptions and the pulumi secret marker; an app spreads its shape into its env schema."
+  },
   {
     "version": "0.371.0",
     "type": "improvement",

package/packages/bundled-features/src/auth-foundation/env.ts

@@ -0,0 +1,27 @@
+import * as z from "zod";
+
+const ADMIN_PASSWORD_MIN_LENGTH = 16;
+
+/** Env block behind `auth.admin` and `auth.mail`: the first admin login and the public app URL
+ *  the mail links and the Origin guard derive from. Unset keys leave the matching option to
+ *  explicit values; an app spreads `.shape` into its env schema and passes the parsed values on. */
+export const authEnvSchema = z.object({
+  APP_BASE_URL: z
+    .url()
+    .optional()
+    .describe(
+      "Public https URL of the app; auth mail links, the Origin guard and unsubscribe links use it.",
+    ),
+  AUTH_ADMIN_EMAIL: z
+    .email()
+    .optional()
+    .describe("Login of the admin seeded through `auth.admin`."),
+  AUTH_ADMIN_PASSWORD: z
+    .string()
+    .min(ADMIN_PASSWORD_MIN_LENGTH)
+    .optional()
+    .describe(
+      "Password of the admin seeded through `auth.admin`. Generate with: openssl rand -hex 24",
+    )
+    .meta({ kumiko: { pulumi: { generator: "openssl rand -hex 24", secret: true } } }),
+});

package/packages/bundled-features/src/auth-foundation/index.ts

@@ -1,5 +1,6 @@
 // Public API of the auth-foundation bundled-feature.
 
+export { authEnvSchema } from "./env.ts";
 export {
   createAuthFoundationFeature,
   type ResolvedTenantResolver,

package/packages/bundled-features/src/billing-foundation/changes.json

@@ -1,4 +1,10 @@
 [
+  {
+    "version": "0.377.0",
+    "type": "improvement",
+    "title": "Optional contact card in the billing plan catalog",
+    "detail": "catalog.contact takes labelKey, benefits, actionLabelKey and an absolute https: or mailto: href. The billing-plans query returns it as contact, the billing-plans panel renders it as the last card without a price for every viewRole, also when the caller cannot purchase or billing is off. Boot validation rejects empty keys and any other href."
+  },
   {
     "version": "0.371.0",
     "type": "improvement",

package/packages/bundled-features/src/billing-foundation/consumer-protection/confirmation-mail.ts

@@ -1,4 +1,4 @@
-import { escapeHtml, escapeHtmlAttr } from "@cosmicdrift/kumiko-headless";
+import { escapeHtml, escapeHtmlAttr } from "@cosmicdrift/kumiko-renderer/headless";
 import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import { Marked } from "marked";
 import {

package/packages/bundled-features/src/billing-foundation/consumer-protection/termination-pages.ts

@@ -2,7 +2,7 @@
 // no JavaScript. Every echoed value goes through escapeHtml/escapeHtmlAttr.
 
 import { type AnonymousExtraRoute, getSessionCookies } from "@cosmicdrift/kumiko-framework/api";
-import { escapeHtml, escapeHtmlAttr } from "@cosmicdrift/kumiko-headless";
+import { escapeHtml, escapeHtmlAttr } from "@cosmicdrift/kumiko-renderer/headless";
 import { isOneOf } from "@cosmicdrift/kumiko-types/type-guards";
 import type { Context } from "hono";
 import { getCookie } from "hono/cookie";

package/packages/bundled-features/src/billing-foundation/contact-card.ts

@@ -0,0 +1,14 @@
+// @runtime client
+
+/** Shared by boot validation and the panel (defense in depth); keep free of server imports. */
+export function isContactCardHref(href: string): boolean {
+  if (href !== href.trim()) return false;
+  let url: URL;
+  try {
+    url = new URL(href);
+  } catch {
+    return false;
+  }
+  if (url.protocol === "https:") return true;
+  return url.protocol === "mailto:" && url.pathname !== "";
+}

package/packages/bundled-features/src/billing-foundation/handlers/billing-plans.query.ts

@@ -29,7 +29,7 @@ export function createBillingPlansQuery(
   return {
     name: "billing-plans",
     description:
-      "Lists the purchasable plans with live price, benefits, the caller's current tier and which action (checkout | switch | current | unavailable | paymentPending) each plan offers.",
+      "Lists the purchasable plans with live price, benefits, the caller's current tier and which action (checkout | switch | current | unavailable | paymentPending) each plan offers, plus the optional price-less contact card.",
     schema: billingPlansSchema,
     access: { roles: catalog.viewRoles },
     handler: async (_query, ctx): Promise<BillingPlansResult> => {

package/packages/bundled-features/src/billing-foundation/index.ts

@@ -85,6 +85,7 @@ export {
   type BillingFoundationOptions,
   type BillingPlanBenefit,
   type BillingPlanCatalog,
+  type BillingPlanContactCard,
   type BillingPlanPrice,
   type BillingPlansResult,
   type BillingPlanView,

package/packages/bundled-features/src/billing-foundation/plan-catalog.ts

@@ -231,5 +231,6 @@ export async function buildBillingPlans(
     subscription,
     canPurchase,
     plans,
+    ...(catalog.contact !== undefined && { contact: catalog.contact }),
   };
 }

package/packages/bundled-features/src/billing-foundation/types.ts

@@ -355,6 +355,14 @@ export type BillingPlanBenefit = {
   readonly params?: Readonly<Record<string, string | number>>;
 };
 
+/** Price-less card (e.g. "Enterprise · Contact us"); `href` must be an absolute https: or mailto: URL. */
+export type BillingPlanContactCard = {
+  readonly labelKey: string;
+  readonly benefits: readonly BillingPlanBenefit[];
+  readonly actionLabelKey: string;
+  readonly href: string;
+};
+
 export type BillingPlanCatalog<TTier extends string = string> = {
   /** Purchasable tiers, in display order. */
   readonly plans: readonly TTier[];
@@ -380,6 +388,8 @@ export type BillingPlanCatalog<TTier extends string = string> = {
   readonly returnPath?: string;
   /** Defaults to the only registered provider exposing `priceToTier`. */
   readonly providerName?: string;
+  /** Rendered as the last card, no price, visible to `viewRoles` regardless of `purchaseRoles`. */
+  readonly contact?: BillingPlanContactCard;
 };
 
 export type LegalLinkSet = {
@@ -483,6 +493,8 @@ export type BillingPlansResult = {
   } | null;
   readonly canPurchase: boolean;
   readonly plans: readonly BillingPlanView[];
+  /** Present only when `catalog.contact` is configured. */
+  readonly contact?: BillingPlanContactCard;
   /** Present only when `consumerProtection` is configured. */
   readonly consumerProtection?: {
     readonly consentTexts: Readonly<

package/packages/bundled-features/src/billing-foundation/validate-options.ts

@@ -6,8 +6,10 @@
 import * as z from "zod";
 import { isTerminationScope, TERMINATION_SCOPES } from "./constants.ts";
 import { CONSENT_LOCALES, type ConsentLocale } from "./consumer-protection/consent-locale.ts";
+import { isContactCardHref } from "./contact-card.ts";
 import {
   type BillingFoundationOptions,
+  type BillingPlanContactCard,
   type ConsumerProtectionOptions,
   isLegalLinkSet,
   type LegalLinkSet,
@@ -83,6 +85,19 @@ function validateLegalLinkSet(set: LegalLinkSet, path: string): void {
   }
 }
 
+function validateContactCard(contact: BillingPlanContactCard): void {
+  for (const key of ["labelKey", "actionLabelKey"] as const) {
+    if (contact[key].trim() === "") {
+      throw new Error(`createBillingFoundationFeature: catalog.contact.${key} must not be empty.`);
+    }
+  }
+  if (!isContactCardHref(contact.href)) {
+    throw new Error(
+      `createBillingFoundationFeature: catalog.contact.href "${contact.href}" must be an absolute https: or mailto: URL.`,
+    );
+  }
+}
+
 function validateBaseUrl(baseUrl: string): void {
   let parsed: URL;
   try {
@@ -147,4 +162,5 @@ export function validateOptions(options: BillingFoundationOptions): void {
   if (catalog.viewRoles.length === 0) {
     throw new Error("createBillingFoundationFeature: catalog.viewRoles must not be empty.");
   }
+  if (catalog.contact !== undefined) validateContactCard(catalog.contact);
 }

package/packages/bundled-features/src/billing-foundation/web/billing-contact-plan.tsx

@@ -0,0 +1,32 @@
+// @runtime client
+
+import { useLocale, useTranslation } from "@cosmicdrift/kumiko-renderer";
+import { PlanCard } from "@cosmicdrift/kumiko-renderer/web";
+import type { ReactNode } from "react";
+import { isContactCardHref } from "../contact-card.ts";
+import type { BillingPlanContactCard } from "../types.ts";
+import { localizedParams } from "./localized-params.ts";
+
+export function BillingContactPlan({
+  contact,
+}: {
+  readonly contact: BillingPlanContactCard;
+}): ReactNode {
+  const t = useTranslation();
+  const locale = useLocale().locale();
+  if (!isContactCardHref(contact.href)) return null;
+  return (
+    <PlanCard
+      title={t(contact.labelKey)}
+      features={contact.benefits.map((benefit) =>
+        t(benefit.labelKey, localizedParams(benefit.params, locale)),
+      )}
+      ctaLink={{
+        label: t(contact.actionLabelKey),
+        href: contact.href,
+        target: new URL(contact.href).protocol === "https:" ? "_blank" : undefined,
+      }}
+      testId="billing-plan-card-contact"
+    />
+  );
+}

package/packages/bundled-features/src/billing-foundation/web/billing-plans-panel.tsx

@@ -1,6 +1,5 @@
 // @runtime client
 
-import { toInstant, type WriteResult } from "@cosmicdrift/kumiko-headless";
 import {
   type ExtensionSectionProps,
   useLocale,
@@ -9,12 +8,13 @@ import {
   useQuery,
   useTranslation,
 } from "@cosmicdrift/kumiko-renderer";
+import { toInstant, type WriteResult } from "@cosmicdrift/kumiko-renderer/headless";
 import {
   formatMoney,
   PlanCard,
   type PlanCardActionSlot,
   PlanGrid,
-} from "@cosmicdrift/kumiko-renderer-web";
+} from "@cosmicdrift/kumiko-renderer/web";
 import { type ReactNode, useState } from "react";
 import {
   BillingPlanActions,
@@ -23,8 +23,10 @@ import {
   SubscriptionStatuses,
 } from "../constants.ts";
 import type { BillingPlansResult, BillingPlanView } from "../types.ts";
+import { BillingContactPlan } from "./billing-contact-plan.tsx";
 import { CancelContractDialog } from "./cancel-contract-dialog.tsx";
 import { CheckoutConsentDialog, type CheckoutConsentPayload } from "./checkout-consent-dialog.tsx";
+import { localizedParams } from "./localized-params.ts";
 
 type UseTranslation = ReturnType<typeof useTranslation>;
 
@@ -42,19 +44,6 @@ function renewalKey(price: BillingPlanView["price"]): string | undefined {
     : `billing-foundation.consent.renews.${price.interval}`;
 }
 
-function localizedParams(
-  params: Readonly<Record<string, string | number>> | undefined,
-  locale: string,
-): Readonly<Record<string, string>> | undefined {
-  if (params === undefined) return undefined;
-  const localized: Record<string, string> = {};
-  for (const [key, value] of Object.entries(params)) {
-    localized[key] =
-      typeof value === "number" ? new Intl.NumberFormat(locale).format(value) : value;
-  }
-  return localized;
-}
-
 /** Which action the plan "would" offer if it weren't blocked — mirrors
  *  plan-catalog.ts's own decision tree, since `unavailable` collapses both
  *  "would checkout" and "would switch" into one action and the disabled CTA
@@ -329,6 +318,7 @@ export function BillingPlansPanel(_props: ExtensionSectionProps): ReactNode {
             {...toCardProps(plan)}
           />
         ))}
+        {result.contact !== undefined && <BillingContactPlan contact={result.contact} />}
       </PlanGrid>
       {consumerProtection !== undefined &&
         consentPlan !== undefined &&

package/packages/bundled-features/src/billing-foundation/web/cancel-contract-dialog.tsx

@@ -1,13 +1,13 @@
 // @runtime client
 
-import { toInstant } from "@cosmicdrift/kumiko-headless";
 import {
   useLocale,
   useMutation,
   usePrimitives,
   useTranslation,
 } from "@cosmicdrift/kumiko-renderer";
-import { ModeSwitch } from "@cosmicdrift/kumiko-renderer-web";
+import { toInstant } from "@cosmicdrift/kumiko-renderer/headless";
+import { ModeSwitch } from "@cosmicdrift/kumiko-renderer/web";
 import { type ReactNode, useState } from "react";
 import { SubscriptionFoundationHandlers } from "../constants.ts";
 import type { ContractTerminationDeclarationType, ContractTerminationKind } from "../events.ts";

package/packages/bundled-features/src/billing-foundation/web/checkout-consent-dialog.tsx

@@ -1,7 +1,7 @@
 // @runtime client
 
-import type { WriteResult } from "@cosmicdrift/kumiko-headless";
 import { useLocale, usePrimitives, useTranslation } from "@cosmicdrift/kumiko-renderer";
+import type { WriteResult } from "@cosmicdrift/kumiko-renderer/headless";
 import { type ReactNode, useState } from "react";
 import { resolveConsentLocale } from "../consumer-protection/consent-locale.ts";
 import type { BillingPlansResult } from "../types.ts";

package/packages/bundled-features/src/billing-foundation/web/client-plugin.tsx

@@ -1,6 +1,6 @@
 // @runtime client
 import type { TranslationsByLocale } from "@cosmicdrift/kumiko-renderer";
-import type { ClientFeatureDefinition } from "@cosmicdrift/kumiko-renderer-web";
+import type { ClientFeatureDefinition } from "@cosmicdrift/kumiko-renderer/web";
 import { BILLING_FOUNDATION_FEATURE, BILLING_PLANS_PANEL_COMPONENT } from "../constants.ts";
 import { BillingPlansPanel } from "./billing-plans-panel.tsx";
 

package/packages/bundled-features/src/billing-foundation/web/localized-params.ts

@@ -0,0 +1,14 @@
+// @runtime client
+
+export function localizedParams(
+  params: Readonly<Record<string, string | number>> | undefined,
+  locale: string,
+): Readonly<Record<string, string>> | undefined {
+  if (params === undefined) return undefined;
+  const localized: Record<string, string> = {};
+  for (const [key, value] of Object.entries(params)) {
+    localized[key] =
+      typeof value === "number" ? new Intl.NumberFormat(locale).format(value) : value;
+  }
+  return localized;
+}

package/packages/bundled-features/src/cap-counter/changes.json

@@ -1,4 +1,16 @@
 [
+  {
+    "version": "0.378.0",
+    "type": "fix",
+    "title": "Stock caps are atomic under parallel writes",
+    "detail": "withStockCap now takes a transaction-scoped advisory lock per tenant and cap, so concurrent creates cannot both pass the check and exceed the cap."
+  },
+  {
+    "version": "0.378.0",
+    "type": "improvement",
+    "title": "withStockCap no longer widens the handler's grants",
+    "detail": "withStockCap serialises through TenantDb.advisoryXactLock instead of ctx.db.unsafeRaw(), so wrapped handlers no longer receive an implicit unsafeRaw grant."
+  },
   {
     "version": "0.370.0",
     "type": "breaking",

package/packages/bundled-features/src/cap-counter/stock-cap-guard.ts

@@ -24,6 +24,10 @@ export type CapLimitContext = {
   readonly config?: ConfigAccessor;
 };
 
+// pg_advisory_xact_lock namespace (int4): 'scap' as ASCII, disjoint from the
+// framework's other fixed advisory-lock keys.
+const STOCK_CAP_LOCK_NAMESPACE = 0x73636170;
+
 // What the cap guards need from a write handler's ctx.
 export type CapGuardContext = CapLimitContext & { readonly db: TenantDb };
 
@@ -53,6 +57,7 @@ export function createStockCapGuard<TCaps>(
     spec: StockCapSpec<TCaps>,
     context: CapLimitContext = {},
   ): Promise<WriteFailure | null> {
+    // Lock-free on its own: a direct call outside withStockCap is not atomic.
     const caps = await resolveTierCaps(db, context);
     const current = await db.count(spec.table, { ...spec.where, tenantId: db.tenantId });
     const { state, limit } = enforceStockCap({
@@ -73,6 +78,10 @@ export function createStockCapGuard<TCaps>(
     return {
       ...handler,
       handler: async (event, ctx) => {
+        // ctx.db is the handler's transaction, so the xact lock releases with its commit or
+        // rollback. A handler wrapped in several caps must list them in the same order
+        // everywhere; Postgres aborts one side of an inverse order with a deadlock error.
+        await ctx.db.advisoryXactLock(STOCK_CAP_LOCK_NAMESPACE, spec.code);
         const failure = await checkStockCap(ctx.db, spec, { config: ctx.config });
         return failure ?? handler.handler(event, ctx);
       },

package/packages/bundled-features/src/cap-overview/web/cap-cards-panel.tsx

@@ -1,13 +1,13 @@
-import { EMPTY_VALUE_PLACEHOLDER } from "@cosmicdrift/kumiko-headless";
 // @runtime client
 import type { ExtensionSectionProps } from "@cosmicdrift/kumiko-renderer";
 import { usePrimitives, useQuery, useTranslation } from "@cosmicdrift/kumiko-renderer";
+import { EMPTY_VALUE_PLACEHOLDER } from "@cosmicdrift/kumiko-renderer/headless";
 import {
   EmptyState,
   StatCard,
   StatusBadge,
   type StatusTone,
-} from "@cosmicdrift/kumiko-renderer-web";
+} from "@cosmicdrift/kumiko-renderer/web";
 import { Database, FileText, Gauge, Hash, Mail, Users } from "lucide-react";
 import type { ComponentType, ReactNode } from "react";
 import { CapOverviewQueries } from "../constants.ts";
@@ -68,7 +68,7 @@ export function CapCardsPanel({ filterParams }: ExtensionSectionProps): ReactNod
   return (
     <div
       // Arbitrary bracket values (grid-cols-[repeat(...)]) never compiled:
-      // styles.css's Tailwind v4 @source scan only covers renderer-web/src,
+      // styles.css's Tailwind v4 @source scan only covers renderer/web/src,
       // renderer/src and samples/**/src (see its comment) — bundled-features
       // isn't scanned, so a class unique to this file has no generated rule
       // and silently no-ops (the grid fell back to one implicit column,

package/packages/bundled-features/src/cap-overview/web/client-plugin.tsx

@@ -1,6 +1,6 @@
 // @runtime client
 import type { TranslationsByLocale } from "@cosmicdrift/kumiko-renderer";
-import type { ClientFeatureDefinition } from "@cosmicdrift/kumiko-renderer-web";
+import type { ClientFeatureDefinition } from "@cosmicdrift/kumiko-renderer/web";
 import {
   CAP_CARDS_PANEL_COMPONENT,
   CAP_OVERVIEW_FEATURE,

package/packages/bundled-features/src/channel-email/changes.json

@@ -1,4 +1,10 @@
 [
+  {
+    "version": "0.376.0",
+    "type": "improvement",
+    "title": "resolveEmail receives a typed tenant database",
+    "detail": "The context of EmailChannelOptions resolveEmail types db as TenantDb, so resolvers read tables without a cast."
+  },
   {
     "version": "0.370.0",
     "type": "improvement",