@cosmicdrift/kumiko-samples 0.378.0 → 0.380.0

package/samples/recipes/legal-pages/README.md

@@ -73,7 +73,7 @@ await runProdApp({
   anonymousAccess: { defaultTenantId: SYSTEM_TENANT_ID },
   // Required (2): boot check + internal lookup use ctx.templateResolver
   extraContext: ({ db }) => ({
-    templateResolver: createTemplateResolverApi(db),
+    templateResolver: createTemplateResolverApi(db, registry),
   }),
 });
 ```
@@ -207,7 +207,7 @@ from SYSTEM_TENANT:
 | Symptom | Cause | Fix |
 |---|---|---|
 | Route returns `503 legal page unavailable` | `anonymousAccess` not configured in `runProdApp` | Set `anonymousAccess: { defaultTenantId: SYSTEM_TENANT_ID }` |
-| Boot check throws `ctx.templateResolver missing` | `extraContext.templateResolver` not wired | Set `extraContext: ({ db }) => ({ templateResolver: createTemplateResolverApi(db) })` |
+| Boot check throws `ctx.templateResolver missing` | `extraContext.templateResolver` not wired | Set `extraContext: ({ db, registry }) => ({ templateResolver: createTemplateResolverApi(db, registry) })` |
 | Route returns `404 not configured` | Required block doesn't exist or has `content=null` | `seedTextBlock` with a content string |
 | Multi-tenant app: tenant subdomain shows an empty page | (Bug regression?) Routes should ALWAYS show SYSTEM_TENANT texts | The `legal-pages.integration.test.ts` test "SYSTEM_TENANT routing" covers this — should be green |
 | `<script>` tags in a Markdown body land 1:1 in the HTML | Deliberately accepted right now — see [legal-pages/README.md XSS section](../../../packages/bundled-features/src/legal-pages/README.md#xss--currently-not-secured-by-design) | DOMPurify is a Phase 2 once a multi-author setup arrives |

package/samples/recipes/legal-pages/src/feature.ts

@@ -27,7 +27,7 @@
 //  - `anonymousAccess` muss in runProdApp/runDevApp konfiguriert sein
 //    (defaultTenantId = SYSTEM_TENANT_ID), sonst antworten die
 //    legal-pages-Routes mit 503
-//  - `extraContext.templateResolver = createTemplateResolverApi(db)` muss
+//  - `extraContext.templateResolver = createTemplateResolverApi(db, registry)` muss
 //    gewired sein, sonst wirft der Boot-Check mit Wiring-Hinweis
 //  - Beim ersten Boot müssen die TextBlocks geseedet sein —
 //    template-resolver/seeding `seedTextBlock` oder via API

package/samples/recipes/reference-data/src/feature.ts

@@ -1,7 +1,7 @@
 // Reference Data Sample
 // Shows: r.referenceData() for static seed data with upsert logic
 
-import { table, text } from "@cosmicdrift/kumiko-framework/db";
+import { buildEntityTable } from "@cosmicdrift/kumiko-framework/db";
 import { createEntity, createTextField, defineFeature } from "@cosmicdrift/kumiko-framework/engine";
 
 export const categoryEntity = createEntity({
@@ -13,12 +13,8 @@ export const categoryEntity = createEntity({
   },
 });
 
-// Drizzle table for direct DB queries in tests
-export const categoryTable = table("read_sample_categories", {
-  code: text("code").notNull(),
-  name: text("name").notNull(),
-  description: text("description"),
-});
+// Read-model table for direct DB queries in tests
+export const categoryTable = buildEntityTable("category", categoryEntity);
 
 export const categoryFeature = defineFeature("catalog", (r) => {
   r.entity({ name: "category", ...categoryEntity });

package/packages/bundled-features/src/admin-shell/i18n.ts

@@ -1,54 +0,0 @@
-// @runtime client
-// Pure-Data i18n keys for admin-shell (server r.translations + client pivot).
-// Without these keys nav labels and workspace tabs render raw QNs in the shell.
-
-type LocalizedString = { readonly en: string };
-
-export const ADMIN_SHELL_I18N: Readonly<Record<string, LocalizedString>> = {
-  "screen:tenant-overview.title": { en: "Overview" },
-  "screen:platform-overview.title": { en: "Overview" },
-  "admin-shell.screen.tenant-overview.subtitle": {
-    en: "Activity, failed jobs and deliveries, quotas and open admin tasks of this tenant.",
-  },
-  "admin-shell.screen.platform-overview.subtitle": {
-    en: "Tenant, user, job and delivery health across the whole installation.",
-  },
-  "admin-shell:workspace.tenant": { en: "Administration" },
-  "admin-shell:workspace.platform": { en: "Platform" },
-  "admin-shell:nav.tenantOverview": { en: "Overview" },
-  "admin-shell:nav.platformOverview": { en: "Overview" },
-  "admin-shell:nav.tenants": { en: "Tenants" },
-  "admin-shell:nav.tierAdmin": { en: "Assign tier" },
-  "admin-shell:nav.myCaps": { en: "Plans & Caps" },
-  "admin-shell:nav.tenantCaps": { en: "Plans & Caps" },
-  "admin-shell:overview.kpi.activeTenants": { en: "Active tenants" },
-  "admin-shell:overview.kpi.activeUsers7d": { en: "Active users, 7 days" },
-  "admin-shell:overview.kpi.activeMembers7d": { en: "Active members, 7 days" },
-  "admin-shell:overview.kpi.failedJobs24h": { en: "Failed jobs, 24 h" },
-  "admin-shell:overview.kpi.failedDeliveries24h": { en: "Failed deliveries, 24 h" },
-  "admin-shell:overview.chart.jobRunsByStatus": { en: "Job runs by status" },
-  "admin-shell:overview.chart.deliveriesByChannel": { en: "Deliveries by channel" },
-  "admin-shell:overview.chart.auditWrites": { en: "Changes per day" },
-  "admin-shell:overview.chart.auditWritesSubtitle": { en: "Audit log, 14 days" },
-  "admin-shell:overview.list.recentFailures": { en: "Recent failures" },
-  "admin-shell:overview.list.recentFailuresEmpty": { en: "No failed jobs" },
-  "admin-shell:overview.list.quotas": { en: "Quotas" },
-  "admin-shell:overview.list.quotasEmpty": { en: "No quotas configured" },
-  "admin-shell:overview.col.job": { en: "Job" },
-  "admin-shell:overview.col.startedAt": { en: "Started" },
-  "admin-shell:overview.col.failedAt": { en: "Failed at" },
-  "admin-shell:overview.col.reason": { en: "Reason" },
-  "admin-shell:overview.col.quota": { en: "Quota" },
-  "admin-shell:overview.col.used": { en: "Used" },
-  "admin-shell:overview.col.limit": { en: "Limit" },
-  "admin-shell:overview.col.usage": { en: "Usage" },
-  "admin-shell:overview.range.24h": { en: "24 hours" },
-  "admin-shell:overview.range.7d": { en: "7 days" },
-  "admin-shell:overview.range.30d": { en: "30 days" },
-  "admin-shell:overview.scope.badge": { en: "All tenants" },
-  "admin-shell:overview.scope.notice": {
-    en: "You are viewing data of all tenants. Cross-tenant queries are recorded in the audit log.",
-  },
-  "admin-shell:overview.filter.tenant": { en: "Tenant" },
-  "admin-shell:overview.filter.allTenants": { en: "All tenants" },
-};

package/packages/bundled-features/src/audit/i18n.ts

@@ -1,25 +0,0 @@
-// @runtime client
-// Server + client i18n for audit (nav labels + audit-log/-detail screens).
-
-type LocalizedString = { readonly en: string };
-
-export const AUDIT_I18N: Readonly<Record<string, LocalizedString>> = {
-  "screen:audit-log.title": { en: "Audit log" },
-  "screen:audit-log-detail.title": { en: "Event" },
-  "audit.log.detail.subtitle": {
-    en: "Read-only detail view of one audit event showing actor, timestamp, aggregate and the raw event payload and metadata; reached from a row of the audit log.",
-  },
-  "audit.errors.systemScopeRequiresSystemAdmin": {
-    en: "Only SystemAdmin may read system events.",
-  },
-  "audit:nav.auditLog": { en: "Audit" },
-  "audit.log.col.when": { en: "When" },
-  "audit.log.col.type": { en: "Event" },
-  "audit.log.col.aggregateType": { en: "Aggregate type" },
-  "audit.log.col.aggregateId": { en: "Aggregate ID" },
-  "audit.log.col.actor": { en: "Actor" },
-  "audit.log.details": { en: "Details" },
-  "audit.log.detail.payload": { en: "Event payload" },
-  "audit.log.detail.metadata": { en: "Metadata" },
-  "audit.log.detail.field.id": { en: "Event ID" },
-};

package/packages/bundled-features/src/auth-mfa/web/qrcode-browser.d.ts

@@ -1,11 +0,0 @@
-// @types/qrcode only declares the main "qrcode" entry, not the browser-only
-// subpath (see mfa-setup-preauth-screen.tsx's import — the main entry pulls
-// in Node-only deps like yargs/pngjs via qrcode's own package.json#browser
-// remap, which Metro doesn't honor). Same runtime shape, just re-typed.
-// `export *` never re-exports a default — `import QRCode from "..."`
-// resolving here relies on the consuming app's esModuleInterop/
-// allowSyntheticDefaultImports (which synthesizes a default from the
-// namespace); without it, the default import comes back undefined.
-declare module "qrcode/lib/browser.js" {
-  export * from "qrcode";
-}

package/packages/bundled-features/src/jobs/i18n.ts

@@ -1,55 +0,0 @@
-// @runtime client
-// Server + client i18n for jobs operator screens.
-
-type LocalizedString = { readonly en: string };
-
-export const JOBS_I18N: Readonly<Record<string, LocalizedString>> = {
-  "screen:job-runs.title": { en: "Job runs" },
-  "screen:job-run-detail.title": { en: "Job run" },
-  "screen:job-trigger.title": { en: "Trigger job" },
-  "jobs.screen.job-trigger.subtitle": {
-    en: "Start a job manually by name, with an optional JSON payload.",
-  },
-  "jobs.screen.job-run-detail.subtitle": {
-    en: "Status, timings, error and log lines of one job run.",
-  },
-  "jobs:entity:__action-form__:field:jobName": { en: "Job name" },
-  "jobs:entity:__action-form__:field:payload": { en: "JSON payload" },
-  "jobs:nav.jobRuns": { en: "Jobs" },
-  "jobs.runs.open": { en: "Details" },
-  "jobs.runs.filter.status": { en: "Status" },
-  "jobs.runs.filter.completed": { en: "Completed" },
-  "jobs.runs.filter.failed": { en: "Failed" },
-  "jobs.runs.filter.running": { en: "Running" },
-  "jobs.runs.filter.queued": { en: "Queued" },
-  "jobs.runs.col.job": { en: "Job" },
-  "jobs.runs.col.status": { en: "Status" },
-  "jobs.runs.col.started": { en: "Started" },
-  "jobs.runs.col.duration": { en: "Duration (ms)" },
-  "jobs.detail.field.job": { en: "Job" },
-  "jobs.detail.field.status": { en: "Status" },
-  "jobs.detail.field.id": { en: "Run ID" },
-  "jobs.detail.field.started": { en: "Started" },
-  "jobs.detail.field.finished": { en: "Finished" },
-  "jobs.detail.field.duration": { en: "Duration (ms)" },
-  "jobs.detail.field.error": { en: "Error" },
-  "jobs.detail.logs": { en: "Logs" },
-  "jobs.detail.retry": { en: "Retry" },
-  "jobs.trigger.title": { en: "Run a job" },
-  "jobs.errors.invalidCursor": { en: "The pagination cursor is invalid." },
-  "jobs.trigger.submit": { en: "Run" },
-  "jobs.errors.unknownJob": { en: "Unknown job." },
-  "jobs.errors.notManual": {
-    en: "This job cannot be triggered manually.",
-  },
-  "jobs.errors.invalidPayload": {
-    en: "The payload must be a valid JSON object.",
-  },
-  "jobs.errors.notFound": { en: "Not found." },
-  "jobs.errors.onlyFailedCanRetry": {
-    en: "Only failed runs can be retried.",
-  },
-  "jobs.errors.payloadErased": {
-    en: "This run's payload can no longer be read — the triggering user's data was erased.",
-  },
-};

package/packages/bundled-features/src/managed-pages/i18n.ts

@@ -1,63 +0,0 @@
-// @runtime client
-// Pure-Data (i18n-Keys) — client-marked, damit das web/-Bundle sie in den
-// Browser-Store pivotieren darf; feature.ts (server) importiert sie ebenso
-// (server darf client-safe Pure-Data importieren, wie PAT constants.ts).
-//
-// Übersetzungs-Bundle für die managed-pages Admin-Screens. Ohne diese Keys
-// rendert die UI die Roh-i18n-Keys (screen:*.title, entity:*:field:*, Section-
-// Header). Der Boot-Validator (required-surface-keys) verlangt — sobald ein
-// Feature r.translations ruft — den KOMPLETTEN Required-Surface-Satz in de+en;
-// diese Datei deckt jeden Screen/Feld/Section-Key ab, den managed-pages
-// registriert. Die zwei customCss-Keys werden unconditional geliefert (schaden
-// bei allowCustomCss:false nicht, sind aber Pflicht für Consumer die es aktivieren).
-
-type LocalizedString = { readonly en: string };
-
-export const MANAGED_PAGES_I18N: Readonly<Record<string, LocalizedString>> = {
-  // Screen-Titel (global/unpräfixiert — screenTitleKey = screen:<id>.title)
-  "screen:page-list.title": { en: "Pages" },
-  "screen:page-edit.title": { en: "Edit page" },
-  "screen:branding-settings.title": { en: "Branding" },
-
-  // Page-Entity Feld-Labels (managed-pages:entity:page:field:*)
-  "managed-pages:entity:page:field:slug": { en: "Slug" },
-  "managed-pages:entity:page:field:lang": { en: "Language" },
-  "managed-pages:entity:page:field:title": { en: "Title" },
-  "managed-pages:entity:page:field:published": { en: "Published" },
-  "managed-pages:entity:page:field:published:option:true": {
-    en: "Published",
-  },
-  "managed-pages:entity:page:field:published:option:false": { en: "Draft" },
-  "managed-pages:entity:page:field:description": { en: "Description" },
-  "managed-pages:entity:page:field:ogImage": { en: "OG image" },
-  "managed-pages:entity:page:field:body": { en: "Content" },
-
-  // Config-Edit Feld-Labels (managed-pages:entity:__config-edit__:field:*, camelCase Form-Keys)
-  "managed-pages:entity:__config-edit__:field:title": { en: "Site title" },
-  "managed-pages:entity:__config-edit__:field:description": {
-    en: "Description",
-  },
-  "managed-pages:entity:__config-edit__:field:siteUrl": { en: "Site URL" },
-  "managed-pages:entity:__config-edit__:field:accentColor": {
-    en: "Accent color",
-  },
-  "managed-pages:entity:__config-edit__:field:logoUrl": { en: "Logo URL" },
-  "managed-pages:entity:__config-edit__:field:logoFile": { en: "Logo file" },
-  "managed-pages:entity:__config-edit__:field:layoutPreset": { en: "Layout" },
-
-  // Section-Header
-  "managed-pages:section.meta": { en: "Metadata" },
-  "managed-pages:section.body": { en: "Content" },
-  "managed-pages:branding.section.identity": { en: "Identity" },
-
-  // Row-Actions + Confirm (pageListScreen)
-  "managed-pages:actions.edit": { en: "Edit" },
-  "managed-pages:actions.delete": { en: "Delete" },
-  "managed-pages:confirms.page-delete": {
-    en: "Delete this page?",
-  },
-
-  // Nur bei allowCustomCss:true im Screen — unconditional geliefert
-  "managed-pages:entity:__config-edit__:field:customCss": { en: "Custom CSS" },
-  "managed-pages:branding.section.custom-css": { en: "Custom CSS" },
-};

package/packages/bundled-features/src/presets/dsgvo-self-service.ts

@@ -1,35 +0,0 @@
-import type { FeatureDefinition } from "@cosmicdrift/kumiko-framework/engine";
-import { createComplianceProfilesFeature } from "../compliance-profiles/index.ts";
-import { createDataRetentionFeature } from "../data-retention/index.ts";
-import { createSessionsFeature } from "../sessions/index.ts";
-import {
-  createUserDataRightsFeature,
-  type UserDataRightsOptions,
-} from "../user-data-rights/index.ts";
-import { createUserProfileFeature } from "../user-profile/index.ts";
-
-export type DsgvoSelfServiceOptions = {
-  /** Passed through to createUserDataRightsFeature — export/deletion mail
-   *  callbacks + Apex deletion HMAC. Default {} (no-op mail side). */
-  readonly userDataRights?: UserDataRightsOptions;
-};
-
-// DSGVO + account self-service chain every Kumiko SaaS app mounts (privacy
-// center, account deletion Art. 17, export Art. 20, sessions). Order is
-// load-bearing (require-order): user-data-rights needs data-retention +
-// compliance-profiles + sessions, user-profile needs user-data-rights. This
-// exact order used to be hand-copied into every app with an explainer
-// comment. text-content + legal-pages stay out deliberately — legal-pages
-// has an app-specific wrapLayout, text-content is a standalone foundation;
-// both are spread in by the app itself.
-/** @deprecated Removed in the next release. Use `composeGdprStack({ selfService: { userDataRights } })`
- *  from `@cosmicdrift/kumiko-dev-server/compose-stacks`. */
-export function dsgvoSelfServiceFeatures(opts: DsgvoSelfServiceOptions = {}): FeatureDefinition[] {
-  return [
-    createDataRetentionFeature(),
-    createComplianceProfilesFeature(),
-    createSessionsFeature(),
-    createUserDataRightsFeature(opts.userDataRights ?? {}),
-    createUserProfileFeature(),
-  ];
-}

package/packages/bundled-features/src/user-data-rights/i18n.ts

@@ -1,44 +0,0 @@
-// @runtime client
-// Server + client i18n for user-data-rights (operator screens + nav). Pure
-// data, importable from the web bundle (web/i18n.ts derives the client keys).
-type LocalizedString = { readonly en: string };
-
-export const USER_DATA_RIGHTS_I18N: Readonly<Record<string, LocalizedString>> = {
-  "user-data-rights:feature.label": { en: "Privacy" },
-  "user-data-rights:notify.export-ready.label": { en: "Data export ready" },
-  "user-data-rights:notify.export-failed.label": { en: "Data export failed" },
-  "user-data-rights:notify.deletion-requested.label": { en: "Deletion requested" },
-  "user-data-rights:notify.deletion-executed.label": { en: "Deletion completed" },
-  "user-data-rights:nav.exportJobs": { en: "GDPR exports" },
-  "screen:export-job-list.title": { en: "GDPR exports" },
-  "screen:export-job-detail.title": { en: "Export job" },
-  "screen:download-attempt-list.title": { en: "Download attempts" },
-  "screen:privacy-center.title": { en: "Privacy" },
-  "userDataRights.privacyCenter.subtitle": {
-    en: "Logged-in GDPR self-service page where a user requests and downloads a data export (Art. 20), restricts processing of their account (Art. 18) and requests its deletion (Art. 17).",
-  },
-  "user-data-rights:entity:export-job:field:userId": { en: "User" },
-  "user-data-rights:entity:export-job:field:status": { en: "Status" },
-  "user-data-rights:entity:export-job:field:requestedAt": { en: "Requested" },
-  "user-data-rights:entity:export-job:field:completedAt": { en: "Completed" },
-  "user-data-rights:entity:export-job:field:expiresAt": { en: "Expires" },
-  "user-data-rights:entity:export-job:field:requestedFromTenantId": {
-    en: "Tenant",
-  },
-  "user-data-rights:entity:export-job:field:startedAt": { en: "Started" },
-  "user-data-rights:entity:export-job:field:downloadStorageKey": {
-    en: "Storage key",
-  },
-  "user-data-rights:entity:export-job:field:bytesWritten": { en: "Bytes" },
-  "user-data-rights:entity:export-job:field:errorMessage": { en: "Error" },
-  "user-data-rights:entity:download-attempt:field:attemptedAt": {
-    en: "Attempted at",
-  },
-  "user-data-rights:entity:download-attempt:field:result": { en: "Result" },
-  "user-data-rights:entity:download-attempt:field:via": { en: "Via" },
-  "user-data-rights:entity:download-attempt:field:ip": { en: "IP" },
-  "user-data-rights:entity:download-attempt:field:attemptedByUserId": {
-    en: "User",
-  },
-  "user-data-rights:entity:download-attempt:field:jobId": { en: "Job" },
-};

package/samples/apps/ui-walkthrough/src/features/rental/web/upload-standard-layout.tsx

@@ -1,61 +0,0 @@
-import { FormScreenLayout, usePrimitives, useTranslation } from "@cosmicdrift/kumiko-renderer";
-import { UploadZone, uploadFileRef } from "@cosmicdrift/kumiko-renderer/web";
-import { type ReactNode, useState } from "react";
-
-type UploadedReceipt = { readonly id: string; readonly name: string };
-
-export function UploadStandardLayout(): ReactNode {
-  const t = useTranslation();
-  const { Section, Button, Text } = usePrimitives();
-  const [uploadedReceipts, setUploadedNames] = useState<readonly UploadedReceipt[]>([]);
-
-  async function uploadReceipt(file: File): Promise<void> {
-    await uploadFileRef(file);
-    setUploadedNames((receipts) => [...receipts, { id: crypto.randomUUID(), name: file.name }]);
-  }
-
-  return (
-    <FormScreenLayout
-      testId="upload-standard-layout"
-      description={t("rental.upload.description")}
-      actions={
-        uploadedReceipts.length > 0 ? (
-          <Button testId="upload-to-review">{t("rental.upload.toReview")}</Button>
-        ) : undefined
-      }
-    >
-      <Section
-        title={t("rental.upload.zoneTitle")}
-        icon="upload"
-        subtitle={t("rental.upload.zoneDescription")}
-        testId="upload-zone-section"
-      >
-        <UploadZone
-          testId="upload-zone"
-          title={t("rental.upload.dropTitle")}
-          hint={t("rental.upload.dropHint")}
-          accept={["application/pdf", "image/*"]}
-          onUpload={uploadReceipt}
-        />
-      </Section>
-      <Section
-        title={t("rental.upload.resultTitle")}
-        icon="file"
-        subtitle={t("rental.upload.resultDescription")}
-        testId="upload-result-section"
-      >
-        {uploadedReceipts.length === 0 ? (
-          <Text variant="muted">{t("rental.upload.empty")}</Text>
-        ) : (
-          <ul data-testid="upload-result-list" className="space-y-2">
-            {uploadedReceipts.map(({ id, name }) => (
-              <li key={id} className="text-sm">
-                {name}
-              </li>
-            ))}
-          </ul>
-        )}
-      </Section>
-    </FormScreenLayout>
-  );
-}