@cosmicdrift/kumiko-samples 0.387.0 → 0.388.0

package/packages/bundled-features/src/tenant/handlers/member-directory.query.ts

@@ -50,6 +50,8 @@ export const memberDirectoryQuery = definePagedQueryHandler({
     limit: z.number().int().min(1).max(MAX_LIST_LIMIT).default(MAX_LIST_LIMIT),
     // Sent by the reference combobox while the user types.
     search: z.string().trim().min(1).optional(),
+    // Resolves exactly these users; callers that know their ids must not depend on the cap.
+    ids: z.array(z.string().min(1)).max(MAX_LIST_LIMIT).optional(),
   }),
   access: { roles: access.admin },
   description:
@@ -62,7 +64,8 @@ export const memberDirectoryQuery = definePagedQueryHandler({
           "tenant:query:member-directory requires ctx.systemDb — is r.systemScope() still set on the tenant feature?",
       });
     }
-    const { limit, search } = query.payload;
+    const { limit, search, ids } = query.payload;
+    if (ids?.length === 0) return { rows: [], nextCursor: null };
     // Without a search the first `limit` rows are enough; with one, every
     // candidate must be decrypted before the limit can apply.
     const scanLimit = search === undefined ? limit : SEARCH_SCAN_CAP;
@@ -71,13 +74,16 @@ export const memberDirectoryQuery = definePagedQueryHandler({
       const db = ctx.systemDb.acknowledgeCrossTenant(
         "SystemAdmin reference labels span every tenant, as user:query:user:list did",
       );
-      users = await selectMany(db, userTable, undefined, {
+      users = await selectMany(db, userTable, ids === undefined ? undefined : { id: ids }, {
         limit: scanLimit,
         orderBy: { col: "id", direction: "asc" },
       });
     } else {
       const db = ctx.systemDb.assertTenantMatch(query.user.tenantId);
-      const userIds = (await loadMemberUserIds(db, query.user.tenantId)).slice(0, scanLimit);
+      const requestedIds = ids === undefined ? undefined : new Set(ids);
+      const userIds = (await loadMemberUserIds(db, query.user.tenantId))
+        .filter((id) => requestedIds === undefined || requestedIds.has(id))
+        .slice(0, scanLimit);
       users =
         userIds.length > 0
           ? await selectMany(

package/packages/bundled-features/src/tenant/handlers/tenant-directory.query.ts

@@ -27,10 +27,12 @@ export const tenantDirectoryQuery = definePagedQueryHandler({
     limit: z.number().int().min(1).max(MAX_LIST_LIMIT).default(MAX_LIST_LIMIT),
     // Sent by the reference combobox while the user types.
     search: z.string().trim().min(1).optional(),
+    // Resolves exactly these tenants; callers that know their ids must not depend on the cap.
+    ids: z.array(z.string().min(1)).max(MAX_LIST_LIMIT).optional(),
   }),
   access: { roles: access.admin },
   description:
-    "Lists tenants as id/label pairs for resolving tenant references to display names: the caller's own tenant for an admin, every tenant for a SystemAdmin.",
+    "Lists tenants as id/label pairs for resolving tenant references to display names: the caller's own tenant for an admin, every tenant for a SystemAdmin. A search returns the first `limit` matches in tenant-key order (sorted by label afterwards), not the alphabetically best matches.",
   agent: { expose: false },
   handler: async (query, ctx) => {
     if (!ctx.systemDb) {
@@ -39,14 +41,15 @@ export const tenantDirectoryQuery = definePagedQueryHandler({
           "tenant:query:tenant-directory requires ctx.systemDb — is r.systemScope() still set on the tenant feature?",
       });
     }
-    const { limit, search } = query.payload;
+    const { limit, search, ids } = query.payload;
+    if (ids?.length === 0) return { rows: [], nextCursor: null };
     const scanLimit = search === undefined ? limit : SEARCH_SCAN_CAP;
     let tenants: readonly { id: unknown; name?: unknown }[];
     if (isSystemAdmin(query.user)) {
       const db = ctx.systemDb.acknowledgeCrossTenant(
         "SystemAdmin reference labels span every tenant, as tenant:query:tenant:list did",
       );
-      tenants = await selectMany(db, tenantTable, undefined, {
+      tenants = await selectMany(db, tenantTable, ids === undefined ? undefined : { id: ids }, {
         limit: scanLimit,
         orderBy: [
           { col: "key", direction: "asc" },
@@ -56,7 +59,7 @@ export const tenantDirectoryQuery = definePagedQueryHandler({
     } else {
       const db = ctx.systemDb.assertTenantMatch(query.user.tenantId);
       const row = await fetchOne(db, tenantTable, { id: query.user.tenantId });
-      tenants = row ? [row] : [];
+      tenants = row && (ids === undefined || ids.includes(query.user.tenantId)) ? [row] : [];
     }
     // name is ciphertext at rest, so the SQL page is keyed by the plaintext
     // `key`; label order and search happen in memory after decrypting.

package/packages/bundled-features/src/tenant-lifecycle/changes.json

@@ -1,4 +1,10 @@
 [
+  {
+    "version": "0.388.0",
+    "type": "fix",
+    "title": "Destroy sweep keeps a minimum time slice per tenant",
+    "detail": "With many tenants in destroying state the shared tick budget no longer shrinks a tenant's slice below two seconds, so chunking hooks make progress instead of failing the stage as no-progress attempts."
+  },
   {
     "version": "0.365.0",
     "type": "fix",

package/packages/bundled-features/src/tenant-lifecycle/constants.ts

@@ -62,3 +62,8 @@ export type TenantDestructionStageName = (typeof TENANT_DESTRUCTION_STAGES)[numb
 // The sweep cron fires every minute with concurrency "skip", so a tick must
 // finish well inside that window or the next one is skipped.
 export const DESTRUCTION_STAGE_TICK_BUDGET_MS = 30_000;
+
+// Lower bound of a tenant's share of the tick budget. Below it a chunking hook
+// without a guaranteed first batch processes nothing, and a no-progress stage
+// counts as a failed attempt, which would abandon the pipeline under load.
+export const DESTRUCTION_STAGE_MIN_SLICE_MS = 2_000;

package/packages/bundled-features/src/tenant-lifecycle/run-tenant-destroy.ts

@@ -23,6 +23,7 @@ import type { SearchAdapter } from "@cosmicdrift/kumiko-framework/search";
 import { getTemporal } from "@cosmicdrift/kumiko-framework/time";
 import { tenantEntity, tenantTable } from "../tenant/index.ts";
 import {
+  DESTRUCTION_STAGE_MIN_SLICE_MS,
   DESTRUCTION_STAGE_TICK_BUDGET_MS,
   TENANT_AGGREGATE_TYPE,
   TENANT_DESTRUCTION_COMPLETED_EVENT_QN,
@@ -461,7 +462,10 @@ export async function runTenantDestructionSweep(args: {
   // window and starve the ones behind it. Each slice starts when its tenant
   // starts: anchoring to a shared tick deadline would hand tenants after an
   // overrun a zero slice, and a no-progress stage counts as a failed attempt.
-  const sliceMs = DESTRUCTION_STAGE_TICK_BUDGET_MS / Math.max(1, destroying.length);
+  const sliceMs = Math.max(
+    DESTRUCTION_STAGE_MIN_SLICE_MS,
+    DESTRUCTION_STAGE_TICK_BUDGET_MS / Math.max(1, destroying.length),
+  );
   for (const row of destroying) {
     const tenantDeadlineAt = Date.now() + sliceMs;
     try {

package/packages/bundled-features/src/tier-engine/changes.json

@@ -1,4 +1,10 @@
 [
+  {
+    "version": "0.388.0",
+    "type": "fix",
+    "title": "set-tenant-tier no longer accepts source default",
+    "detail": "The source field of set-tenant-tier is limited to manual and billing. The value default is reserved for the signup default tier and made a manual grant look like a billing row that the next sync overwrites."
+  },
   {
     "version": "0.370.0",
     "type": "breaking",

package/packages/bundled-features/src/tier-engine/handlers/set-tenant-tier.write.ts

@@ -59,7 +59,10 @@ export function createSetTenantTierWrite(opts: SetTenantTierOptions = {}) {
         .min(1)
         .max(50)
         .refine((t) => !opts.validTiers || opts.validTiers.has(t), { message: "unknown tier" }),
-      source: z.enum(TierAssignmentSources).default(TierAssignmentSources.manual),
+      // `default` is reserved for the signup default tier; the billing sync treats it like `billing`.
+      source: z
+        .enum([TierAssignmentSources.manual, TierAssignmentSources.billing])
+        .default(TierAssignmentSources.manual),
     }),
     access: { roles: ["SystemAdmin"] },
     agent: { risk: "high" },

package/packages/bundled-features/src/tier-engine/web/constants.ts

@@ -3,6 +3,8 @@
 // category in the kumiko isolation model (runtime may import client, client
 // may only import client) — otherwise the runtime isolation guard throws on
 // the client imports. Same pattern as text-content/constants.
+import { isOneOf } from "@cosmicdrift/kumiko-types/type-guards";
+
 // Feature name
 export const TIER_ENGINE_FEATURE = "tier-engine" as const;
 
@@ -24,10 +26,8 @@ export const TierAssignmentSources = {
 export type TierAssignmentSource =
   (typeof TierAssignmentSources)[keyof typeof TierAssignmentSources];
 
-const TIER_ASSIGNMENT_SOURCE_VALUES: readonly string[] = Object.values(TierAssignmentSources);
-
 export function isTierAssignmentSource(value: unknown): value is TierAssignmentSource {
-  return typeof value === "string" && TIER_ASSIGNMENT_SOURCE_VALUES.includes(value);
+  return isOneOf(Object.values(TierAssignmentSources), value);
 }
 
 // Qualified query handler names.

package/packages/bundled-features/src/user-data-rights/run-export-jobs.ts

@@ -21,7 +21,6 @@ import type { Logger } from "@cosmicdrift/kumiko-framework/logging";
 // storage indefinitely.
 
 import { addDurationSpec } from "@cosmicdrift/kumiko-framework/compliance";
-import { PII_ERASED_SENTINEL } from "@cosmicdrift/kumiko-framework/crypto";
 import type { DbConnection, DbRunner } from "@cosmicdrift/kumiko-framework/db";
 import {
   createEventStoreExecutor,
@@ -44,7 +43,7 @@ import {
 import type { MetricsHandle } from "@cosmicdrift/kumiko-framework/observability";
 import type { getTemporal } from "@cosmicdrift/kumiko-framework/time";
 import { resolveProfileForTenant } from "../compliance-profiles/index.ts";
-import { decryptStoredPii } from "../shared/index.ts";
+import { decryptStoredUserEmail } from "../shared/index.ts";
 import { userTable } from "../user/index.ts";
 import { selectExportJobsForStorageCleanup } from "./db/queries/export-jobs.ts";
 import { runUserExport, type UserExportBundle } from "./run-user-export.ts";
@@ -822,8 +821,8 @@ async function lookupUserContact(
     locale: string | null;
   } | null;
   if (!row?.email) return null;
-  const email = await decryptStoredPii(row.email, "email", "user-data-rights:export-ready");
-  if (email === PII_ERASED_SENTINEL) return null;
+  const email = await decryptStoredUserEmail(row.email, "user-data-rights:export-ready");
+  if (email === null) return null;
   return { email, locale: row.locale ?? null };
 }
 

package/packages/bundled-features/src/user-data-rights/run-forget-cleanup.ts

@@ -518,7 +518,8 @@ async function processUser(args: {
       // is what makes this crash-safe: eraseKey-throw → tx rollback → user
       // stays DeletionRequested → next run retries; flip-throw after a
       // successful erase → retry re-runs the idempotent hooks and eraseKey
-      // (contractually a no-op on an erased/unknown subject). Erasing after
+      // (idempotent: a repeat erase keeps the original tombstone, an unknown
+      // subject gets one). Erasing after
       // the flip instead would risk a permanent silent miss: user already
       // Deleted, no run ever picks him up again, key stays live.
       if (kms) {

package/packages/bundled-features/src/waitlist/changes.json

@@ -1,4 +1,22 @@
 [
+  {
+    "version": "0.388.0",
+    "type": "fix",
+    "title": "Link-on-signup failures, legacy re-run and purge audit order",
+    "detail": "link-on-signup throws when the entry update fails and the entry is still invited, so the consumer redelivers. The offlot legacy migration skips rows that are already imports. purge writes its audit event before shredding keys."
+  },
+  {
+    "version": "0.388.0",
+    "type": "fix",
+    "title": "Admin notice language comes from adminLocale",
+    "detail": "The admin notice mail used the request locale, which is the entrant's browser language. The new adminLocale option (en, de or es, default en) sets the operator's language."
+  },
+  {
+    "version": "0.388.0",
+    "type": "fix",
+    "title": "Legacy migration dry run counts the streams it would archive",
+    "detail": "The dry run now runs the read-only archive checks and reports archivedStreams without writing; the CLI prints \"would archive\" for it."
+  },
   {
     "version": "0.379.0",
     "type": "improvement",

package/packages/bundled-features/src/waitlist/handlers/export-purge.write.ts

@@ -74,8 +74,9 @@ export const purgeHandler = defineWriteHandler<"purge", typeof PurgeSchema, Wait
         }),
       );
     }
-    await purgeWaitlistRows(db, rows, event.user.id);
+    // Audit first: purgeWaitlistRows shreds KMS keys, which a later failure cannot roll back.
     await appendAudit(ctx, WAITLIST_PURGED_EVENT_QN, rows.length);
+    await purgeWaitlistRows(db, rows, event.user.id);
     return { isSuccess: true, data: { purged: rows.length } };
   },
 });

package/packages/bundled-features/src/waitlist/handlers/submit.write.ts

@@ -73,9 +73,10 @@ async function hasOpenEntryForEmail(email: string, ctx: HandlerContext): Promise
   return found.rows.length > 0;
 }
 
-// The resolver usually reads config; run it outside the handler transaction's
-// critical section so a failing statement cannot abort the transaction that holds
-// the entry, and a slow resolver does not extend the per-email advisory lock.
+// The resolver usually reads config. It runs before the per-email advisory lock so a
+// slow resolver does not extend the lock. It still shares the handler transaction: a
+// thrown JS error is swallowed here, but a failed SQL statement inside it would abort
+// the transaction, so resolvers must not issue statements that can fail.
 async function resolveAdminRecipient(
   opts: WaitlistOptions,
   ctx: HandlerContext,
@@ -175,8 +176,7 @@ export function createSubmitHandler(opts: WaitlistOptions) {
             message: payload.message,
           }),
           priority: "normal",
-          // Operator-facing: the request locale, not the one the entrant picked in the form.
-          locale: resolveWaitlistMailLocale(ctx.locale),
+          locale: resolveWaitlistMailLocale(opts.adminLocale),
         });
       });
 

package/packages/bundled-features/src/waitlist/import.ts

@@ -38,6 +38,11 @@ export function waitlistImportId(sourceKey: string): string {
   return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20, 32)}`;
 }
 
+// The version nibble marks ids minted by waitlistImportId; legacy row ids are random UUIDs.
+export function isWaitlistImportId(id: string): boolean {
+  return id[14] === "5";
+}
+
 function presentOnly(fields: Record<string, unknown>): Record<string, unknown> {
   return Object.fromEntries(Object.entries(fields).filter(([, value]) => value !== undefined));
 }

package/packages/bundled-features/src/waitlist/legacy-migrate.ts

@@ -9,6 +9,7 @@ import {
   createTenantDb,
   selectMany,
   table,
+  tableExists,
   text as textColumn,
   timestamp,
   transaction,
@@ -23,9 +24,16 @@ import {
 } from "@cosmicdrift/kumiko-framework/event-store";
 import type { DbConnection } from "@cosmicdrift/kumiko-types/db-connection";
 import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
-import { importWaitlistEntry, type WaitlistImportEntry, waitlistImportId } from "./import.ts";
+import {
+  importWaitlistEntry,
+  isWaitlistImportId,
+  type WaitlistImportEntry,
+  waitlistImportId,
+} from "./import.ts";
 import { WAITLIST_STATUS, type WaitlistStatus } from "./web/constants.ts";
 
+const ARCHIVED_STREAMS_TABLE = "public.kumiko_archived_streams";
+
 export const LEGACY_WAITLIST_SOURCES = ["offlot", "publicstatus"] as const;
 export type LegacyWaitlistSource = (typeof LEGACY_WAITLIST_SOURCES)[number];
 
@@ -210,15 +218,19 @@ async function archiveLegacyStream(
   db: DbConnection,
   legacyId: string,
   importedId: string,
+  dryRun: boolean,
 ): Promise<number> {
   if (legacyId === importedId) return 0;
-  if (await isStreamArchived(db, SYSTEM_TENANT_ID, legacyId)) return 0;
+  // A dry run never creates the archive table, so a missing one means nothing is archived yet.
+  const archiveTableReady = !dryRun || (await tableExists(db, ARCHIVED_STREAMS_TABLE));
+  if (archiveTableReady && (await isStreamArchived(db, SYSTEM_TENANT_ID, legacyId))) return 0;
   const legacyEvents = await countWhere(db, eventsTable, {
     tenantId: SYSTEM_TENANT_ID,
     aggregateId: legacyId,
     aggregateType: LEGACY_AGGREGATE_TYPE,
   });
   if (legacyEvents === 0) return 0;
+  if (dryRun) return 1;
   await archiveStream(db, {
     tenantId: SYSTEM_TENANT_ID,
     aggregateId: legacyId,
@@ -243,6 +255,12 @@ export async function migrateLegacyWaitlist(
   let archivedStreams = 0;
   if (!options.dryRun && options.from === "offlot") await createArchivedStreamsTable(db);
   for (const row of rows) {
+    // The offlot default source is the entity table: rows a previous run imported
+    // are already migrated entries and must neither be re-imported nor archived.
+    if (options.from === "offlot" && isWaitlistImportId(String(row["id"]))) {
+      skipped += 1;
+      continue;
+    }
     const entry =
       options.from === "offlot"
         ? await mapOfflotRow(row)
@@ -257,11 +275,12 @@ export async function migrateLegacyWaitlist(
       if (outcome === "created") created += 1;
       else skipped += 1;
     });
-    if (!options.dryRun && options.from === "offlot") {
+    if (options.from === "offlot") {
       archivedStreams += await archiveLegacyStream(
         db,
         String(row["id"]),
         waitlistImportId(entry.sourceKey),
+        options.dryRun,
       );
     }
   }

package/packages/bundled-features/src/waitlist/link-on-signup.ts

@@ -75,22 +75,25 @@ export const linkWaitlistOnSignup: MultiStreamApplyFn = async (event, tx) => {
   if (typeof user?.email !== "string") return;
   const email = normalizeEmail(await decryptStoredPii(user.email, "email", PII_DECRYPT_REASON));
 
-  const found = await waitlistExecutor.list(
-    {
-      filter: { field: "email", op: "eq", value: email },
-      filters: [{ field: "status", op: "in", value: [WAITLIST_STATUS.Invited] }],
-    },
-    platformActor(),
-    db,
-  );
-  const invited = [...found.rows].sort(newestSubmittedFirst)[0];
+  const findInvited = async () => {
+    const found = await waitlistExecutor.list(
+      {
+        filter: { field: "email", op: "eq", value: email },
+        filters: [{ field: "status", op: "in", value: [WAITLIST_STATUS.Invited] }],
+      },
+      platformActor(),
+      db,
+    );
+    return [...found.rows].sort(newestSubmittedFirst)[0];
+  };
+  const invited = await findInvited();
   // skip: the signup email has no invited waitlist entry (open signup or stale invite).
   if (!invited) return;
   const { id, version } = invited;
   // skip: defensive guard on the row shape.
   if (typeof id !== "string" || typeof version !== "number") return;
 
-  await waitlistExecutor.update(
+  const updated = await waitlistExecutor.update(
     {
       id,
       version,
@@ -103,4 +106,11 @@ export const linkWaitlistOnSignup: MultiStreamApplyFn = async (event, tx) => {
     platformActor(),
     db,
   );
+  // skip: linked.
+  if (updated.isSuccess) return;
+  // A concurrent admin change that already moved the entry out of `invited` makes the link
+  // moot; otherwise throw so the at-least-once consumer redelivers.
+  // skip: the entry left `invited` concurrently.
+  if ((await findInvited())?.id !== id) return;
+  throw new Error(`waitlist:link-on-signup: could not link waitlist entry ${id}`);
 };

package/packages/bundled-features/src/waitlist/options.ts

@@ -24,6 +24,9 @@ export type WaitlistOptions = {
    *  string or an absent option sends none. Best effort, never fails the submit,
    *  also when the resolver throws or rejects. */
   readonly notifyRecipient?: (ctx: HandlerContext) => string | null | Promise<string | null>;
+  /** Language of the admin notice mail (en, de or es; anything else falls back to en).
+   *  Not taken from the request: a submit comes from the entrant, not the operator. */
+  readonly adminLocale?: string;
   /** Default `{ mode: "own-tenant", role: "TenantAdmin" }`. */
   readonly invite?: WaitlistInviteOptions;
   /** Default: 5 submits per IP per 10 minutes. Pass `{ disabled: true, reason }`

package/samples/apps/styleguide/src/features/widgets/i18n.ts

@@ -119,6 +119,17 @@ export const WIDGETS_I18N = {
   "widgets:catalog:status-maintenance": { de: "maintenance", en: "maintenance" },
   "widgets:catalog:repayment-model": { de: "Tilgungsmodell", en: "Repayment model" },
   "widgets:catalog:mode-annuity": { de: "Annuität", en: "Annuity" },
+  "widgets:catalog:choice-cards": { de: "Zahlungsanbieter", en: "Payment provider" },
+  "widgets:catalog:choice-direct": { de: "Direkt", en: "Direct" },
+  "widgets:catalog:choice-direct-description": {
+    de: "Rechnung vom Anbieter der App",
+    en: "Invoiced by the app operator",
+  },
+  "widgets:catalog:choice-reseller": { de: "Reseller", en: "Reseller" },
+  "widgets:catalog:choice-reseller-description": {
+    de: "Verkäufer ist der Reseller, inklusive Umsatzsteuer",
+    en: "Sold by the reseller, VAT included",
+  },
   "widgets:catalog:mode-fixed": { de: "Feste Rate", en: "Fixed rate" },
   "widgets:catalog:model": { de: "Modell", en: "Model" },
   "widgets:catalog:nominal-rate": { de: "Sollzins", en: "Nominal rate" },

package/samples/apps/styleguide/src/features/widgets/web/Widgets.tsx

@@ -6,6 +6,7 @@ import {
   AiTextArea,
   AiTextField,
   BooleanField,
+  ChoiceCards,
   CollapsibleSection,
   ComparisonTable,
   DateField,
@@ -50,6 +51,7 @@ export function Widgets(): ReactNode {
   const t = useTranslation();
   const locale = useLocale().locale();
   const [mode, setMode] = useState<"annuity" | "fixed">("annuity");
+  const [provider, setProvider] = useState<"direct" | "reseller">("direct");
   const [drawerOpen, setDrawerOpen] = useState(false);
   const [belowHeaderDrawerOpen, setBelowHeaderDrawerOpen] = useState(false);
   const [floatingPanelOpen, setFloatingPanelOpen] = useState(false);
@@ -181,6 +183,28 @@ export function Widgets(): ReactNode {
         />
       </SectionCard>
 
+      <SectionCard title={t("widgets:catalog:choice-cards")}>
+        <ChoiceCards
+          value={provider}
+          onChange={setProvider}
+          ariaLabel={t("widgets:catalog:choice-cards")}
+          options={[
+            {
+              value: "direct",
+              title: t("widgets:catalog:choice-direct"),
+              description: t("widgets:catalog:choice-direct-description"),
+              aside: "9,00 €",
+            },
+            {
+              value: "reseller",
+              title: t("widgets:catalog:choice-reseller"),
+              description: t("widgets:catalog:choice-reseller-description"),
+              aside: "9,90 €",
+            },
+          ]}
+        />
+      </SectionCard>
+
       <CollapsibleSection title={t("widgets:catalog:advanced-settings")}>
         <EmptyState
           title={t("widgets:catalog:no-extra-repayments-title")}

package/samples/apps/use-all-bundled/e2e-billing-gallery/gallery-constants.ts

@@ -4,6 +4,7 @@
 // runs in a Playwright worker and must not pull the server import chain).
 
 export const GALLERY_PROVIDER = "gallery-mock-provider";
+export const GALLERY_MOR_PROVIDER = "gallery-mock-mor";
 export const GALLERY_TERMS_SLUG = "gallery-terms";
 export const GALLERY_OPERATOR_EMAIL = "billing@gallery.example";
 export const GALLERY_PLAN_PATH = "/tenant-admin/billing-plans";
@@ -14,3 +15,7 @@ export const GALLERY_TENANT_HOST = "localhost";
 export const GALLERY_APEX_HOST = "127.0.0.1";
 
 export const GALLERY_PRICE_IDS = { starter: "price_gallery_starter", pro: "price_gallery_pro" };
+export const GALLERY_MOR_PRICE_IDS = {
+  starter: "price_gallery_mor_starter",
+  pro: "price_gallery_mor_pro",
+};