@cosmicdrift/kumiko-bundled-features 0.102.2 → 0.105.0

package/src/auth-email-password/__tests__/auth-mailer.test.ts

@@ -1,138 +0,0 @@
-import { describe, expect, test } from "bun:test";
-import { createInMemoryTransport } from "../../channel-email";
-import { createAuthMailerConfig } from "../auth-mailer";
-
-function makeArgs(overrides?: Record<string, unknown>) {
-  const mailSender = createInMemoryTransport();
-  return {
-    mailSender,
-    hmacSecret: "test-hmac-secret",
-    baseUrl: "https://admin.example.com",
-    paths: {
-      resetPassword: "/reset-password",
-      verifyEmail: "/verify-email",
-      signupComplete: "/signup/complete",
-      inviteAccept: "/invite/accept",
-    },
-    appName: "TestApp",
-    locale: "en" as const,
-    ...overrides,
-  };
-}
-
-describe("createAuthMailerConfig", () => {
-  test("returns all 4 setups", () => {
-    const config = createAuthMailerConfig(makeArgs());
-    expect(config.passwordReset).toBeDefined();
-    expect(config.emailVerification).toBeDefined();
-    expect(config.signup).toBeDefined();
-    expect(config.invite).toBeDefined();
-  });
-
-  test("constructs URLs from baseUrl + paths", () => {
-    const config = createAuthMailerConfig(makeArgs());
-    expect(config.passwordReset.appResetUrl).toBe("https://admin.example.com/reset-password");
-    expect(config.emailVerification.appVerifyUrl).toBe("https://admin.example.com/verify-email");
-    expect(config.signup.appActivationUrl).toBe("https://admin.example.com/signup/complete");
-    expect(config.invite.appAcceptUrl).toBe("https://admin.example.com/invite/accept");
-  });
-
-  test("forwards hmacSecret", () => {
-    const config = createAuthMailerConfig(makeArgs());
-    expect(config.passwordReset.hmacSecret).toBe("test-hmac-secret");
-    expect(config.emailVerification.hmacSecret).toBe("test-hmac-secret");
-  });
-
-  test("sendResetEmail calls mailSender.send with rendered content", async () => {
-    const args = makeArgs();
-    const config = createAuthMailerConfig(args);
-
-    await config.passwordReset.sendResetEmail({
-      email: "user@example.com",
-      resetUrl: "https://admin.example.com/reset?token=abc",
-      expiresAt: "2026-06-09T12:00:00.000Z",
-    });
-
-    expect(args.mailSender.sent).toHaveLength(1);
-    expect(args.mailSender.sent[0]!.to).toBe("user@example.com");
-    expect(args.mailSender.sent[0]!.subject).toContain("TestApp");
-    expect(args.mailSender.sent[0]!.subject).toContain("Reset");
-    expect(args.mailSender.sent[0]!.html).toContain("https://admin.example.com/reset?token=abc");
-  });
-
-  test("sendVerificationEmail calls mailSender.send", async () => {
-    const args = makeArgs();
-    const config = createAuthMailerConfig(args);
-
-    await config.emailVerification.sendVerificationEmail({
-      email: "user@example.com",
-      verificationUrl: "https://admin.example.com/verify?token=abc",
-      expiresAt: "2026-06-09T12:00:00.000Z",
-    });
-
-    expect(args.mailSender.sent).toHaveLength(1);
-    expect(args.mailSender.sent[0]!.to).toBe("user@example.com");
-    expect(args.mailSender.sent[0]!.subject).toContain("TestApp");
-    expect(args.mailSender.sent[0]!.subject).toContain("Verify");
-  });
-
-  test("sendActivationEmail calls mailSender.send", async () => {
-    const args = makeArgs();
-    const config = createAuthMailerConfig(args);
-
-    await config.signup.sendActivationEmail({
-      email: "user@example.com",
-      activationUrl: "https://admin.example.com/signup/complete?token=abc",
-      expiresAt: "2026-06-09T12:00:00.000Z",
-    });
-
-    expect(args.mailSender.sent).toHaveLength(1);
-    expect(args.mailSender.sent[0]!.to).toBe("user@example.com");
-    expect(args.mailSender.sent[0]!.subject).toContain("TestApp");
-  });
-
-  test("sendInviteEmail calls mailSender.send with role", async () => {
-    const args = makeArgs();
-    const config = createAuthMailerConfig(args);
-
-    await config.invite.sendInviteEmail({
-      email: "user@example.com",
-      inviteUrl: "https://admin.example.com/invite/accept?token=abc",
-      expiresAt: "2026-06-09T12:00:00.000Z",
-      role: "Admin",
-    });
-
-    expect(args.mailSender.sent).toHaveLength(1);
-    expect(args.mailSender.sent[0]!.to).toBe("user@example.com");
-    expect(args.mailSender.sent[0]!.subject).toContain("TestApp");
-    expect(args.mailSender.sent[0]!.html).toContain("Admin");
-  });
-
-  test("uses defaults when appName is omitted", () => {
-    const config = createAuthMailerConfig(makeArgs({ appName: undefined }));
-    expect(config.passwordReset.appResetUrl).toBeDefined();
-  });
-
-  test("emailVerificationMode is absent when not provided", () => {
-    const config = createAuthMailerConfig(makeArgs());
-    expect("mode" in config.emailVerification).toBe(false);
-  });
-
-  test("emailVerificationMode is set when provided", () => {
-    const config = createAuthMailerConfig(makeArgs({ emailVerificationMode: "strict" }));
-    expect(config.emailVerification).toHaveProperty("mode", "strict");
-  });
-
-  test("locale 'de' renders German subject", async () => {
-    const args = makeArgs({ locale: "de" });
-    const config = createAuthMailerConfig(args);
-
-    await config.passwordReset.sendResetEmail({
-      email: "user@example.com",
-      resetUrl: "https://example.com/reset?token=abc",
-      expiresAt: "2026-06-09T12:00:00.000Z",
-    });
-
-    expect(args.mailSender.sent[0]!.subject).toContain("Passwort");
-  });
-});

package/src/auth-email-password/auth-mailer.ts

@@ -1,153 +0,0 @@
-import type { EmailTransport } from "../channel-email";
-import type { AuthMailLocale } from "./email-templates";
-import {
-  renderActivationEmail,
-  renderInviteEmail,
-  renderResetPasswordEmail,
-  renderVerifyEmail,
-} from "./email-templates";
-import type {
-  EmailVerificationOptions,
-  InviteOptions,
-  PasswordResetOptions,
-  SignupOptions,
-} from "./feature";
-
-/**
- * Komplette Konfiguration für die 4 Auth-Mail-Flows einer App.
- *
- * Strukturell kompatibel mit den `*Setup`-Typen aus
- * `@cosmicdrift/kumiko-dev-server` (`PasswordResetSetup`,
- * `EmailVerificationSetup`, `SignupSetup`, `InviteSetup`).
- */
-export type AuthMailerConfig = {
-  readonly passwordReset: PasswordResetOptions & {
-    readonly appResetUrl: string;
-    readonly sendResetEmail: (args: {
-      email: string;
-      resetUrl: string;
-      expiresAt: string;
-    }) => Promise<void>;
-  };
-  readonly emailVerification: EmailVerificationOptions & {
-    readonly appVerifyUrl: string;
-    readonly sendVerificationEmail: (args: {
-      email: string;
-      verificationUrl: string;
-      expiresAt: string;
-    }) => Promise<void>;
-  };
-  readonly signup: SignupOptions & {
-    readonly appActivationUrl: string;
-    readonly sendActivationEmail: (args: {
-      email: string;
-      activationUrl: string;
-      expiresAt: string;
-    }) => Promise<void>;
-  };
-  readonly invite: InviteOptions & {
-    readonly appAcceptUrl: string;
-    readonly sendInviteEmail: (args: {
-      email: string;
-      inviteUrl: string;
-      expiresAt: string;
-      role: string;
-    }) => Promise<void>;
-  };
-};
-
-/** Pfad-Konstanten der 4 Auth-Seiten (relativ zur App-baseUrl). */
-export type AuthPaths = {
-  readonly resetPassword: string;
-  readonly verifyEmail: string;
-  readonly signupComplete: string;
-  readonly inviteAccept: string;
-};
-
-/** Konventions-Pfade — alle Kumiko-Apps nutzen dieselben. Apps überschreiben
- *  nur die Ausnahme via `makeAuthPaths({ ... })`. */
-export const DEFAULT_AUTH_PATHS: AuthPaths = {
-  resetPassword: "/reset-password",
-  verifyEmail: "/verify-email",
-  signupComplete: "/signup/complete",
-  inviteAccept: "/invite/accept",
-};
-
-export function makeAuthPaths(overrides: Partial<AuthPaths> = {}): AuthPaths {
-  return { ...DEFAULT_AUTH_PATHS, ...overrides };
-}
-
-export type CreateAuthMailerConfigArgs = {
-  readonly mailSender: EmailTransport;
-  readonly hmacSecret: string;
-  /** Basis-URL der App inkl. Schema (z.B. "https://admin.example.com").
-   *  Die factory hängt paths.resetPassword etc. an. */
-  readonly baseUrl: string;
-  /** Pfad-Konstanten für die Auth-Seiten. Default: DEFAULT_AUTH_PATHS. */
-  readonly paths?: AuthPaths;
-  /** App-Name für Mail-Subject + Body. Default "Account". */
-  readonly appName?: string;
-  /** Locale für die Mail-Templates. Default "de". */
-  readonly locale?: AuthMailLocale;
-  /** Email-verification mode. Default undefined (kein Gate).
-   *  "strict" blockt Login solange `emailVerified=false`.
-   *  "off" mountet die Routes ohne login-gating. */
-  readonly emailVerificationMode?: "strict" | "off";
-};
-
-/**
- * Factory für `AuthMailerConfig` — baut die 4 Auth-Mail-Setups
- * (passwordReset / emailVerification / signup / invite) inklusive
- * `send*Email`-Wrapper + URL-Konstruktion.
- *
- * Jede App ruft das einmal auf und spreadet das Resultat in die
- * `auth`-Option von `runProdApp` / `runDevApp`.
- */
-export function createAuthMailerConfig(args: CreateAuthMailerConfigArgs): AuthMailerConfig {
-  const appName = args.appName ?? "Account";
-  const locale = args.locale ?? "de";
-  const paths = args.paths ?? DEFAULT_AUTH_PATHS;
-  return {
-    passwordReset: {
-      hmacSecret: args.hmacSecret,
-      appResetUrl: `${args.baseUrl}${paths.resetPassword}`,
-      sendResetEmail: async ({ email, resetUrl, expiresAt }) => {
-        await args.mailSender.send({
-          to: email,
-          ...renderResetPasswordEmail({ resetUrl, expiresAt, locale, appName }),
-        });
-      },
-    },
-    emailVerification: {
-      hmacSecret: args.hmacSecret,
-      ...(args.emailVerificationMode !== undefined && {
-        mode: args.emailVerificationMode,
-      }),
-      appVerifyUrl: `${args.baseUrl}${paths.verifyEmail}`,
-      sendVerificationEmail: async ({ email, verificationUrl, expiresAt }) => {
-        await args.mailSender.send({
-          to: email,
-          ...renderVerifyEmail({ verificationUrl, expiresAt, locale, appName }),
-        });
-      },
-    },
-    signup: {
-      appActivationUrl: `${args.baseUrl}${paths.signupComplete}`,
-      sendActivationEmail: async ({ email, activationUrl, expiresAt }) => {
-        await args.mailSender.send({
-          to: email,
-          ...renderActivationEmail({ activationUrl, expiresAt, locale, appName }),
-        });
-      },
-    },
-    invite: {
-      appAcceptUrl: `${args.baseUrl}${paths.inviteAccept}`,
-      sendInviteEmail: async ({ email, inviteUrl, expiresAt, role }) => {
-        await args.mailSender.send({
-          to: email,
-          ...renderInviteEmail({ inviteUrl, expiresAt, role, locale, appName }),
-        });
-      },
-    },
-  };
-}