@cosmicdrift/kumiko-bundled-features 0.111.0 → 0.112.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-bundled-features",
-  "version": "0.111.0",
+  "version": "0.112.0",
   "description": "Built-in features — tenant, user, auth, delivery. The stuff you'd rewrite anyway, already typed.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -95,11 +95,11 @@
     "./step-dispatcher": "./src/step-dispatcher/index.ts"
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-dispatcher-live": "0.111.0",
-    "@cosmicdrift/kumiko-framework": "0.111.0",
-    "@cosmicdrift/kumiko-headless": "0.111.0",
-    "@cosmicdrift/kumiko-renderer": "0.111.0",
-    "@cosmicdrift/kumiko-renderer-web": "0.111.0",
+    "@cosmicdrift/kumiko-dispatcher-live": "0.112.0",
+    "@cosmicdrift/kumiko-framework": "0.112.0",
+    "@cosmicdrift/kumiko-headless": "0.112.0",
+    "@cosmicdrift/kumiko-renderer": "0.112.0",
+    "@cosmicdrift/kumiko-renderer-web": "0.112.0",
     "@mollie/api-client": "^4.5.0",
     "@node-rs/argon2": "^2.0.2",
     "@types/nodemailer": "^8.0.0",

package/src/folders/__tests__/folders.integration.test.ts

@@ -331,6 +331,7 @@ describe("folders-user-data — tenantScopedDelete hooks", () => {
     await seedOneFolderWithAssignment();
     const ctx = {
       db: stack.db,
+      registry: stack.registry,
       tenantId: admin.tenantId,
       userId: admin.id,
       tenantModel: "multi-user" as const,
@@ -345,6 +346,7 @@ describe("folders-user-data — tenantScopedDelete hooks", () => {
     await seedOneFolderWithAssignment();
     const ctx = {
       db: stack.db,
+      registry: stack.registry,
       tenantId: admin.tenantId,
       userId: admin.id,
       tenantModel: "single-user" as const,
@@ -359,6 +361,7 @@ describe("folders-user-data — tenantScopedDelete hooks", () => {
     await seedOneFolderWithAssignment();
     const ctx = {
       db: stack.db,
+      registry: stack.registry,
       tenantId: admin.tenantId,
       userId: admin.id,
       tenantModel: "single-user" as const,

package/src/folders-user-data/__tests__/hooks.integration.test.ts

@@ -57,6 +57,7 @@ describe("folderAssignmentExportHook", () => {
 
     const snippet = await folderAssignmentExportHook({
       db: stack.db,
+      registry: stack.registry,
       tenantId: admin.tenantId,
       userId: admin.id,
     });

package/src/user-data-rights/__tests__/forget-hook-registry.integration.test.ts

@@ -0,0 +1,108 @@
+// A forget delete-hook receives the app registry so it can cascade custom child
+// projections for the executor's `<entity>.forgotten` event (runProjectionsForEvent).
+// executor.forget purges only the entity's OWN projection, and the forget pipeline
+// is a job — not a dispatched command — so the dispatcher's post-command projection
+// pass never fires. Without registry in the hook ctx the cascade is unreachable and
+// child read-model rows (m:n joins, per-parent detail projections) are orphaned on
+// live forget (a DSGVO gap). This pins that the plumbing delivers the real,
+// functional registry instance; the end-to-end cascade is covered consumer-side.
+
+import { afterAll, beforeAll, beforeEach, expect, test } from "bun:test";
+import { asRawClient } from "@cosmicdrift/kumiko-framework/bun-db";
+import {
+  createEntity,
+  createTextField,
+  defineFeature,
+  EXT_USER_DATA,
+  type Registry,
+  type UserDataDeleteHook,
+} from "@cosmicdrift/kumiko-framework/engine";
+import { createEventsTable } from "@cosmicdrift/kumiko-framework/event-store";
+import {
+  setupTestStack,
+  type TestStack,
+  unsafeCreateEntityTable,
+} from "@cosmicdrift/kumiko-framework/stack";
+import { createComplianceProfilesFeature } from "../../compliance-profiles";
+import { createDataRetentionFeature, tenantRetentionOverrideEntity } from "../../data-retention";
+import { createSessionsFeature } from "../../sessions";
+import { createUserFeature, userEntity } from "../../user";
+import { createUserDataRightsFeature } from "../feature";
+import { runForgetCleanup } from "../run-forget-cleanup";
+import {
+  createForgetSeeders,
+  nowInstant,
+  READ_TENANT_MEMBERSHIPS_DDL,
+  TENANT_SYSTEM,
+} from "./forget-test-helpers";
+
+const PROBE = "forget-registry-probe";
+let capturedRegistry: Registry | undefined;
+
+const captureHook: UserDataDeleteHook = async (ctx) => {
+  capturedRegistry = ctx.registry;
+};
+
+const probeEntity = createEntity({
+  table: `read_${PROBE.replace(/-/g, "_")}`,
+  fields: { name: createTextField({ required: true }) },
+});
+
+const probeFeature = defineFeature(PROBE, (r) => {
+  r.entity(PROBE, probeEntity);
+  r.useExtension(EXT_USER_DATA, PROBE, {
+    export: async () => null,
+    delete: captureHook,
+  });
+});
+
+const FORGET_USER = "cccccccc-cccc-4ccc-8ccc-0000000000b1";
+let stack: TestStack;
+const seed = (db: unknown) =>
+  // biome-ignore lint/suspicious/noExplicitAny: dummy writer; this seeder never writes binaries.
+  createForgetSeeders(db as any, { write: async () => {} });
+
+beforeAll(async () => {
+  stack = await setupTestStack({
+    features: [
+      createUserFeature(),
+      createSessionsFeature(),
+      createDataRetentionFeature(),
+      createComplianceProfilesFeature(),
+      createUserDataRightsFeature(),
+      probeFeature,
+    ],
+  });
+  await unsafeCreateEntityTable(stack.db, userEntity);
+  await unsafeCreateEntityTable(stack.db, tenantRetentionOverrideEntity);
+  await unsafeCreateEntityTable(stack.db, probeEntity);
+  await createEventsTable(stack.db);
+  await asRawClient(stack.db).unsafe(READ_TENANT_MEMBERSHIPS_DDL);
+});
+
+afterAll(async () => {
+  await stack.cleanup();
+});
+
+beforeEach(() => {
+  capturedRegistry = undefined;
+});
+
+test("forget delete-hook receives the app registry instance", async () => {
+  await seed(stack.db).seedForgetUser(FORGET_USER);
+  await seed(stack.db).seedMembership(FORGET_USER, TENANT_SYSTEM);
+
+  const result = await runForgetCleanup({
+    db: stack.db,
+    registry: stack.registry,
+    now: nowInstant(),
+  });
+
+  expect(result.errors, JSON.stringify(result.errors)).toHaveLength(0);
+  expect(result.processedUserIds).toContain(FORGET_USER);
+  // The hook ran and got the exact registry passed to runForgetCleanup — not
+  // undefined, not a stand-in — so runProjectionsForEvent(event, ctx.registry, db)
+  // reaches the real projections.
+  expect(capturedRegistry).toBe(stack.registry);
+  expect(capturedRegistry?.getProjectionsForSource(PROBE)).toBeDefined();
+});

package/src/user-data-rights/run-forget-cleanup.ts

@@ -316,6 +316,7 @@ async function processUser(args: {
           await entry.deleteHook(
             {
               db: tx,
+              registry,
               tenantId,
               userId,
               buildStorageProvider,

package/src/user-data-rights/run-user-export.ts

@@ -142,7 +142,7 @@ export async function runUserExport(args: RunUserExportArgs): Promise<UserExport
   for (const tenantId of tenantList) {
     const entities: UserDataExportSnippet[] = [];
     for (const entry of hookEntries) {
-      const rawSnippet = await entry.exportHook({ db, tenantId, userId });
+      const rawSnippet = await entry.exportHook({ db, registry, tenantId, userId });
       if (rawSnippet === null) continue;
       const snippet = await decryptSnippetFields(registry, entry.entityName, rawSnippet);
       entities.push(snippet);
@@ -177,6 +177,7 @@ export async function runUserExport(args: RunUserExportArgs): Promise<UserExport
     for (const entry of hookEntries) {
       const rawSnippet = await entry.exportHook({
         db,
+        registry,
         tenantId: SYSTEM_TENANT_ID_FOR_ORPHANS,
         userId,
       });

package/src/user-data-rights-defaults/__tests__/user-data-rights-defaults.integration.test.ts

@@ -162,6 +162,7 @@ describe("S2.H1 :: userExportHook", () => {
 
     const result = await userExportHook({
       db: stack.db,
+      registry: stack.registry,
       tenantId: TENANT_A,
       userId: uuid(1001),
     });
@@ -182,6 +183,7 @@ describe("S2.H1 :: userExportHook", () => {
   test("returns null wenn User nicht existiert", async () => {
     const result = await userExportHook({
       db: stack.db,
+      registry: stack.registry,
       tenantId: TENANT_A,
       userId: uuid(1002),
     });
@@ -193,7 +195,10 @@ describe("S2.H1 :: userDeleteHook", () => {
   test('strategy="delete" → softDelete + email/displayName anonymisiert + status=deleted', async () => {
     await seedUser(uuid(1003));
 
-    await userDeleteHook({ db: stack.db, tenantId: TENANT_A, userId: uuid(1003) }, "delete");
+    await userDeleteHook(
+      { db: stack.db, registry: stack.registry, tenantId: TENANT_A, userId: uuid(1003) },
+      "delete",
+    );
 
     const row = await fetchUser(uuid(1003));
     expect(row).not.toBeNull();
@@ -209,7 +214,10 @@ describe("S2.H1 :: userDeleteHook", () => {
   test('strategy="anonymize" → email/displayName anonymisiert aber status bleibt active', async () => {
     await seedUser(uuid(1004));
 
-    await userDeleteHook({ db: stack.db, tenantId: TENANT_A, userId: uuid(1004) }, "anonymize");
+    await userDeleteHook(
+      { db: stack.db, registry: stack.registry, tenantId: TENANT_A, userId: uuid(1004) },
+      "anonymize",
+    );
 
     const row = await fetchUser(uuid(1004));
     if (!row) throw new Error("row should exist");
@@ -222,13 +230,19 @@ describe("S2.H1 :: userDeleteHook", () => {
   test("idempotent: zweiter delete-Call crasht nicht UND State bleibt korrekt deleted", async () => {
     await seedUser(uuid(1005));
 
-    await userDeleteHook({ db: stack.db, tenantId: TENANT_A, userId: uuid(1005) }, "delete");
+    await userDeleteHook(
+      { db: stack.db, registry: stack.registry, tenantId: TENANT_A, userId: uuid(1005) },
+      "delete",
+    );
     const afterFirst = await fetchUser(uuid(1005));
     if (!afterFirst) throw new Error("user should exist after first delete");
 
     // Zweiter Call: kein Crash + State unverändert
     await expect(
-      userDeleteHook({ db: stack.db, tenantId: TENANT_A, userId: uuid(1005) }, "delete"),
+      userDeleteHook(
+        { db: stack.db, registry: stack.registry, tenantId: TENANT_A, userId: uuid(1005) },
+        "delete",
+      ),
     ).resolves.toBeUndefined();
 
     // State-Verifikation (S2.H1+H2-Audit N3): Row weiterhin deleted,
@@ -249,6 +263,7 @@ describe("S2.H2 :: fileRefExportHook", () => {
 
     const result = await fileRefExportHook({
       db: stack.db,
+      registry: stack.registry,
       tenantId: TENANT_A,
       userId: "user-files-1",
     });
@@ -263,6 +278,7 @@ describe("S2.H2 :: fileRefExportHook", () => {
   test("returns null wenn User keine Files hat", async () => {
     const result = await fileRefExportHook({
       db: stack.db,
+      registry: stack.registry,
       tenantId: TENANT_A,
       userId: "ghost-user-no-files",
     });
@@ -276,7 +292,7 @@ describe("S2.H2 :: fileRefDeleteHook", () => {
     await seedFileRef(uuid(202), TENANT_A, "user-delete-files", "f2.pdf");
 
     await fileRefDeleteHook(
-      { db: stack.db, tenantId: TENANT_A, userId: "user-delete-files" },
+      { db: stack.db, registry: stack.registry, tenantId: TENANT_A, userId: "user-delete-files" },
       "delete",
     );
 
@@ -288,7 +304,7 @@ describe("S2.H2 :: fileRefDeleteHook", () => {
     await seedFileRef(uuid(203), TENANT_A, "user-anon-files", "shared.pdf");
 
     await fileRefDeleteHook(
-      { db: stack.db, tenantId: TENANT_A, userId: "user-anon-files" },
+      { db: stack.db, registry: stack.registry, tenantId: TENANT_A, userId: "user-anon-files" },
       "anonymize",
     );
 
@@ -305,7 +321,10 @@ describe("S2.H2 :: fileRefDeleteHook", () => {
     await seedFileRef(uuid(302), TENANT_B, "shared-user", "tenantB.pdf");
 
     // Tenant A loescht alle Files von "shared-user"
-    await fileRefDeleteHook({ db: stack.db, tenantId: TENANT_A, userId: "shared-user" }, "delete");
+    await fileRefDeleteHook(
+      { db: stack.db, registry: stack.registry, tenantId: TENANT_A, userId: "shared-user" },
+      "delete",
+    );
 
     const aRemaining = await fetchFileRefs(TENANT_A, "shared-user");
     const bRemaining = await fetchFileRefs(TENANT_B, "shared-user");
@@ -319,7 +338,7 @@ describe("S2.H2 :: fileRefDeleteHook", () => {
     await seedFileRef(uuid(401), TENANT_A, "user-idem-files", "f.pdf");
 
     await fileRefDeleteHook(
-      { db: stack.db, tenantId: TENANT_A, userId: "user-idem-files" },
+      { db: stack.db, registry: stack.registry, tenantId: TENANT_A, userId: "user-idem-files" },
       "delete",
     );
     const afterFirst = await fetchFileRefs(TENANT_A, "user-idem-files");
@@ -327,7 +346,10 @@ describe("S2.H2 :: fileRefDeleteHook", () => {
 
     // Zweiter Call: kein Crash + State weiter 0 Files
     await expect(
-      fileRefDeleteHook({ db: stack.db, tenantId: TENANT_A, userId: "user-idem-files" }, "delete"),
+      fileRefDeleteHook(
+        { db: stack.db, registry: stack.registry, tenantId: TENANT_A, userId: "user-idem-files" },
+        "delete",
+      ),
     ).resolves.toBeUndefined();
     const afterSecond = await fetchFileRefs(TENANT_A, "user-idem-files");
     expect(afterSecond).toHaveLength(0);