@cosmicdrift/kumiko-bundled-features 0.168.0 → 0.171.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-bundled-features",
-  "version": "0.168.0",
+  "version": "0.171.0",
   "description": "Built-in features — tenant, user, auth, delivery. The stuff you'd rewrite anyway, already typed.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -119,16 +119,17 @@
     "./step-dispatcher": "./src/step-dispatcher/index.ts"
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-dispatcher-live": "0.168.0",
-    "@cosmicdrift/kumiko-framework": "0.168.0",
-    "@cosmicdrift/kumiko-headless": "0.168.0",
-    "@cosmicdrift/kumiko-renderer": "0.168.0",
-    "@cosmicdrift/kumiko-renderer-web": "0.168.0",
-    "@cosmicdrift/kumiko-types": "0.168.0",
+    "@cosmicdrift/kumiko-dispatcher-live": "0.171.0",
+    "@cosmicdrift/kumiko-framework": "0.171.0",
+    "@cosmicdrift/kumiko-headless": "0.171.0",
+    "@cosmicdrift/kumiko-renderer": "0.171.0",
+    "@cosmicdrift/kumiko-renderer-web": "0.171.0",
+    "@cosmicdrift/kumiko-types": "0.171.0",
     "@mollie/api-client": "^4.5.0",
     "imapflow": "^1.3.3",
     "mailparser": "^3.9.8",
     "@node-rs/argon2": "^2.0.2",
+    "@types/mailparser": "^3.4.6",
     "@types/nodemailer": "^8.0.0",
     "clsx": "^2.1.1",
     "lucide-react": "^1.14.0",
@@ -150,7 +151,6 @@
   ],
   "devDependencies": {
     "@testing-library/user-event": "^14.6.1",
-    "@types/mailparser": "^3.4.6",
     "@types/qrcode": "^1.5.5"
   }
 }

package/src/auth-email-password/seeding.ts

@@ -190,6 +190,9 @@ export type SeedAdminOptions = {
    *  membership-Rollen. Typischer use-case: `["SystemAdmin"]` für
    *  einen Plattform-Operator. Default: leer. */
   readonly globalRoles?: readonly string[];
+  /** Initial-emailVerified-Flag — Default false (unverified),
+   *  gleicher Mechanismus wie seedUserWithPassword.emailVerified. */
+  readonly emailVerified?: boolean;
   readonly by?: SessionUser;
 };
 
@@ -213,6 +216,7 @@ export async function seedAdmin(
     password: options.password,
     displayName: options.displayName,
     ...(options.globalRoles !== undefined && { roles: options.globalRoles }),
+    ...(options.emailVerified !== undefined && { emailVerified: options.emailVerified }),
     by,
   });
 

package/src/user-data-rights/__tests__/boot-checks.test.ts

@@ -102,6 +102,28 @@ describe("GDPR-storage boot guards V2-V4 (via r.bootCheck)", () => {
     expect(() => validateBoot([...baseFeatures(), bad])).toThrow(/EXT_USER_DATA hook.*Art\.17 gap/);
   });
 
+  test("V3: subjectRef field (FK to user, no pii/userOwned annotation) without EXT_USER_DATA hook → throws", () => {
+    const bad = defineFeature("tasks", (r) => {
+      r.entity(
+        "task",
+        createEntity({ fields: { assigneeId: createTextField({ subjectRef: true }) } }),
+      );
+    });
+    expect(() => validateBoot([...baseFeatures(), bad])).toThrow(/EXT_USER_DATA hook.*Art\.17 gap/);
+  });
+
+  test("V3: subjectRef field WITH EXT_USER_DATA hook registered → no throw", () => {
+    const hooked = defineFeature("tasks-hooked", (r) => {
+      r.requires("user-data-rights");
+      r.entity(
+        "task",
+        createEntity({ fields: { assigneeId: createTextField({ subjectRef: true }) } }),
+      );
+      r.useExtension(EXT_USER_DATA, "task", { export: async () => null, delete: async () => {} });
+    });
+    expect(() => validateBoot([...baseFeatures(), hooked])).not.toThrow();
+  });
+
   test("V3: projection-only pii entity WITH EXT_USER_DATA hook registered for its entity name → no throw", () => {
     const projectionTable = projectionProbeTable("crm_contact_summary_hooked");
     const hooked = defineFeature("crm-hooked", (r) => {

package/src/user-data-rights/boot-checks.ts

@@ -35,8 +35,9 @@ export function validateGdprHookCompleteness(features: readonly FeatureDefinitio
 
 // V3: PII-entity-without-hook gate. V2 checks registered hooks for
 // completeness; V3 catches the entity nobody registered at all — fields
-// annotated as user-subject data (pii / userOwned) yet invisible to the
-// Art.15/20 export and Art.17 forget pipeline. Hard boot failure: a
+// annotated as user-subject data (pii / userOwned / subjectRef) yet
+// invisible to the Art.15/20 export and Art.17 forget pipeline. Hard boot
+// failure: a
 // subject-data entity that skips the pipeline is exactly the "feature built
 // past GDPR" leak this gate exists to stop. No "is user-data-rights mounted"
 // guard needed here (unlike the framework-internal predecessor) — this runs
@@ -58,7 +59,7 @@ export function validateGdprPiiHookCoverage(features: readonly FeatureDefinition
       const subjectFields = Object.entries(entity.fields)
         .filter(([, field]) => {
           const annot = field as PiiAnnotations; // @cast-boundary schema-walk
-          return Boolean(annot.pii) || Boolean(annot.userOwned);
+          return Boolean(annot.pii) || Boolean(annot.userOwned) || Boolean(annot.subjectRef);
         })
         .map(([name]) => name);
       if (subjectFields.length === 0) continue;