@cosmicdrift/kumiko-bundled-features 0.170.0 → 0.171.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-bundled-features",
-  "version": "0.170.0",
+  "version": "0.171.0",
   "description": "Built-in features — tenant, user, auth, delivery. The stuff you'd rewrite anyway, already typed.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -119,12 +119,12 @@
     "./step-dispatcher": "./src/step-dispatcher/index.ts"
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-dispatcher-live": "0.170.0",
-    "@cosmicdrift/kumiko-framework": "0.170.0",
-    "@cosmicdrift/kumiko-headless": "0.170.0",
-    "@cosmicdrift/kumiko-renderer": "0.170.0",
-    "@cosmicdrift/kumiko-renderer-web": "0.170.0",
-    "@cosmicdrift/kumiko-types": "0.170.0",
+    "@cosmicdrift/kumiko-dispatcher-live": "0.171.0",
+    "@cosmicdrift/kumiko-framework": "0.171.0",
+    "@cosmicdrift/kumiko-headless": "0.171.0",
+    "@cosmicdrift/kumiko-renderer": "0.171.0",
+    "@cosmicdrift/kumiko-renderer-web": "0.171.0",
+    "@cosmicdrift/kumiko-types": "0.171.0",
     "@mollie/api-client": "^4.5.0",
     "imapflow": "^1.3.3",
     "mailparser": "^3.9.8",

package/src/user-data-rights/__tests__/boot-checks.test.ts

@@ -102,6 +102,28 @@ describe("GDPR-storage boot guards V2-V4 (via r.bootCheck)", () => {
     expect(() => validateBoot([...baseFeatures(), bad])).toThrow(/EXT_USER_DATA hook.*Art\.17 gap/);
   });
 
+  test("V3: subjectRef field (FK to user, no pii/userOwned annotation) without EXT_USER_DATA hook → throws", () => {
+    const bad = defineFeature("tasks", (r) => {
+      r.entity(
+        "task",
+        createEntity({ fields: { assigneeId: createTextField({ subjectRef: true }) } }),
+      );
+    });
+    expect(() => validateBoot([...baseFeatures(), bad])).toThrow(/EXT_USER_DATA hook.*Art\.17 gap/);
+  });
+
+  test("V3: subjectRef field WITH EXT_USER_DATA hook registered → no throw", () => {
+    const hooked = defineFeature("tasks-hooked", (r) => {
+      r.requires("user-data-rights");
+      r.entity(
+        "task",
+        createEntity({ fields: { assigneeId: createTextField({ subjectRef: true }) } }),
+      );
+      r.useExtension(EXT_USER_DATA, "task", { export: async () => null, delete: async () => {} });
+    });
+    expect(() => validateBoot([...baseFeatures(), hooked])).not.toThrow();
+  });
+
   test("V3: projection-only pii entity WITH EXT_USER_DATA hook registered for its entity name → no throw", () => {
     const projectionTable = projectionProbeTable("crm_contact_summary_hooked");
     const hooked = defineFeature("crm-hooked", (r) => {

package/src/user-data-rights/boot-checks.ts

@@ -35,8 +35,9 @@ export function validateGdprHookCompleteness(features: readonly FeatureDefinitio
 
 // V3: PII-entity-without-hook gate. V2 checks registered hooks for
 // completeness; V3 catches the entity nobody registered at all — fields
-// annotated as user-subject data (pii / userOwned) yet invisible to the
-// Art.15/20 export and Art.17 forget pipeline. Hard boot failure: a
+// annotated as user-subject data (pii / userOwned / subjectRef) yet
+// invisible to the Art.15/20 export and Art.17 forget pipeline. Hard boot
+// failure: a
 // subject-data entity that skips the pipeline is exactly the "feature built
 // past GDPR" leak this gate exists to stop. No "is user-data-rights mounted"
 // guard needed here (unlike the framework-internal predecessor) — this runs
@@ -58,7 +59,7 @@ export function validateGdprPiiHookCoverage(features: readonly FeatureDefinition
       const subjectFields = Object.entries(entity.fields)
         .filter(([, field]) => {
           const annot = field as PiiAnnotations; // @cast-boundary schema-walk
-          return Boolean(annot.pii) || Boolean(annot.userOwned);
+          return Boolean(annot.pii) || Boolean(annot.userOwned) || Boolean(annot.subjectRef);
         })
         .map(([name]) => name);
       if (subjectFields.length === 0) continue;