@cosmicdrift/kumiko-bundled-features 0.171.2 → 0.173.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-bundled-features",
-  "version": "0.171.2",
+  "version": "0.173.0",
   "description": "Built-in features — tenant, user, auth, delivery. The stuff you'd rewrite anyway, already typed.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -119,12 +119,12 @@
     "./step-dispatcher": "./src/step-dispatcher/index.ts"
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-dispatcher-live": "0.171.2",
-    "@cosmicdrift/kumiko-framework": "0.171.2",
-    "@cosmicdrift/kumiko-headless": "0.171.2",
-    "@cosmicdrift/kumiko-renderer": "0.171.2",
-    "@cosmicdrift/kumiko-renderer-web": "0.171.2",
-    "@cosmicdrift/kumiko-types": "0.171.2",
+    "@cosmicdrift/kumiko-dispatcher-live": "0.173.0",
+    "@cosmicdrift/kumiko-framework": "0.173.0",
+    "@cosmicdrift/kumiko-headless": "0.173.0",
+    "@cosmicdrift/kumiko-renderer": "0.173.0",
+    "@cosmicdrift/kumiko-renderer-web": "0.173.0",
+    "@cosmicdrift/kumiko-types": "0.173.0",
     "@mollie/api-client": "^4.5.0",
     "imapflow": "^1.3.3",
     "mailparser": "^3.9.8",

package/src/audit/__tests__/audit.integration.test.ts

@@ -245,7 +245,6 @@ describe("audit: list query", () => {
     );
     expect(untilBefore.rows).toHaveLength(1);
     const untilRow = untilBefore.rows[0];
-    expect(untilRow).toBeDefined();
     if (!untilRow) throw new Error("expected untilBefore row");
     expect((untilRow.payload as { name?: string }).name).toBe("before-window");
   });

package/src/auth-email-password/__tests__/login-gates.test.ts

@@ -55,8 +55,7 @@ describe("login.write gates (fw#1284)", () => {
       ["User"],
       "Asia/Tokyo",
     );
-    expect(g.ok).toBe(true);
-    if (g.ok) expect(g.value.session.timezone).toBe("Asia/Tokyo");
+    expect(g.session.timezone).toBe("Asia/Tokyo");
   });
 
   test("gateBuildSession omits timezone when the user never set one (fw#1636)", async () => {
@@ -67,7 +66,6 @@ describe("login.write gates (fw#1284)", () => {
       ["User"],
       null,
     );
-    expect(g.ok).toBe(true);
-    if (g.ok) expect(g.value.session.timezone).toBeUndefined();
+    expect(g.session.timezone).toBeUndefined();
   });
 });

package/src/auth-email-password/handlers/login.write.ts

@@ -206,16 +206,16 @@ export async function gateEnforceMfa(
   userId: string,
   tenantId: TenantId,
   mergedRoles: readonly string[],
-): Promise<GateOutcome<LoginResult | undefined>> {
-  if (!opts.mfaStatusChecker) return ok(undefined);
+): Promise<LoginResult | undefined> {
+  if (!opts.mfaStatusChecker) return undefined;
   const mfaStatus = await opts.mfaStatusChecker(ctx, userId, tenantId, mergedRoles);
   if ("challengeToken" in mfaStatus) {
-    return ok({ kind: "mfa-challenge", challengeToken: mfaStatus.challengeToken });
+    return { kind: "mfa-challenge", challengeToken: mfaStatus.challengeToken };
   }
   if ("setupRequired" in mfaStatus) {
-    return ok({ kind: "mfa-setup-required", preauthSetupToken: mfaStatus.preauthSetupToken });
+    return { kind: "mfa-setup-required", preauthSetupToken: mfaStatus.preauthSetupToken };
   }
-  return ok(undefined);
+  return undefined;
 }
 
 /** Auth-claims hooks → session. */
@@ -225,7 +225,7 @@ export async function gateBuildSession(
   tenantId: TenantId,
   mergedRoles: readonly string[],
   timezone?: string | null,
-): Promise<GateOutcome<{ readonly kind: "auth-session"; readonly session: SessionUser }>> {
+): Promise<{ readonly kind: "auth-session"; readonly session: SessionUser }> {
   const baseSession: SessionUser = {
     id: userId,
     tenantId,
@@ -235,7 +235,7 @@ export async function gateBuildSession(
   const claims = await ctx.resolveAuthClaims(baseSession);
   const session: SessionUser =
     Object.keys(claims).length > 0 ? { ...baseSession, claims } : baseSession;
-  return ok({ kind: "auth-session", session });
+  return { kind: "auth-session", session };
 }
 
 // Login — unauthenticated entry point. The route is wired public (no JWT
@@ -291,20 +291,18 @@ export function createLoginHandler(opts: LoginHandlerOptions = {}) {
       const { chosen, mergedRoles } = membershipGate.value;
 
       const mfaGate = await gateEnforceMfa(ctx, opts, found.id, chosen.tenantId, mergedRoles);
-      if (!mfaGate.ok) return mfaGate.result;
-      if (mfaGate.value !== undefined) {
-        return { isSuccess: true, data: mfaGate.value };
+      if (mfaGate !== undefined) {
+        return { isSuccess: true, data: mfaGate };
       }
 
-      const sessionGate = await gateBuildSession(
+      const session = await gateBuildSession(
         ctx,
         found.id,
         chosen.tenantId,
         mergedRoles,
         found.timezone,
       );
-      if (!sessionGate.ok) return sessionGate.result;
-      return { isSuccess: true, data: sessionGate.value };
+      return { isSuccess: true, data: session };
     },
   });
 }

package/src/user-data-rights/__tests__/audit-log.integration.test.ts

@@ -129,8 +129,6 @@ describe("my-audit-log", () => {
     // ihre Payload, bob nur seine.
     const aliceRow = aliceLog.rows[0];
     const bobRow = bobLog.rows[0];
-    expect(aliceRow).toBeDefined();
-    expect(bobRow).toBeDefined();
     if (!aliceRow || !bobRow) throw new Error("expected audit rows");
     expect((aliceRow.payload as { foo: string }).foo).toBe("alice");
     expect((bobRow.payload as { foo: string }).foo).toBe("bob");