@cosmicdrift/kumiko-bundled-features 0.209.1 → 0.211.0

package/src/user-data-rights/__tests__/boot-checks.test.ts

@@ -96,7 +96,17 @@ describe("GDPR-storage boot guards V2-V4 (via r.bootCheck)", () => {
 
   test("V3: pii entity without any EXT_USER_DATA hook → throws the guard's own message", () => {
     const bad = defineFeature("crm", (r) => {
-      r.entity("contact", createEntity({ fields: { email: createTextField({ pii: true }) } }));
+      r.entity(
+        "contact",
+        createEntity({
+          fields: {
+            email: createTextField({
+              personal: "self",
+              find: "none",
+            }),
+          },
+        }),
+      );
     });
     expect(() => validateBoot([...baseFeatures(), bad])).toThrow(/EXT_USER_DATA hook.*Art\.17 gap/);
   });
@@ -110,7 +120,14 @@ describe("GDPR-storage boot guards V2-V4 (via r.bootCheck)", () => {
         source: "contact",
         table: projectionTable,
         apply: { [contactCreated.name]: async () => {} },
-        entity: createEntity({ fields: { email: createTextField({ pii: true }) } }),
+        entity: createEntity({
+          fields: {
+            email: createTextField({
+              personal: "self",
+              find: "none",
+            }),
+          },
+        }),
       });
     });
     expect(() => validateBoot([...baseFeatures(), bad])).toThrow(/EXT_USER_DATA hook.*Art\.17 gap/);
@@ -120,7 +137,13 @@ describe("GDPR-storage boot guards V2-V4 (via r.bootCheck)", () => {
     const bad = defineFeature("tasks", (r) => {
       r.entity(
         "task",
-        createEntity({ fields: { assigneeId: createTextField({ subjectRef: true }) } }),
+        createEntity({
+          fields: {
+            assigneeId: createTextField({
+              personal: "ref",
+            }),
+          },
+        }),
       );
     });
     expect(() => validateBoot([...baseFeatures(), bad])).toThrow(/EXT_USER_DATA hook.*Art\.17 gap/);
@@ -131,7 +154,13 @@ describe("GDPR-storage boot guards V2-V4 (via r.bootCheck)", () => {
       r.requires("user-data-rights");
       r.entity(
         "task",
-        createEntity({ fields: { assigneeId: createTextField({ subjectRef: true }) } }),
+        createEntity({
+          fields: {
+            assigneeId: createTextField({
+              personal: "ref",
+            }),
+          },
+        }),
       );
       r.useExtension(EXT_USER_DATA, "task", { export: async () => null, delete: async () => {} });
     });
@@ -148,7 +177,14 @@ describe("GDPR-storage boot guards V2-V4 (via r.bootCheck)", () => {
         source: "contact",
         table: projectionTable,
         apply: { [contactCreated.name]: async () => {} },
-        entity: createEntity({ fields: { email: createTextField({ pii: true }) } }),
+        entity: createEntity({
+          fields: {
+            email: createTextField({
+              personal: "self",
+              find: "none",
+            }),
+          },
+        }),
       });
       r.useExtension(EXT_USER_DATA, "contact-summary", {
         export: async () => null,
@@ -162,7 +198,14 @@ describe("GDPR-storage boot guards V2-V4 (via r.bootCheck)", () => {
     const bad = defineFeature("billing", (r) => {
       r.entity(
         "subscription",
-        createEntity({ fields: { providerCustomerId: createTextField({ tenantOwned: true }) } }),
+        createEntity({
+          fields: {
+            providerCustomerId: createTextField({
+              personal: "tenant",
+              find: "none",
+            }),
+          },
+        }),
       );
     });
     expect(() => validateBoot([...minimalTenantLifecycleFeatures(), bad])).toThrow(
@@ -174,7 +217,14 @@ describe("GDPR-storage boot guards V2-V4 (via r.bootCheck)", () => {
     const bad = defineFeature("billing", (r) => {
       r.entity(
         "subscription",
-        createEntity({ fields: { providerCustomerId: createTextField({ tenantOwned: true }) } }),
+        createEntity({
+          fields: {
+            providerCustomerId: createTextField({
+              personal: "tenant",
+              find: "none",
+            }),
+          },
+        }),
       );
     });
     const features = minimalTenantLifecycleFeatures().concat(bad);
@@ -186,7 +236,14 @@ describe("GDPR-storage boot guards V2-V4 (via r.bootCheck)", () => {
     const notMounted = defineFeature("billing-standalone", (r) => {
       r.entity(
         "subscription",
-        createEntity({ fields: { providerCustomerId: createTextField({ tenantOwned: true }) } }),
+        createEntity({
+          fields: {
+            providerCustomerId: createTextField({
+              personal: "tenant",
+              find: "none",
+            }),
+          },
+        }),
       );
     });
     expect(() => validateBoot([...baseFeatures(), notMounted])).not.toThrow();
@@ -197,7 +254,14 @@ describe("GDPR-storage boot guards V2-V4 (via r.bootCheck)", () => {
       r.requires("tenant-lifecycle");
       r.entity(
         "subscription",
-        createEntity({ fields: { providerCustomerId: createTextField({ tenantOwned: true }) } }),
+        createEntity({
+          fields: {
+            providerCustomerId: createTextField({
+              personal: "tenant",
+              find: "none",
+            }),
+          },
+        }),
       );
       r.useExtension(EXT_TENANT_DATA, "subscription", { destroy: async () => {} });
     });

package/src/user-data-rights/__tests__/forget-cleanup-search-purge-ordering.integration.test.ts

@@ -46,8 +46,8 @@ const noteEntity = createEntity({
     authorId: createTextField({ required: true }),
     body: createTextField({
       required: true,
-      searchable: true,
-      userOwned: { ownerField: "authorId" },
+      personal: { of: "authorId" },
+      find: "fuzzy",
     }),
   },
 });

package/src/user-data-rights/boot-checks.ts

@@ -1,7 +1,7 @@
 import {
   EXT_USER_DATA,
   type FeatureDefinition,
-  type PiiAnnotations,
+  type ResolvedPiiFlags,
 } from "@cosmicdrift/kumiko-framework/engine";
 import { entitiesOf } from "../shared";
 
@@ -58,7 +58,7 @@ export function validateGdprPiiHookCoverage(features: readonly FeatureDefinition
       if (hookedEntities.has(entityName)) continue;
       const subjectFields = Object.entries(entity.fields)
         .filter(([, field]) => {
-          const annot = field as PiiAnnotations; // @cast-boundary schema-walk
+          const annot = field as ResolvedPiiFlags; // @cast-boundary schema-walk
           return Boolean(annot.pii) || Boolean(annot.userOwned) || Boolean(annot.subjectRef);
         })
         .map(([name]) => name);

package/src/user-data-rights/schema/download-token.ts

@@ -75,21 +75,23 @@ export const exportDownloadTokenEntity = createEntity({
     // (z.B. broken Sync-Tool).
     useCount: createBigIntField({}),
 
-    // Audit: Source-IP des letzten Downloads. Hilft DPO bei Untersuchung
-    // ungewoehnlicher Aktivitaeten ("Token wurde von 5 verschiedenen
-    // IPs genutzt"). Plain-IP-V4/IPv6, kein hash — DPO braucht direkt
-    // lesbar. is-business-data weil Token-Audit kein User-PII ist
-    // (gehoert dem Tenant-Operator).
+    // Audit: source IP of the last download. Helps the DPO investigate
+    // unusual activity ("token was used from 5 different IPs"). Plain
+    // IPv4/IPv6, no hash — DPO needs it directly readable.
+    // `reason: "is_business_data"` because token-audit data isn't user
+    // PII (it belongs to the tenant operator).
     lastUsedFromIp: createTextField({
-      maxLength: 45, // IPv6 max
-      allowPlaintext: "is-business-data",
+      maxLength: 45,
+      personal: false,
+      reason: "is_business_data",
     }),
 
-    // Audit: User-Agent des letzten Downloads. Audit-Wert (Email-Client
-    // vs Browser vs CLI-Tool unterscheidbar). is-business-data analog.
+    // Audit: user agent of the last download (distinguishes email
+    // client vs browser vs CLI tool). Same `reason` as above.
     lastUsedUserAgent: createTextField({
       maxLength: 500,
-      allowPlaintext: "is-business-data",
+      personal: false,
+      reason: "is_business_data",
     }),
   },
 

package/src/user-data-rights/schema/export-job.ts

@@ -133,11 +133,12 @@ export const exportJobEntity = createEntity({
     // verbleiben.
     expiresAt: createTimestampField({}),
 
-    // Failed-State Diagnose. longText weil Hook-Errors mit Stack-Trace
-    // mehrere KB werden koennen. is-business-data weil Job-Status
-    // public im UI-Polling sichtbar (kein PII).
+    // Failed-state diagnostics. longText because hook errors with stack
+    // traces can run several KB. `reason: "is_business_data"` because
+    // job status is publicly visible in UI polling (no PII).
     errorMessage: createLongTextField({
-      allowPlaintext: "is-business-data",
+      personal: false,
+      reason: "is_business_data",
     }),
 
     // Audit-Info fuer Operator: wie gross war der Export. Hilft beim

package/src/tenant/web/i18n.ts

@@ -1,24 +0,0 @@
-// @runtime client
-import type { TranslationsByLocale } from "@cosmicdrift/kumiko-renderer";
-
-export const defaultTranslations: TranslationsByLocale = {
-  en: {
-    "tenant.members.title": "Members",
-    "tenant.members.loading": "Loading members…",
-    "tenant.members.active": "Active members",
-    "tenant.members.invite.title": "New invitation",
-    "tenant.members.invite.email": "Email",
-    "tenant.members.invite.role": "Role",
-    "tenant.members.invite.submit": "Send invitation",
-    "tenant.members.invite.submitting": "Sending invitation…",
-    "tenant.members.invite.success": "Invitation sent to {email}",
-    "tenant.members.pending": "Pending invitations",
-    "tenant.members.pending.empty": "No pending invitations.",
-    "tenant.members.cancel": "Cancel",
-    "tenant.members.col.userId": "User ID",
-    "tenant.members.col.roles": "Roles",
-    "tenant.members.col.email": "Email",
-    "tenant.members.col.expires": "Valid until",
-    "tenant.nav.members": "Team",
-  },
-};

package/src/tenant/web/members-screen.tsx

@@ -1,270 +0,0 @@
-// @runtime client
-// MembersScreen — active members + pending invitations for the current tenant.
-// Read-only member list; invite + cancel only (no updateMemberRoles — SystemAdmin-only).
-
-import { AuthHandlers } from "@cosmicdrift/kumiko-bundled-features/auth-email-password/constants";
-import { useDispatcher, usePrimitives, useTranslation } from "@cosmicdrift/kumiko-renderer";
-import { FormScreenShell } from "@cosmicdrift/kumiko-renderer-web";
-import { type ReactNode, useCallback, useEffect, useState } from "react";
-import { DEFAULT_INVITE_ROLE_OPTIONS, TenantHandlers, TenantQueries } from "../constants";
-
-type MemberRow = {
-  readonly id: string;
-  readonly userId: string;
-  readonly tenantId: string;
-  readonly email: string | null;
-  readonly displayName: string | null;
-  readonly roles: readonly string[];
-};
-
-type InvitationRow = {
-  readonly id: string;
-  readonly email: string;
-  readonly role: string;
-  readonly status: string;
-  readonly expiresAt: string;
-};
-
-type State =
-  | { readonly kind: "loading" }
-  | { readonly kind: "error"; readonly message: string }
-  | {
-      readonly kind: "ready";
-      readonly members: readonly MemberRow[];
-      readonly invitations: readonly InvitationRow[];
-    };
-
-type RoleOption = (typeof DEFAULT_INVITE_ROLE_OPTIONS)[number];
-
-export type MembersScreenProps = {
-  /** Invite-role allowlist; defaults to User/Admin/Editor — never reserved/global roles. */
-  readonly inviteRoleOptions?: readonly RoleOption[];
-};
-
-export function MembersScreen({
-  inviteRoleOptions = DEFAULT_INVITE_ROLE_OPTIONS,
-}: MembersScreenProps): ReactNode {
-  const t = useTranslation();
-  const { Banner, Button, Card, DataTable, Field, Form, Heading, Input, Text } = usePrimitives();
-  const dispatcher = useDispatcher();
-  const [state, setState] = useState<State>({ kind: "loading" });
-  const [inviteEmail, setInviteEmail] = useState("");
-  const [inviteRole, setInviteRole] = useState<RoleOption>(inviteRoleOptions[0] ?? "User");
-  const [submitting, setSubmitting] = useState(false);
-  const [actionError, setActionError] = useState<string | null>(null);
-  const [lastInvited, setLastInvited] = useState<string | null>(null);
-
-  const refresh = useCallback(async (): Promise<void> => {
-    const membersRes = await dispatcher.query<readonly MemberRow[]>(TenantQueries.members, {});
-    if (!membersRes.isSuccess) {
-      setState({ kind: "error", message: membersRes.error.message });
-      return;
-    }
-    const invitationsRes = await dispatcher.query<readonly InvitationRow[]>(
-      TenantQueries.invitations,
-      {},
-    );
-    if (!invitationsRes.isSuccess) {
-      setState({ kind: "error", message: invitationsRes.error.message });
-      return;
-    }
-    setState({ kind: "ready", members: membersRes.data, invitations: invitationsRes.data });
-  }, [dispatcher]);
-
-  useEffect(() => {
-    void refresh();
-  }, [refresh]);
-
-  const onInvite = (e?: React.FormEvent): void => {
-    e?.preventDefault();
-    void (async (): Promise<void> => {
-      setActionError(null);
-      setSubmitting(true);
-      const email = inviteEmail.trim();
-      const res = await dispatcher.write(AuthHandlers.inviteCreate, { email, role: inviteRole });
-      setSubmitting(false);
-      if (!res.isSuccess) {
-        setActionError(res.error.message);
-        return;
-      }
-      setLastInvited(email);
-      setInviteEmail("");
-      await refresh();
-    })();
-  };
-
-  const onCancel = async (invitationId: string): Promise<void> => {
-    setActionError(null);
-    const res = await dispatcher.write(TenantHandlers.cancelInvitation, { invitationId });
-    if (!res.isSuccess) {
-      setActionError(res.error.message);
-      return;
-    }
-    await refresh();
-  };
-
-  if (state.kind === "loading") {
-    return (
-      <FormScreenShell testId="members-screen">
-        <Text variant="small">{t("tenant.members.loading")}</Text>
-      </FormScreenShell>
-    );
-  }
-
-  if (state.kind === "error") {
-    return (
-      <FormScreenShell testId="members-screen">
-        <Banner variant="error">{state.message}</Banner>
-      </FormScreenShell>
-    );
-  }
-
-  const roleSelectOptions = inviteRoleOptions.map((r) => ({ value: r, label: r }));
-
-  return (
-    <FormScreenShell testId="members-screen" className="flex flex-col gap-6">
-      <Heading variant="page">{t("tenant.members.title")}</Heading>
-
-      <Card
-        slots={{ title: `${t("tenant.members.active")} (${state.members.length})` }}
-        options={{ padded: false }}
-      >
-        <DataTable
-          testId="members-active-table"
-          columns={[
-            {
-              field: "email",
-              label: t("tenant.members.col.email"),
-              type: "string",
-              sortable: false,
-            },
-            {
-              field: "roles",
-              label: t("tenant.members.col.roles"),
-              type: "string",
-              sortable: false,
-            },
-          ]}
-          rows={state.members.map((m) => ({
-            id: m.id,
-            values: {
-              email: m.email ?? `${m.userId.slice(0, 8)}…`,
-              roles: m.roles.join(", "),
-            },
-          }))}
-        />
-      </Card>
-
-      <Form
-        testId="invite-form"
-        title={t("tenant.members.invite.title")}
-        onSubmit={onInvite}
-        actions={
-          <Button
-            type="submit"
-            variant="primary"
-            loading={submitting}
-            disabled={submitting}
-            testId="invite-submit"
-          >
-            {submitting ? t("tenant.members.invite.submitting") : t("tenant.members.invite.submit")}
-          </Button>
-        }
-      >
-        <div className="grid gap-4 sm:grid-cols-2">
-          <Field id="invite-email" label={t("tenant.members.invite.email")} required>
-            <Input
-              kind="email"
-              id="invite-email"
-              name="invite-email"
-              value={inviteEmail}
-              onChange={setInviteEmail}
-              disabled={submitting}
-              required
-              autoComplete="email"
-            />
-          </Field>
-          <Field id="invite-role" label={t("tenant.members.invite.role")} required>
-            <Input
-              kind="select"
-              id="invite-role"
-              name="invite-role"
-              value={inviteRole}
-              onChange={(v) => setInviteRole(v as RoleOption)}
-              options={roleSelectOptions}
-              disabled={submitting}
-              required
-            />
-          </Field>
-        </div>
-        {lastInvited !== null && !submitting && (
-          <Banner variant="info">
-            {t("tenant.members.invite.success", { email: lastInvited })}
-          </Banner>
-        )}
-        {actionError !== null && <Banner variant="error">{actionError}</Banner>}
-      </Form>
-
-      <Card
-        slots={{ title: `${t("tenant.members.pending")} (${state.invitations.length})` }}
-        options={{ padded: false }}
-      >
-        <DataTable
-          testId="pending-list"
-          columns={[
-            {
-              field: "email",
-              label: t("tenant.members.col.email"),
-              type: "string",
-              sortable: false,
-            },
-            {
-              field: "role",
-              label: t("tenant.members.col.roles"),
-              type: "string",
-              sortable: false,
-            },
-            {
-              field: "expires",
-              label: t("tenant.members.col.expires"),
-              type: "string",
-              sortable: false,
-            },
-          ]}
-          rows={state.invitations.map((inv) => ({
-            id: inv.id,
-            values: {
-              email: inv.email,
-              role: inv.role,
-              expires: formatExpiresAt(inv.expiresAt),
-            },
-          }))}
-          rowActions={[
-            {
-              id: "cancel",
-              label: t("tenant.members.cancel"),
-              style: "danger",
-              onTrigger: (row) => void onCancel(row.id),
-            },
-          ]}
-          rowActionMode="inline"
-          emptyState={<Text variant="small">{t("tenant.members.pending.empty")}</Text>}
-        />
-      </Card>
-    </FormScreenShell>
-  );
-}
-
-function formatExpiresAt(iso: string): string {
-  try {
-    return new Date(iso).toLocaleString(undefined, {
-      day: "2-digit",
-      month: "2-digit",
-      year: "numeric",
-      hour: "2-digit",
-      minute: "2-digit",
-    });
-  } catch {
-    return iso;
-  }
-}