@cosmicdrift/kumiko-bundled-features 0.236.1 → 0.237.1

package/src/user-data-rights/handlers/export-job-detail.query.ts

@@ -5,4 +5,6 @@ import { exportJobEntity } from "../schema/export-job";
 export const exportJobDetailQuery = defineEntityDetailHandler("export-job", exportJobEntity, {
   access: { roles: access.systemAdmin },
   crossTenant: true,
+  description:
+    "Read-only cross-tenant detail view of one GDPR data-export job for the system-admin inspector, showing its lifecycle timestamps, storage key, byte count and error message.",
 });

package/src/user-data-rights/handlers/export-job-list.query.ts

@@ -6,4 +6,6 @@ import { exportJobEntity } from "../schema/export-job";
 export const exportJobListQuery = defineEntityListHandler("export-job", exportJobEntity, {
   access: { roles: access.systemAdmin },
   crossTenant: true,
+  description:
+    "Read-only cross-tenant list of GDPR Art. 20 data-export jobs for the system-admin inspector; use export-status instead when a user asks about their own export.",
 });

package/src/user-data-rights/handlers/export-status.query.ts

@@ -33,6 +33,8 @@ export const exportStatusQuery = defineQueryHandler({
   name: "export-status",
   schema: z.object({}),
   access: { openToAll: true },
+  description:
+    "Returns the calling user's own most recent data-export job with its status, expiry and error, or hasJob false, for polling after a request-export while the job is still running.",
   handler: async (query, ctx) => {
     // ctx.db.raw weil tenant-agnostisch — ein User der aus Tenant B
     // pollt, sieht den aus Tenant A erstellten Job.

package/src/user-data-rights/handlers/lift-restriction.write.ts

@@ -33,6 +33,8 @@ export const liftRestrictionWrite = defineWriteHandler({
   name: "lift-restriction",
   schema: z.object({ userId: z.string().uuid() }),
   access: { roles: access.admin },
+  description:
+    "Lifts a GDPR Art. 18 processing restriction on the named user and returns the account to active; operator-only, because a restricted user's own session is rejected and cannot reach this endpoint.",
   handler: async (event, ctx) => {
     const targetUserId = event.payload.userId;
 

package/src/user-data-rights/handlers/list-download-attempts.query.ts

@@ -23,6 +23,8 @@ export const listDownloadAttemptsQuery = defineQueryHandler({
       message: "`from` must be less than or equal to `to`",
     }),
   access: { roles: ["Admin", "SystemAdmin"] },
+  description:
+    "Lists invalid export-download attempts inside the caller's own tenant, filterable by failure result, source IP and time range, for a data protection officer triaging brute-force probing of download links.",
   handler: async (query, ctx) => {
     const p = query.payload;
     const where: WhereObject = { tenantId: query.user.tenantId };

package/src/user-data-rights/handlers/my-audit-log.query.ts

@@ -26,6 +26,8 @@ export const myAuditLogQuery = defineQueryHandler({
       path: ["from"],
     }),
   access: { openToAll: true },
+  description:
+    "Returns the calling user's own event-store entries across all their tenant memberships, paged and filterable by aggregate type, event type and time range, for the GDPR Art. 15 self-disclosure; it can never read another user's history.",
   handler: async (query, ctx) => {
     const p = query.payload;
 

package/src/user-data-rights/handlers/request-deletion-by-email.write.ts

@@ -60,6 +60,8 @@ export function createRequestDeletionByEmailHandler(opts: RequestDeletionByEmail
     name: "request-deletion-by-email",
     schema: z.object({ email: z.email() }),
     access: { roles: ["anonymous", "Member", "User", "TenantAdmin", "SystemAdmin"] },
+    description:
+      "Mails an account-deletion verification link to the given address, for a user who wants to be erased but can no longer log in; it answers identically whether or not the address belongs to an active account and never returns the link.",
     // Defense-in-depth gegen Email-Probing auf dem anonymen Endpoint.
     rateLimit: { per: "ip", limit: 10, windowSeconds: 60 },
     handler: async (event, ctx) => {

package/src/user-data-rights/handlers/request-deletion.write.ts

@@ -44,6 +44,9 @@ export function createRequestDeletionHandler(opts: RequestDeletionOptions = {})
     name: "request-deletion",
     schema: z.object({}),
     access: { openToAll: true },
+    description:
+      "Starts the GDPR Art. 17 deletion of the calling user's own account by arming the grace period from the tenant compliance profile and mailing a confirmation, after which only cancel-deletion can stop the erasure.",
+    agent: { risk: "high" },
     handler: async (event, ctx) => {
       const res = await startDeletionGracePeriod(ctx, event.user.id, event.user.tenantId);
       if (!res.ok) return writeFailure(res.error);

package/src/user-data-rights/handlers/request-export.write.ts

@@ -60,6 +60,8 @@ export const requestExportWrite = defineWriteHandler({
   name: "request-export",
   schema: z.object({}),
   access: { openToAll: true },
+  description:
+    "Queues a GDPR Art. 15 and 20 data export for the calling user and returns its job id, handing back the running job with isExisting true instead of a second one when an export is already pending.",
   handler: async (event, ctx) => {
     const userId = event.user.id;
     const T = getTemporal();

package/src/user-data-rights/handlers/restrict-account.write.ts

@@ -46,6 +46,9 @@ export const restrictAccountWrite = defineWriteHandler({
   name: "restrict-account",
   schema: z.object({ userId: z.string().uuid().optional() }),
   access: { openToAll: true },
+  description:
+    "Freezes an account under GDPR Art. 18 by flipping it to restricted and revoking all of its live sessions, locking the user out until an admin calls lift-restriction; targets the caller by default, an admin may name another userId.",
+  agent: { risk: "high" },
   handler: async (event, ctx) => {
     const targetUserId = event.payload.userId ?? event.user.id;
     if (targetUserId !== event.user.id) {

package/src/user-data-rights/handlers/run-forget-cleanup.write.ts

@@ -28,6 +28,7 @@ export function createRunForgetCleanupHandler(opts: RunForgetCleanupOptions = {}
     name: "run-forget-cleanup",
     schema: z.object({}),
     access: { roles: access.privileged },
+    agent: { expose: false },
     handler: async (_event, ctx) => {
       if (!ctx.registry) {
         return writeFailure(

package/src/user-data-rights/schema/download-attempt.ts

@@ -12,6 +12,8 @@ import {
 export const downloadAttemptEntity = createEntity({
   table: "read_download_attempts",
   idType: "uuid",
+  description:
+    "One rejected attempt to fetch a GDPR data-export download, recording the failure result, the path used (magic-link token or logged-in job id), the source IP, user agent and time, so brute-force probing of download links is visible.",
   fields: {
     // notFound | expired | failed | signedUrlNotSupported
     result: createTextField({ required: true, maxLength: 32 }),

package/src/user-data-rights/schema/export-job.ts

@@ -64,6 +64,8 @@ const EXPORT_JOB_STATUS_OPTIONS = [
 export const exportJobEntity = createEntity({
   table: "read_export_jobs",
   idType: "uuid",
+  description:
+    "One user's GDPR Art. 20 data-export request and its lifecycle: who asked, from which tenant, the pending/running/done/failed status, the timestamps, the download storage key and expiry, and any error the export worker hit.",
 
   fields: {
     // Tenant-agnostisch: Wert wird beim Schreiben gesetzt (Framework

package/src/user-profile/handlers/change-email.write.ts

@@ -37,6 +37,8 @@ export const changeEmailWrite = defineWriteHandler({
     newEmail: z.email(),
   }),
   access: { roles: access.authenticated },
+  description:
+    "Replaces the signed-in caller's own email address after re-checking their current password, refusing an unchanged or already-taken address and clearing the verified flag so the app can re-run email verification.",
   handler: async (event, ctx) => {
     const systemUser = createSystemUser(event.user.tenantId);
 

package/src/workflow-runner/handlers/resume-run.write.ts

@@ -224,6 +224,7 @@ function seedResumedStepResults(
 
 export const resumeRunHandler: WriteHandlerDef = {
   name: "resume-run",
+  agent: { expose: false },
   schema: resumeRunSchema,
   access: { roles: [SYSTEM_ROLE] },
   handler: async (event, ctx) => {