@cosmicdrift/kumiko-bundled-features 0.255.0 → 0.255.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-bundled-features",
-  "version": "0.255.0",
+  "version": "0.255.1",
   "description": "Built-in features — tenant, user, auth, delivery. The stuff you'd rewrite anyway, already typed.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -130,12 +130,12 @@
     "./workflow-runner": "./src/workflow-runner/index.ts"
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-dispatcher-live": "0.255.0",
-    "@cosmicdrift/kumiko-framework": "0.255.0",
-    "@cosmicdrift/kumiko-headless": "0.255.0",
-    "@cosmicdrift/kumiko-renderer": "0.255.0",
-    "@cosmicdrift/kumiko-renderer-web": "0.255.0",
-    "@cosmicdrift/kumiko-types": "0.255.0",
+    "@cosmicdrift/kumiko-dispatcher-live": "0.255.1",
+    "@cosmicdrift/kumiko-framework": "0.255.1",
+    "@cosmicdrift/kumiko-headless": "0.255.1",
+    "@cosmicdrift/kumiko-renderer": "0.255.1",
+    "@cosmicdrift/kumiko-renderer-web": "0.255.1",
+    "@cosmicdrift/kumiko-types": "0.255.1",
     "@mollie/api-client": "^4.5.0",
     "@node-rs/argon2": "^2.0.2",
     "@types/mailparser": "^3.4.6",
@@ -164,7 +164,7 @@
   "devDependencies": {
     "@testing-library/user-event": "^14.6.1",
     "@types/qrcode": "^1.5.5",
-    "@cosmicdrift/kumiko-locale-de": "0.255.0",
-    "@cosmicdrift/kumiko-locale-es": "0.255.0"
+    "@cosmicdrift/kumiko-locale-de": "0.255.1",
+    "@cosmicdrift/kumiko-locale-es": "0.255.1"
   }
 }

package/src/billing-foundation/__tests__/billing-foundation.integration.test.ts

@@ -855,12 +855,13 @@ describe("scenario 10: PII is encrypted at rest, not just erasable on destroy",
   // is written through the encrypted path above. If that changes (billing-
   // foundation goes live before a KMS is configured somewhere), note for
   // whoever builds the backfill: the existing backfillEventPiiEncryption
-  // (#799, db/queries/backfill-pii.ts) does NOT cover this feature yet —
-  // its lifecycle-event matcher expects `<aggregateType>.<verb>` event
-  // names (billing's are `billing-foundation:event:subscription-created`)
-  // and its custom-event catalog only supports user-subject fields
-  // (`{kind: "user"}`), not the tenant-subject fields billing uses. Closing
-  // that gap is new framework capability, not a wiring fix.
+  // (#799, db/queries/backfill-pii.ts) does NOT cover this feature yet — its
+  // lifecycle-event matcher expects `<aggregateType>.<verb>` event names,
+  // but billing's are `billing-foundation:event:subscription-created`. The
+  // custom-event catalog branch itself already resolves user/tenant/self
+  // subjects (fw#2801/#2819) — no framework gap to close here, only the
+  // lifecycle-event matcher would need widening if this feature ever needs
+  // a backfill.
 });
 
 // =============================================================================

package/src/crypto-shredding/handlers/forget-subject.write.ts

@@ -3,8 +3,8 @@ import { requestContext } from "@cosmicdrift/kumiko-framework/api";
 import { ROLES } from "@cosmicdrift/kumiko-framework/auth";
 import {
   configuredPiiSubjectKms,
-  RECORD_ENTITY_PATTERN,
   type SubjectId,
+  subjectIdSchema,
   subjectIdToKey,
 } from "@cosmicdrift/kumiko-framework/crypto";
 import {
@@ -19,7 +19,6 @@ import {
   type FeatureDefinition,
   type HandlerContext,
   type SessionUser,
-  type TenantId,
   type WriteEvent,
 } from "@cosmicdrift/kumiko-framework/engine";
 import {
@@ -49,15 +48,7 @@ import {
   TARGET_TENANT_NOT_ADMIN_TENANT,
 } from "../constants";
 
-export const subjectIdSchema = z.discriminatedUnion("kind", [
-  z.object({ kind: z.literal("user"), userId: z.uuid() }),
-  z.object({ kind: z.literal("tenant"), tenantId: z.uuid() }),
-  z.object({
-    kind: z.literal("record"),
-    entity: z.string().regex(RECORD_ENTITY_PATTERN),
-    id: z.uuid(),
-  }),
-]);
+export { subjectIdSchema };
 
 export const forgetSubjectSchema = z.object({
   subject: subjectIdSchema,
@@ -296,7 +287,7 @@ export const forgetSubjectWrite = defineWriteHandler({
       raw.kind === "user"
         ? { kind: "user", userId: raw.userId }
         : raw.kind === "tenant"
-          ? { kind: "tenant", tenantId: raw.tenantId as TenantId } // @cast-boundary uuid-validated command payload → branded id
+          ? { kind: "tenant", tenantId: raw.tenantId }
           : { kind: "record", entity: raw.entity, id: raw.id };
     const subjectKey = subjectIdToKey(subject);