@cosmicdrift/kumiko-bundled-features 0.277.0 → 0.280.0

package/src/user-data-rights-defaults/hooks/notification-preference.userdata-hook.ts

@@ -1,5 +1,4 @@
-import { selectMany } from "@cosmicdrift/kumiko-framework/bun-db";
-import { createEventStoreExecutor, createTenantDb } from "@cosmicdrift/kumiko-framework/db";
+import { createEventStoreExecutor } from "@cosmicdrift/kumiko-framework/db";
 import {
   createSystemUser,
   type UserDataDeleteHook,
@@ -23,7 +22,7 @@ const crud = createEventStoreExecutor(notificationPreferencesTable, notification
 
 export const notificationPreferenceExportHook: UserDataExportHook = async (ctx) => {
   if (!featureMounted(ctx, "delivery")) return null;
-  const rows = await selectMany<Record<string, unknown>>(ctx.db, notificationPreferencesTable, {
+  const rows = await ctx.db.selectMany<Record<string, unknown>>(notificationPreferencesTable, {
     tenantId: ctx.tenantId,
     userId: ctx.userId,
   });
@@ -42,14 +41,13 @@ export const notificationPreferenceDeleteHook: UserDataDeleteHook = async (ctx)
   // skip: delivery not mounted — its table doesn't exist, nothing to erase.
   if (!featureMounted(ctx, "delivery")) return;
   const systemUser = createSystemUser(ctx.tenantId);
-  const tdb = createTenantDb(ctx.db, ctx.tenantId, "system");
-  const rows = await selectMany<Record<string, unknown>>(ctx.db, notificationPreferencesTable, {
+  const rows = await ctx.db.selectMany<Record<string, unknown>>(notificationPreferencesTable, {
     tenantId: ctx.tenantId,
     userId: ctx.userId,
   });
   for (const row of rows) {
     const id = row["id"]; // @cast-boundary db-row
     if (typeof id !== "string") continue;
-    assertErased(await crud.forget({ id }, systemUser, tdb), "notification-preference", id);
+    assertErased(await crud.forget({ id }, systemUser, ctx.db), "notification-preference", id);
   }
 };

package/src/user-data-rights-defaults/hooks/tenant-invitation.userdata-hook.ts

@@ -1,5 +1,4 @@
-import { fetchOne, selectMany } from "@cosmicdrift/kumiko-framework/bun-db";
-import { createEventStoreExecutor, createTenantDb } from "@cosmicdrift/kumiko-framework/db";
+import { createEventStoreExecutor } from "@cosmicdrift/kumiko-framework/db";
 import {
   createSystemUser,
   type UserDataDeleteHook,
@@ -41,7 +40,7 @@ const KMS_POOL_CONCURRENCY = 4;
 
 async function resolveUserEmail(ctx: UserDataHookCtx): Promise<string | null> {
   if (ctx.userEmailBeforeDelete) return ctx.userEmailBeforeDelete.toLowerCase();
-  const row = (await fetchOne(ctx.db, userTable, { id: ctx.userId })) as {
+  const row = (await ctx.db.fetchOne(userTable, { id: ctx.userId })) as {
     email: string;
   } | null; // @cast-boundary db-runner
   if (!row) return null;
@@ -57,7 +56,7 @@ export const tenantInvitationExportHook: UserDataExportHook = async (ctx) => {
   if (!email) return null;
   // Invitation emails are lowercase-normalized on insert, so an exact match
   // is a case-insensitive match.
-  const rows = await selectMany<Record<string, unknown>>(ctx.db, tenantInvitationsTable, {
+  const rows = await ctx.db.selectMany<Record<string, unknown>>(tenantInvitationsTable, {
     tenantId: ctx.tenantId,
     email,
   });
@@ -88,11 +87,10 @@ export const tenantInvitationDeleteHook: UserDataDeleteHook = async (ctx, strate
   // skip: tenant not mounted — its table doesn't exist, nothing to erase.
   if (!featureMounted(ctx, "tenant")) return;
   const systemUser = createSystemUser(ctx.tenantId);
-  const tdb = createTenantDb(ctx.db, ctx.tenantId, "system");
 
   const email = await resolveUserEmail(ctx);
   if (email) {
-    const inviteeRows = await selectMany<Record<string, unknown>>(ctx.db, tenantInvitationsTable, {
+    const inviteeRows = await ctx.db.selectMany<Record<string, unknown>>(tenantInvitationsTable, {
       tenantId: ctx.tenantId,
       email,
     });
@@ -100,14 +98,14 @@ export const tenantInvitationDeleteHook: UserDataDeleteHook = async (ctx, strate
       const id = row["id"]; // @cast-boundary db-row
       if (typeof id !== "string") continue;
       if (strategy === "delete") {
-        assertErased(await crud.forget({ id }, systemUser, tdb), "tenant-invitation", id);
+        assertErased(await crud.forget({ id }, systemUser, ctx.db), "tenant-invitation", id);
       } else {
         // Row-id in the pseudonym keeps the (tenantId, email) unique index
         // collision-free when a user has invitations in several states.
         await crud.update(
           { id, changes: { email: `forgotten-${id}@anonymized.invalid` } },
           systemUser,
-          tdb,
+          ctx.db,
           { skipOptimisticLock: true },
         );
       }
@@ -120,14 +118,14 @@ export const tenantInvitationDeleteHook: UserDataDeleteHook = async (ctx, strate
   // without loading + decrypting every invitation in the tenant. See
   // tenant/handlers/invitations.query.ts for the same lookupable-filter
   // pattern on `email`.
-  const inviterRows = await selectMany<Record<string, unknown>>(ctx.db, tenantInvitationsTable, {
+  const inviterRows = await ctx.db.selectMany<Record<string, unknown>>(tenantInvitationsTable, {
     tenantId: ctx.tenantId,
     invitedBy: ctx.userId,
   });
   for (const row of inviterRows) {
     const id = row["id"]; // @cast-boundary db-row
     if (typeof id !== "string") continue;
-    await crud.update({ id, changes: { invitedBy: INVITED_BY_ANONYMIZED } }, systemUser, tdb, {
+    await crud.update({ id, changes: { invitedBy: INVITED_BY_ANONYMIZED } }, systemUser, ctx.db, {
       skipOptimisticLock: true,
     });
   }

package/src/user-data-rights-defaults/hooks/user-session.userdata-hook.ts

@@ -1,4 +1,3 @@
-import { deleteMany, selectMany } from "@cosmicdrift/kumiko-framework/bun-db";
 import type { UserDataDeleteHook, UserDataExportHook } from "@cosmicdrift/kumiko-framework/engine";
 import { userSessionTable } from "../../sessions";
 import { featureMounted } from "./feature-mounted";
@@ -16,7 +15,7 @@ import { featureMounted } from "./feature-mounted";
 
 export const userSessionExportHook: UserDataExportHook = async (ctx) => {
   if (!featureMounted(ctx, "sessions")) return null;
-  const rows = await selectMany<Record<string, unknown>>(ctx.db, userSessionTable, {
+  const rows = await ctx.db.selectMany(userSessionTable, {
     userId: ctx.userId,
     tenantId: ctx.tenantId,
   });
@@ -38,5 +37,5 @@ export const userSessionExportHook: UserDataExportHook = async (ctx) => {
 export const userSessionDeleteHook: UserDataDeleteHook = async (ctx) => {
   // skip: sessions not mounted — its table doesn't exist, nothing to erase.
   if (!featureMounted(ctx, "sessions")) return;
-  await deleteMany(ctx.db, userSessionTable, { userId: ctx.userId, tenantId: ctx.tenantId });
+  await ctx.db.deleteMany(userSessionTable, { userId: ctx.userId, tenantId: ctx.tenantId });
 };

package/src/user-data-rights-defaults/hooks/user.userdata-hook.ts

@@ -1,5 +1,4 @@
-import { fetchOne } from "@cosmicdrift/kumiko-framework/bun-db";
-import { createEventStoreExecutor, createTenantDb } from "@cosmicdrift/kumiko-framework/db";
+import { createEventStoreExecutor } from "@cosmicdrift/kumiko-framework/db";
 import {
   createSystemUser,
   type UserDataDeleteHook,
@@ -42,13 +41,13 @@ const crud = createEventStoreExecutor(userTable, userEntity, { entityName: "user
 //                Frist auf einer FK-target-Entity)
 
 export const userExportHook: UserDataExportHook = async (ctx) => {
-  const row = (await fetchOne(ctx.db, userTable, { id: ctx.userId })) as {
+  const row = await ctx.db.fetchOne<{
     id: string;
     email: string;
     displayName: string;
     locale: string | null;
     emailVerified: boolean;
-  } | null; // @cast-boundary db-runner
+  }>(userTable, { id: ctx.userId });
 
   if (!row) return null;
 
@@ -75,11 +74,11 @@ export const userDeleteHook: UserDataDeleteHook = async (ctx, strategy) => {
 
   // System actor + skipOptimisticLock: the forget pipeline has no read
   // version and writes privileged identity columns ("system" is privileged).
-  // The executor needs a TenantDb (loadById → db.fetchOne); ctx.db is a raw
-  // runner, so wrap it. "system" mode = no tenant filter — user is a systemStream
-  // entity (tenant-agnostic) and forget must reach the row in any tenant.
+  // crud.update extracts the raw connection from ctx.db via tenantDbRunner
+  // and enforces global-entity tenancy itself (isForeignTenantOnGlobalEntity),
+  // so it reaches the row by id regardless of which tenant pass triggered it —
+  // TenantDb's own tenant-scoping narrowing never applies to executor writes.
   const systemUser = createSystemUser(ctx.tenantId);
-  const tdb = createTenantDb(ctx.db, ctx.tenantId, "system");
 
   if (strategy === "delete") {
     // PII raus + status=deleted (Login geblockt) via Event → Rebuild spielt den
@@ -102,7 +101,7 @@ export const userDeleteHook: UserDataDeleteHook = async (ctx, strategy) => {
         },
       },
       systemUser,
-      tdb,
+      ctx.db,
       { skipOptimisticLock: true },
     );
   } else {
@@ -120,7 +119,7 @@ export const userDeleteHook: UserDataDeleteHook = async (ctx, strategy) => {
         },
       },
       systemUser,
-      tdb,
+      ctx.db,
       { skipOptimisticLock: true },
     );
   }