@cosmicdrift/kumiko-bundled-features 0.289.0 → 0.290.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-bundled-features",
-  "version": "0.289.0",
+  "version": "0.290.0",
   "description": "Built-in features — tenant, user, auth, delivery. The stuff you'd rewrite anyway, already typed.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -133,12 +133,12 @@
     "./workflow-runner": "./src/workflow-runner/index.ts"
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-dispatcher-live": "0.289.0",
-    "@cosmicdrift/kumiko-framework": "0.289.0",
-    "@cosmicdrift/kumiko-headless": "0.289.0",
-    "@cosmicdrift/kumiko-renderer": "0.289.0",
-    "@cosmicdrift/kumiko-renderer-web": "0.289.0",
-    "@cosmicdrift/kumiko-types": "0.289.0",
+    "@cosmicdrift/kumiko-dispatcher-live": "0.290.0",
+    "@cosmicdrift/kumiko-framework": "0.290.0",
+    "@cosmicdrift/kumiko-headless": "0.290.0",
+    "@cosmicdrift/kumiko-renderer": "0.290.0",
+    "@cosmicdrift/kumiko-renderer-web": "0.290.0",
+    "@cosmicdrift/kumiko-types": "0.290.0",
     "@mollie/api-client": "^4.5.0",
     "@node-rs/argon2": "^2.0.2",
     "@types/mailparser": "^3.4.6",
@@ -167,8 +167,8 @@
   ],
   "devDependencies": {
     "@testing-library/user-event": "^14.6.1",
-    "@cosmicdrift/kumiko-locale-de": "0.289.0",
-    "@cosmicdrift/kumiko-locale-es": "0.289.0",
+    "@cosmicdrift/kumiko-locale-de": "0.290.0",
+    "@cosmicdrift/kumiko-locale-es": "0.290.0",
     "jsqr": "^1.4.0"
   }
 }

package/src/auth-email-password/__tests__/query-as-member.integration.test.ts

@@ -563,6 +563,19 @@ async function readAsMemberErr(
   );
 }
 
+// The request-level teardown gate (auth-middleware) answers 410 before a
+// handler runs, so a teardown tenant can only be probed for the dispatcher's
+// own active-membership rejection through the stack's dispatcher.
+async function readAsMemberErrViaDispatcher(userId: string, targetQn: string) {
+  const result = await stack.dispatcher.write(
+    "queryasmemberprobe:write:read-as-member",
+    { userId, targetQn, payload: {} },
+    admin,
+  );
+  if (result.isSuccess) throw new Error("expected read-as-member to fail");
+  return result.error;
+}
+
 async function createNote(ownerId: string, body: string): Promise<void> {
   await stack.http.writeOk("queryasmemberprobe:write:note:create", { ownerId, body }, admin);
 }
@@ -693,7 +706,7 @@ describe("ctx.queryAsMember — AccessDenied, same generic error for every rejec
     await addMembership(userId, TENANT_A);
     await setTenantStatus(TENANT_A, "destroying");
 
-    const err = await readAsMemberErr(userId, WHOAMI_QN);
+    const err = await readAsMemberErrViaDispatcher(userId, WHOAMI_QN);
     expect(err.code).toBe("access_denied");
     expect(err.message).toBe(GENERIC_MESSAGE);
     expect(err.details).toEqual(GENERIC_DETAILS);
@@ -707,7 +720,7 @@ describe("ctx.queryAsMember — AccessDenied, same generic error for every rejec
     await addMembership(userId, TENANT_A);
     await setTenantStatus(TENANT_A, "destroyRequested");
 
-    const err = await readAsMemberErr(userId, WHOAMI_QN);
+    const err = await readAsMemberErrViaDispatcher(userId, WHOAMI_QN);
     expect(err.code).toBe("access_denied");
     expect(err.message).toBe(GENERIC_MESSAGE);
     expect(err.details).toEqual(GENERIC_DETAILS);

package/src/auth-mfa/__tests__/verify.integration.test.ts

@@ -375,12 +375,16 @@ describe("mfa verify — re-checks account state the way login.write.ts does", (
     resetTenantLifecycleGateCacheForTests();
 
     try {
-      const err = await stack.http.writeErr(
+      // Via the dispatcher, not HTTP: the request-level teardown gate answers
+      // 410 before /api/write reaches the handler, and this test asserts the
+      // handler's own challenge-token gate.
+      const result = await stack.dispatcher.write(
         AuthMfaHandlers.verify,
         { challengeToken, code: currentTotpCode(secret) },
         GUEST,
       );
-      expectErrorIncludes(err, "invalid_challenge_token");
+      if (result.isSuccess) throw new Error("expected mfa verify to fail");
+      expectErrorIncludes(result.error, "invalid_challenge_token");
     } finally {
       await asRawClient(stack.db).unsafe(
         `UPDATE "${tenantTable.tableName}" SET status = $1 WHERE id = $2`,

package/src/billing-foundation/__tests__/billing-foundation.integration.test.ts

@@ -44,6 +44,7 @@ import {
 } from "../../compliance-profiles";
 import { createConfigFeature } from "../../config";
 import { createTenantFeature } from "../../tenant/feature";
+import { tenantEntity } from "../../tenant/schema/tenant";
 import { createTenantLifecycleFeature } from "../../tenant-lifecycle";
 import { paymentAggregateId, subscriptionAggregateId } from "../aggregate-id";
 import {
@@ -147,6 +148,7 @@ beforeAll(async () => {
   // subscriptionsProjectionTable wird von setupTestStack automatisch
   // gepusht (r.projection mit `table`-Property → auto-push).
   await createEventsTable(db);
+  await unsafeCreateEntityTable(db, tenantEntity);
   await unsafeCreateEntityTable(db, tenantComplianceProfileEntity);
   // providerCustomerId/providerSubscriptionId are `personal: "tenant"`
   // PII-subject fields — no executor wires the KMS automatically here (raw r.projection,

package/src/billing-foundation/__tests__/subscription-tier-sync.integration.test.ts

@@ -30,6 +30,7 @@ import {
 } from "../../compliance-profiles";
 import { createConfigFeature } from "../../config";
 import { createTenantFeature } from "../../tenant/feature";
+import { tenantEntity } from "../../tenant/schema/tenant";
 import { createTenantLifecycleFeature } from "../../tenant-lifecycle";
 import type { TierMap } from "../../tier-engine/compose-app";
 import { TierEngineHandlers } from "../../tier-engine/constants";
@@ -112,6 +113,7 @@ beforeAll(async () => {
     ],
   });
   await createEventsTable(stack.db);
+  await unsafeCreateEntityTable(stack.db, tenantEntity);
   await unsafeCreateEntityTable(stack.db, tenantComplianceProfileEntity);
   await unsafePushTables(stack.db, { tier_assignments: tierAssignmentTable });
   configurePiiSubjectKms(new InMemoryKmsAdapter());

package/src/document-ingest-foundation/__tests__/feature.integration.test.ts

@@ -10,10 +10,16 @@ import {
   createInMemoryFileProvider,
   type InMemoryFileProvider,
 } from "@cosmicdrift/kumiko-framework/files";
-import { setupTestStack, type TestStack, TestUsers } from "@cosmicdrift/kumiko-framework/stack";
+import {
+  setupTestStack,
+  type TestStack,
+  TestUsers,
+  unsafeCreateEntityTable,
+} from "@cosmicdrift/kumiko-framework/stack";
 import { createComplianceProfilesFeature } from "../../compliance-profiles";
 import { createConfigFeature } from "../../config";
 import { createTenantFeature } from "../../tenant/feature";
+import { tenantEntity } from "../../tenant/schema/tenant";
 import { createTenantLifecycleFeature } from "../../tenant-lifecycle";
 import { documentIngestFoundationFeature } from "../feature";
 
@@ -48,6 +54,7 @@ beforeAll(async () => {
     ],
     files: { storageProvider: provider },
   });
+  await unsafeCreateEntityTable(stack.db, tenantEntity);
 });
 
 afterAll(async () => {

package/src/inbound-mail-foundation/__tests__/inbound-mail-foundation.integration.test.ts

@@ -46,6 +46,7 @@ import {
 import { createConfigFeature } from "../../config";
 import { inboundProviderInMemoryFeature } from "../../inbound-provider-inmemory";
 import { createTenantFeature } from "../../tenant/feature";
+import { tenantEntity } from "../../tenant/schema/tenant";
 import { createTenantLifecycleFeature } from "../../tenant-lifecycle";
 import { inboundMessageAggregateId, mailThreadAggregateId } from "../aggregate-id";
 import { InboundMailFoundationHandlers, InboundMailFoundationQueries } from "../constants";
@@ -83,6 +84,7 @@ beforeAll(async () => {
   });
   db = stack.db;
   await createEventsTable(db);
+  await unsafeCreateEntityTable(db, tenantEntity);
   await unsafeCreateEntityTable(db, tenantComplianceProfileEntity);
   // Unmanaged direct-write stores — kein r.entity, kein Auto-Push.
   await unsafeCreateEntityTable(db, syncCursorEntity);

package/src/inbound-mail-foundation/__tests__/retention.integration.test.ts

@@ -27,6 +27,7 @@ import {
 import { createConfigFeature } from "../../config";
 import { inboundProviderInMemoryFeature } from "../../inbound-provider-inmemory";
 import { createTenantFeature } from "../../tenant/feature";
+import { tenantEntity } from "../../tenant/schema/tenant";
 import { createTenantLifecycleFeature } from "../../tenant-lifecycle";
 import { inboundMessageAggregateId } from "../aggregate-id";
 import { InboundMailFoundationHandlers } from "../constants";
@@ -51,6 +52,7 @@ beforeAll(async () => {
   });
   db = stack.db;
   await createEventsTable(db);
+  await unsafeCreateEntityTable(db, tenantEntity);
   await unsafeCreateEntityTable(db, tenantComplianceProfileEntity);
   await unsafeCreateEntityTable(db, syncCursorEntity);
   await unsafeCreateEntityTable(db, seenMessageEntity);

package/src/inbound-mail-foundation/__tests__/watch-supervisor.integration.test.ts

@@ -33,6 +33,7 @@ import {
   seedInboundMessage,
 } from "../../inbound-provider-inmemory/feature";
 import { createTenantFeature } from "../../tenant/feature";
+import { tenantEntity } from "../../tenant/schema/tenant";
 import { createTenantLifecycleFeature } from "../../tenant-lifecycle";
 import {
   createInboundMailSupervisor,
@@ -65,6 +66,7 @@ beforeAll(async () => {
   });
   db = stack.db;
   await createEventsTable(db);
+  await unsafeCreateEntityTable(db, tenantEntity);
   await unsafeCreateEntityTable(db, tenantComplianceProfileEntity);
   await unsafeCreateEntityTable(db, syncCursorEntity);
   await unsafeCreateEntityTable(db, seenMessageEntity);

package/src/subscription-mollie/__tests__/mollie-foundation.integration.test.ts

@@ -33,6 +33,7 @@ import {
   setupTestStack,
   type TestStack,
   testTenantId,
+  unsafeCreateEntityTable,
 } from "@cosmicdrift/kumiko-framework/stack";
 import type {
   Payment as MolliePayment,
@@ -42,6 +43,7 @@ import { Hono } from "hono";
 import { createComplianceProfilesFeature } from "../../compliance-profiles";
 import { createConfigFeature } from "../../config";
 import { createTenantFeature } from "../../tenant/feature";
+import { tenantEntity } from "../../tenant/schema/tenant";
 import { createTenantLifecycleFeature } from "../../tenant-lifecycle";
 import { createSubscriptionMollieFeature } from "../feature";
 import type { MollieClientShape } from "../verify-webhook";
@@ -150,6 +152,7 @@ beforeAll(async () => {
   // subscriptionsProjectionTable wird von setupTestStack automatisch
   // gepusht (r.projection mit `table`-Property → auto-push).
   await createEventsTable(db);
+  await unsafeCreateEntityTable(db, tenantEntity);
 
   webhookApp = new Hono();
   webhookApp.post(

package/src/subscription-stripe/__tests__/stripe-foundation.integration.test.ts

@@ -29,6 +29,7 @@ import {
   setupTestStack,
   type TestStack,
   testTenantId,
+  unsafeCreateEntityTable,
   unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { createTestEnvelopeCipher } from "@cosmicdrift/kumiko-framework/testing";
@@ -45,6 +46,7 @@ import {
   tenantSecretsTable,
 } from "../../secrets";
 import { createTenantFeature } from "../../tenant/feature";
+import { tenantEntity } from "../../tenant/schema/tenant";
 import { createTenantLifecycleFeature } from "../../tenant-lifecycle";
 import { createSubscriptionStripeFeature } from "../feature";
 
@@ -115,6 +117,7 @@ beforeAll(async () => {
   // gepusht (r.projection mit `table`-Property → auto-push). config +
   // secrets brauchen ihre Tabellen explizit.
   await createEventsTable(db);
+  await unsafeCreateEntityTable(db, tenantEntity);
   await unsafePushTables(db, { configValuesTable, tenant_secrets: tenantSecretsTable });
   // Standalone-secrets-context (gleiche KEK) zum direkten Seeden +
   // als systemSecrets für die zweite webhook-app.
@@ -504,6 +507,7 @@ describe("scenario 6: billing-live gate end-to-end (#104)", () => {
       }),
     });
     await createEventsTable(gateStack.db);
+    await unsafeCreateEntityTable(gateStack.db, tenantEntity);
     await unsafePushTables(gateStack.db, {
       configValuesTable,
       tenant_secrets: tenantSecretsTable,

package/src/tenant-lifecycle/__tests__/tenant-lifecycle.integration.test.ts

@@ -469,3 +469,111 @@ describe("tenant-lifecycle :: sweep isolates one tenant's failure from another's
     expect(eventsB.some((e) => e.type.endsWith("tenant-destruction-stage-succeeded"))).toBe(true);
   });
 });
+
+// No authConfig here on purpose: buildServer derives the 410 gate from the
+// mounted tenantLifecycleStatus provider. The stacks above keep the explicit
+// auth.resolveTenantLifecycleStatus override covered.
+describe("tenant-lifecycle :: 410 gate derived from the mounted provider", () => {
+  let derivedStack: TestStack;
+
+  beforeAll(async () => {
+    const encryption = createTestEnvelopeCipher(randomBytes(32).toString("base64"));
+    const resolver = createConfigResolver({ cipher: encryption });
+    derivedStack = await setupTestStack({
+      features: [
+        createConfigFeature(),
+        createUserFeature(),
+        createTenantFeature(),
+        createComplianceProfilesFeature(),
+        authFoundationFeature,
+        createSessionsFeature(),
+        createTenantLifecycleFeature(),
+      ],
+      extraContext: { configResolver: resolver, configEncryption: encryption },
+    });
+    await unsafeCreateEntityTable(derivedStack.db, tenantEntity);
+    await unsafeCreateEntityTable(derivedStack.db, userSessionEntity);
+    await unsafeCreateEntityTable(derivedStack.db, tenantComplianceProfileEntity);
+    await unsafeCreateEntityTable(derivedStack.db, tenantMembershipEntity);
+    await createEventsTable(derivedStack.db);
+    await unsafePushTables(derivedStack.db, { configValuesTable });
+  });
+
+  afterAll(async () => {
+    await derivedStack.cleanup();
+  });
+
+  beforeEach(async () => {
+    derivedStack.events.reset();
+    resetTenantLifecycleGateCacheForTests();
+    await resetTestTables(derivedStack.db, [
+      tenantTable,
+      tenantComplianceProfileTable,
+      userSessionTable,
+      tenantMembershipsTable,
+      eventsTable,
+    ]);
+    await derivedStack.http.writeOk(
+      TenantHandlers.create,
+      { id: tenantAdmin.tenantId, key: "acme", name: "ACME Corp" },
+      TestUsers.systemAdmin,
+    );
+    await derivedStack.http.writeOk(SET_PROFILE, { profileKey: "eu-dsgvo" }, tenantAdmin);
+  });
+
+  async function rejectionCode(res: Response): Promise<string | undefined> {
+    const body = (await res.json()) as { error?: { code?: string } };
+    return body.error?.code;
+  }
+
+  test("active tenant passes the gate", async () => {
+    const res = await derivedStack.http.query(TenantQueries.me, {}, tenantAdmin);
+    expect(res.status).toBe(200);
+  });
+
+  test("destroyRequested tenant gets 410 tenant_unavailable without any hand-wiring", async () => {
+    await derivedStack.http.writeOk(REQUEST, {}, tenantAdmin);
+    resetTenantLifecycleGateCacheForTests();
+
+    const res = await derivedStack.http.query(TenantQueries.me, {}, tenantAdmin);
+    expect(res.status).toBe(410);
+    expect(await rejectionCode(res)).toBe("tenant_unavailable");
+  });
+
+  test("cancel-destruction stays exempt while destroyRequested", async () => {
+    await derivedStack.http.writeOk(REQUEST, {}, tenantAdmin);
+    resetTenantLifecycleGateCacheForTests();
+
+    const cancelled = await derivedStack.http.writeOk<{ status: string }>(CANCEL, {}, tenantAdmin);
+    expect(cancelled.status).toBe("active");
+  });
+
+  test("batch mixing cancel-destruction with another write gets 410", async () => {
+    await derivedStack.http.writeOk(REQUEST, {}, tenantAdmin);
+    resetTenantLifecycleGateCacheForTests();
+
+    const res = await derivedStack.http.batch(
+      [
+        { type: CANCEL, payload: {} },
+        { type: SET_PROFILE, payload: { profileKey: "eu-dsgvo" } },
+      ],
+      tenantAdmin,
+    );
+    expect(res.status).toBe(410);
+    expect(await rejectionCode(res)).toBe("tenant_unavailable");
+  });
+
+  test("destroying tenant has no cancel exemption", async () => {
+    await updateRows(
+      derivedStack.db,
+      tenantTable,
+      { status: "destroying" },
+      { id: tenantAdmin.tenantId },
+    );
+    resetTenantLifecycleGateCacheForTests();
+
+    const res = await derivedStack.http.write(CANCEL, {}, tenantAdmin);
+    expect(res.status).toBe(410);
+    expect(await rejectionCode(res)).toBe("tenant_unavailable");
+  });
+});