@cosmicdrift/kumiko-bundled-features 0.313.0 → 0.314.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-bundled-features",
-  "version": "0.313.0",
+  "version": "0.314.0",
   "description": "Built-in features — tenant, user, auth, delivery. The stuff you'd rewrite anyway, already typed.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -133,12 +133,12 @@
     "./workflow-runner": "./src/workflow-runner/index.ts"
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-dispatcher-live": "0.313.0",
-    "@cosmicdrift/kumiko-framework": "0.313.0",
-    "@cosmicdrift/kumiko-headless": "0.313.0",
-    "@cosmicdrift/kumiko-renderer": "0.313.0",
-    "@cosmicdrift/kumiko-renderer-web": "0.313.0",
-    "@cosmicdrift/kumiko-types": "0.313.0",
+    "@cosmicdrift/kumiko-dispatcher-live": "0.314.0",
+    "@cosmicdrift/kumiko-framework": "0.314.0",
+    "@cosmicdrift/kumiko-headless": "0.314.0",
+    "@cosmicdrift/kumiko-renderer": "0.314.0",
+    "@cosmicdrift/kumiko-renderer-web": "0.314.0",
+    "@cosmicdrift/kumiko-types": "0.314.0",
     "@mollie/api-client": "^4.5.0",
     "@node-rs/argon2": "^2.0.2",
     "@types/mailparser": "^3.4.6",
@@ -167,8 +167,8 @@
   ],
   "devDependencies": {
     "@testing-library/user-event": "^14.6.1",
-    "@cosmicdrift/kumiko-locale-de": "0.313.0",
-    "@cosmicdrift/kumiko-locale-es": "0.313.0",
+    "@cosmicdrift/kumiko-locale-de": "0.314.0",
+    "@cosmicdrift/kumiko-locale-es": "0.314.0",
     "jsqr": "^1.4.0"
   }
 }

package/src/auth-email-password/changes.json

@@ -1,4 +1,10 @@
 [
+  {
+    "version": "0.314.0",
+    "type": "improvement",
+    "title": "SignupCompleteScreen passes the claimed handover to loggedInHref",
+    "detail": "The function form of `loggedInHref` on `SignupCompleteScreen` now receives\nan optional `handover: { entityType, id }` next to `tenantKey`/`roles`,\nmirroring the `handover` field `confirmSignup` already returns when a\ntry-first tenant-handover grant was claimed during signup. Apps can route a\nfreshly activated user straight to the entity they claimed (offlot-app#454)\ninstead of a fixed landing page. The string form and callers that ignore the\nextra field are unaffected."
+  },
   {
     "version": "0.313.0",
     "type": "improvement",

package/src/auth-email-password/web/__tests__/signup-complete-screen.test.tsx

@@ -179,6 +179,72 @@ describe("SignupCompleteScreen", () => {
     });
   });
 
+  test("confirm-Antwort mit handover → loggedInHref-Function erhält handover", async () => {
+    globalThis.fetch = mock(
+      async () =>
+        new Response(
+          JSON.stringify({
+            user: { id: "u1", tenantId: "t1", roles: ["User"] },
+            tenantKey: "acme",
+            handover: { entityType: "run", id: "run-1" },
+          }),
+          { status: 200, headers: { "Content-Type": "application/json" } },
+        ),
+    ) as unknown as typeof fetch;
+
+    renderWithProviders(
+      <SignupCompleteScreen
+        token="abc-token"
+        loggedInHref={({ tenantKey, handover }) =>
+          handover !== undefined
+            ? `/${tenantKey}/${handover.entityType}/${handover.id}`
+            : `/${tenantKey}/`
+        }
+      />,
+    );
+    fillPasswords("validpass1", "validpass1");
+    fireEvent.click(screen.getByRole("button", { name: "Activate account" }));
+
+    await waitFor(() => {
+      expect(screen.getByRole("link", { name: "Continue" }).getAttribute("href")).toBe(
+        "/acme/run/run-1",
+      );
+    });
+  });
+
+  test("confirm-Antwort ohne handover → loggedInHref-Function bekommt Args ohne handover-Key", async () => {
+    globalThis.fetch = mock(
+      async () =>
+        new Response(
+          JSON.stringify({
+            user: { id: "u1", tenantId: "t1", roles: ["User"] },
+            tenantKey: "acme",
+          }),
+          { status: 200, headers: { "Content-Type": "application/json" } },
+        ),
+    ) as unknown as typeof fetch;
+
+    let receivedArgs:
+      | { tenantKey: string; roles: readonly string[]; handover?: unknown }
+      | undefined;
+    renderWithProviders(
+      <SignupCompleteScreen
+        token="abc-token"
+        loggedInHref={(args) => {
+          receivedArgs = args;
+          return `/${args.tenantKey}/`;
+        }}
+      />,
+    );
+    fillPasswords("validpass1", "validpass1");
+    fireEvent.click(screen.getByRole("button", { name: "Activate account" }));
+
+    await waitFor(() => {
+      expect(screen.getByRole("link", { name: "Continue" }).getAttribute("href")).toBe("/acme/");
+    });
+    expect(receivedArgs).toStrictEqual({ tenantKey: "acme", roles: ["User"] });
+  });
+
   test("mismatch → client-side error, kein fetch-Call", async () => {
     const fetchMock = mock(async () => new Response(null, { status: 200 }));
     globalThis.fetch = fetchMock as unknown as typeof fetch;

package/src/auth-email-password/web/signup-complete-screen.tsx

@@ -17,7 +17,7 @@
 
 import { usePrimitives, useTranslation } from "@cosmicdrift/kumiko-renderer";
 import { type FormEvent, type ReactNode, useState } from "react";
-import { confirmSignup } from "./auth-client";
+import { confirmSignup, type SignupConfirmSuccess } from "./auth-client";
 import { passwordPairIssue, resolveLoggedInHref } from "./auth-form-logic";
 import { AuthCard, useUrlToken } from "./auth-form-primitives";
 
@@ -25,11 +25,16 @@ export type SignupCompleteScreenProps = {
   readonly title?: string;
   /** Override for the URL token — server-rendered apps can pass it. Default: `?token=...`. */
   readonly token?: string;
-  /** Where to send the user after activation. Function-form receives the tenantKey and the
-   *  roles granted by this flow in that tenant — for role-dependent landing targets. Default "/". */
+  /** Where to send the user after activation. Function-form receives the tenantKey, the
+   *  roles granted by this flow in that tenant, and the claimed `handover` entity when
+   *  signup claimed a try-first grant. Default "/". */
   readonly loggedInHref?:
     | string
-    | ((args: { tenantKey: string; roles: readonly string[] }) => string);
+    | ((args: {
+        tenantKey: string;
+        roles: readonly string[];
+        handover?: SignupConfirmSuccess["handover"];
+      }) => string);
   /** Href for the "already have an account?" link when the token is missing. Default "/login". */
   readonly loginHref?: string;
 };
@@ -71,6 +76,7 @@ export function SignupCompleteScreen({
         resolveLoggedInHref(loggedInHref, {
           tenantKey: res.data.tenantKey,
           roles: res.data.user.roles,
+          ...(res.data.handover !== undefined && { handover: res.data.handover }),
         }),
       );
       return;

package/src/user-data-rights-defaults/hooks/file-ref.userdata-hook.ts

@@ -38,8 +38,9 @@ const crud = createEventStoreExecutor(fileRefsTable, fileRefEntity, { entityName
 //                not the subject axis.
 //   "anonymize": insertedById=null, row + binary survive (FK refs can still
 //                point at it; person-link removed) — applies to ALL rows
-//                when the entity strategy itself is already anonymize (e.g.
-//                blockDelete retention), regardless of the field.
+//                when a retention override on fileRef (anonymize or
+//                blockDelete, e.g. a statutory retention duty) sets the
+//                strategy, regardless of the field.
 //
 // **Provider-Resolution:** der Provider kommt zur Lauf-Zeit aus
 // `ctx.buildStorageProvider(ctx.tenantId)` — der Forget-Orchestrator
@@ -216,11 +217,12 @@ export const fileRefDeleteHook: UserDataDeleteHook = async (ctx, strategy) => {
   });
 
   if (strategy !== "delete") {
-    // anonymize: insertedById=null, FileRef + binary bleiben. Use-case: shared
-    // chat-Attachment im Multi-User-Channel — Author-ID raus, Datei bleibt sichtbar.
-    // Applies to ALL rows — the entity strategy comes from a retention
-    // policy (e.g. blockDelete) and overrides the per-field decision below,
-    // which only applies for strategy="delete".
+    // Only reachable via an explicit retention override on fileRef:
+    // policyToStrategy maps anonymize and blockDelete to "anonymize", typically
+    // for a statutory retention duty (Art. 17(3)(b) GDPR, HGB/AO). Row and
+    // binary must survive, so only the uploader link is severed. Applies to
+    // ALL rows because the override replaces the per-field decision below,
+    // which only runs for strategy="delete".
     await severPersonLink(ctx.db, systemUser, rows);
     // skip: anonymize is complete — the hard-delete path below runs only for strategy "delete".
     return;

package/src/workflow-runner/__tests__/workflow-runner.integration.test.ts

@@ -23,7 +23,12 @@ import {
 } from "@cosmicdrift/kumiko-framework/engine";
 import { eventsTable } from "@cosmicdrift/kumiko-framework/event-store";
 import { getConsumerState } from "@cosmicdrift/kumiko-framework/pipeline";
-import { setupTestStack, type TestStack, TestUsers } from "@cosmicdrift/kumiko-framework/stack";
+import {
+  drainEventConsumers,
+  setupTestStack,
+  type TestStack,
+  TestUsers,
+} from "@cosmicdrift/kumiko-framework/stack";
 import { workflowRunAggregateId } from "../aggregate-id";
 import { registerEventTrigger } from "../event-trigger";
 import { workflowRunnerFeature } from "../feature";
@@ -190,7 +195,7 @@ describe("workflow-runner event-trigger", () => {
     // Consumers run their turns concurrently, so events an earlier test's
     // workflow emitted may still be ahead of this consumer's cursor; drain
     // them first so `processed` below counts only this test's trigger.
-    while (((await stack.eventDispatcher?.runOnce())?.processed ?? 0) > 0) {}
+    await drainEventConsumers(stack, [consumerName]);
 
     await insertOne(stack.db, eventsTable, {
       aggregateId: crypto.randomUUID(),