@cosmicdrift/kumiko-bundled-features 0.403.0 → 0.404.0

package/dist/audit/feature.js

@@ -43,7 +43,7 @@ export function createAuditFeature() {
         }));
         r.job({
             name: "escape-hatch-retention",
-            trigger: { cron: "30 3 * * *" },
+            trigger: { maintenance: true },
             concurrency: "skip",
             // pruneEvents needs a transaction-capable connection, which only unsafeRaw() hands a job.
             escapeHatch: {

package/dist/data-retention/feature.js

@@ -41,7 +41,7 @@ export function createDataRetentionFeature() {
         // retention rules are configured but never enforced.
         r.job({
             name: "retention-cleanup",
-            trigger: { cron: "0 3 * * *" },
+            trigger: { maintenance: true },
             perTenant: true,
             concurrency: "skip",
             escapeHatch: {

package/dist/delivery/feature.js

@@ -125,7 +125,7 @@ export function createDeliveryFeature(options) {
         if (attemptLogRetentionDays !== undefined) {
             r.job({
                 name: DeliveryJobNames.attemptLogRetention,
-                trigger: { cron: "15 3 * * *" },
+                trigger: { maintenance: true },
                 concurrency: "skip",
                 escapeHatch: { reason: ATTEMPT_LOG_RETENTION_ESCAPE_HATCH_REASON },
                 handler: async (_payload, ctx) => {

package/dist/feature-toggles/toggle-sync-signal.d.ts

@@ -3,5 +3,5 @@ import type { ToggleSyncSignal } from "./toggle-runtime.ts";
 export type RedisToggleSyncSignal = ToggleSyncSignal & {
     close(): Promise<void>;
 };
-export declare function createRedisToggleSyncSignal(redisUrl: string, clientOptions?: RedisClientOptions, channelPrefix?: string): RedisToggleSyncSignal;
+export declare function createRedisToggleSyncSignal(redisUrl: string, clientOptions?: RedisClientOptions, channelPrefix?: string, channelSubscribePattern?: string | undefined): RedisToggleSyncSignal;
 export declare function createCacheSyncToggleSignal(bus: CacheSyncBus): ToggleSyncSignal;

package/dist/feature-toggles/toggle-sync-signal.js

@@ -1,4 +1,4 @@
-import { CACHE_SYNC_TOPICS, createRedisPubSubSignal, redisChannelPrefixFromEnv, } from "@cosmicdrift/kumiko-framework/redis";
+import { CACHE_SYNC_TOPICS, createRedisPubSubSignal, redisChannelPrefixFromEnv, redisNamespaceFromEnv, } from "@cosmicdrift/kumiko-framework/redis";
 import { isPlainObject } from "@cosmicdrift/kumiko-types/type-guards";
 // Single fixed channel — unlike the SSE broker there's no per-tenant/
 // per-user variance to multiplex, every toggle flip is global.
@@ -13,11 +13,11 @@ function isTogglePayload(value) {
 // the shared cursor's toggle-set event would ever learn about a flip.
 // Standalone Redis transport for callers that want their own connections;
 // createFeatureToggleRuntime builds a cache-sync-bus signal by default.
-export function createRedisToggleSyncSignal(redisUrl, clientOptions, channelPrefix = redisChannelPrefixFromEnv()) {
+export function createRedisToggleSyncSignal(redisUrl, clientOptions, channelPrefix = redisChannelPrefixFromEnv(), channelSubscribePattern = redisNamespaceFromEnv().channelSubscribePattern) {
     const toggleSyncChannel = `${channelPrefix}${TOGGLE_SYNC_CHANNEL_NAME}`;
     const signal = createRedisPubSubSignal({
         redisUrl,
-        channelPattern: toggleSyncChannel,
+        channelPattern: channelSubscribePattern ?? toggleSyncChannel,
         label: "feature-toggles",
         ...(clientOptions ? { clientOptions } : {}),
     });
@@ -26,7 +26,10 @@ export function createRedisToggleSyncSignal(redisUrl, clientOptions, channelPref
             signal.publish(toggleSyncChannel, { featureName, enabled });
         },
         onMessage(listener) {
-            signal.onMessage((_channel, payload) => {
+            signal.onMessage((channel, payload) => {
+                // skip: a wide subscribe pattern also delivers other features' channels
+                if (channel !== toggleSyncChannel)
+                    return;
                 if (!isTogglePayload(payload)) {
                     // biome-ignore lint/suspicious/noConsole: ops-visible fallback — no ctx.obs.log in a raw PubSubSignal handler.
                     console.error(`[kumiko:feature-toggles] dropping malformed cache-sync message on "${toggleSyncChannel}"`);

package/dist/form-draft/feature.js

@@ -34,7 +34,7 @@ function registerFormDraft(r) {
     r.config({ keys: { retentionDays: formDraftRetentionDaysConfig } });
     r.job({
         name: "cleanup",
-        trigger: { cron: "0 3 * * *" },
+        trigger: { maintenance: true },
         concurrency: "skip",
         escapeHatch: { reason: CLEANUP_ESCAPE_HATCH_REASON },
         handler: (payload, ctx) => cleanupDraftsJob(payload, ctx, ctx.db.unsafeRaw()),

package/dist/inbound-mail-foundation/retention-job.js

@@ -10,7 +10,7 @@ export function registerInboundMailRetentionJob(r) {
     const INBOUND_MAIL_RETENTION_REASON = "inbound-mail retention runs raw deletes; every statement filters by this run's tenantId";
     r.job({
         name: "inbound-mail-retention",
-        trigger: { cron: "0 3 * * *" },
+        trigger: { maintenance: true },
         perTenant: true,
         concurrency: "skip",
         escapeHatch: { reason: INBOUND_MAIL_RETENTION_REASON },

package/dist/jobs/feature.js

@@ -65,13 +65,12 @@ export function createJobsFeature(options = {}) {
         }, reindexEntityJob);
         // store_job_runs/store_job_run_logs are direct-write, unbounded-growth
         // stores — nothing else purges them.
-        r.job("retention-cleanup", { trigger: { cron: "0 3 * * *" }, concurrency: "skip" }, createRetentionCleanupJob(retentionDays));
+        r.job("retention-cleanup", { trigger: { maintenance: true }, concurrency: "skip" }, createRetentionCleanupJob(retentionDays));
         // Sweeps store_job_runs for rows stuck at status "running" past the
-        // timeout. Hourly matches the timeout's own granularity —
-        // frequent enough to catch a stuck run soon after it crosses the
-        // threshold, cheap enough that an (almost always empty) result set
-        // doesn't matter.
-        r.job("stale-run-sweep", { trigger: { cron: "0 * * * *" }, concurrency: "skip" }, createStaleRunSweepJob(staleRunTimeoutHours, retentionDays));
+        // timeout. Runs in the maintenance window: the timeout is
+        // hours, so a daily pass finds a stuck run at most a day late and a sleeping
+        // app is not woken every hour for it.
+        r.job("stale-run-sweep", { trigger: { maintenance: true }, concurrency: "skip" }, createStaleRunSweepJob(staleRunTimeoutHours, retentionDays));
         const handlers = {
             trigger: r.writeHandler(triggerWrite),
             retry: r.writeHandler(retryWrite),

package/dist/user-data-rights/feature.js

@@ -416,13 +416,13 @@ export function createUserDataRightsFeature(opts = {}) {
         r.metric(EXPORT_CLEANUP_LAST_RUN_TIMESTAMP_METRIC, {
             type: "gauge",
             unit: "seconds",
-            description: "Unix timestamp of the last export storage-cleanup pass that completed. Alert on time() minus this value exceeding the cron interval plus a buffer; the backlog-age gauge alone stays at its last value when the cron stops.",
+            description: "Unix timestamp of the last export storage-cleanup pass that completed. Alert on time() minus this value exceeding one day plus a buffer; the backlog-age gauge alone stays at its last value when the cron stops.",
         });
         // Worker for the asynchronous export pipeline, triggered by a cron job.
         const RUN_EXPORT_JOBS_REASON = "processes pending export jobs across every tenant";
         r.job({
             name: "run-export-jobs",
-            trigger: { cron: "0 3 * * *" },
+            trigger: { maintenance: true },
             concurrency: "skip",
             escapeHatch: { reason: RUN_EXPORT_JOBS_REASON },
             handler: async (_payload, ctx) => {
@@ -509,7 +509,7 @@ export function createUserDataRightsFeature(opts = {}) {
         const RUN_FORGET_CLEANUP_REASON = "executes overdue Art.17 forget requests across every tenant";
         r.job({
             name: "run-forget-cleanup",
-            trigger: { cron: "0 3 * * *" },
+            trigger: { maintenance: true },
             concurrency: "skip",
             escapeHatch: { reason: RUN_FORGET_CLEANUP_REASON },
             handler: async (_payload, ctx) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-bundled-features",
-  "version": "0.403.0",
+  "version": "0.404.0",
   "description": "Built-in features — tenant, user, auth, delivery. The stuff you'd rewrite anyway, already typed.",
   "license": "MIT",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -570,9 +570,9 @@
     }
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-framework": "0.403.0",
-    "@cosmicdrift/kumiko-renderer": "0.403.0",
-    "@cosmicdrift/kumiko-types": "0.403.0",
+    "@cosmicdrift/kumiko-framework": "0.404.0",
+    "@cosmicdrift/kumiko-renderer": "0.404.0",
+    "@cosmicdrift/kumiko-types": "0.404.0",
     "@mollie/api-client": "^4.5.0",
     "@node-rs/argon2": "^2.0.2",
     "@tiptap/core": "^3.31.3",
@@ -1166,17 +1166,17 @@
   ],
   "devDependencies": {
     "@testing-library/user-event": "^14.6.8",
-    "@cosmicdrift/kumiko-locale-de": "0.403.0",
-    "@cosmicdrift/kumiko-locale-es": "0.403.0",
-    "@cosmicdrift/kumiko-locale-fr": "0.403.0",
-    "@cosmicdrift/kumiko-locale-it": "0.403.0",
-    "@cosmicdrift/kumiko-renderer-mail-html": "0.403.0",
+    "@cosmicdrift/kumiko-locale-de": "0.404.0",
+    "@cosmicdrift/kumiko-locale-es": "0.404.0",
+    "@cosmicdrift/kumiko-locale-fr": "0.404.0",
+    "@cosmicdrift/kumiko-locale-it": "0.404.0",
+    "@cosmicdrift/kumiko-renderer-mail-html": "0.404.0",
     "jsqr": "^1.4.0",
     "unpdf": "^1.8.1",
-    "@cosmicdrift/kumiko-testing": "0.403.0"
+    "@cosmicdrift/kumiko-testing": "0.404.0"
   },
   "peerDependencies": {
-    "@cosmicdrift/kumiko-testing": "0.403.0"
+    "@cosmicdrift/kumiko-testing": "0.404.0"
   },
   "peerDependenciesMeta": {
     "@cosmicdrift/kumiko-testing": {

package/src/feature-toggles/changes.json

@@ -1,4 +1,10 @@
 [
+  {
+    "version": "0.404.0",
+    "type": "improvement",
+    "title": "Feature-toggle Redis signal follows KUMIKO_REDIS_PREFIX",
+    "detail": "createRedisToggleSyncSignal takes an optional channelSubscribePattern (default from KUMIKO_REDIS_PREFIX) and ignores messages from other channels, which a prefix-wide subscription delivers."
+  },
   {
     "version": "0.365.0",
     "type": "fix",

package/src/jobs/changes.json

@@ -1,4 +1,10 @@
 [
+  {
+    "version": "0.404.0",
+    "type": "improvement",
+    "title": "Cleanup jobs run once a day in the maintenance window",
+    "detail": "jobs (stale-run-sweep, hourly before, and retention-cleanup), user-data-rights (export and forget), data-retention, audit escape-hatch-retention, inbound-mail retention, delivery attempt-log-retention and form-draft cleanup use trigger { maintenance: true } instead of 03:00 to 03:30 and hourly crons. Without KUMIKO_MAINTENANCE_WINDOW they all run at 03:00 UTC. A stuck job run is now marked failed at most a day after it crosses the stale timeout."
+  },
   {
     "version": "0.394.0",
     "type": "fix",