@cosmicdrift/kumiko-bundled-features 0.75.0 → 0.76.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-bundled-features",
-  "version": "0.75.0",
+  "version": "0.76.0",
   "description": "Built-in features — tenant, user, auth, delivery. The stuff you'd rewrite anyway, already typed.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -84,11 +84,11 @@
     "./step-dispatcher": "./src/step-dispatcher/index.ts"
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-dispatcher-live": "0.75.0",
-    "@cosmicdrift/kumiko-framework": "0.75.0",
-    "@cosmicdrift/kumiko-headless": "0.75.0",
-    "@cosmicdrift/kumiko-renderer": "0.75.0",
-    "@cosmicdrift/kumiko-renderer-web": "0.75.0",
+    "@cosmicdrift/kumiko-dispatcher-live": "0.76.0",
+    "@cosmicdrift/kumiko-framework": "0.76.0",
+    "@cosmicdrift/kumiko-headless": "0.76.0",
+    "@cosmicdrift/kumiko-renderer": "0.76.0",
+    "@cosmicdrift/kumiko-renderer-web": "0.76.0",
     "@mollie/api-client": "^4.5.0",
     "@node-rs/argon2": "^2.0.2",
     "@types/nodemailer": "^8.0.0",

package/src/auth-email-password/__tests__/auth.integration.test.ts

@@ -2,7 +2,7 @@ import { afterAll, beforeAll, beforeEach, describe, expect, test } from "bun:tes
 import { randomBytes } from "node:crypto";
 import { asRawClient } from "@cosmicdrift/kumiko-framework/bun-db";
 import { createEncryptionProvider } from "@cosmicdrift/kumiko-framework/db";
-import type { TenantId } from "@cosmicdrift/kumiko-framework/engine";
+import { SYSTEM_TENANT_ID, type TenantId } from "@cosmicdrift/kumiko-framework/engine";
 import {
   createTestUser,
   setupTestStack,
@@ -255,7 +255,7 @@ describe("scenario 5b: change-password when the aggregate stream tenant != sessi
       `SELECT "tenant_id" AS t FROM "kumiko_events" WHERE "aggregate_id" = $1 AND "aggregate_type" = $2 ORDER BY "version" LIMIT 1`,
       [seed.id, "user"],
     )) as ReadonlyArray<{ t: string }>;
-    expect(streamRows[0]?.t).toBe(systemAdmin.tenantId);
+    expect(streamRows[0]?.t).toBe(SYSTEM_TENANT_ID);
     expect(streamRows[0]?.t).not.toBe(membershipTenant);
 
     const signedIn = createTestUser({ id: seed.id, tenantId: seed.tenantId, roles: ["User"] });

package/src/auth-email-password/__tests__/email-verification.integration.test.ts

@@ -7,7 +7,7 @@ import {
   updateMany,
 } from "@cosmicdrift/kumiko-framework/bun-db";
 import { createEncryptionProvider } from "@cosmicdrift/kumiko-framework/db";
-import type { TenantId } from "@cosmicdrift/kumiko-framework/engine";
+import { SYSTEM_TENANT_ID, type TenantId } from "@cosmicdrift/kumiko-framework/engine";
 import {
   setupTestStack,
   type TestStack,
@@ -250,7 +250,7 @@ describe("POST /auth/verify-email", () => {
       `SELECT "tenant_id" FROM "kumiko_events" WHERE "aggregate_id" = $1 AND "aggregate_type" = 'user' ORDER BY "version" LIMIT 1`,
       [seed.id],
     )) as ReadonlyArray<{ tenant_id: string }>;
-    expect(streamRows[0]?.tenant_id).toBe(systemAdmin.tenantId);
+    expect(streamRows[0]?.tenant_id).toBe(SYSTEM_TENANT_ID);
 
     const { token } = signVerificationToken(seed.id, 60, verifySecret);
     const res = await post("/api/auth/verify-email", { token });
@@ -407,7 +407,7 @@ describe("verify-email — aggregate stream in a non-membership tenant (sysadmin
       [seed.id],
     )) as ReadonlyArray<{ tenant_id: string; aggregate_type: string }>;
     expect(streamRows[0]?.aggregate_type).toBe("user");
-    expect(streamRows[0]?.tenant_id).toBe(systemAdmin.tenantId);
+    expect(streamRows[0]?.tenant_id).toBe(SYSTEM_TENANT_ID);
     expect(streamRows[0]?.tenant_id).not.toBe(membershipTenant);
 
     const { token } = signVerificationToken(seed.id, 60, verifySecret);

package/src/auth-email-password/__tests__/password-reset.integration.test.ts

@@ -2,7 +2,7 @@ import { afterAll, beforeAll, beforeEach, describe, expect, test } from "bun:tes
 import { randomBytes } from "node:crypto";
 import { asRawClient, insertOne, selectMany } from "@cosmicdrift/kumiko-framework/bun-db";
 import { createEncryptionProvider } from "@cosmicdrift/kumiko-framework/db";
-import type { TenantId } from "@cosmicdrift/kumiko-framework/engine";
+import { SYSTEM_TENANT_ID, type TenantId } from "@cosmicdrift/kumiko-framework/engine";
 import {
   setupTestStack,
   type TestStack,
@@ -308,7 +308,7 @@ describe("POST /auth/reset-password", () => {
       `SELECT "tenant_id" FROM "kumiko_events" WHERE "aggregate_id" = $1 AND "aggregate_type" = 'user' ORDER BY "version" LIMIT 1`,
       [seed.id],
     )) as ReadonlyArray<{ tenant_id: string }>;
-    expect(streamRows[0]?.tenant_id).toBe(systemAdmin.tenantId);
+    expect(streamRows[0]?.tenant_id).toBe(SYSTEM_TENANT_ID);
 
     const { token } = signResetToken(seed.id, 15, resetSecret);
     const res = await post("/api/auth/reset-password", {
@@ -390,7 +390,7 @@ describe("POST /auth/reset-password", () => {
       [seed.id],
     )) as ReadonlyArray<{ tenant_id: string; aggregate_type: string }>;
     expect(streamRows[0]?.aggregate_type).toBe("user");
-    expect(streamRows[0]?.tenant_id).toBe(systemAdmin.tenantId);
+    expect(streamRows[0]?.tenant_id).toBe(SYSTEM_TENANT_ID);
     expect(streamRows[0]?.tenant_id).not.toBe(membershipTenant);
 
     const { token } = signResetToken(seed.id, 15, resetSecret);

package/src/tags/web/client-plugin.tsx

@@ -1,9 +1,4 @@
 // @runtime client
-// Client-feature factory for tags. Mounted via
-// createKumikoApp({ clientFeatures: [tagsClient()] }) — registers TagSection
-// under TAGS_SECTION_EXTENSION_NAME and contributes the default translations.
-// Required even for standalone <TagSection> use, otherwise its i18n keys render
-// raw.
 
 import type { ClientFeatureDefinition } from "@cosmicdrift/kumiko-renderer-web";
 import { TAGS_FEATURE_NAME, TAGS_SECTION_EXTENSION_NAME } from "../constants";

package/src/user/schema/user.ts

@@ -56,6 +56,9 @@ const USER_STATUS_OPTIONS = [
 export const userEntity = createEntity({
   table: "read_users",
   softDelete: true,
+  // Tenant-independent identity aggregate — its event stream lives on
+  // SYSTEM_TENANT_ID instead of whichever tenant happened to create it (#497).
+  systemStream: true,
   fields: {
     // Identity — anyone who can see the user can read the email, but only
     // privileged roles (SYSTEM auth code, SystemAdmin) may change it.