@cosmicdrift/kumiko-framework 0.304.0 → 0.306.0

package/src/engine/extensions/storage-provider.ts

@@ -1,43 +1,16 @@
-// Hook signature types for EXT_STORAGE_PROVIDER (tenant-destroy binary cleanup).
-//
-// Mirror of tenant-data.ts, but the destroyTenant hook takes (tenantId, ctx)
-// rather than just (ctx) — runExtensionDestroyHooks (tenant-lifecycle/stages.ts)
-// passes tenantId as its own positional arg for every EXT_*_RESOURCE-style
-// extension point, not just this one. ctx here guarantees tenantId, db, plus
-// the optional fileProviderResolver/log; the richer stage-runner ctx
-// (tenant-lifecycle's DestructionStageCtx) is a structural superset, so a hook
-// typed against this minimal ctx is safely assignable wherever that richer ctx
-// is passed.
-//
-// `db` is a raw DbRunner, NOT a tenant-scoped TenantDb — unlike
-// TenantDataHookCtx.db (EXT_TENANT_DATA), runExtensionDestroyHooks hands every
-// EXT_*_RESOURCE-style hook (this one included) the stage runner's own
-// DestructionStageCtx.db straight through, with no tenant filter and no
-// escapeHatch/unsafeRaw gate — there is nothing to declare, because nothing
-// ever wraps it. That's deliberate for this stage family: wiping a whole
-// search index, an S3 prefix, or infra resources is inherently a cross-tenant,
-// bulk operation, not a row-scoped one. A hook that needs a plain read across
-// tenants (kumiko-framework#3035: does a foreign tenant's file_refs row still
+// EXT_STORAGE_PROVIDER (tenant-destroy binary cleanup) is one of the four
+// EXT_*_RESOURCE-style extension points — see tenant-resource.ts for the
+// shared hook-signature contract. Kept as aliases so the existing public
+// exports/imports stay valid; a hook that needs a plain cross-tenant read
+// (kumiko-framework#3035: does a foreign tenant's file_refs row still
 // reference a key under THIS tenant's storage prefix) uses `db` directly via
-// executeRawQueryRead — there is no `ctx.systemDb` here (that belongs to
-// HandlerContext / r.systemScope() write-handler dispatch, a different code
-// path this stage runner never goes through).
-import type { FileProviderResolver } from "@cosmicdrift/kumiko-types/file-provider-resolver-types";
-import type { DbRunner } from "../../db/connection";
-import type { TenantId } from "../types";
+// executeRawQueryRead — there is no `ctx.systemDb` here.
+import type {
+  TenantResourceDestroyHook,
+  TenantResourceExtensionHooks,
+  TenantResourceHookCtx,
+} from "./tenant-resource";
 
-export interface StorageProviderHookCtx {
-  readonly tenantId: TenantId;
-  readonly db: DbRunner;
-  readonly fileProviderResolver?: FileProviderResolver;
-  readonly log?: (message: string) => void;
-}
-
-export type StorageProviderDestroyTenantHook = (
-  tenantId: TenantId,
-  ctx: StorageProviderHookCtx,
-) => Promise<void>;
-
-export interface StorageProviderExtensionHooks {
-  readonly destroyTenant: StorageProviderDestroyTenantHook;
-}
+export type StorageProviderHookCtx = TenantResourceHookCtx;
+export type StorageProviderDestroyTenantHook = TenantResourceDestroyHook;
+export type StorageProviderExtensionHooks = TenantResourceExtensionHooks;

package/src/engine/extensions/tenant-data.ts

@@ -28,3 +28,7 @@ export type TenantDataDestroyHook = (ctx: TenantDataHookCtx) => Promise<void>;
 export interface TenantDataExtensionHooks {
   readonly destroy: TenantDataDestroyHook;
 }
+
+export function isTenantDataExtensionHooks(o: unknown): o is TenantDataExtensionHooks {
+  return typeof o === "object" && o !== null && "destroy" in o && typeof o.destroy === "function";
+}

package/src/engine/extensions/tenant-resource.ts

@@ -0,0 +1,40 @@
+// Hook signature types shared by the four EXT_*_RESOURCE-style extension
+// points (storageProvider, searchAdapter, externalResource, infraResource).
+// runExtensionDestroyHooks (tenant-lifecycle/stages.ts) passes tenantId as
+// its own positional arg for all of them, not just storageProvider — the
+// stage runner's DestructionStageCtx is a structural superset of the ctx
+// below, so a hook typed against it is safely assignable wherever the
+// richer ctx is passed.
+//
+// `db` is a raw DbRunner, not a tenant-scoped TenantDb: wiping a whole
+// search index, an S3 prefix, or infra resources is inherently a
+// cross-tenant, bulk operation, not a row-scoped one — there is no
+// escapeHatch/unsafeRaw gate here because nothing ever wraps `db`.
+import type { FileProviderResolver } from "@cosmicdrift/kumiko-types/file-provider-resolver-types";
+import type { DbRunner } from "../../db/connection";
+import type { TenantId } from "../types";
+
+export interface TenantResourceHookCtx {
+  readonly tenantId: TenantId;
+  readonly db: DbRunner;
+  readonly fileProviderResolver?: FileProviderResolver;
+  readonly log?: (message: string) => void;
+}
+
+export type TenantResourceDestroyHook = (
+  tenantId: TenantId,
+  ctx: TenantResourceHookCtx,
+) => Promise<void>;
+
+export interface TenantResourceExtensionHooks {
+  readonly destroyTenant: TenantResourceDestroyHook;
+}
+
+export function isTenantResourceExtensionHooks(o: unknown): o is TenantResourceExtensionHooks {
+  return (
+    typeof o === "object" &&
+    o !== null &&
+    "destroyTenant" in o &&
+    typeof o.destroyTenant === "function"
+  );
+}

package/src/engine/extensions/user-data.ts

@@ -166,15 +166,16 @@ export type UserDataDeleteHook = (
 ) => Promise<UserDataDeleteHookResult>;
 
 /**
- * Komplette Hook-Tafel für EXT_USER_DATA. Sprint 2 user-data-rights
- * deklariert das via `r.extendsRegistrar(EXT_USER_DATA, { hooks: ... })`,
- * konsumierende Features liefern beide Hooks via
- * `r.useExtension(EXT_USER_DATA, "<entity>", { export, delete })`.
- *
- * Kein Hook ist optional — beide MÜSSEN registriert sein. Boot-Check
- * (Sprint 2) prüft das.
+ * Full hook table for EXT_USER_DATA. Export-only is a legitimate partial
+ * contract, so registrations are typed by `UserDataExtensionOptions`.
  */
 export interface UserDataExtensionHooks {
   readonly export: UserDataExportHook;
   readonly delete: UserDataDeleteHook;
 }
+
+// At least one hook is required: an empty bag would silently register neither export nor forget.
+export type UserDataExtensionOptions = (
+  | { readonly export: UserDataExportHook; readonly delete?: UserDataDeleteHook }
+  | { readonly export?: UserDataExportHook; readonly delete: UserDataDeleteHook }
+) & { readonly order?: number };