@cosmicdrift/kumiko-samples 0.338.0

package/samples/apps/use-all-bundled/schema/migrations/meta/_journal.json

@@ -0,0 +1,13 @@
+{
+  "version": "7",
+  "dialect": "postgresql",
+  "entries": [
+    {
+      "idx": 0,
+      "version": "7",
+      "when": 1779524000495,
+      "tag": "0000_init",
+      "breakpoints": true
+    }
+  ]
+}

package/samples/apps/use-all-bundled/schema/schema.generated.ts

@@ -0,0 +1,88 @@
+// Auto-generated by schema/generate.ts — DO NOT EDIT
+// Re-run: bun run schema/generate.ts
+// biome-ignore-all format: generated output
+// biome-ignore-all assist/source/organizeImports: generated output
+// biome-ignore-all lint/style/noNonNullAssertion: generated output — entity-lookup ist immer present per registry-contract
+
+import { buildEntityTable } from "@cosmicdrift/kumiko-framework/db";
+import { createConfigFeature } from "@cosmicdrift/kumiko-bundled-features/config";
+import { createUserFeature } from "@cosmicdrift/kumiko-bundled-features/user";
+import { createTenantFeature } from "@cosmicdrift/kumiko-bundled-features/tenant";
+import { createSecretsFeature } from "@cosmicdrift/kumiko-bundled-features/secrets";
+import { createAuthMfaFeature } from "@cosmicdrift/kumiko-bundled-features/auth-mfa";
+import { createDeliveryFeature } from "@cosmicdrift/kumiko-bundled-features/delivery";
+import { createFilesFeature } from "@cosmicdrift/kumiko-bundled-features/files";
+import { tierEngineFeature } from "@cosmicdrift/kumiko-bundled-features/tier-engine";
+import { capCounterFeature } from "@cosmicdrift/kumiko-bundled-features/cap-counter";
+import { createComplianceProfilesFeature } from "@cosmicdrift/kumiko-bundled-features/compliance-profiles";
+import { createDataRetentionFeature } from "@cosmicdrift/kumiko-bundled-features/data-retention";
+import { createUserDataRightsFeature } from "@cosmicdrift/kumiko-bundled-features/user-data-rights";
+import { createTemplateResolverFeature } from "@cosmicdrift/kumiko-bundled-features/template-resolver";
+import { createManagedPagesFeature } from "@cosmicdrift/kumiko-bundled-features/managed-pages";
+import { customFieldsFeature } from "@cosmicdrift/kumiko-bundled-features/custom-fields";
+import { tagsFeature } from "@cosmicdrift/kumiko-bundled-features/tags";
+import { notesHistoryFeature } from "@cosmicdrift/kumiko-bundled-features/notes-history";
+import { formDraftFeature } from "@cosmicdrift/kumiko-bundled-features/form-draft";
+import { foldersFeature } from "@cosmicdrift/kumiko-bundled-features/folders";
+import { ledgerFeature } from "@cosmicdrift/kumiko-bundled-features/ledger";
+import { documentIngestFoundationFeature } from "@cosmicdrift/kumiko-bundled-features/document-ingest-foundation";
+
+const _config = createConfigFeature();
+const _user = createUserFeature();
+const _tenant = createTenantFeature();
+const _secrets = createSecretsFeature();
+const _authMfa = createAuthMfaFeature({ setupTokenSecret: "stub-setup-secret-at-least-32-bytes-long!!", challengeTokenSecret: "stub-challenge-secret-at-least-32-bytes!!", issuer: "stub" });
+const _delivery = createDeliveryFeature();
+const _files = createFilesFeature();
+const _tierEngine = tierEngineFeature;
+const _capCounter = capCounterFeature;
+const _complianceProfiles = createComplianceProfilesFeature();
+const _dataRetention = createDataRetentionFeature();
+const _userDataRights = createUserDataRightsFeature();
+const _templateResolver = createTemplateResolverFeature();
+const _managedPages = createManagedPagesFeature({ resolveApexTenant: () => null, allowCustomCss: true });
+const _customFields = customFieldsFeature;
+const _tags = tagsFeature;
+const _notesHistory = notesHistoryFeature;
+const _formDraft = formDraftFeature;
+const _folders = foldersFeature;
+const _ledger = ledgerFeature;
+const _documentIngestFoundation = documentIngestFoundationFeature;
+
+export const configValueTable = buildEntityTable("config-value", _config.entities["config-value"]!);
+export const userTable = buildEntityTable("user", _user.entities["user"]!);
+export const tenantTable = buildEntityTable("tenant", _tenant.entities["tenant"]!);
+export const tenantMembershipTable = buildEntityTable("tenant-membership", _tenant.entities["tenant-membership"]!);
+export const tenantInvitationTable = buildEntityTable("tenant-invitation", _tenant.entities["tenant-invitation"]!);
+export const tenantSecretTable = buildEntityTable("tenant-secret", _secrets.entities["tenant-secret"]!);
+export const userMfaTable = buildEntityTable("user-mfa", _authMfa.entities["user-mfa"]!);
+export const notificationPreferenceTable = buildEntityTable("notification-preference", _delivery.entities["notification-preference"]!);
+export const notificationAddressOptOutTable = buildEntityTable("notification-address-opt-out", _delivery.entities["notification-address-opt-out"]!);
+export const fileRefTable = buildEntityTable("fileRef", _files.entities["fileRef"]!);
+export const tierAssignmentTable = buildEntityTable("tier-assignment", _tierEngine.entities["tier-assignment"]!);
+export const capCounterTable = buildEntityTable("cap-counter", _capCounter.entities["cap-counter"]!);
+export const tenantComplianceProfileTable = buildEntityTable("tenant-compliance-profile", _complianceProfiles.entities["tenant-compliance-profile"]!);
+export const tenantRetentionOverrideTable = buildEntityTable("tenant-retention-override", _dataRetention.entities["tenant-retention-override"]!);
+export const exportJobTable = buildEntityTable("export-job", _userDataRights.entities["export-job"]!);
+export const exportDownloadTokenTable = buildEntityTable("export-download-token", _userDataRights.entities["export-download-token"]!);
+export const downloadAttemptTable = buildEntityTable("download-attempt", _userDataRights.entities["download-attempt"]!);
+export const templateResourceTable = buildEntityTable("template-resource", _templateResolver.entities["template-resource"]!);
+export const userContentEntryTable = buildEntityTable("user-content-entry", _templateResolver.entities["user-content-entry"]!);
+export const pageTable = buildEntityTable("page", _managedPages.entities["page"]!);
+export const fieldDefinitionTable = buildEntityTable("field-definition", _customFields.entities["field-definition"]!);
+export const tagTable = buildEntityTable("tag", _tags.entities["tag"]!);
+export const tagAssignmentTable = buildEntityTable("tag-assignment", _tags.entities["tag-assignment"]!);
+export const noteEntryTable = buildEntityTable("note-entry", _notesHistory.entities["note-entry"]!);
+export const noteMentionTable = buildEntityTable("note-mention", _notesHistory.entities["note-mention"]!);
+export const formDraftTable = buildEntityTable("form-draft", _formDraft.entities["form-draft"]!);
+export const folderTable = buildEntityTable("folder", _folders.entities["folder"]!);
+export const folderAssignmentTable = buildEntityTable("folder-assignment", _folders.entities["folder-assignment"]!);
+export const accountTable = buildEntityTable("account", _ledger.entities["account"]!);
+export const transactionTable = buildEntityTable("transaction", _ledger.entities["transaction"]!);
+export const scheduleTable = buildEntityTable("schedule", _ledger.entities["schedule"]!);
+export const documentExtractTable = buildEntityTable("documentExtract", _documentIngestFoundation.entities["documentExtract"]!);
+export { deliveryAttemptsTable } from "@cosmicdrift/kumiko-bundled-features/delivery";
+export { mailAccountsProjectionTable, inboundMessagesProjectionTable, mailThreadsProjectionTable } from "@cosmicdrift/kumiko-bundled-features/inbound-mail-foundation";
+export { subscriptionsProjectionTable } from "@cosmicdrift/kumiko-bundled-features/billing-foundation";
+export { globalFeatureStateTable } from "@cosmicdrift/kumiko-bundled-features/feature-toggles";
+export { jobRunsTable, jobRunLogsTable } from "@cosmicdrift/kumiko-bundled-features/jobs";

package/samples/apps/use-all-bundled/schema/schema.ts

@@ -0,0 +1,9 @@
+// Schema-Barrel für use-all-bundled.
+//
+// Zwei Quellen wie bei Studio:
+//   schema-tables-auth-mode  — Framework-Infra + Bundle-Custom-Tables.
+//   schema.generated          — Entity-Tables aller bundled-features
+//                               via buildEntityTable (siehe generate.ts).
+
+export * from "@cosmicdrift/kumiko-dev-server/schema-tables-auth-mode";
+export * from "./schema.generated";

package/samples/apps/use-all-bundled/scripts/check-coverage.ts

@@ -0,0 +1,203 @@
+#!/usr/bin/env bun
+// biome-ignore-all lint/suspicious/noConsole: CLI-Script, console ist Feature.
+//
+// C1 M5 coverage lint. Diffs bundled-features-Exports gegen den
+// FEATURE_IMPORT_REGISTRY in samples/apps/use-all-bundled/schema/
+// generate.ts. Fängt zwei Drifts:
+//
+//   1. Ein neuer feature-export ohne Aufnahme in use-all-bundled
+//      → unreferenced exports
+//   2. Ein removed feature-export der noch im Registry steht
+//      → stale registry
+//
+// Held-back features für M0.1 (subscription-stripe, channel-email, …)
+// stehen in EXPECTED_HELD_BACK. Sobald sie mit stub-options gemountet
+// werden, müssen sie aus dieser Liste raus.
+//
+// Usage:
+//   bun samples/apps/use-all-bundled/scripts/check-coverage.ts
+// Exit 0 wenn alles in Sync, exit 1 wenn Drift.
+
+import { readFileSync } from "node:fs";
+import { resolve } from "node:path";
+
+const ROOT = resolve(import.meta.dir, "..");
+const FRAMEWORK_ROOT = resolve(ROOT, "..", "..", "..");
+
+// Held-back exports: existieren in bundled-features, sind aber nicht
+// als runtime-feature in use-all-bundled mountbar.
+//
+// Nach M0.1 nur noch utilities + auto-mounted:
+// - utilities: kein r.defineFeature (foundation-shared, files-provider-s3
+//   sind pure helpers).
+// - auto-mounted: kommt via composeFeatures(includeBundled:true) automatisch
+//   (auth-email-password) — wäre doppelt-mount wenn explizit gelistet.
+const EXPECTED_HELD_BACK = new Set([
+  "auth-email-password", // auto-mounted via composeFeatures(authOptions)
+  "agent-tools", // utility (buildToolCatalog: Registry -> ToolDefinition[]), kein defineFeature
+  "files-provider-s3", // utility (createS3Provider helpers), kein defineFeature
+  "foundation-shared", // utilities (requireDefined/requireNonEmpty), kein feature
+  "page-render", // shared HTML render/cache helpers (legal/managed-pages), kein defineFeature
+  "presets", // feature-bundle helpers (dsgvoSelfServiceFeatures, securityBaselineFeatures), kein defineFeature
+  "auth-foundation", // scaffold-only (#1368): bootCheck wirft ohne gemountete auth-provider-*, die es noch nicht gibt
+]);
+
+// Registry-only: mounted features that are NOT top-level package exports
+// (companion features living under another export path). schema-check still
+// needs them in FEATURE_IMPORT_REGISTRY; coverage must not flag them stale.
+const EXPECTED_REGISTRY_ONLY = new Set([
+  "auth-self-registration", // from ./auth-email-password, auto-mounted with signup (#1521)
+  "collection-labels", // app-local (src/app/), nav labels for this app's content collections
+  "cap-overview-labels", // app-local (src/app/), labels for this app's example cap-overview caps
+  "metrics-system", // from ./metrics, companion of createMetricsFeature (platform-wide scope)
+  "locale-de", // @cosmicdrift/kumiko-locale-de, not a bundled-features export
+]);
+
+// Sub-paths in bundled-features's package.json exports (./tenant/seeding,
+// ./auth-email-password/web, …) sind keine Features, nur utilities.
+// Wir interessieren uns nur für top-level-paths. Nicht-Feature-Exports
+// (Root ".", package.json, Asset-Endungen) sind ausgeschlossen, damit ein
+// künftiger ./styles.css o.ä. nicht fälschlich als unreferenced Feature
+// einen CI-Fail auslöst.
+function isFeatureExportPath(path: string): boolean {
+  if (!path.startsWith("./")) return false;
+  const segment = path.slice(2);
+  if (segment.length === 0) return false;
+  // Top-level only: kein weiterer "/" nach dem ersten Segment.
+  if (segment.includes("/")) return false;
+  // Feature-Export-Pfade sind extension-frei (./audit, ./feature-toggles).
+  // Asset-/Manifest-Exports (./package.json, ./styles.css) haben einen "."
+  // im Segment → keine Features.
+  return segment.includes(".") === false;
+}
+
+function readBundledExports(): Set<string> {
+  const pkg = JSON.parse(
+    readFileSync(resolve(FRAMEWORK_ROOT, "packages", "bundled-features", "package.json"), "utf-8"),
+  ) as { exports: Record<string, string> };
+  const out = new Set<string>();
+  for (const key of Object.keys(pkg.exports)) {
+    if (isFeatureExportPath(key)) {
+      out.add(key.slice(2));
+    }
+  }
+  return out;
+}
+
+function extractRegistryBlock(src: string): string {
+  // Anchor auf den FEATURE_IMPORT_REGISTRY-Object-Body. Ohne diesen Anchor
+  // würde die kind-Regex jedes `<ident>: { kind: "factory"|"named" }` im File
+  // matchen (z.B. eine künftige Hilfsvariable) → false positive/negative.
+  const startMatch = /FEATURE_IMPORT_REGISTRY[^=]*=\s*\{/.exec(src);
+  if (!startMatch) {
+    throw new Error("check-coverage: FEATURE_IMPORT_REGISTRY block not found in generate.ts");
+  }
+  const bodyStart = startMatch.index + startMatch[0].length;
+  // Top-level-Close ist das erste `};` am Zeilenanfang nach bodyStart.
+  const closeMatch = /\n};/.exec(src.slice(bodyStart));
+  if (!closeMatch) {
+    throw new Error("check-coverage: FEATURE_IMPORT_REGISTRY closing `};` not found");
+  }
+  return src.slice(bodyStart, bodyStart + closeMatch.index);
+}
+
+function readRegistryFeatures(): Set<string> {
+  const generateSrc = readFileSync(resolve(ROOT, "schema", "generate.ts"), "utf-8");
+  const registryBlock = extractRegistryBlock(generateSrc);
+  // Match object-keys mit Discriminator `kind: "factory" | "named"`.
+  // Property-Keys können quoted ("billing-foundation") oder unquoted
+  // (config, user) sein — beides ist gültig wenn kebab-segment-free.
+  const re = /(?:"([a-z][a-z0-9-]*)"|([a-z][a-z0-9]*)):\s*\{\s*kind:\s*"(factory|named)"/g;
+  const out = new Set<string>();
+  for (const m of registryBlock.matchAll(re)) {
+    const name = m[1] ?? m[2];
+    if (name) out.add(name);
+  }
+  return out;
+}
+
+const exports = readBundledExports();
+const registry = readRegistryFeatures();
+
+const unreferenced: string[] = [];
+const stale: string[] = [];
+// Held-back-Einträge, die kein bundled-Export mehr sind → stale Konfig.
+// Ohne diese Prüfung hätte der Drift-Guard in seiner eigenen Konfig einen
+// Blind-Spot: ein umbenanntes/entferntes Feature bliebe still in der Liste.
+const staleHeldBack: string[] = [];
+
+for (const name of exports) {
+  if (registry.has(name)) continue;
+  if (EXPECTED_HELD_BACK.has(name)) continue;
+  unreferenced.push(name);
+}
+
+for (const name of registry) {
+  if (!exports.has(name) && !EXPECTED_REGISTRY_ONLY.has(name)) stale.push(name);
+}
+
+for (const name of EXPECTED_HELD_BACK) {
+  if (!exports.has(name)) staleHeldBack.push(name);
+}
+
+let ok = true;
+
+if (unreferenced.length > 0) {
+  console.error(
+    `\n❌ ${unreferenced.length} bundled-feature export(s) NICHT in use-all-bundled/schema/generate.ts:`,
+  );
+  for (const name of unreferenced.sort()) {
+    console.error(`   - ${name}`);
+  }
+  console.error(
+    "\n  Action: in src/run-config.ts + schema/generate.ts FEATURE_IMPORT_REGISTRY aufnehmen,",
+  );
+  console.error(
+    "  oder (wenn mount-options noch fehlen) zu EXPECTED_HELD_BACK in dieser Datei hinzufügen.",
+  );
+  ok = false;
+}
+
+if (stale.length > 0) {
+  console.error(
+    `\n❌ ${stale.length} FEATURE_IMPORT_REGISTRY entry/entries ohne Match in bundled-features exports:`,
+  );
+  for (const name of stale.sort()) {
+    console.error(`   - ${name}`);
+  }
+  console.error(
+    "\n  Action: aus schema/generate.ts FEATURE_IMPORT_REGISTRY entfernen, ggf. App-eigenes Feature.",
+  );
+  ok = false;
+}
+
+if (staleHeldBack.length > 0) {
+  console.error(
+    `\n❌ ${staleHeldBack.length} EXPECTED_HELD_BACK entry/entries ohne Match in bundled-features exports:`,
+  );
+  for (const name of staleHeldBack.sort()) {
+    console.error(`   - ${name}`);
+  }
+  console.error(
+    "\n  Action: aus EXPECTED_HELD_BACK in dieser Datei entfernen (Feature wurde umbenannt/entfernt).",
+  );
+  ok = false;
+}
+
+if (ok) {
+  // Disjunkte Zahlen: `mountable` = exports ohne held-back; `coveredCount`
+  // zählt nur Registry-Einträge, die ein echter mountbarer Export sind
+  // (auth-email-password steht im Registry für schema-check-Konsistenz,
+  // ist aber held-back — würde sonst die Ratio >1 verfälschen).
+  const mountable = exports.size - EXPECTED_HELD_BACK.size;
+  let coveredCount = 0;
+  for (const name of registry) {
+    if (exports.has(name) && !EXPECTED_HELD_BACK.has(name)) coveredCount++;
+  }
+  console.log(
+    `✓ Coverage: ${coveredCount}/${mountable} mountable bundled-features im Registry, ${EXPECTED_HELD_BACK.size} held-back (M0.1).`,
+  );
+  process.exit(0);
+} else {
+  process.exit(1);
+}

package/samples/apps/use-all-bundled/scripts/gen-feature-manifest.ts

@@ -0,0 +1,85 @@
+#!/usr/bin/env bun
+// @runtime dev
+// biome-ignore-all lint/suspicious/noConsole: CLI script, console output is the feature.
+//
+// Generates feature-manifest.json — the runtime-introspected metadata of
+// every bundled feature: config keys (type/scope/default/roles), hard +
+// optional dependencies, secrets, extension usages, and cross-feature APIs.
+// docs.kumiko.rocks renders this as human-readable reference tables through
+// the documentation generator's `feature-metadata` pass.
+//
+// Extraction logic lives shared in `buildManifestFromRegistry`
+// (@cosmicdrift/kumiko-framework/engine) — the enterprise generator uses it
+// too; this script only supplies the feature set + the output paths.
+//
+// Source set = APP_FEATURES (the canonical bootable list). Regenerate after
+// changing any feature's r.config / r.secret / r.requires / r.useExtension;
+// feature-manifest.test.ts fails the build if this file is stale.
+//
+// Usage: bun run scripts/gen-feature-manifest.ts
+
+import { existsSync, writeFileSync } from "node:fs";
+import { dirname, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+import {
+  buildManifestFromRegistry,
+  createRegistry,
+  type FeatureManifest,
+  serializeManifest,
+} from "@cosmicdrift/kumiko-framework/engine";
+import { composeFeatures } from "@cosmicdrift/kumiko-server-runtime/compose-features";
+import { APP_FEATURES, AUTH_COMPOSE_OPTIONS } from "../src/run-config";
+
+export type {
+  FeatureManifest,
+  ManifestConfigKey,
+  ManifestExtension,
+  ManifestFeature,
+  ManifestSecret,
+} from "@cosmicdrift/kumiko-framework/engine";
+export { serializeManifest };
+
+export function buildFeatureManifest(): FeatureManifest {
+  const features = composeFeatures([...APP_FEATURES], {
+    includeBundled: true,
+    authOptions: AUTH_COMPOSE_OPTIONS,
+  });
+  const registry = createRegistry(features);
+  return buildManifestFromRegistry(registry, {
+    source: "samples/apps/use-all-bundled APP_FEATURES (composeFeatures includeBundled + signup)",
+  });
+}
+
+export const MANIFEST_PATH = resolve(
+  dirname(fileURLToPath(import.meta.url)),
+  "..",
+  "feature-manifest.json",
+);
+
+// Shipped to scaffolded apps via create-kumiko-app's package.json `files` list;
+// same content, second write target so the copy can never drift (#1774).
+export const CREATE_APP_MANIFEST_PATH = resolve(
+  dirname(fileURLToPath(import.meta.url)),
+  "../../../..",
+  "packages/create-kumiko-app/feature-manifest.json",
+);
+
+if (import.meta.url === `file://${process.argv[1]}`) {
+  const manifest = buildFeatureManifest();
+  const serialized = serializeManifest(manifest);
+  const targets = [MANIFEST_PATH];
+  // Monorepo-only target: a standalone copy of this sample (mirror, or a
+  // scaffolded app that kept this script) has no packages/create-kumiko-app
+  // sibling to write into.
+  if (existsSync(dirname(CREATE_APP_MANIFEST_PATH))) {
+    targets.push(CREATE_APP_MANIFEST_PATH);
+  } else {
+    console.log(
+      `feature-manifest.json: skipping create-kumiko-app copy — ${dirname(CREATE_APP_MANIFEST_PATH)} does not exist (monorepo-only target).`,
+    );
+  }
+  for (const path of targets) {
+    writeFileSync(path, serialized, "utf-8");
+    console.log(`feature-manifest.json: ${manifest.featureCount} features → ${path}`);
+  }
+}