@cosmicdrift/kumiko-samples 0.390.1 → 0.391.0

package/packages/bundled-features/src/user-data-rights/feature.ts

@@ -17,6 +17,8 @@ import {
 } from "@cosmicdrift/kumiko-framework/observability";
 import { isPlainObject } from "@cosmicdrift/kumiko-types/type-guards";
 import { createConfigAccessor } from "../config/index.ts";
+import { makeTenantStorageProviderResolver } from "../file-foundation/index.ts";
+import { makeTenantMailTransportResolver } from "../mail-foundation/index.ts";
 import { validateGdprHookCompleteness, validateGdprPiiHookCoverage } from "./boot-checks.ts";
 import { deletionTokenSecretEnvSchema } from "./env.ts";
 import { cancelDeletionWrite } from "./handlers/cancel-deletion.write.ts";
@@ -50,9 +52,7 @@ import {
   makeDefaultExportFailedEmail,
   makeDefaultExportReadyEmail,
 } from "./lib/default-mailers.ts";
-import { makeTenantMailTransportResolver } from "./lib/mail-transport-resolver.ts";
 import { resolveAppTenantModel } from "./lib/resolve-tenant-model.ts";
-import { makeTenantStorageProviderResolver } from "./lib/storage-provider-resolver.ts";
 import { registerGdprMails } from "./mail-notifications.ts";
 import {
   EXPORT_CLEANUP_BACKLOG_AGE_METRIC,

package/packages/bundled-features/src/user-data-rights/handlers/download-by-job.query.ts

@@ -33,8 +33,8 @@ import {
 import { NotFoundError, UnprocessableError } from "@cosmicdrift/kumiko-framework/errors";
 import { getTemporal } from "@cosmicdrift/kumiko-framework/time";
 import * as z from "zod";
+import { makeTenantStorageProviderResolver } from "../../file-foundation/index.ts";
 import { recordDownloadUse, recordInvalidAttempt } from "../audit-download.ts";
-import { makeTenantStorageProviderResolver } from "../lib/storage-provider-resolver.ts";
 import { exportDownloadTokensTable } from "../schema/download-token.ts";
 import { EXPORT_JOB_STATUS, exportJobsTable } from "../schema/export-job.ts";
 

package/packages/bundled-features/src/user-data-rights/handlers/download-by-token.query.ts

@@ -34,8 +34,8 @@ import {
 import { NotFoundError, UnprocessableError } from "@cosmicdrift/kumiko-framework/errors";
 import { getTemporal } from "@cosmicdrift/kumiko-framework/time";
 import * as z from "zod";
+import { makeTenantStorageProviderResolver } from "../../file-foundation/index.ts";
 import { recordDownloadUse, recordInvalidAttempt } from "../audit-download.ts";
-import { makeTenantStorageProviderResolver } from "../lib/storage-provider-resolver.ts";
 import { exportDownloadTokensTable } from "../schema/download-token.ts";
 import { EXPORT_JOB_STATUS, exportJobsTable } from "../schema/export-job.ts";
 import { hashDownloadToken } from "../token-helpers.ts";

package/packages/bundled-features/src/user-data-rights/handlers/run-forget-cleanup.write.ts

@@ -15,8 +15,8 @@ import { access, defineWriteHandler } from "@cosmicdrift/kumiko-framework/engine
 import { InternalError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
 import { getTemporal } from "@cosmicdrift/kumiko-framework/time";
 import * as z from "zod";
+import { makeTenantStorageProviderResolver } from "../../file-foundation/index.ts";
 import { resolveAppTenantModel } from "../lib/resolve-tenant-model.ts";
-import { makeTenantStorageProviderResolver } from "../lib/storage-provider-resolver.ts";
 import {
   FORGET_CLEANUP_HANDLER_NAME,
   runForgetCleanup,

package/packages/bundled-features/src/user-profile/changes.json

@@ -1,4 +1,10 @@
 [
+  {
+    "version": "0.391.0",
+    "type": "improvement",
+    "title": "The profile can link to account security",
+    "detail": "createUserProfileFeature({ linkAccountSecurity: true }) adds a header action that opens the account-security screen, which offers MFA enable or disable by the user's status. It requires the account-security feature; the default stays off. New key profile.mfa.open in all locale packages."
+  },
   {
     "version": "0.360.0",
     "type": "improvement",

package/packages/bundled-features/src/user-profile/feature.ts

@@ -9,6 +9,7 @@ import {
   CHANGE_PASSWORD_SECTION_EXTENSION_NAME,
   PROFILE_SCREEN_ID,
   UserDataRightsHandlers,
+  UserProfileForeignScreens,
   UserProfileQueries,
 } from "./web/constants.ts";
 
@@ -16,10 +17,15 @@ export type UserProfileFeatureOptions = {
   /** Default true. false drops the change-email handler and the email
    *  section — for apps whose login email is managed elsewhere (SSO, admin-set). */
   readonly allowEmailChange?: boolean;
+  /** Default false. true adds a header action opening the account-security screen,
+   *  which offers MFA enable or disable by the user's status; needs the
+   *  account-security feature mounted. */
+  readonly linkAccountSecurity?: boolean;
 };
 
 export function createUserProfileFeature(options?: UserProfileFeatureOptions): FeatureDefinition {
   const allowEmailChange = options?.allowEmailChange ?? true;
+  const linkAccountSecurity = options?.linkAccountSecurity ?? false;
   return defineFeature("user-profile", (r) => {
     r.describe(
       "Self-service account page (fw#2312: declarative `projectionDetail` bound to " +
@@ -45,6 +51,7 @@ export function createUserProfileFeature(options?: UserProfileFeatureOptions): F
     r.requires({ features: ["auth-email-password"] });
     r.requires({ features: ["user-data-rights"] });
     r.requires({ features: ["user-data-rights-defaults"] });
+    if (linkAccountSecurity) r.requires({ features: ["account-security"] });
 
     const handlers = allowEmailChange ? { changeEmail: r.writeHandler(changeEmailWrite) } : {};
 
@@ -72,6 +79,7 @@ export function createUserProfileFeature(options?: UserProfileFeatureOptions): F
           en: "After the grace period your data will be permanently deleted. Until then you can cancel.",
         },
         "profile.danger.cancelDeletion": { en: "Cancel deletion" },
+        "profile.mfa.open": { en: "Manage two-factor authentication" },
       },
     });
 
@@ -139,6 +147,18 @@ export function createUserProfileFeature(options?: UserProfileFeatureOptions): F
         ],
       },
       actions: [
+        ...(linkAccountSecurity
+          ? [
+              {
+                kind: "navigate" as const,
+                id: "open-account-security",
+                label: i18nKey("profile.mfa.open"),
+                screen: UserProfileForeignScreens.accountSecurity,
+                icon: "shield-check" as const,
+                style: "secondary" as const,
+              },
+            ]
+          : []),
         {
           id: "request-deletion",
           label: i18nKey("profile.danger.delete"),

package/packages/bundled-features/src/user-profile/web/constants.ts

@@ -24,6 +24,11 @@ export const UserProfileQueries = {
   me: "user:query:user:me",
 } as const;
 
+// Short id: navigate targets resolve short ids app-wide, a cross-feature QN is not a navigate target.
+export const UserProfileForeignScreens = {
+  accountSecurity: "account-security",
+} as const;
+
 export const UserDataRightsHandlers = {
   requestDeletion: "user-data-rights:write:request-deletion",
   cancelDeletion: "user-data-rights:write:cancel-deletion",

package/packages/bundled-features/src/user-profile/web/i18n.ts

@@ -37,6 +37,8 @@ export const defaultTranslations: TranslationsByLocale = {
     "profile.danger.gracePeriodEnd": "Deletion date",
     "profile.danger.cancelDeletion": "Cancel deletion",
 
+    "profile.mfa.open": "Manage two-factor authentication",
+
     "profile.errors.generic": "Something went wrong.",
     "profile.errors.emailUnchanged": "That is already your email address.",
     "user.errors.emailAlreadyExists": "This email address is already in use.",

package/samples/apps/use-all-bundled/feature-manifest.json

@@ -1,6 +1,6 @@
 {
   "source": "samples/apps/use-all-bundled APP_FEATURES (composeFeatures includeBundled + signup)",
-  "featureCount": 88,
+  "featureCount": 89,
   "features": [
     {
       "name": "account-security",
@@ -19,6 +19,20 @@
       "secrets": [],
       "writeHandlers": []
     },
+    {
+      "name": "admin-nav",
+      "description": "Administration group in the sidebar of this sample app.",
+      "toggleableDefault": null,
+      "requires": [],
+      "optionalRequires": [],
+      "configReads": [],
+      "exposesApis": [],
+      "usesApis": [],
+      "extensionsUsed": [],
+      "configKeys": [],
+      "secrets": [],
+      "writeHandlers": []
+    },
     {
       "name": "admin-shell",
       "description": "Registers tenant-admin and platform-admin workspaces with provider nav into owner-feature screens (`tenant:screen:members`, `audit:screen:audit-log`, `audit:screen:audit-log-all-tenants`, `tenant:screen:tenant-list`, `jobs:screen:job-runs`, optional `tier-engine:screen:tier-admin`, optional `cap-overview:screen:my-caps`/`cap-overview:screen:tenant-cap-list`, optional `document-designer` template navs) and the two overview dashboards, built from the metrics list (`metrics` option, default DEFAULT_METRICS). Mount after user, tenant, audit, jobs, metrics and metrics-system; pass `workspaceIds` to match app URL conventions (e.g. Studio `d`/`s`, PublicStatus `admin`/`sysadmin`). Client: `adminShellClient()`, `tenantClient()`, `auditClient()`, `jobsClient()`, optional `tierEngineClient()`.",
@@ -2146,20 +2160,25 @@
     },
     {
       "name": "readiness",
-      "description": "One-call tenant-onboarding probe: `readiness:query:status` rolls up every config key and secret declared `required: true` across all mounted features and reports which still lack a usable value for the calling tenant, plus a single `ready` boolean. Provider-features under an `r.extensionSelector`-declared extension point count only while their provider is the selected one — a tenant on the inmemory mail transport is not blocked by unset SMTP keys. Mount it (together with `config` and `secrets`) when an admin UI needs a settings checklist before the first mail-send or file-write; the per-concern lists stay available via `config:query:readiness` and `secrets:query:list`.",
+      "description": "One-call tenant-onboarding probe: `readiness:query:status` rolls up every config key and secret declared `required: true` across all mounted features and reports which still lack a usable value for the calling tenant, plus a single `ready` boolean. Provider-features under an `r.extensionSelector`-declared extension point count only while their provider is the selected one — a tenant on the inmemory mail transport is not blocked by unset SMTP keys. Mount it (together with `config` and `secrets`) when an admin UI needs a settings checklist before the first mail-send or file-write; the per-concern lists stay available via `config:query:readiness` and `secrets:query:list`. `readiness:write:run-probes` runs the live probes features register with `r.probe` (mail, files, mailboxes, PDF service and more) as a job; the system-check screen shows the latest run and the history once `nav` is passed.",
       "toggleableDefault": null,
+      "adoptsBundledLists": true,
       "requires": [
         "config",
         "secrets"
       ],
-      "optionalRequires": [],
+      "optionalRequires": [
+        "user"
+      ],
       "configReads": [],
       "exposesApis": [],
       "usesApis": [],
       "extensionsUsed": [],
       "configKeys": [],
       "secrets": [],
-      "writeHandlers": [],
+      "writeHandlers": [
+        "readiness:write:run-probes"
+      ],
       "uiHints": {
         "displayLabel": "Readiness · Onboarding Probe",
         "category": "operations",

package/samples/apps/use-all-bundled/kumiko/migrations/0054_readiness-probe-runs.rebuild.json

@@ -0,0 +1,4 @@
+{
+  "version": 1,
+  "tables": ["read_readiness_probe_runs"]
+}

package/samples/apps/use-all-bundled/src/app/admin-nav-feature.ts

@@ -0,0 +1,27 @@
+import { defineFeature } from "@cosmicdrift/kumiko-framework/engine";
+
+// Sidebar group for the admin screens. Bundled features have no shared admin group,
+// so the app owns it and mounts e.g. readiness's system check below it.
+export const ADMIN_NAV_QN = "admin-nav:nav:administration";
+// Each nav joins only the workspaces it names, so the group and every child list them.
+export const ADMIN_NAV_WORKSPACES = [
+  "admin-shell:workspace:tenant-admin",
+  "admin-shell:workspace:platform",
+] as const;
+
+export const adminNavFeature = defineFeature("admin-nav", (r) => {
+  r.describe("Administration group in the sidebar of this sample app.");
+  r.nav({
+    id: "administration",
+    label: "admin-nav:nav.administration",
+    icon: "settings",
+    order: 80,
+    workspaces: ADMIN_NAV_WORKSPACES,
+  });
+  r.translations({
+    keys: {
+      "admin-nav:nav.administration": { de: "Verwaltung", en: "Administration" },
+    },
+  });
+  return {};
+});

package/samples/apps/use-all-bundled/src/run-config.ts

@@ -99,6 +99,7 @@ import { createDocumentDesignerFeature } from "@cosmicdrift/kumiko-document-desi
 import type { TenantId } from "@cosmicdrift/kumiko-framework/engine";
 import { localeDe } from "@cosmicdrift/kumiko-locale-de";
 import { createRendererPuppeteerClientFeature } from "@cosmicdrift/kumiko-renderer-puppeteer-client";
+import { ADMIN_NAV_QN, ADMIN_NAV_WORKSPACES, adminNavFeature } from "./app/admin-nav-feature";
 import { DEV_TENANT_ID } from "./app/auth-constants";
 import { CAP_OVERVIEW_CAPS } from "./app/cap-overview-caps";
 import { capOverviewLabelsFeature } from "./app/cap-overview-labels-feature";
@@ -164,7 +165,8 @@ export const APP_FEATURES = [
     },
   }),
   patScopeLabelsFeature,
-  createReadinessFeature(),
+  adminNavFeature,
+  createReadinessFeature({ nav: { parent: ADMIN_NAV_QN, workspaces: ADMIN_NAV_WORKSPACES } }),
 
   // delivery + channels
   createDeliveryFeature(),