@cosmicdrift/kumiko-bundled-features 0.105.2 → 0.108.0

package/src/user-data-rights/__tests__/request-export.integration.test.ts

@@ -18,12 +18,7 @@
 //     hasJob=false wenn nichts da
 
 import { afterAll, beforeAll, beforeEach, describe, expect, test } from "bun:test";
-import {
-  asRawClient,
-  insertOne,
-  selectMany,
-  updateMany,
-} from "@cosmicdrift/kumiko-framework/bun-db";
+import { asRawClient, selectMany } from "@cosmicdrift/kumiko-framework/bun-db";
 import { createEventsTable, eventsTable } from "@cosmicdrift/kumiko-framework/event-store";
 import {
   createTestUser,
@@ -32,7 +27,7 @@ import {
   testTenantId,
   unsafeCreateEntityTable,
 } from "@cosmicdrift/kumiko-framework/stack";
-import { resetTestTables } from "@cosmicdrift/kumiko-framework/testing";
+import { resetTestTables, seedRow, updateRows } from "@cosmicdrift/kumiko-framework/testing";
 import { getTemporal } from "@cosmicdrift/kumiko-framework/time";
 import { createComplianceProfilesFeature } from "../../compliance-profiles";
 import { createDataRetentionFeature } from "../../data-retention";
@@ -136,7 +131,7 @@ describe("request-export :: App-side-Idempotency (primaerer Pfad)", () => {
   test("Klick nach done-Job ist NEUER Job (Audit-Historie wird nicht blockiert)", async () => {
     const first = await stack.http.writeOk<RequestExportResponse>(REQUEST_EXPORT, {}, aliceUser);
     // Worker-Simulation: status auf done flippen (direct-update OK in Test)
-    await updateMany(
+    await updateRows(
       stack.db,
       exportJobsTable,
       { status: EXPORT_JOB_STATUS.Done },
@@ -251,7 +246,7 @@ describe("export-status :: User-Polling", () => {
     const T = getTemporal();
     // 1. Job done in der Vergangenheit
     const oldJobId = "11111111-1111-4111-8111-111111111111";
-    await insertOne(stack.db, exportJobsTable, {
+    await seedRow(stack.db, exportJobsTable, {
       id: oldJobId,
       tenantId: tenantA,
       userId: aliceUser.id,

package/src/user-data-rights/__tests__/restriction-flow.integration.test.ts

@@ -12,7 +12,7 @@
 
 import { afterAll, beforeAll, beforeEach, describe, expect, test } from "bun:test";
 import { randomBytes } from "node:crypto";
-import { selectMany, updateMany } from "@cosmicdrift/kumiko-framework/bun-db";
+import { selectMany } from "@cosmicdrift/kumiko-framework/bun-db";
 import { createEncryptionProvider } from "@cosmicdrift/kumiko-framework/db";
 import type { TenantId } from "@cosmicdrift/kumiko-framework/engine";
 import { createEventsTable, eventsTable } from "@cosmicdrift/kumiko-framework/event-store";
@@ -24,7 +24,11 @@ import {
   unsafeCreateEntityTable,
   unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
-import { createLateBoundHolder, resetTestTables } from "@cosmicdrift/kumiko-framework/testing";
+import {
+  createLateBoundHolder,
+  resetTestTables,
+  updateRows,
+} from "@cosmicdrift/kumiko-framework/testing";
 import { AuthErrors, AuthHandlers } from "../../auth-email-password/constants";
 import { createAuthEmailPasswordFeature } from "../../auth-email-password/feature";
 import { hashPassword } from "../../auth-email-password/password-hashing";
@@ -117,7 +121,7 @@ async function seedAliceWithMembership(
     TestUsers.systemAdmin,
   );
   if (status !== USER_STATUS.Active) {
-    await updateMany(stack.db, userTable, { status }, { id: created.id });
+    await updateRows(stack.db, userTable, { status }, { id: created.id });
   }
   await seedTenantMembership(stack.db, {
     userId: created.id,

package/src/user-data-rights/__tests__/run-export-jobs-cron-context.integration.test.ts

@@ -10,8 +10,8 @@
 // jeden Export auf "failed" setzte).
 
 import { afterAll, beforeAll, beforeEach, describe, expect, test } from "bun:test";
-import { asRawClient, insertOne, selectMany } from "@cosmicdrift/kumiko-framework/bun-db";
-import { SYSTEM_USER_ID } from "@cosmicdrift/kumiko-framework/engine";
+import { asRawClient, selectMany } from "@cosmicdrift/kumiko-framework/bun-db";
+import { type JobContext, SYSTEM_USER_ID } from "@cosmicdrift/kumiko-framework/engine";
 import { createEventsTable } from "@cosmicdrift/kumiko-framework/event-store";
 import {
   setupTestStack,
@@ -19,6 +19,7 @@ import {
   unsafeCreateEntityTable,
   unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
+import { seedRow } from "@cosmicdrift/kumiko-framework/testing";
 import { getTemporal } from "@cosmicdrift/kumiko-framework/time";
 import {
   createComplianceProfilesFeature,
@@ -104,7 +105,7 @@ beforeEach(async () => {
   await raw.unsafe("DELETE FROM read_export_jobs");
   await raw.unsafe("DELETE FROM read_users");
   await raw.unsafe("DELETE FROM read_tenant_memberships");
-  await insertOne(stack.db, userTable, {
+  await seedRow(stack.db, userTable, {
     id: USER_ID,
     tenantId: TENANT,
     email: "export-cron@example.test",
@@ -146,7 +147,10 @@ describe("run-export-jobs cron-context", () => {
       now: getTemporal().Now.instant(),
     };
     // Vor dem Fix wirft der Wrapper hier "ctx.config is missing".
-    await job?.handler({}, jobCtx as never);
+    // jobCtx is a deliberately minimal prod-context replica (missing
+    // systemUser/log/triggeredBy) — double-cast at this test boundary since
+    // the handler under test never touches those fields.
+    await job?.handler({}, jobCtx as unknown as JobContext);
 
     const [row] = (await selectMany(stack.db, exportJobsTable, { id: jobId })) as Array<{
       status: string;

package/src/user-data-rights/__tests__/run-export-jobs.integration.test.ts

@@ -17,12 +17,7 @@ import { spawn } from "node:child_process";
 import { mkdtemp, readFile, rm, writeFile } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
-import {
-  asRawClient,
-  insertOne,
-  selectMany,
-  updateMany,
-} from "@cosmicdrift/kumiko-framework/bun-db";
+import { asRawClient, selectMany } from "@cosmicdrift/kumiko-framework/bun-db";
 import { createEventsTable, eventsTable } from "@cosmicdrift/kumiko-framework/event-store";
 import {
   createInMemoryFileProvider,
@@ -35,7 +30,7 @@ import {
   testTenantId,
   unsafeCreateEntityTable,
 } from "@cosmicdrift/kumiko-framework/stack";
-import { resetTestTables } from "@cosmicdrift/kumiko-framework/testing";
+import { resetTestTables, seedRow, updateRows } from "@cosmicdrift/kumiko-framework/testing";
 import { getTemporal } from "@cosmicdrift/kumiko-framework/time";
 import {
   createComplianceProfilesFeature,
@@ -112,7 +107,7 @@ beforeEach(async () => {
 
   // Atom 5: aliceUser-Row mit email seeden — Worker-Notification-Callback
   // schaut email via lookupUserEmail an.
-  await insertOne(stack.db, userTable, {
+  await seedRow(stack.db, userTable, {
     id: String(aliceUser.id),
     tenantId: tenantA,
     email: "alice@example.com",
@@ -222,7 +217,7 @@ describe("runExportJobs :: stale-detection", () => {
     const jobId = await seedPendingJob();
     const T = getTemporal();
     const twoHoursAgo = T.Instant.fromEpochMilliseconds(Date.now() - 2 * 60 * 60 * 1000);
-    await updateMany(
+    await updateRows(
       stack.db,
       exportJobsTable,
       { status: EXPORT_JOB_STATUS.Running, startedAt: twoHoursAgo },
@@ -250,7 +245,7 @@ describe("runExportJobs :: stale-detection", () => {
     const jobId = await seedPendingJob();
     const T = getTemporal();
     const justNow = T.Instant.fromEpochMilliseconds(Date.now() - 60 * 1000); // 1min ago
-    await updateMany(
+    await updateRows(
       stack.db,
       exportJobsTable,
       { status: EXPORT_JOB_STATUS.Running, startedAt: justNow },
@@ -285,7 +280,7 @@ describe("runExportJobs :: stale-detection", () => {
     // gesetzt + ZIP geschrieben. Worker dann gecrashed (kein done-flip).
     const provider = await buildProvider(tenantA);
     await provider.write(storageKey, new Uint8Array([1, 2, 3]));
-    await updateMany(
+    await updateRows(
       stack.db,
       exportJobsTable,
       {
@@ -327,7 +322,7 @@ describe("runExportJobs :: storage-cleanup", () => {
     const provider = await buildProvider(tenantA);
     await provider.write(storageKey, new Uint8Array([1, 2, 3]));
 
-    await updateMany(
+    await updateRows(
       stack.db,
       exportJobsTable,
       {
@@ -366,7 +361,7 @@ describe("runExportJobs :: storage-cleanup", () => {
     const provider = await buildProvider(tenantA);
     await provider.write(storageKey, new Uint8Array([4, 5, 6]));
 
-    await updateMany(
+    await updateRows(
       stack.db,
       exportJobsTable,
       {
@@ -470,7 +465,7 @@ describe("runExportJobs :: stale-detection profile-driven cutoff", () => {
     const jobId = await seedPendingJob();
     const T = getTemporal();
     const fortyFiveMinAgo = T.Instant.fromEpochMilliseconds(Date.now() - 45 * 60 * 1000);
-    await updateMany(
+    await updateRows(
       stack.db,
       exportJobsTable,
       { status: EXPORT_JOB_STATUS.Running, startedAt: fortyFiveMinAgo },
@@ -661,7 +656,7 @@ describe("runExportJobs :: Atom 4a download-tokens", () => {
     // (simuliert orphan-state nach Worker-crash).
     const provider = await buildProvider(tenantA);
     await provider.write(storageKey, new Uint8Array([99, 99, 99]));
-    await updateMany(
+    await updateRows(
       stack.db,
       exportJobsTable,
       {
@@ -1046,7 +1041,7 @@ describe("runExportJobs :: Atom 5 notification-callbacks", () => {
     // User-Row mit email=null seeden (override). Worker logged warn,
     // Callback wird NICHT gerufen, Worker-Run bleibt successful.
     await resetTestTables(stack.db, [userTable]);
-    await insertOne(stack.db, userTable, {
+    await seedRow(stack.db, userTable, {
       id: String(aliceUser.id),
       tenantId: tenantA,
       email: "" as string, // empty string — lookupUserEmail returnt null
@@ -1092,7 +1087,7 @@ describe("runExportJobs :: Atom 5 notification-callbacks", () => {
       tenantId: tenantA,
       roles: ["Member"],
     });
-    await insertOne(stack.db, userTable, {
+    await seedRow(stack.db, userTable, {
       id: String(bobUser.id),
       tenantId: tenantA,
       email: "bob@example.com",

package/src/user-data-rights/__tests__/run-forget-cleanup.integration.test.ts

@@ -16,7 +16,8 @@
 // der end-to-end-Default-Pfad (delete).
 
 import { afterAll, beforeAll, beforeEach, describe, expect, test } from "bun:test";
-import { asRawClient, insertOne } from "@cosmicdrift/kumiko-framework/bun-db";
+import { asRawClient } from "@cosmicdrift/kumiko-framework/bun-db";
+import type { JobContext } from "@cosmicdrift/kumiko-framework/engine";
 import { fileRefsTable } from "@cosmicdrift/kumiko-framework/files";
 import {
   setupTestStack,
@@ -24,7 +25,7 @@ import {
   unsafeCreateEntityTable,
   unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
-import { resetTestTables } from "@cosmicdrift/kumiko-framework/testing";
+import { resetTestTables, seedRow } from "@cosmicdrift/kumiko-framework/testing";
 import { getTemporal } from "@cosmicdrift/kumiko-framework/time";
 import { createComplianceProfilesFeature } from "../../compliance-profiles";
 import { createDataRetentionFeature, tenantRetentionOverrideEntity } from "../../data-retention";
@@ -123,7 +124,7 @@ async function seedUser(
     displayName?: string;
   } = {},
 ): Promise<void> {
-  await insertOne(stack.db, userTable, {
+  await seedRow(stack.db, userTable, {
     id,
     tenantId: TENANT_SYSTEM,
     email: overrides.email ?? `user-${id}@example.com`,
@@ -289,7 +290,10 @@ describe("run-forget-cleanup :: registered cron (autonomous Art.17)", () => {
     await seedMembership(CRON_USER, TENANT_A);
 
     const jobCtx = { db: stack.db, registry: stack.registry };
-    await job?.handler({}, jobCtx as never);
+    // jobCtx is a deliberately minimal prod-context replica (missing
+    // systemUser/log/triggeredBy) — double-cast at this test boundary since
+    // the handler under test never touches those fields.
+    await job?.handler({}, jobCtx as unknown as JobContext);
 
     const row = await fetchUser(CRON_USER);
     expect(row?.status).toBe(USER_STATUS.Deleted);
@@ -616,7 +620,7 @@ describe("runForgetCleanup :: sendDeletionExecutedEmail callback (Atom 5b)", ()
     // einem vorigen Run schon anonymisiert hat aber status haengen blieb,
     // oder durch external Migration). Skip schuetzt vor crashing-callback
     // mit invaliden Args.
-    await insertOne(stack.db, userTable, {
+    await seedRow(stack.db, userTable, {
       id: ALICE_ID,
       tenantId: TENANT_SYSTEM,
       email: "",

package/src/user-data-rights/__tests__/run-user-export.integration.test.ts

@@ -15,7 +15,7 @@
 //     ueber Pseudo-Tenant.
 
 import { afterAll, beforeAll, beforeEach, describe, expect, test } from "bun:test";
-import { asRawClient, insertOne } from "@cosmicdrift/kumiko-framework/bun-db";
+import { asRawClient } from "@cosmicdrift/kumiko-framework/bun-db";
 import { fileRefsTable } from "@cosmicdrift/kumiko-framework/files";
 import {
   setupTestStack,
@@ -23,7 +23,7 @@ import {
   unsafeCreateEntityTable,
   unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
-import { resetTestTables } from "@cosmicdrift/kumiko-framework/testing";
+import { resetTestTables, seedRow } from "@cosmicdrift/kumiko-framework/testing";
 import { getTemporal } from "@cosmicdrift/kumiko-framework/time";
 import { createComplianceProfilesFeature } from "../../compliance-profiles";
 import { createDataRetentionFeature } from "../../data-retention";
@@ -99,7 +99,7 @@ async function seedUser(
   id: string,
   overrides: { email?: string; displayName?: string; roles?: string } = {},
 ): Promise<void> {
-  await insertOne(stack.db, userTable, {
+  await seedRow(stack.db, userTable, {
     id,
     tenantId: TENANT_SYSTEM,
     email: overrides.email ?? `user-${id}@example.com`,

package/src/user-data-rights/handlers/download-attempt-list.query.ts

@@ -7,5 +7,5 @@ import { downloadAttemptEntity } from "../schema/download-attempt";
 export const downloadAttemptListQuery = defineEntityListHandler(
   "download-attempt",
   downloadAttemptEntity,
-  { access: { roles: access.systemAdmin } },
+  { access: { roles: access.systemAdmin }, crossTenant: true },
 );

package/src/user-data-rights/handlers/download-by-job.query.ts

@@ -63,13 +63,11 @@ export const downloadByJobQuery = defineQueryHandler({
     const userId = query.user.id;
     const jobId = query.payload.jobId;
     const tenantId = query.user.tenantId;
-    // IP aus dem request-scoped Kontext (von requestIdMiddleware aus
-    // x-forwarded-for befuellt) — server-trusted, anders als ein vom Client
-    // mitgeschickter Wert. UA steht nicht im RequestContext; der Audit-Row
-    // laesst sie null (best-effort, via requestId in den Server-Logs
-    // cross-referenzierbar).
+    // IP + UA aus dem request-scoped Kontext (von requestIdMiddleware
+    // befuellt) — server-trusted, anders als ein vom Client mitgeschickter
+    // Wert (603/2).
     const auditIp = requestContext.get()?.ip ?? null;
-    const auditUa: string | null = null;
+    const auditUa = requestContext.get()?.userAgent ?? null;
 
     // Step 1-2: job-lookup + cross-user-isolation
     // ctx.db.raw weil tenant-agnostisch — Alice in Tenant B sucht den

package/src/user-data-rights/handlers/export-job-detail.query.ts

@@ -4,4 +4,5 @@ import { exportJobEntity } from "../schema/export-job";
 // Detail fetch backing the read-only export-job inspector screen.
 export const exportJobDetailQuery = defineEntityDetailHandler("export-job", exportJobEntity, {
   access: { roles: access.systemAdmin },
+  crossTenant: true,
 });

package/src/user-data-rights/handlers/export-job-list.query.ts

@@ -5,4 +5,5 @@ import { exportJobEntity } from "../schema/export-job";
 // rows are created by the user's request-export flow, never through this handler.
 export const exportJobListQuery = defineEntityListHandler("export-job", exportJobEntity, {
   access: { roles: access.systemAdmin },
+  crossTenant: true,
 });

package/src/user-data-rights/lib/update-user-lifecycle.ts

@@ -1,7 +1,7 @@
-import { fetchOne, selectMany } from "@cosmicdrift/kumiko-framework/bun-db";
+import { selectMany } from "@cosmicdrift/kumiko-framework/bun-db";
 import type { DbRunner } from "@cosmicdrift/kumiko-framework/db";
 import { createEventStoreExecutor, createTenantDb } from "@cosmicdrift/kumiko-framework/db";
-import { createSystemUser, type TenantId } from "@cosmicdrift/kumiko-framework/engine";
+import { createSystemUser, SYSTEM_TENANT_ID } from "@cosmicdrift/kumiko-framework/engine";
 import { InternalError } from "@cosmicdrift/kumiko-framework/errors";
 import { USER_STATUS, userEntity, userTable } from "../../user";
 
@@ -21,16 +21,6 @@ import { USER_STATUS, userEntity, userTable } from "../../user";
 // kann abweichen).
 const userExecutor = createEventStoreExecutor(userTable, userEntity, { entityName: "user" });
 
-// Stream-Tenant = die framework-injizierte tenant_id der read_users-Row. Der
-// Reducer setzt sie aus `user.created`.tenantId, ein Rebuild rekonstruiert sie
-// daraus — sie IST also der Stream-Key des Aggregats. Die Row direkt zu lesen
-// (statt das created-Event zu joinen) deckt auch direkt-geseedete Rows ab.
-async function streamTenantOf(conn: DbRunner, userId: string): Promise<TenantId | null> {
-  const row = await fetchOne<{ tenantId?: string }>(conn, userTable, { id: userId });
-  // @cast-boundary db-row — tenant_id ist eine TenantId-shaped uuid-Spalte.
-  return row?.tenantId ? (row.tenantId as TenantId) : null;
-}
-
 // `conn` ist ctx.db.raw (regulaere Handler) ODER die offene tx (forget-cleanup
 // Sub-Tx) — so bleibt der Event-Append atomar mit dem umgebenden Write.
 export async function updateUserLifecycle(
@@ -38,20 +28,14 @@ export async function updateUserLifecycle(
   userId: string,
   changes: Record<string, unknown>,
 ): Promise<void> {
-  const streamTenantId = await streamTenantOf(conn, userId);
-  if (!streamTenantId) {
-    throw new InternalError({
-      message: `read_users row ${userId} has no tenant_id — cannot rescope lifecycle write to its stream tenant`,
-    });
-  }
-
-  // Rescope BEIDE Achsen auf den Stream-Tenant: der db-Arg treibt loadById +
-  // den Stream-Read, der user-Arg die Event-tenantId + Ownership. Nur beide
-  // zusammen halten created + updated auf einem Stream.
-  const tenantDb = createTenantDb(conn, streamTenantId, "tenant");
+  // user ist systemStream (#497): der Executor-Choke-Point addressiert den
+  // Stream immer auf SYSTEM_TENANT_ID — ein Rescope auf die row-tenant_id
+  // waere wirkungslos. "system"-Mode, damit loadById auch Legacy-Rows findet,
+  // deren tenant_id noch vor dem #762-Backfill-Rebuild steht.
+  const tenantDb = createTenantDb(conn, SYSTEM_TENANT_ID, "system");
   const result = await userExecutor.update(
     { id: userId, changes },
-    createSystemUser(streamTenantId),
+    createSystemUser(SYSTEM_TENANT_ID),
     tenantDb,
     { skipOptimisticLock: true },
   );

package/src/user-data-rights/run-forget-cleanup.ts

@@ -410,7 +410,14 @@ async function resolveEffectiveTenantModel(
   appTenantModel: TenantUserModel,
 ): Promise<TenantUserModel> {
   if (appTenantModel !== "single-user") return "multi-user";
-  const members = await selectMany<{ userId: string }>(db, tenantMembershipsTable, { tenantId });
+  // Only "exactly one member vs. more than one" matters here — a LIMIT 2
+  // read answers that without pulling every historical membership row.
+  const members = await selectMany<{ userId: string }>(
+    db,
+    tenantMembershipsTable,
+    { tenantId },
+    { limit: 2 },
+  );
   return members.length === 1 ? "single-user" : "multi-user";
 }
 

package/src/user-data-rights/web/__tests__/public-deletion-gate.test.tsx

@@ -5,7 +5,7 @@
 // Provider-Wrapper lokal (Dependency-Richtung renderer-web → bundled-features
 // verbietet test-utils-Import).
 
-import { describe, expect, test } from "bun:test";
+import { afterEach, describe, expect, test } from "bun:test";
 import type { Dispatcher } from "@cosmicdrift/kumiko-headless";
 import {
   createStaticLocaleResolver,
@@ -27,6 +27,12 @@ const stubDispatcher = {
 
 const ROUTES = { requestPath: "/account/delete", confirmPath: "/account/delete/confirm" };
 
+// renderGate mutates the shared happy-dom document's history (570/1) — reset
+// so a later, unrelated test file doesn't inherit this suite's last path.
+afterEach(() => {
+  window.history.replaceState({}, "", "/");
+});
+
 function renderGate(path: string, gate: ReactNode): ReturnType<typeof within> {
   window.history.replaceState({}, "", path);
   const { container } = render(

package/src/user-data-rights/web/i18n.ts

@@ -74,11 +74,6 @@ export const defaultTranslations: TranslationsByLocale = {
     "userDataRights.privacyCenter.deletion.dialogTitle": "Konto wirklich löschen?",
     "userDataRights.privacyCenter.deletion.dialogDescription":
       "Mit dem Bestätigen startet die Lösch-Frist. Du kannst die Löschung bis zu ihrem Ablauf wieder abbrechen.",
-
-    "userDataRights.privacyCenter.audit.title": "Aktivitätsprotokoll (Art. 15)",
-    "userDataRights.privacyCenter.audit.intro":
-      "Die letzten Ereignisse zu deinem Konto über alle Tenants hinweg.",
-    "userDataRights.privacyCenter.audit.empty": "Noch keine Ereignisse.",
   },
   en: {
     "userDataRights.deletion.request.title": "Request account deletion",
@@ -146,10 +141,5 @@ export const defaultTranslations: TranslationsByLocale = {
     "userDataRights.privacyCenter.deletion.dialogTitle": "Delete your account?",
     "userDataRights.privacyCenter.deletion.dialogDescription":
       "Confirming starts the deletion grace period. You can cancel the deletion until it ends.",
-
-    "userDataRights.privacyCenter.audit.title": "Activity log (Art. 15)",
-    "userDataRights.privacyCenter.audit.intro":
-      "The most recent events on your account across all tenants.",
-    "userDataRights.privacyCenter.audit.empty": "No events yet.",
   },
 };

package/src/user-data-rights-defaults/__tests__/user-data-rights-defaults.integration.test.ts

@@ -11,7 +11,7 @@
 //     fileRef-Forget beruehrt Tenant B's Files nicht)
 
 import { afterAll, beforeAll, describe, expect, test } from "bun:test";
-import { asRawClient, insertOne } from "@cosmicdrift/kumiko-framework/bun-db";
+import { asRawClient } from "@cosmicdrift/kumiko-framework/bun-db";
 import { fileRefsTable } from "@cosmicdrift/kumiko-framework/files";
 import {
   setupTestStack,
@@ -19,6 +19,7 @@ import {
   unsafeCreateEntityTable,
   unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
+import { seedRow } from "@cosmicdrift/kumiko-framework/testing";
 import { createComplianceProfilesFeature } from "../../compliance-profiles";
 import { createDataRetentionFeature } from "../../data-retention";
 import { createFilesFeature } from "../../files";
@@ -80,7 +81,7 @@ async function seedUser(id: string, overrides: Record<string, unknown> = {}): Pr
   // Schema hat tenant_id-Spalte automatisch (Framework-Default).
   // Pragmatisch: SYSTEM_TENANT_ID fuer User-Rows in Tests.
   const SYSTEM_TENANT = "00000000-0000-4000-8000-000000000001";
-  await insertOne(stack.db, userTable, {
+  await seedRow(stack.db, userTable, {
     id,
     tenantId: SYSTEM_TENANT,
     email: `user-${id}@example.com`,