@cosmicdrift/kumiko-bundled-features 0.14.0 → 0.16.0

package/src/tenant/handlers/memberships.query.ts

@@ -1,6 +1,6 @@
+import { selectMany } from "@cosmicdrift/kumiko-framework/bun-db";
 import { defineQueryHandler, SYSTEM_ROLE } from "@cosmicdrift/kumiko-framework/engine";
 import { parseRoles } from "@cosmicdrift/kumiko-framework/utils";
-import { eq } from "drizzle-orm";
 import { z } from "zod";
 import { tenantMembershipsTable } from "../membership-table";
 
@@ -11,10 +11,7 @@ export const membershipsQuery = defineQueryHandler({
   // directly by tenant admins managing memberships in the admin UI.
   access: { roles: [SYSTEM_ROLE, "SystemAdmin"] },
   handler: async (query, ctx) => {
-    const rows = await ctx.db
-      ?.select()
-      .from(tenantMembershipsTable)
-      .where(eq(tenantMembershipsTable.userId, query.payload.userId));
+    const rows = await selectMany(ctx.db, tenantMembershipsTable, { userId: query.payload.userId });
 
     return rows.map((row) => ({
       ...row,

package/src/tenant/handlers/remove-member.write.ts

@@ -1,7 +1,7 @@
-import { createEventStoreExecutor, type DbRow, fetchOne } from "@cosmicdrift/kumiko-framework/db";
+import { fetchOne } from "@cosmicdrift/kumiko-framework/bun-db";
+import { createEventStoreExecutor, type DbRow } from "@cosmicdrift/kumiko-framework/db";
 import { defineWriteHandler, withResponseData } from "@cosmicdrift/kumiko-framework/engine";
 import { NotFoundError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
-import { eq } from "drizzle-orm";
 import { z } from "zod";
 import { tenantMembershipEntity, tenantMembershipsTable } from "../membership-table";
 
@@ -15,12 +15,10 @@ export const removeMemberWrite = defineWriteHandler({
   access: { roles: ["SystemAdmin"] },
   handler: async (event, ctx) => {
     const db = ctx.db;
-    const existing = await fetchOne(
-      db,
-      tenantMembershipsTable,
-      eq(tenantMembershipsTable.userId, event.payload.userId),
-      eq(tenantMembershipsTable.tenantId, event.payload.tenantId),
-    );
+    const existing = await fetchOne(db, tenantMembershipsTable, {
+      userId: event.payload.userId,
+      tenantId: event.payload.tenantId,
+    });
     if (!existing) {
       return writeFailure(
         new NotFoundError("membership", undefined, {

package/src/tenant/handlers/resolve-user-ids.query.ts

@@ -1,40 +1,30 @@
+import { selectMany } from "@cosmicdrift/kumiko-framework/bun-db";
 import { defineQueryHandler, SYSTEM_ROLE } from "@cosmicdrift/kumiko-framework/engine";
-import { eq } from "drizzle-orm";
 import { z } from "zod";
 import { tenantMembershipsTable } from "../membership-table";
 
 // Cross-feature query: resolve user IDs by tenantId or userId.
 // Other features (delivery, jobs, etc.) use this to get user lists
 // without knowing about membership internals.
-//
-// Examples:
-//   { tenantId: 1 }  → all user IDs in tenant 1
-//   { userId: 5 }    → [5] if member of any tenant, [] if not
 export const resolveUserIdsQuery = defineQueryHandler({
   name: "resolveUserIds",
   schema: z.object({
     tenantId: z.string().optional(),
     userId: z.string().optional(),
   }),
-  // System-internal: invoked by other features (delivery, jobs) through queryAs(systemUser, ...).
-  // Never called directly by an end-user request.
   access: { roles: [SYSTEM_ROLE] },
   handler: async (query, ctx) => {
     const { tenantId, userId } = query.payload;
 
     if (tenantId !== undefined) {
-      const rows = await ctx.db
-        .select({ userId: tenantMembershipsTable.userId })
-        .from(tenantMembershipsTable)
-        .where(eq(tenantMembershipsTable.tenantId, tenantId));
-      return rows.map((r) => r["userId"] as number); // @cast-boundary db-row
+      const rows = await selectMany<{ userId: number }>(ctx.db, tenantMembershipsTable, {
+        tenantId,
+      });
+      return rows.map((r) => r.userId);
     }
 
     if (userId !== undefined) {
-      const rows = await ctx.db
-        .select({ userId: tenantMembershipsTable.userId })
-        .from(tenantMembershipsTable)
-        .where(eq(tenantMembershipsTable.userId, userId));
+      const rows = await selectMany(ctx.db, tenantMembershipsTable, { userId });
       return rows.length > 0 ? [userId] : [];
     }
 

package/src/tenant/handlers/update-member-roles.write.ts

@@ -1,7 +1,7 @@
-import { createEventStoreExecutor, type DbRow, fetchOne } from "@cosmicdrift/kumiko-framework/db";
+import { fetchOne } from "@cosmicdrift/kumiko-framework/bun-db";
+import { createEventStoreExecutor, type DbRow } from "@cosmicdrift/kumiko-framework/db";
 import { defineWriteHandler, withResponseData } from "@cosmicdrift/kumiko-framework/engine";
 import { NotFoundError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
-import { eq } from "drizzle-orm";
 import { z } from "zod";
 import { tenantMembershipEntity, tenantMembershipsTable } from "../membership-table";
 
@@ -23,12 +23,10 @@ export const updateMemberRolesWrite = defineWriteHandler({
   access: { roles: ["system", "SystemAdmin"] },
   handler: async (event, ctx) => {
     const db = ctx.db;
-    const existing = await fetchOne(
-      db,
-      tenantMembershipsTable,
-      eq(tenantMembershipsTable.userId, event.payload.userId),
-      eq(tenantMembershipsTable.tenantId, event.payload.tenantId),
-    );
+    const existing = await fetchOne(db, tenantMembershipsTable, {
+      userId: event.payload.userId,
+      tenantId: event.payload.tenantId,
+    });
     if (!existing) {
       return writeFailure(
         new NotFoundError("membership", undefined, {

package/src/tenant/invitation-table.ts

@@ -22,7 +22,7 @@
 // pending → re-use existing row + refresh Redis-token + send mail
 // (analog zu signup-Resend).
 
-import { buildDrizzleTable } from "@cosmicdrift/kumiko-framework/db";
+import { buildEntityTable } from "@cosmicdrift/kumiko-framework/db";
 import {
   createEntity,
   createSelectField,
@@ -88,7 +88,4 @@ export const tenantInvitationEntity = createEntity({
   ],
 });
 
-export const tenantInvitationsTable = buildDrizzleTable(
-  "tenant-invitation",
-  tenantInvitationEntity,
-);
+export const tenantInvitationsTable = buildEntityTable("tenant-invitation", tenantInvitationEntity);

package/src/tenant/membership-table.ts

@@ -1,4 +1,4 @@
-import { buildDrizzleTable } from "@cosmicdrift/kumiko-framework/db";
+import { buildEntityTable } from "@cosmicdrift/kumiko-framework/db";
 import { createEntity, createTextField } from "@cosmicdrift/kumiko-framework/engine";
 
 // Membership is event-sourced. Each (userId, tenantId) pair is its own
@@ -13,7 +13,7 @@ import { createEntity, createTextField } from "@cosmicdrift/kumiko-framework/eng
 // database level independent of the handler lookup.
 //
 // Single-Source-of-Truth: `tenantMembershipEntity`. Die DB-Tabelle wird
-// aus der EntityDefinition über buildDrizzleTable abgeleitet, der
+// aus der EntityDefinition über buildEntityTable abgeleitet, der
 // unique-Index ist via entity.indexes deklariert.
 export const tenantMembershipEntity = createEntity({
   table: "read_tenant_memberships",
@@ -29,7 +29,4 @@ export const tenantMembershipEntity = createEntity({
   ],
 });
 
-export const tenantMembershipsTable = buildDrizzleTable(
-  "tenant-membership",
-  tenantMembershipEntity,
-);
+export const tenantMembershipsTable = buildEntityTable("tenant-membership", tenantMembershipEntity);

package/src/tenant/schema/tenant.ts

@@ -1,4 +1,4 @@
-import { buildDrizzleTable } from "@cosmicdrift/kumiko-framework/db";
+import { buildEntityTable } from "@cosmicdrift/kumiko-framework/db";
 import {
   createBooleanField,
   createEntity,
@@ -24,4 +24,4 @@ export const tenantEntity = createEntity({
   indexes: [{ unique: true, columns: ["key"] }],
 });
 
-export const tenantTable = buildDrizzleTable("tenant", tenantEntity);
+export const tenantTable = buildEntityTable("tenant", tenantEntity);

package/src/tenant/seeding.ts

@@ -31,16 +31,15 @@
 // Fixture-seeding prioritises "make the state exist" over "detect duplicate
 // seeding", which is usually a test-author bug we don't need to surface.
 
+import { fetchOne } from "@cosmicdrift/kumiko-framework/bun-db";
 import {
   createEventStoreExecutor,
   createTenantDb,
-  type DbConnection,
-  fetchOne,
+  type DbRunner,
 } from "@cosmicdrift/kumiko-framework/db";
 import type { SessionUser, TenantId } from "@cosmicdrift/kumiko-framework/engine";
-import { eventsTable } from "@cosmicdrift/kumiko-framework/event-store";
+import { getAggregateStreamMaxVersion } from "@cosmicdrift/kumiko-framework/event-store";
 import { TestUsers } from "@cosmicdrift/kumiko-framework/stack";
-import { eq, max as maxFn } from "drizzle-orm";
 import { tenantMembershipEntity, tenantMembershipsTable } from "./membership-table";
 import { tenantEntity, tenantTable } from "./schema/tenant";
 
@@ -83,7 +82,7 @@ export type SeedTenantOptions = {
  * `TenantHandlers.create`, minus the SystemAdmin-access-check and minus
  * ConflictError-on-duplicate.
  */
-export async function seedTenant(db: DbConnection, options: SeedTenantOptions): Promise<TenantId> {
+export async function seedTenant(db: DbRunner, options: SeedTenantOptions): Promise<TenantId> {
   const by = options.by ?? TestUsers.systemAdmin;
   // executor.create erwartet eine TenantDb (mit .insert()-API), nicht
   // die rohe DbConnection. Auch wenn das Tenant-Aggregat selbst NICHT
@@ -92,18 +91,15 @@ export async function seedTenant(db: DbConnection, options: SeedTenantOptions):
   // seedTenantMembership nötig.
   const tdb = createTenantDb(db, by.tenantId, "system");
 
-  const existing = await fetchOne(db, tenantTable, eq(tenantTable["id"], options.id));
+  const existing = await fetchOne(db, tenantTable, { id: options.id });
   if (existing) return options.id;
 
   // Idempotenz: Aggregate kann im Event-Store existieren ohne Projection-Row
   // (Projection-Drift nach rebuild, manuellem DELETE, oder async-lag). Wenn
   // Stream-Version > 0 → kein create() — wäre version_conflict. Caller
   // bekommt die ID, Projection wird beim nächsten Dispatcher-Cycle aufgebaut.
-  const [streamRow] = await db
-    .select({ v: maxFn(eventsTable.version) })
-    .from(eventsTable)
-    .where(eq(eventsTable.aggregateId, options.id));
-  if ((streamRow?.v ?? 0) > 0) return options.id;
+  const streamVersion = await getAggregateStreamMaxVersion(db, options.id);
+  if (streamVersion > 0) return options.id;
 
   const result = await tenantExecutor.create(
     { id: options.id, key: options.key, name: options.name },
@@ -126,7 +122,7 @@ export async function seedTenant(db: DbConnection, options: SeedTenantOptions):
  * ConflictError on duplicates (duplicate calls no-op).
  */
 export async function seedTenantMembership(
-  db: DbConnection,
+  db: DbRunner,
   options: SeedTenantMembershipOptions,
 ): Promise<void> {
   const by = options.by ?? TestUsers.systemAdmin;
@@ -138,12 +134,10 @@ export async function seedTenantMembership(
   // only certain tables get truncated. A plain executor.create would trip
   // the (user_id, tenant_id) unique index; the fixture call-site would then
   // have to juggle try/catch. Lookup-first keeps call-sites clean.
-  const existing = await fetchOne(
-    db,
-    tenantMembershipsTable,
-    eq(tenantMembershipsTable.userId, options.userId),
-    eq(tenantMembershipsTable.tenantId, options.tenantId),
-  );
+  const existing = await fetchOne(db, tenantMembershipsTable, {
+    userId: options.userId,
+    tenantId: options.tenantId,
+  });
   // skip: idempotent no-op — duplicate seed is expected across beforeEach-
   // resets that don't truncate this table. Cheaper than try/catch on the
   // unique-index, and documented in the function JSDoc above.

package/src/text-content/README.md

@@ -180,7 +180,7 @@ convenience routes (`/legal/impressum`, `/legal/datenschutz`,
 ## Architecture
 
 - **Single source of truth:** `textBlockEntity` in `table.ts`.
-  The Drizzle table is derived via `buildDrizzleTable("text-block",
+  The Drizzle table is derived via `buildEntityTable("text-block",
   textBlockEntity)`, the unique index on `(tenantId, slug, lang)` is
   declared via `entity.indexes`.
 - **Event-sourced:** the write path goes through

package/src/text-content/__tests__/text-content.integration.ts

@@ -1,3 +1,4 @@
+import { afterAll, beforeAll, describe, expect, test } from "bun:test";
 import type { DbConnection } from "@cosmicdrift/kumiko-framework/db";
 import { createEventsTable } from "@cosmicdrift/kumiko-framework/event-store";
 import {
@@ -8,7 +9,6 @@ import {
   unsafeCreateEntityTable,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { expectErrorIncludes } from "@cosmicdrift/kumiko-framework/testing";
-import { afterAll, beforeAll, describe, expect, test } from "vitest";
 import { TextContentHandlers, TextContentQueries } from "../constants";
 import { createTextContentFeature } from "../feature";
 import { seedTextBlock } from "../seeding";
@@ -389,7 +389,7 @@ describe("text-content :: edge-cases", () => {
       { slug: "race-test", lang: "de" },
       tenantAdmin,
     );
-    const finalBody = fetched!["body"];
+    const finalBody = fetched!["body"] as string;
     expect(["from-a", "from-b", "v1"]).toContain(finalBody);
   });
 });

package/src/text-content/api.ts

@@ -8,11 +8,10 @@
 // bleiben Features durch Refactorings entkoppelt — wer textBlocksTable
 // umzieht oder die Query-Signatur ändert, muss nur die Factory anpassen.
 
+import { fetchOne } from "@cosmicdrift/kumiko-framework/bun-db";
 import type { DbConnection } from "@cosmicdrift/kumiko-framework/db";
-import { fetchOne } from "@cosmicdrift/kumiko-framework/db";
 import type { SessionUser, TenantId } from "@cosmicdrift/kumiko-framework/engine";
 import { InternalError } from "@cosmicdrift/kumiko-framework/errors";
-import { eq } from "drizzle-orm";
 import { type TextBlockRow, textBlocksTable } from "./table";
 
 export type TextBlock = {
@@ -40,13 +39,7 @@ export type TextContentApi = {
 export function createTextContentApi(db: DbConnection): TextContentApi {
   return {
     getBlock: async ({ tenantId, slug, lang }) => {
-      const row = await fetchOne<TextBlockRow>(
-        db,
-        textBlocksTable,
-        eq(textBlocksTable["tenantId"], tenantId),
-        eq(textBlocksTable["slug"], slug),
-        eq(textBlocksTable["lang"], lang),
-      );
+      const row = await fetchOne<TextBlockRow>(db, textBlocksTable, { tenantId, slug, lang });
       if (!row) return null;
       return {
         slug: row.slug,

package/src/text-content/handlers/by-slug.query.ts

@@ -1,7 +1,6 @@
-import { fetchOne } from "@cosmicdrift/kumiko-framework/db";
+import { fetchOne } from "@cosmicdrift/kumiko-framework/bun-db";
 import { defineQueryHandler } from "@cosmicdrift/kumiko-framework/engine";
 import { AccessDeniedError } from "@cosmicdrift/kumiko-framework/errors";
-import { eq } from "drizzle-orm";
 import { z } from "zod";
 import { type TextBlockRow, textBlocksTable } from "../table";
 
@@ -35,13 +34,11 @@ export const bySlugQuery = defineQueryHandler({
       });
     }
     const tenantId = override ?? query.user.tenantId;
-    const row = await fetchOne<TextBlockRow>(
-      ctx.db,
-      textBlocksTable,
-      eq(textBlocksTable["tenantId"], tenantId),
-      eq(textBlocksTable["slug"], query.payload.slug),
-      eq(textBlocksTable["lang"], query.payload.lang),
-    );
+    const row = await fetchOne<TextBlockRow>(ctx.db, textBlocksTable, {
+      tenantId,
+      slug: query.payload.slug,
+      lang: query.payload.lang,
+    });
 
     if (!row) return null;
     return {

package/src/text-content/handlers/by-tenant.query.ts

@@ -1,7 +1,7 @@
+import { selectMany } from "@cosmicdrift/kumiko-framework/bun-db";
 import { castTenantRows } from "@cosmicdrift/kumiko-framework/db";
 import { defineQueryHandler } from "@cosmicdrift/kumiko-framework/engine";
 import { AccessDeniedError } from "@cosmicdrift/kumiko-framework/errors";
-import { eq } from "drizzle-orm";
 import { z } from "zod";
 import { type TextBlockRow, textBlocksTable } from "../table";
 
@@ -42,7 +42,7 @@ export const byTenantQuery = defineQueryHandler({
     }
     const tenantId = override ?? query.user.tenantId;
     const rows = castTenantRows<TextBlockRow>(
-      await ctx.db.select().from(textBlocksTable).where(eq(textBlocksTable["tenantId"], tenantId)),
+      await selectMany(ctx.db, textBlocksTable, { tenantId: tenantId }),
     );
     return {
       blocks: rows.map((row) => ({

package/src/text-content/handlers/set.write.ts

@@ -1,7 +1,7 @@
-import { createEventStoreExecutor, fetchOne } from "@cosmicdrift/kumiko-framework/db";
+import { fetchOne } from "@cosmicdrift/kumiko-framework/bun-db";
+import { createEventStoreExecutor } from "@cosmicdrift/kumiko-framework/db";
 import { defineWriteHandler, type TenantId } from "@cosmicdrift/kumiko-framework/engine";
 import { AccessDeniedError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
-import { eq } from "drizzle-orm";
 import { z } from "zod";
 import { type TextBlockRow, textBlockEntity, textBlocksTable } from "../table";
 
@@ -86,13 +86,11 @@ export const setWrite = defineWriteHandler({
     const executorUser =
       override !== undefined ? { ...event.user, tenantId: override as TenantId } : event.user; // @cast-boundary engine-bridge
 
-    const existing = await fetchOne<TextBlockRow>(
-      db,
-      textBlocksTable,
-      eq(textBlocksTable["tenantId"], tenantId),
-      eq(textBlocksTable["slug"], event.payload.slug),
-      eq(textBlocksTable["lang"], event.payload.lang),
-    );
+    const existing = await fetchOne<TextBlockRow>(db, textBlocksTable, {
+      tenantId,
+      slug: event.payload.slug,
+      lang: event.payload.lang,
+    });
 
     // V.1.4 folder: optional + null erlaubt (root-node). Optional-Chain
     // mapped undefined → null damit drizzle nullable-column konsistent

package/src/text-content/seeding.ts

@@ -3,15 +3,14 @@
 // aber ohne Access-Check. Idempotent: zweiter Call mit gleichem
 // (tenantId, slug, lang) updated den existing Block.
 
+import { fetchOne } from "@cosmicdrift/kumiko-framework/bun-db";
 import {
   createEventStoreExecutor,
   createTenantDb,
   type DbConnection,
-  fetchOne,
 } from "@cosmicdrift/kumiko-framework/db";
 import type { SessionUser, TenantId } from "@cosmicdrift/kumiko-framework/engine";
 import { TestUsers } from "@cosmicdrift/kumiko-framework/stack";
-import { eq } from "drizzle-orm";
 import { type TextBlockRow, textBlockEntity, textBlocksTable } from "./table";
 
 const executor = createEventStoreExecutor(textBlocksTable, textBlockEntity, {
@@ -47,13 +46,11 @@ export async function seedTextBlock(
   // checks (tenant-scope-validation) greifen.
   const tdb = createTenantDb(db, opts.tenantId, "system");
 
-  const existing = await fetchOne<TextBlockRow>(
-    db,
-    textBlocksTable,
-    eq(textBlocksTable["tenantId"], opts.tenantId),
-    eq(textBlocksTable["slug"], opts.slug),
-    eq(textBlocksTable["lang"], opts.lang),
-  );
+  const existing = await fetchOne<TextBlockRow>(db, textBlocksTable, {
+    tenantId: opts.tenantId,
+    slug: opts.slug,
+    lang: opts.lang,
+  });
 
   const folder = opts.folder ?? null;
 

package/src/text-content/table.ts

@@ -1,4 +1,4 @@
-import { buildDrizzleTable } from "@cosmicdrift/kumiko-framework/db";
+import { buildEntityTable } from "@cosmicdrift/kumiko-framework/db";
 import { createEntity, createTextField } from "@cosmicdrift/kumiko-framework/engine";
 
 // TextBlock — generischer Container für statische Texte (legal pages,
@@ -29,7 +29,7 @@ export const textBlockEntity = createEntity({
   ],
 });
 
-export const textBlocksTable = buildDrizzleTable("text-block", textBlockEntity);
+export const textBlocksTable = buildEntityTable("text-block", textBlockEntity);
 
 // Concrete Row-Type — single-source dafür dass die unknown-Werte die
 // Drizzle aus `Record<string, unknown>` liefert genau einmal benannt

package/src/text-content/web/__tests__/editor-read-only.test.tsx

@@ -1,5 +1,8 @@
-// @vitest-environment jsdom
-
+import { describe, expect, mock, test } from "bun:test";
+// mock.module eretzt imports für alle Konsumenten — statische imports
+// vor mock.module sehen die gemockte Version weil Bun am Loader-Level
+// intercepted. useShellUser ist hier ein Mock-Objekt.
+import { useShellUser } from "@cosmicdrift/kumiko-bundled-features/auth-email-password/web";
 import {
   createStaticLocaleResolver,
   LocaleProvider,
@@ -8,37 +11,26 @@ import {
 import { defaultPrimitives } from "@cosmicdrift/kumiko-renderer-web";
 import { render, screen } from "@testing-library/react";
 import type { ReactNode } from "react";
-import { describe, expect, test, vi } from "vitest";
 import { textContentClient } from "../client-plugin";
 
-// Mock-Setup für die drei externen Hooks die TextContentEditor benutzt.
-// vi.mock + vi.fn() erlaubt pro-Test verschiedene Roles + Dispatcher-
-// Antworten. Memory `[Keine Fake-Tests]`: wir testen echtes Rendering,
-// nicht nur die canWrite-Bedingung.
-vi.mock("@cosmicdrift/kumiko-bundled-features/auth-email-password/web", () => ({
-  useShellUser: vi.fn(),
+mock.module("@cosmicdrift/kumiko-bundled-features/auth-email-password/web", () => ({
+  useShellUser: mock(),
 }));
 
-vi.mock("@cosmicdrift/kumiko-renderer", async () => {
-  const actual = await vi.importActual<typeof import("@cosmicdrift/kumiko-renderer")>(
-    "@cosmicdrift/kumiko-renderer",
-  );
-  return {
-    ...actual,
-    useDispatcher: vi.fn(() => ({
-      write: vi.fn(),
-      query: vi.fn(),
-    })),
-    useQuery: vi.fn(() => ({
-      data: { slug: "imprint", lang: "de", title: "Impressum", body: "Inhalt" },
-      loading: false,
-      error: null,
-      refetch: vi.fn(),
-    })),
-  };
-});
-
-import { useShellUser } from "@cosmicdrift/kumiko-bundled-features/auth-email-password/web";
+const actual_renderer = await import("@cosmicdrift/kumiko-renderer");
+mock.module("@cosmicdrift/kumiko-renderer", () => ({
+  ...actual_renderer,
+  useDispatcher: mock(() => ({
+    write: mock(),
+    query: mock(),
+  })),
+  useQuery: mock(() => ({
+    data: { slug: "imprint", lang: "de", title: "Impressum", body: "Inhalt" },
+    loading: false,
+    error: null,
+    refetch: mock(),
+  })),
+}));
 
 const TARGET = {
   featureId: "text-content",
@@ -65,21 +57,21 @@ function Wrapper({ children }: { readonly children: ReactNode }): ReactNode {
 
 describe("TextContentEditor — role-based write-access", () => {
   test("TenantAdmin sieht Save-Button + editable inputs", () => {
-    vi.mocked(useShellUser).mockReturnValue({ id: "u1", roles: ["TenantAdmin"] });
+    // biome-ignore lint/suspicious/noExplicitAny: Bun mock function
+    (useShellUser as any).mockReturnValue({ id: "u1", roles: ["TenantAdmin"] });
     const Editor = getEditor();
     render(<Editor target={TARGET} onClose={() => {}} />, { wrapper: Wrapper });
 
-    // Save-Button gerendert (canWrite=true → Button.type=submit)
     const saveButton = screen.getByRole("button", { name: /speichern/i });
     expect(saveButton).toBeTruthy();
     expect(saveButton.hasAttribute("disabled")).toBe(false);
 
-    // Read-only-Banner darf NICHT erscheinen
     expect(screen.queryByText(/Read-only/)).toBeNull();
   });
 
   test("SystemAdmin sieht Save-Button (alternative write-role)", () => {
-    vi.mocked(useShellUser).mockReturnValue({ id: "u1", roles: ["SystemAdmin"] });
+    // biome-ignore lint/suspicious/noExplicitAny: Bun mock function
+    (useShellUser as any).mockReturnValue({ id: "u1", roles: ["SystemAdmin"] });
     const Editor = getEditor();
     render(<Editor target={TARGET} onClose={() => {}} />, { wrapper: Wrapper });
 
@@ -88,11 +80,8 @@ describe("TextContentEditor — role-based write-access", () => {
   });
 
   test("Editor-Role sieht Read-only-Banner + KEIN Save-Button", () => {
-    // Das ist der advisor-flagged Pfad — bisher unverifiziert. Editor-
-    // Role hat in publicstatus's Schema Zugriff auf visual-Workspace +
-    // by-slug-query (read), aber NICHT auf set.write. UI muss das
-    // explizit kommunizieren statt 403 erst beim save zu zeigen.
-    vi.mocked(useShellUser).mockReturnValue({ id: "u1", roles: ["Editor"] });
+    // biome-ignore lint/suspicious/noExplicitAny: Bun mock function
+    (useShellUser as any).mockReturnValue({ id: "u1", roles: ["Editor"] });
     const Editor = getEditor();
     render(<Editor target={TARGET} onClose={() => {}} />, { wrapper: Wrapper });
 
@@ -101,12 +90,8 @@ describe("TextContentEditor — role-based write-access", () => {
   });
 
   test("Admin-Role (publicstatus-Convention, ohne TenantAdmin-dual-Tag) sieht Read-only-Banner", () => {
-    // Apps die NUR `Admin` (ohne `TenantAdmin`) im JWT haben, kriegen
-    // read-only. Dokumentiert das Dual-Role-Pattern aus publicstatus:
-    // wer "Admin" allein hat (Memory `[Role-Naming-Drift]`), muss
-    // explizit auch "TenantAdmin" im JWT tragen damit der Editor
-    // schreiben darf.
-    vi.mocked(useShellUser).mockReturnValue({ id: "u1", roles: ["Admin"] });
+    // biome-ignore lint/suspicious/noExplicitAny: Bun mock function
+    (useShellUser as any).mockReturnValue({ id: "u1", roles: ["Admin"] });
     const Editor = getEditor();
     render(<Editor target={TARGET} onClose={() => {}} />, { wrapper: Wrapper });
 
@@ -115,7 +100,8 @@ describe("TextContentEditor — role-based write-access", () => {
   });
 
   test("Logged-out (useShellUser=undefined) sieht Read-only-Banner", () => {
-    vi.mocked(useShellUser).mockReturnValue(undefined);
+    // biome-ignore lint/suspicious/noExplicitAny: Bun mock function
+    (useShellUser as any).mockReturnValue(undefined);
     const Editor = getEditor();
     render(<Editor target={TARGET} onClose={() => {}} />, { wrapper: Wrapper });