@cosmicdrift/kumiko-bundled-features 0.174.0 → 0.176.0

package/src/text-content/__tests__/text-content.integration.test.ts

@@ -1,503 +0,0 @@
-import { afterAll, beforeAll, describe, expect, test } from "bun:test";
-import { type DbConnection, fetchOne, selectMany } from "@cosmicdrift/kumiko-framework/db";
-import { createEventsTable, eventsTable } from "@cosmicdrift/kumiko-framework/event-store";
-import {
-  createTestUser,
-  setupTestStack,
-  type TestStack,
-  TestUsers,
-  unsafeCreateEntityTable,
-} from "@cosmicdrift/kumiko-framework/stack";
-import { expectErrorIncludes } from "@cosmicdrift/kumiko-framework/testing";
-import { TextContentHandlers, TextContentQueries } from "../constants";
-import { createTextContentFeature } from "../feature";
-import { seedTextBlock } from "../seeding";
-import { type TextBlockRow, textBlockEntity, textBlocksTable } from "../table";
-
-let stack: TestStack;
-let db: DbConnection;
-
-const systemAdmin = TestUsers.systemAdmin;
-const tenantAdmin = createTestUser({ id: 2, roles: ["TenantAdmin"] });
-const normalUser = createTestUser({ id: 3 });
-
-const feature = createTextContentFeature();
-
-beforeAll(async () => {
-  stack = await setupTestStack({ features: [feature] });
-  db = stack.db;
-  await unsafeCreateEntityTable(db, textBlockEntity);
-  await createEventsTable(db);
-});
-
-afterAll(async () => {
-  await stack.cleanup();
-});
-
-describe("text-content :: write", () => {
-  test("TenantAdmin can create a text block", async () => {
-    const result = await stack.http.writeOk<Record<string, unknown>>(
-      TextContentHandlers.set,
-      {
-        slug: "imprint",
-        lang: "de",
-        title: "Impressum",
-        body: "## Angaben gemäß § 5 TMG\n\nMarc Frost",
-      },
-      tenantAdmin,
-    );
-    expect(result).toMatchObject({ slug: "imprint", lang: "de", isNew: true });
-  });
-
-  test("set is idempotent — second call updates existing block", async () => {
-    await stack.http.writeOk(
-      TextContentHandlers.set,
-      { slug: "privacy", lang: "de", title: "Datenschutz v1", body: "alt" },
-      tenantAdmin,
-    );
-    const result = await stack.http.writeOk<Record<string, unknown>>(
-      TextContentHandlers.set,
-      { slug: "privacy", lang: "de", title: "Datenschutz v2", body: "neu" },
-      tenantAdmin,
-    );
-    expect(result).toMatchObject({ slug: "privacy", isNew: false });
-
-    const fetched = await stack.http.queryOk<Record<string, unknown>>(
-      TextContentQueries.bySlug,
-      { slug: "privacy", lang: "de" },
-      tenantAdmin,
-    );
-    expect(fetched).toMatchObject({ title: "Datenschutz v2", body: "neu" });
-  });
-
-  test("SystemAdmin can create text blocks for SYSTEM_TENANT (without TenantAdmin role)", async () => {
-    // SystemAdmin ist global, hat KEIN implicit TenantAdmin auf seiner
-    // membership. Das Set-Handler-ACL muss SystemAdmin explizit erlauben
-    // sonst kann niemand Plattform-Texte (z.B. Impressum) setzen.
-    const result = await stack.http.writeOk<Record<string, unknown>>(
-      TextContentHandlers.set,
-      {
-        slug: "system-imprint-write",
-        lang: "de",
-        title: "System-Impressum",
-        body: "## Plattform\n\nMarc",
-      },
-      systemAdmin,
-    );
-    expect(result).toMatchObject({ slug: "system-imprint-write", isNew: true });
-  });
-
-  test("normal User cannot create text blocks (access denied)", async () => {
-    const error = await stack.http.writeErr(
-      TextContentHandlers.set,
-      { slug: "about", lang: "de", title: "Über", body: null },
-      normalUser,
-    );
-    expectErrorIncludes(error, "access_denied");
-  });
-
-  test("invalid slug rejected by schema validation", async () => {
-    const error = await stack.http.writeErr(
-      TextContentHandlers.set,
-      { slug: "Invalid Slug!", lang: "de", title: "x", body: null },
-      tenantAdmin,
-    );
-    expectErrorIncludes(error, "validation_error");
-  });
-
-  test("SystemAdmin can write with tenantIdOverride to a different tenant (legal-pages use-case)", async () => {
-    // Use-case: Plattform-App's Edit-UI lädt SystemAdmin der NICHT
-    // member auf SYSTEM_TENANT ist + lässt ihn dort schreiben.
-    // Ohne override würde der text auf systemAdmin.tenantId landen
-    // statt SYSTEM_TENANT — legal-pages-routes lesen ihn dann nie.
-    const targetTenant = createTestUser({ id: 99 }).tenantId;
-    const result = await stack.http.writeOk<Record<string, unknown>>(
-      TextContentHandlers.set,
-      {
-        slug: "override-target",
-        lang: "de",
-        title: "Override-Test",
-        body: "via tenantIdOverride",
-        tenantIdOverride: targetTenant,
-      },
-      systemAdmin,
-    );
-    expect(result).toMatchObject({ slug: "override-target", isNew: true });
-
-    // Beweis: text landed auf TARGET-tenant, nicht auf systemAdmin's
-    // eigenem tenant. Read mit denselben override returnt den block.
-    const read = await stack.http.queryOk<Record<string, unknown>>(
-      TextContentQueries.bySlug,
-      { slug: "override-target", lang: "de", tenantIdOverride: targetTenant },
-      systemAdmin,
-    );
-    expect(read).toMatchObject({ slug: "override-target", title: "Override-Test" });
-  });
-
-  test("SystemAdmin can UPDATE with tenantIdOverride (regression: stream-lookup must use override-tenantId, not user.tenantId)", async () => {
-    // Regression-Guard für 2026-05-04: bei tenantIdOverride MUSS auch der
-    // user-context für den event-store-executor remapped werden — sonst
-    // landet append() auf user.tenantId aber getStreamVersion (auf
-    // update) sucht ebenfalls auf user.tenantId, findet aber NUR den
-    // stream auf override-tenantId aus dem ersten write → version_conflict
-    // obwohl die projection-row da ist. Test der NUR create+override
-    // hatte den Bug nicht gefangen weil append=create ohne stream-lookup.
-    const targetTenant = createTestUser({ id: 77 }).tenantId;
-
-    // Schritt 1: create mit override.
-    await stack.http.writeOk<Record<string, unknown>>(
-      TextContentHandlers.set,
-      {
-        slug: "update-target",
-        lang: "de",
-        title: "v1",
-        body: "first",
-        tenantIdOverride: targetTenant,
-      },
-      systemAdmin,
-    );
-
-    // Schritt 2: UPDATE mit override (selbe slug+lang+target). Vor dem
-    // Fix: version_conflict. Nach dem Fix: clean update.
-    const result = await stack.http.writeOk<Record<string, unknown>>(
-      TextContentHandlers.set,
-      {
-        slug: "update-target",
-        lang: "de",
-        title: "v2",
-        body: "updated",
-        tenantIdOverride: targetTenant,
-      },
-      systemAdmin,
-    );
-    expect(result).toMatchObject({ slug: "update-target", isNew: false });
-
-    // Beweis: read returnt den UPDATED content auf TARGET-tenant.
-    const read = await stack.http.queryOk<Record<string, unknown>>(
-      TextContentQueries.bySlug,
-      { slug: "update-target", lang: "de", tenantIdOverride: targetTenant },
-      systemAdmin,
-    );
-    expect(read).toMatchObject({ slug: "update-target", title: "v2", body: "updated" });
-  });
-
-  test("TenantAdmin's tenantIdOverride attempt → 403 access_denied", async () => {
-    // Defense-in-Depth: override ist SystemAdmin-only. TenantAdmin
-    // darf NICHT auf andere tenants schreiben — sonst könnte ein
-    // Tenant-Admin von Tenant-A einfach Tenant-B's Impressum überschreiben.
-    const otherTenant = createTestUser({ id: 88 }).tenantId;
-    const error = await stack.http.writeErr(
-      TextContentHandlers.set,
-      {
-        slug: "evil-override",
-        lang: "de",
-        title: "evil",
-        body: null,
-        tenantIdOverride: otherTenant,
-      },
-      tenantAdmin,
-    );
-    expectErrorIncludes(error, "access_denied");
-  });
-
-  test("invalid lang rejected by schema validation", async () => {
-    const error = await stack.http.writeErr(
-      TextContentHandlers.set,
-      { slug: "ok", lang: "DEUTSCH", title: "x", body: null },
-      tenantAdmin,
-    );
-    expectErrorIncludes(error, "validation_error");
-  });
-});
-
-describe("text-content :: query (openToAll)", () => {
-  test("by-slug returns existing block for matching tenant/lang", async () => {
-    await seedTextBlock(db, {
-      tenantId: tenantAdmin.tenantId,
-      slug: "about",
-      lang: "de",
-      title: "Über uns",
-      body: "Wir sind ein Team.",
-    });
-    const result = await stack.http.queryOk<Record<string, unknown>>(
-      TextContentQueries.bySlug,
-      { slug: "about", lang: "de" },
-      tenantAdmin,
-    );
-    expect(result).toMatchObject({
-      slug: "about",
-      lang: "de",
-      title: "Über uns",
-      body: "Wir sind ein Team.",
-    });
-  });
-
-  test("by-slug returns null for missing block", async () => {
-    const result = await stack.http.queryOk<Record<string, unknown> | null>(
-      TextContentQueries.bySlug,
-      { slug: "does-not-exist", lang: "de" },
-      tenantAdmin,
-    );
-    expect(result).toBeFalsy();
-  });
-
-  test("by-slug isolates by tenant — other tenant's block invisible", async () => {
-    const otherTenant = createTestUser({
-      id: 99,
-      tenantId: "11111111-1111-4111-8111-111111111111",
-      roles: ["TenantAdmin"],
-    });
-    await seedTextBlock(db, {
-      tenantId: tenantAdmin.tenantId,
-      slug: "tenant-only",
-      lang: "de",
-      title: "Tenant-A only",
-    });
-    const result = await stack.http.queryOk<Record<string, unknown> | null>(
-      TextContentQueries.bySlug,
-      { slug: "tenant-only", lang: "de" },
-      otherTenant,
-    );
-    expect(result).toBeNull();
-  });
-
-  test("by-slug works for SystemAdmin scoped to system tenant", async () => {
-    await seedTextBlock(db, {
-      tenantId: systemAdmin.tenantId,
-      slug: "system-imprint",
-      lang: "de",
-      title: "System-Impressum",
-      body: "Plattform-Betreiber",
-    });
-    const result = await stack.http.queryOk<Record<string, unknown>>(
-      TextContentQueries.bySlug,
-      { slug: "system-imprint", lang: "de" },
-      systemAdmin,
-    );
-    expect(result).toMatchObject({ title: "System-Impressum" });
-  });
-});
-
-describe("text-content :: edge-cases", () => {
-  test("body=null roundtrip — set + query liefert null body zurück", async () => {
-    // Sinnvoller Use-Case: Tenant-Admin legt einen leeren Block als
-    // Stub an (z.B. während Onboarding) und befüllt ihn später.
-    await stack.http.writeOk<Record<string, unknown>>(
-      TextContentHandlers.set,
-      { slug: "stub-page", lang: "de", title: "Wird noch gefüllt", body: null },
-      tenantAdmin,
-    );
-    const fetched = await stack.http.queryOk<Record<string, unknown>>(
-      TextContentQueries.bySlug,
-      { slug: "stub-page", lang: "de" },
-      tenantAdmin,
-    );
-    expect(fetched).toMatchObject({ title: "Wird noch gefüllt", body: null });
-  });
-
-  test("body=null kann via update auf string gesetzt werden", async () => {
-    await stack.http.writeOk(
-      TextContentHandlers.set,
-      { slug: "later-filled", lang: "de", title: "Stub", body: null },
-      tenantAdmin,
-    );
-    await stack.http.writeOk(
-      TextContentHandlers.set,
-      { slug: "later-filled", lang: "de", title: "Stub", body: "Inhalt" },
-      tenantAdmin,
-    );
-    const fetched = await stack.http.queryOk<Record<string, unknown>>(
-      TextContentQueries.bySlug,
-      { slug: "later-filled", lang: "de" },
-      tenantAdmin,
-    );
-    expect(fetched!["body"]).toBe("Inhalt");
-  });
-
-  test("body knapp unter max-length (100k Zeichen) wird akzeptiert", async () => {
-    const justBelowMax = "a".repeat(100_000);
-    const result = await stack.http.writeOk<Record<string, unknown>>(
-      TextContentHandlers.set,
-      { slug: "max-length-ok", lang: "de", title: "Max", body: justBelowMax },
-      tenantAdmin,
-    );
-    expect(result).toMatchObject({ slug: "max-length-ok", isNew: true });
-  });
-
-  test("body über max-length (100k+1 Zeichen) → validation_error", async () => {
-    const overLimit = "a".repeat(100_001);
-    const error = await stack.http.writeErr(
-      TextContentHandlers.set,
-      { slug: "max-length-fail", lang: "de", title: "Over", body: overLimit },
-      tenantAdmin,
-    );
-    expectErrorIncludes(error, "validation_error");
-  });
-
-  test("body mit XSS-Payload wird unverändert gespeichert (Markdown-Renderer ist verantwortlich für Escaping)", async () => {
-    // Dokumentiertes Verhalten: text-content speichert Markdown 1:1.
-    // Konsumenten (z.B. legal-pages mit `marked`) müssen entscheiden ob
-    // sie sanitizen — siehe legal-pages/README.md XSS-Sektion.
-    const xssPayload = "## Title\n\n<script>alert('xss')</script>\n\nText.";
-    await stack.http.writeOk(
-      TextContentHandlers.set,
-      { slug: "xss-test", lang: "de", title: "XSS", body: xssPayload },
-      tenantAdmin,
-    );
-    const fetched = await stack.http.queryOk<Record<string, unknown>>(
-      TextContentQueries.bySlug,
-      { slug: "xss-test", lang: "de" },
-      tenantAdmin,
-    );
-    // Roundtrip: Body bleibt exakt was reingeschrieben wurde
-    expect(fetched!["body"]).toBe(xssPayload);
-  });
-
-  test("concurrent set auf gleichen (tenantId, slug, lang) — mindestens einer succeed", async () => {
-    // Race-Test: Zwei TenantAdmins (oder selber Admin von zwei Tabs)
-    // setzen gleichzeitig. fetchOne+update ist nicht atomar — wenn
-    // beide das selbe `existing` finden und beide updaten wollen,
-    // greift Optimistic-Locking via version-check im Executor.
-    // Erwartung: einer succeed, einer kann version_conflict werfen
-    // (oder beide succeed wenn sequenziell genug). Mindestens einer
-    // muss durchlaufen, sonst ist der Race-Pfad kaputt.
-    await stack.http.writeOk(
-      TextContentHandlers.set,
-      { slug: "race-test", lang: "de", title: "Initial", body: "v1" },
-      tenantAdmin,
-    );
-
-    const results = await Promise.allSettled([
-      stack.http.writeOk(
-        TextContentHandlers.set,
-        { slug: "race-test", lang: "de", title: "A", body: "from-a" },
-        tenantAdmin,
-      ),
-      stack.http.writeOk(
-        TextContentHandlers.set,
-        { slug: "race-test", lang: "de", title: "B", body: "from-b" },
-        tenantAdmin,
-      ),
-    ]);
-    const succeeded = results.filter((r) => r.status === "fulfilled").length;
-    expect(succeeded).toBeGreaterThanOrEqual(1);
-
-    // Egal welcher gewinnt — die Row ist nach beiden Aufrufen konsistent
-    // mit einem der beiden Werte (kein partial state).
-    const fetched = await stack.http.queryOk<Record<string, unknown>>(
-      TextContentQueries.bySlug,
-      { slug: "race-test", lang: "de" },
-      tenantAdmin,
-    );
-    const finalBody = fetched!["body"] as string;
-    expect(["from-a", "from-b", "v1"]).toContain(finalBody);
-  });
-});
-
-describe("text-content :: seedTextBlock", () => {
-  test('ifExists="update" overwrites existing row (same aggregate id)', async () => {
-    const a = await seedTextBlock(db, {
-      tenantId: tenantAdmin.tenantId,
-      slug: "seed-test",
-      lang: "de",
-      title: "v1",
-      body: "alt",
-    });
-    const b = await seedTextBlock(db, {
-      tenantId: tenantAdmin.tenantId,
-      slug: "seed-test",
-      lang: "de",
-      title: "v2",
-      body: "neu",
-      ifExists: "update",
-    });
-    expect(a.id).toBe(b.id);
-  });
-
-  test('default ifExists="skip" does not overwrite on re-boot', async () => {
-    const base = {
-      tenantId: tenantAdmin.tenantId,
-      slug: "seed-skip",
-      lang: "de",
-    };
-    await seedTextBlock(db, {
-      ...base,
-      title: "Initial",
-      body: "from seed",
-    });
-    await seedTextBlock(db, {
-      ...base,
-      title: "User edit",
-      body: "from admin",
-      ifExists: "update",
-    });
-    await seedTextBlock(db, {
-      ...base,
-      title: "Seed again",
-      body: "would overwrite",
-    });
-
-    const row = await fetchOne<TextBlockRow>(db, textBlocksTable, base);
-    expect(row).toMatchObject({ title: "User edit", body: "from admin", version: 2 });
-
-    const events = await selectMany(db, eventsTable, {
-      aggregateId: String(row!.id),
-    });
-    expect(events).toHaveLength(2);
-    expect(events.map((e) => e.type)).toEqual(["text-block.created", "text-block.updated"]);
-  });
-
-  // Drift-Documentation: seedTextBlock geht direkt durch den Executor
-  // OHNE slugSchema-Validation, set.write läuft DURCH die Validation.
-  // Folge: seedTextBlock akzeptiert Slugs mit ":" oder "/" (legal-pages
-  // Plattform-Seeds nutzen das für "page:index:hero.title" etc.), aber
-  // ein User-Edit derselben Block über set.write würde mit
-  // validation_error fail (regex `^[a-z0-9][a-z0-9-]*$`). Drift ist
-  // **bewusst** in V.1.3 — seedTextBlock ist system-trusted (boot-fixture,
-  // kein User-Input). V.1.4 plant ein echtes `folder`-Field statt
-  // `:`-Separator-im-Slug, dann fällt die Drift weg.
-  //
-  // Dieser Test pinnt den Status quo: Editor-Form via set.write rejected
-  // ":"-Slugs auch wenn seedTextBlock sie angelegt hat. Plus-Test
-  // verhindert dass jemand silent seedTextBlock-Validation hinzufügt
-  // ohne app-side seed-Slugs (z.B. legal-pages-Plattform-Seeds) zu
-  // konvertieren.
-  test("seedTextBlock + set.write drift: `:`-slugs sind seed-only, set.write rejected sie", async () => {
-    // Seed mit `:`-Slug funktioniert (legal-pages-Pattern)
-    const seeded = await seedTextBlock(db, {
-      tenantId: tenantAdmin.tenantId,
-      slug: "page:hero",
-      lang: "de",
-      title: "Seeded",
-      body: "from-seed",
-    });
-    expect(seeded.id).toBeDefined();
-
-    // Set.write auf demselben Slug → validation_error (kebab-only regex)
-    const error = await stack.http.writeErr(
-      TextContentHandlers.set,
-      { slug: "page:hero", lang: "de", title: "User-edit", body: "from-write" },
-      tenantAdmin,
-    );
-    expectErrorIncludes(error, "validation_error");
-  });
-
-  test("seedTextBlock + set.write parity: kebab-only Slugs durchlaufen beide Pfade", async () => {
-    // Inverse-Test: für kebab-only Slugs (`page-hero`) klappen beide
-    // Pfade. App-Builder die Edit-Form-fähige Seeds wollen, müssen
-    // kebab-only verwenden (siehe publicstatus/bin/seed-demo.ts).
-    await seedTextBlock(db, {
-      tenantId: tenantAdmin.tenantId,
-      slug: "page-hero",
-      lang: "de",
-      title: "Seeded",
-      body: "from-seed",
-    });
-    const result = await stack.http.writeOk<{ slug: string; lang: string }>(
-      TextContentHandlers.set,
-      { slug: "page-hero", lang: "de", title: "User-edit", body: "from-write" },
-      tenantAdmin,
-    );
-    expect(result.slug).toBe("page-hero");
-  });
-});

package/src/text-content/api.ts

@@ -1,86 +0,0 @@
-// TextContentApi — die Cross-Feature-Schnittstelle des text-content-
-// Features. Andere Features (z.B. legal-pages) importieren NUR den Type
-// hier und holen die Implementation runtime aus ctx.textContent.
-//
-// Pattern symmetrisch zu config: das Feature exportiert API-Type +
-// Factory, App-Bootstrap setzt die Instance via extraContext, consuming-
-// Features nutzen sie via require-Helper aus dem HandlerContext. So
-// bleiben Features durch Refactorings entkoppelt — wer textBlocksTable
-// umzieht oder die Query-Signatur ändert, muss nur die Factory anpassen.
-
-import { fetchOne } from "@cosmicdrift/kumiko-framework/bun-db";
-import type { DbConnection } from "@cosmicdrift/kumiko-framework/db";
-import type { SessionUser, TenantId } from "@cosmicdrift/kumiko-framework/engine";
-import { InternalError } from "@cosmicdrift/kumiko-framework/errors";
-import { type TextBlockRow, textBlocksTable } from "./table";
-
-export type TextBlock = {
-  readonly slug: string;
-  readonly lang: string;
-  readonly title: string;
-  readonly body: string | null;
-  readonly updatedAt: Date;
-};
-
-export type TextContentApi = {
-  /**
-   * Lookup eines TextBlocks by (tenantId, slug, lang). Null wenn nicht
-   * existiert. Tenant-Scope wird vom Caller mitgegeben — kein implicit
-   * tenantId aus Session, weil die API auch von Boot-Jobs ohne
-   * Session-User aufgerufen wird (siehe legal-pages bootCheck).
-   */
-  readonly getBlock: (args: {
-    tenantId: TenantId;
-    slug: string;
-    lang: string;
-  }) => Promise<TextBlock | null>;
-};
-
-// @wrapper-known semantic-alias
-export function createTextContentApi(db: DbConnection): TextContentApi {
-  return {
-    getBlock: async ({ tenantId, slug, lang }) => {
-      const row = await fetchOne<TextBlockRow>(db, textBlocksTable, { tenantId, slug, lang });
-      if (!row) return null;
-      return {
-        slug: row.slug,
-        lang: row.lang,
-        title: row.title,
-        body: row.body,
-        updatedAt: row.updatedAt,
-      };
-    },
-  };
-}
-
-// Single point of truth für "dieser Handler braucht text-content".
-// Wirft InternalError mit Wiring-Hinweis statt bare Error — so liest
-// die Debug-Session die exakte Boot-Lücke ("text-content feature not
-// wired into AppContext") statt eines generischen undefined-bugs.
-//
-// Pattern symmetrisch zu requireConfigResolver/requireConfigEncryption.
-// Akzeptiert HandlerContext + AppContext (Job-Context) — beide haben
-// SharedContextFields als Basis. Das narrowing geschieht via shape-check
-// auf das optionale `textContent`-Feld (kein Type-Lookup ins framework).
-export function requireTextContent(
-  ctx: { readonly textContent?: TextContentApi } | object,
-  callerName: string,
-): TextContentApi {
-  // @cast-boundary engine-bridge ctx ist Framework-Container (HandlerContext
-  // | AppContext), textContent kommt per extraContext aus dem App-Bootstrap.
-  const api = (ctx as { textContent?: TextContentApi }).textContent;
-  if (!api) {
-    throw new InternalError({
-      message:
-        `[${callerName}] ctx.textContent missing — App-Bootstrap muss ` +
-        `extraContext: { textContent: createTextContentApi(db) } setzen ` +
-        `(siehe text-content/README.md).`,
-    });
-  }
-  return api;
-}
-
-// Re-export für Test-Helper die selbst eine Session-User-scoped Variante
-// brauchen — der Standard-Use-Case (Routes/Boot-Jobs) gibt tenantId
-// explizit mit, deshalb ist getBlock session-agnostisch.
-export type { SessionUser };

package/src/text-content/changes.json

@@ -1,14 +0,0 @@
-[
-  {
-    "version": "0.165.0",
-    "type": "fix",
-    "title": "Legal pages seed: SYSTEM_USER instead of tenant user",
-    "detail": "Seed now runs as SYSTEM_USER and skips identical re-seeds — prevents unnecessary DB writes."
-  },
-  {
-    "version": "0.130.2",
-    "type": "fix",
-    "title": "Content-Tree + Config-Nav Sysadmin-Shell polish: - text-content: Leaf-Knoten tragen jetzt…",
-    "detail": "Content-Tree + Config-Nav Sysadmin-Shell polish: - text-content: Leaf-Knoten tragen jetzt ein `file`-Icon statt eines Dots; der Editor läuft auf der Page-Shell (`Form`-Primitive mit Card statt des entfernten `FormPanelShell`). - Sidebar-Nav bekommt ein Suchfeld, das den Baum live filtert (Treffer + ihre Ancestors bleiben, zugeklappte Ordner öffnen für die Suche). - Ordner-Knoten zeigen `folder-open` wenn ausgeklappt. - NAV_ICONS um `server`, `mail`, `lock`, `hash`, `download`, `folder-open` ergänzt — SMTP-/Config-Nav-Kinder (z.B. „Email-Versand\") rendern damit ein Icon statt blank. - Verschachtelte Provider-Ordner (Content-Tree) rendern ihre Kinder in einem `<ul>` (valides HTML + Einrück-Stufe pro Tiefe) statt `<li>`-in-`<li>`. - Platform-Overview: `user:query:user:list` in der Allowlist (behebt den Overview-Crash). - @cosmicdrift/kumiko-renderer-web@0.130.2 - @cosmicdrift/kumiko-renderer@0.130.2 - @cosmicdrift/kumiko-framework@0.130.2 - @cosmicdrift/kumiko-dispatcher-live@0.130.2 - @cosmicdrift/kumiko-headless@0.130.2"
-  }
-]

package/src/text-content/constants.ts

@@ -1,21 +0,0 @@
-// @runtime client
-// Feature name
-export const TEXT_CONTENT_FEATURE = "text-content" as const;
-
-// Qualified write handler names (QN format: scope:type:name)
-export const TextContentHandlers = {
-  set: "text-content:write:set",
-} as const;
-
-// Qualified query handler names (QN format: scope:type:name)
-export const TextContentQueries = {
-  bySlug: "text-content:query:by-slug",
-  byTenant: "text-content:query:by-tenant",
-} as const;
-
-// Error codes
-export const TextContentErrors = {
-  notFound: "text_block_not_found",
-  invalidSlug: "invalid_slug",
-  invalidLang: "invalid_lang",
-} as const;

package/src/text-content/feature.ts

@@ -1,53 +0,0 @@
-import { defineFeature } from "@cosmicdrift/kumiko-framework/engine";
-import { bySlugQuery } from "./handlers/by-slug.query";
-import { byTenantQuery } from "./handlers/by-tenant.query";
-import { setWrite } from "./handlers/set.write";
-import { textBlockEntity } from "./table";
-
-// text-content — generischer Container für statische Texte (Impressum,
-// Datenschutz, FAQ, About, ToS, Marketing-Snippets). Pro
-// (tenantId, slug, lang) genau ein Block. Inhalt ist Markdown — die
-// Konvertierung zu HTML übernehmen Consumer-Features wie legal-pages
-// (das opt-in obendrauf-Feature für Compliance-Pages).
-//
-// Opt-in: wer keine statischen Texte braucht (interne Tools), aktiviert
-// das Feature gar nicht. Wer es aktiviert, hat sofort CRUD + by-slug-
-// query + by-tenant-list-query — Routes/Render kommen pro Use-Case
-// (legal-pages, Visual-Tree, etc.).
-//
-// **Visual-Tree-Integration (V.1.2)**: r.treeActions deklariert die
-// Edit-Actions für Cross-Feature-Linking via buildTarget. Der Handle
-// wird via setup-export propagiert (Memory `[EventDef-Exports-Pattern]`),
-// sodass andere Features compile-time-typed Cross-Feature-Edits triggern
-// können — siehe legal-pages's TreeProvider der text-content:edit als
-// Target nutzt. Der Client-side TreeProvider lebt in `web/client-plugin.ts`.
-export function createTextContentFeature() {
-  return defineFeature("text-content", (r) => {
-    r.describe(
-      "Generic Markdown text store keyed by `(tenantId, slug, lang)` \u2014 one row per combination in the `read_text_blocks` entity table. Provides `text-content:write:set` (TenantAdmin upsert) and `text-content:query:by-slug` (anonymous-capable read); use `SYSTEM_TENANT_ID` as the tenant for app-wide texts such as imprint, privacy policy, or FAQ. Other features (e.g. `legal-pages`) read blocks without a direct code import via the `createTextContentApi` / `requireTextContent` extraContext pattern.",
-    );
-    r.uiHints({
-      displayLabel: "Text Content \u00b7 Markdown Store",
-      category: "content",
-      recommended: false,
-    });
-    r.entity("text-block", textBlockEntity);
-
-    const handlers = {
-      set: r.writeHandler(setWrite),
-    };
-
-    const queries = {
-      bySlug: r.queryHandler(bySlugQuery),
-      byTenant: r.queryHandler(byTenantQuery),
-    };
-
-    const treeHandle = r.treeActions({
-      edit: { args: { slug: "" as string, lang: "" as string } },
-      list: {},
-      create: { args: { folder: "" as string } },
-    });
-
-    return { handlers, queries, treeHandle };
-  });
-}