@cosmicdrift/kumiko-bundled-features 0.307.0 → 0.308.0

package/src/notes-history/schemas.ts

@@ -1,4 +1,4 @@
-import { z } from "zod";
+import * as z from "zod";
 
 // entityType/entityId are app-supplied — mirror tags' NO_PIPE guard isn't
 // needed here since note-entry has no deterministic aggregate-id derived

package/src/notes-history/web/notes-section.tsx

@@ -48,7 +48,7 @@ export function NotesSection({
   readonly entityName: string;
   readonly entityId: string | null;
 }): ReactNode {
-  const { Banner, Button, Card, Grid, Text, Input } = usePrimitives();
+  const { Banner, Button, Grid, Heading, Text, Input } = usePrimitives();
   const t = useTranslation();
   const dispatcher = useDispatcher();
   const enabled = entityId !== null;
@@ -117,43 +117,44 @@ export function NotesSection({
     })();
   };
 
+  // No own Card/SectionCard here — the host (ExtensionSectionMount) already
+  // frames this whole component in one card; a nested card would double the
+  // border/padding. "New note" and "History" are sub-headers within that
+  // single frame instead.
   return (
     <Grid columns={1} testId="notes-section">
-      <Card slots={{ title: t("notesHistory.section.newNoteTitle") }} testId="notes-section-new">
-        <Grid columns={1}>
-          <Input
-            kind="textarea"
-            id="notes-section-draft"
-            name="draft"
-            value={draft}
-            onChange={setDraft}
-            onSubmitShortcut={() => {
-              if (!busy && draft.trim() !== "") addNote();
-            }}
-          />
-          <div className="flex items-center justify-between gap-2">
-            <Text variant="small">{t("notesHistory.section.shortcutHint")}</Text>
-            <Button
-              variant="primary"
-              disabled={busy || draft.trim() === ""}
-              onClick={() => addNote()}
-              testId="notes-section-add"
-            >
-              {busy ? t("notesHistory.section.working") : t("notesHistory.section.add")}
-            </Button>
-          </div>
-          {errorKey !== null && (
-            <Banner variant="error" testId="notes-section-action-error">
-              <Text>{t(errorKey)}</Text>
-            </Banner>
-          )}
-        </Grid>
-      </Card>
+      <div className="flex flex-col gap-3" data-testid="notes-section-new">
+        <Heading variant="section">{t("notesHistory.section.newNoteTitle")}</Heading>
+        <Input
+          kind="textarea"
+          id="notes-section-draft"
+          name="draft"
+          value={draft}
+          onChange={setDraft}
+          onSubmitShortcut={() => {
+            if (!busy && draft.trim() !== "") addNote();
+          }}
+        />
+        <div className="flex items-center justify-between gap-2">
+          <Text variant="small">{t("notesHistory.section.shortcutHint")}</Text>
+          <Button
+            variant="primary"
+            disabled={busy || draft.trim() === ""}
+            onClick={() => addNote()}
+            testId="notes-section-add"
+          >
+            {busy ? t("notesHistory.section.working") : t("notesHistory.section.add")}
+          </Button>
+        </div>
+        {errorKey !== null && (
+          <Banner variant="error" testId="notes-section-action-error">
+            <Text>{t(errorKey)}</Text>
+          </Banner>
+        )}
+      </div>
 
-      <Card
-        slots={{ title: t("notesHistory.section.historyTitle") }}
-        testId="notes-section-history"
-      >
+      <div className="flex flex-col gap-3" data-testid="notes-section-history">
+        <Heading variant="section">{t("notesHistory.section.historyTitle")}</Heading>
         {rows.length === 0 ? (
           <Text variant="small">{t("notesHistory.section.empty")}</Text>
         ) : (
@@ -178,7 +179,7 @@ export function NotesSection({
             ))}
           </div>
         )}
-      </Card>
+      </div>
     </Grid>
   );
 }

package/src/personal-access-tokens/feature.ts

@@ -11,6 +11,7 @@ import { type CreatePatOptions, createPatCreateHandler } from "./handlers/create
 import { listPatQuery } from "./handlers/list.query";
 import { revokePatWrite } from "./handlers/revoke.write";
 import { PAT_FEATURE_I18N, patScopeOptionTranslations } from "./i18n";
+import { PAT_REVOKED_EVENT_SHORT, patRevokedSchema } from "./pat-revoked-event";
 import { createPatResolver } from "./resolver";
 import { apiTokenEntity } from "./schema/api-token";
 import type { PatScopeConfig } from "./scopes";
@@ -114,6 +115,15 @@ export function createPersonalAccessTokensFeature(
       piiEncryptedOnWrite: true,
     });
 
+    // Custom domain-event for cross-instance access-invalidation,
+    // mirroring sessions' SESSION_REVOKED_EVENT_SHORT. r.defineEvent
+    // registers the schema so ctx.unsafeAppendEvent (revoke) enforces it at
+    // append time. revoke-for-user.ts appends via the low-level append()
+    // instead (needs to anchor on SYSTEM_TENANT_ID) — same guarantee via a
+    // different path. No projection: the payload IS the read, consumed
+    // directly off the event-store NOTIFY.
+    r.defineEvent(PAT_REVOKED_EVENT_SHORT, patRevokedSchema, { piiFields: "none" });
+
     // Password-change auto-revoke — mirrors sessions' own
     // autoRevokeOnPasswordChange postSave hook, including WHY it's a
     // late-bind callback rather than direct ctx.db use: user:write:user:update

package/src/personal-access-tokens/handlers/available-scopes.query.ts

@@ -1,5 +1,5 @@
 import { defineQueryHandler } from "@cosmicdrift/kumiko-framework/engine";
-import { z } from "zod";
+import * as z from "zod";
 import type { PatScopeConfig } from "../scopes";
 
 // Returns the app-declared scope domains ({name, label, canWrite}) so the mint

package/src/personal-access-tokens/handlers/create.write.ts

@@ -8,7 +8,7 @@ import {
 import { UnprocessableError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
 import { generateId } from "@cosmicdrift/kumiko-framework/utils";
 import { Temporal } from "temporal-polyfill";
-import { z } from "zod";
+import * as z from "zod";
 import { encryptForDirectWrite, verifyPassword } from "../../shared";
 import { UserQueries } from "../../user";
 import { PAT_DEFAULT_EXPIRES_IN_DAYS, PatErrors } from "../constants";

package/src/personal-access-tokens/handlers/list.query.ts

@@ -1,6 +1,6 @@
 import { selectMany } from "@cosmicdrift/kumiko-framework/bun-db";
 import { definePagedQueryHandler, MAX_LIST_LIMIT } from "@cosmicdrift/kumiko-framework/engine";
-import { z } from "zod";
+import * as z from "zod";
 import { decryptStoredPii } from "../../shared";
 import { isExpiredAt } from "../expiry";
 import { apiTokenTable } from "../schema/api-token";

package/src/personal-access-tokens/handlers/revoke.write.ts

@@ -1,9 +1,11 @@
 import { updateMany } from "@cosmicdrift/kumiko-framework/bun-db";
 import { defineWriteHandler } from "@cosmicdrift/kumiko-framework/engine";
 import { UnprocessableError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
+import { generateId } from "@cosmicdrift/kumiko-framework/utils";
 import { Temporal } from "temporal-polyfill";
-import { z } from "zod";
+import * as z from "zod";
 import { PatErrors } from "../constants";
+import { PAT_REVOKED_AGGREGATE_TYPE, PAT_REVOKED_EVENT_QN } from "../pat-revoked-event";
 import { apiTokenTable } from "../schema/api-token";
 
 // Revoke one of the caller's own tokens. Ownership is enforced in the WHERE
@@ -30,7 +32,21 @@ export const revokePatWrite = defineWriteHandler({
       { revokedAt: Temporal.Now.instant() },
       { id: event.payload.id, userId: event.user.id, revokedAt: null },
     );
-    if (updated.length > 0) return { isSuccess: true, data: { id: event.payload.id } };
+    if (updated.length > 0) {
+      // Lightweight append alongside the direct-write above, mirroring
+      // sessions' revoke.write.ts. NOT a lifecycle event for
+      // store_api_tokens (that table stays an unmanaged direct-write store,
+      // see feature.ts). Without this, the access-invalidation consumer
+      // never hears about the revoke and an already-open SSE stream
+      // authenticated by this exact token survives it.
+      await ctx.unsafeAppendEvent({
+        aggregateId: generateId(),
+        aggregateType: PAT_REVOKED_AGGREGATE_TYPE,
+        type: PAT_REVOKED_EVENT_QN,
+        payload: { userId: event.user.id, tokenIds: [event.payload.id] },
+      });
+      return { isSuccess: true, data: { id: event.payload.id } };
+    }
     return writeFailure(
       new UnprocessableError(PatErrors.ownershipDenied, {
         i18nKey: "errors.ownershipDenied",

package/src/personal-access-tokens/index.ts

@@ -10,6 +10,13 @@ export {
 } from "./feature";
 export type { CreatePatOptions, PatMfaVerifyResult } from "./handlers/create.write";
 export { hashPatToken, mintPatToken } from "./hash";
+export {
+  PAT_REVOKED_AGGREGATE_TYPE,
+  PAT_REVOKED_EVENT_QN,
+  PAT_REVOKED_EVENT_SHORT,
+  type PatRevokedPayload,
+  patRevokedSchema,
+} from "./pat-revoked-event";
 export { createPatResolver } from "./resolver";
 export { revokeAllPatTokensForUser } from "./revoke-for-user";
 export { apiTokenEntity, apiTokenTable } from "./schema/api-token";

package/src/personal-access-tokens/pat-revoked-event.ts

@@ -0,0 +1,23 @@
+import * as z from "zod";
+
+// Lightweight custom event appended alongside the direct-write updateMany()
+// in revoke.write.ts / revoke-for-user.ts (mirrors sessions'
+// session-revoked-event.ts). apiTokenTable itself stays an unmanaged
+// direct-write store (see feature.ts) — this event is NOT a CRUD/lifecycle
+// event for that table and carries no projection. Its only job is to give
+// the access-invalidation consumer something to LISTEN for, keyed by the
+// affected userId, so a revoked PAT's open SSE stream closes.
+export const PAT_REVOKED_EVENT_SHORT = "pat-revoked" as const;
+export const PAT_REVOKED_EVENT_QN = "personal-access-tokens:event:pat-revoked" as const;
+
+// Own aggregate type, decoupled from apiTokenEntity's implicit
+// "api-token" — each revoke action mints a fresh aggregate id (no
+// predecessor to satisfy, no version_conflict against concurrent revokes).
+export const PAT_REVOKED_AGGREGATE_TYPE = "api-token-revocation" as const;
+
+export const patRevokedSchema = z.object({
+  userId: z.string().min(1),
+  tokenIds: z.array(z.uuid()).min(1),
+});
+
+export type PatRevokedPayload = z.infer<typeof patRevokedSchema>;

package/src/personal-access-tokens/revoke-for-user.ts

@@ -1,6 +1,14 @@
 import { updateMany } from "@cosmicdrift/kumiko-framework/bun-db";
 import type { DbRunner } from "@cosmicdrift/kumiko-framework/db";
+import { SYSTEM_TENANT_ID } from "@cosmicdrift/kumiko-framework/engine";
+import { append } from "@cosmicdrift/kumiko-framework/event-store";
+import { generateId } from "@cosmicdrift/kumiko-framework/utils";
 import { Temporal } from "temporal-polyfill";
+import {
+  PAT_REVOKED_AGGREGATE_TYPE,
+  PAT_REVOKED_EVENT_QN,
+  patRevokedSchema,
+} from "./pat-revoked-event";
 import { apiTokenTable } from "./schema/api-token";
 
 // Cross-tenant revoke: password-change and MFA-enable/disable are account-
@@ -14,5 +22,28 @@ export async function revokeAllPatTokensForUser(db: DbRunner, userId: string): P
     { revokedAt: Temporal.Now.instant() },
     { userId, revokedAt: null },
   );
+
+  // Same reasoning as sessionMassRevoker's append — this raw
+  // callback has no dispatcher ctx to call unsafeAppendEvent from, so it
+  // uses the low-level append() directly, anchored on SYSTEM_TENANT_ID like
+  // sessions' cross-tenant writes. Without it, the access-invalidation
+  // consumer never hears about a password-change/MFA-toggle/forget-subject
+  // PAT revoke and any already-open SSE stream on those tokens survives it.
+  if (updated.length > 0) {
+    const payload = patRevokedSchema.parse({
+      userId,
+      tokenIds: updated.map((row) => row.id),
+    });
+    await append(db, {
+      aggregateId: generateId(),
+      aggregateType: PAT_REVOKED_AGGREGATE_TYPE,
+      tenantId: SYSTEM_TENANT_ID,
+      expectedVersion: 0,
+      type: PAT_REVOKED_EVENT_QN,
+      payload,
+      metadata: { userId },
+    });
+  }
+
   return updated.length;
 }

package/src/rate-limiting/__tests__/rate-limiting.integration.test.ts

@@ -13,7 +13,7 @@ import {
   TestUsers,
   testTenantId,
 } from "@cosmicdrift/kumiko-framework/stack";
-import { z } from "zod";
+import * as z from "zod";
 import { createRateLimitingFeature } from "../feature";
 
 let stack: TestStack;

package/src/rate-limiting/handlers/status.query.ts

@@ -1,6 +1,6 @@
 import { defineQueryHandler } from "@cosmicdrift/kumiko-framework/engine";
 import { UnprocessableError } from "@cosmicdrift/kumiko-framework/errors";
-import { z } from "zod";
+import * as z from "zod";
 import { RateLimitErrors } from "../constants";
 import { bucketAccessDenied } from "./bucket-access";
 

package/src/readiness/handlers/status.query.ts

@@ -4,7 +4,7 @@ import {
 } from "@cosmicdrift/kumiko-bundled-features/config";
 import { requireSecretsContext } from "@cosmicdrift/kumiko-bundled-features/secrets";
 import { defineQueryHandler } from "@cosmicdrift/kumiko-framework/engine";
-import { z } from "zod";
+import * as z from "zod";
 import { ReadinessQueries } from "../constants";
 
 export type ReadinessMissingSecret = { readonly key: string };

package/src/secrets/feature.ts

@@ -7,7 +7,7 @@ import {
 import { InternalError } from "@cosmicdrift/kumiko-framework/errors";
 import { SETTINGS_HUB_I18N } from "@cosmicdrift/kumiko-framework/i18n";
 import type { SecretsContext } from "@cosmicdrift/kumiko-framework/secrets";
-import { z } from "zod";
+import * as z from "zod";
 import { DEFAULT_SECRETS_ACCESS } from "./constants";
 import { createDeleteHandler } from "./handlers/delete.write";
 import { createListHandler } from "./handlers/list.query";

package/src/secrets/handlers/delete.write.ts

@@ -1,6 +1,6 @@
 import { type AccessRule, defineWriteHandler } from "@cosmicdrift/kumiko-framework/engine";
 import { failNotFound } from "@cosmicdrift/kumiko-framework/errors";
-import { z } from "zod";
+import * as z from "zod";
 import { DEFAULT_SECRETS_ACCESS } from "../constants";
 import { requireSecretsContext } from "../feature";
 

package/src/secrets/handlers/list.query.ts

@@ -1,5 +1,5 @@
 import { type AccessRule, defineQueryHandler } from "@cosmicdrift/kumiko-framework/engine";
-import { z } from "zod";
+import * as z from "zod";
 import { DEFAULT_SECRETS_ACCESS } from "../constants";
 import { tenantSecretsTable } from "../table";
 

package/src/secrets/handlers/set.write.ts

@@ -1,5 +1,5 @@
 import { type AccessRule, defineWriteHandler } from "@cosmicdrift/kumiko-framework/engine";
-import { z } from "zod";
+import * as z from "zod";
 import { DEFAULT_SECRETS_ACCESS } from "../constants";
 import { requireSecretsContext } from "../feature";
 

package/src/secrets/secrets-context.ts

@@ -34,7 +34,7 @@ import {
   withDekCache,
 } from "@cosmicdrift/kumiko-framework/secrets";
 import { generateId } from "@cosmicdrift/kumiko-framework/utils";
-import { z } from "zod";
+import * as z from "zod";
 import { selectTenantSecretEnvelope } from "./db/queries/read";
 import {
   type StoredEnvelope,

package/src/seo/handlers/seo-config.query.ts

@@ -1,5 +1,5 @@
 import { defineQueryHandler } from "@cosmicdrift/kumiko-framework/engine";
-import { z } from "zod";
+import * as z from "zod";
 import { SEO_CONFIG_QN } from "../constants";
 
 // Public read of the seo feature's own tenant-config values, for the

package/src/sessions/handlers/detail.query.ts

@@ -1,6 +1,6 @@
 import { fetchOne } from "@cosmicdrift/kumiko-framework/bun-db";
 import { access, defineQueryHandler } from "@cosmicdrift/kumiko-framework/engine";
-import { z } from "zod";
+import * as z from "zod";
 import { decryptStoredPii } from "../../shared";
 import { userSessionTable } from "../schema/user-session";
 

package/src/sessions/handlers/list.query.ts

@@ -4,7 +4,7 @@ import {
   definePagedQueryHandler,
   MAX_LIST_LIMIT,
 } from "@cosmicdrift/kumiko-framework/engine";
-import { z } from "zod";
+import * as z from "zod";
 import { decryptStoredPii } from "../../shared";
 import { userSessionTable } from "../schema/user-session";
 

package/src/sessions/handlers/mine.query.ts

@@ -1,6 +1,6 @@
 import { selectMany } from "@cosmicdrift/kumiko-framework/bun-db";
 import { definePagedQueryHandler } from "@cosmicdrift/kumiko-framework/engine";
-import { z } from "zod";
+import * as z from "zod";
 import { decryptStoredPii } from "../../shared";
 import { userSessionTable } from "../schema/user-session";
 

package/src/sessions/handlers/revoke-all-for-user.write.ts

@@ -5,7 +5,7 @@ import { UnprocessableError, writeFailure } from "@cosmicdrift/kumiko-framework/
 import { append } from "@cosmicdrift/kumiko-framework/event-store";
 import { generateId } from "@cosmicdrift/kumiko-framework/utils";
 import { Temporal } from "temporal-polyfill";
-import { z } from "zod";
+import * as z from "zod";
 import { userSessionTable } from "../schema/user-session";
 import {
   SESSION_REVOKED_AGGREGATE_TYPE,

package/src/sessions/handlers/revoke-all-others.write.ts

@@ -3,7 +3,7 @@ import { defineWriteHandler } from "@cosmicdrift/kumiko-framework/engine";
 import { UnprocessableError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
 import { generateId } from "@cosmicdrift/kumiko-framework/utils";
 import { Temporal } from "temporal-polyfill";
-import { z } from "zod";
+import * as z from "zod";
 import { SessionErrors } from "../constants";
 import { userSessionTable } from "../schema/user-session";
 import { SESSION_REVOKED_AGGREGATE_TYPE, SESSION_REVOKED_EVENT_QN } from "../session-revoked-event";

package/src/sessions/handlers/revoke.write.ts

@@ -3,7 +3,7 @@ import { defineWriteHandler } from "@cosmicdrift/kumiko-framework/engine";
 import { UnprocessableError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
 import { generateId } from "@cosmicdrift/kumiko-framework/utils";
 import { Temporal } from "temporal-polyfill";
-import { z } from "zod";
+import * as z from "zod";
 import { SessionErrors } from "../constants";
 import { userSessionTable } from "../schema/user-session";
 import { SESSION_REVOKED_AGGREGATE_TYPE, SESSION_REVOKED_EVENT_QN } from "../session-revoked-event";

package/src/sessions/session-callbacks.ts

@@ -97,12 +97,36 @@ export function createSessionCallbacks(opts: SessionCallbacksOptions): SessionCa
       // original timestamp. Double-revoke races land here via logout +
       // switch-tenant on the same sid. (Password-change uses a different
       // callback — sessionMassRevoker — and isn't in scope for this guard.)
-      await updateMany(
+      const result = await updateMany<{ userId: string }>(
         db,
         userSessionTable,
         { revokedAt: Temporal.Now.instant() },
         { id: sid, revokedAt: null },
       );
+
+      // This is the ONLY caller of sessionRevoker — logout and tenant-switch
+      // — so it's also the only source of streamScope: "revoked-sessions".
+      // Without this append, a live SSE stream on this exact sid outlives its
+      // own logout because the access-invalidation consumer never hears
+      // about it — same gap sessionMassRevoker closed for
+      // password-change.
+      const revoked = result[0];
+      if (revoked) {
+        const payload = sessionRevokedSchema.parse({
+          userId: revoked.userId,
+          sessionIds: [sid],
+          streamScope: "revoked-sessions",
+        });
+        await append(db, {
+          aggregateId: generateId(),
+          aggregateType: SESSION_REVOKED_AGGREGATE_TYPE,
+          tenantId: SYSTEM_TENANT_ID,
+          expectedVersion: 0,
+          type: SESSION_REVOKED_EVENT_QN,
+          payload,
+          metadata: { userId: revoked.userId },
+        });
+      }
     },
 
     // kumiko-lint-ignore complexity-budget session check + lastSeen refresh on hot path

package/src/sessions/session-revoked-event.ts

@@ -1,4 +1,4 @@
-import { z } from "zod";
+import * as z from "zod";
 
 // Lightweight custom event appended alongside the direct-write
 // updateMany() in revoke.write.ts / revoke-all-others.write.ts /
@@ -27,6 +27,11 @@ export const sessionRevokedSchema = z.object({
   // The caller's own session a "revoke all others" write spared. Optional so
   // events appended before it existed still replay.
   keptSessionId: z.uuid().optional(),
+  // Set only by the raw sessionRevoker callback (logout / tenant-switch) —
+  // tells the access-invalidation consumer to close exactly `sessionIds`
+  // instead of the userwide default every other source keeps using.
+  // Optional so events appended before it existed still replay unscoped.
+  streamScope: z.literal("revoked-sessions").optional(),
 });
 
 export type SessionRevokedPayload = z.infer<typeof sessionRevokedSchema>;

package/src/shared/__tests__/row-bound-grant.integration.test.ts

@@ -10,7 +10,7 @@ import { executeRawQuery } from "@cosmicdrift/kumiko-framework/db";
 import { defineFeature } from "@cosmicdrift/kumiko-framework/engine";
 import { UnprocessableError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
 import { setupTestStack, type TestStack, testTenantId } from "@cosmicdrift/kumiko-framework/stack";
-import { z } from "zod";
+import * as z from "zod";
 import { redeemRowBoundGrant, signRowBoundGrant } from "../row-bound-grant";
 
 const TABLE = "row_bound_grant_demo";

package/src/step-dispatcher/mail-runner.ts

@@ -2,7 +2,7 @@
 // Production wiring (mail-foundation transport) is a follow-up; the
 // default impl throws so a missing setMailRunner is loud, not silent.
 
-import { z } from "zod";
+import * as z from "zod";
 
 export const mailSpecSchema = z.object({
   to: z.union([z.string(), z.array(z.string())]),

package/src/step-dispatcher/webhook-runner.ts

@@ -1,7 +1,7 @@
 // Webhook execution logic — separated from feature.ts so tests can stub
 // the fetch without touching the MSP wiring.
 
-import { z } from "zod";
+import * as z from "zod";
 
 export const webhookSpecSchema = z.object({
   url: z.string(),

package/src/subscription-mollie/feature.ts

@@ -42,7 +42,7 @@
 import type { SubscriptionProviderPlugin } from "@cosmicdrift/kumiko-bundled-features/billing-foundation";
 import { defineFeature, type FeatureDefinition } from "@cosmicdrift/kumiko-framework/engine";
 import { createMollieClient } from "@mollie/api-client";
-import { z } from "zod";
+import * as z from "zod";
 import { MOLLIE_PROVIDER_NAME, SUBSCRIPTION_MOLLIE_FEATURE } from "./constants";
 import { createMollieCheckoutSession, type MolliePriceConfig } from "./plugin-methods";
 import { type MollieClientShape, verifyAndParseMollieWebhook } from "./verify-webhook";

package/src/subscription-stripe/feature.ts

@@ -38,7 +38,7 @@ import {
   defineFeature,
   type FeatureDefinition,
 } from "@cosmicdrift/kumiko-framework/engine";
-import { z } from "zod";
+import * as z from "zod";
 import {
   STRIPE_API_KEY_CONFIG,
   STRIPE_BILLING_LIVE_CONFIG,

package/src/tags/schemas.ts

@@ -1,4 +1,4 @@
-import { z } from "zod";
+import * as z from "zod";
 
 export const createTagPayloadSchema = z.object({
   name: z.string().trim().min(1).max(64),

package/src/template-resolver/handlers/by-slug.query.ts

@@ -3,7 +3,7 @@ import {
   crossTenantOverrideDenied,
   defineQueryHandler,
 } from "@cosmicdrift/kumiko-framework/engine";
-import { z } from "zod";
+import * as z from "zod";
 import { TEXT_BLOCK_KIND } from "../constants";
 import { type TemplateResourceRow, templateResourcesTable } from "../table";
 

package/src/template-resolver/handlers/by-tenant.query.ts

@@ -4,7 +4,7 @@ import {
   crossTenantOverrideDenied,
   defineQueryHandler,
 } from "@cosmicdrift/kumiko-framework/engine";
-import { z } from "zod";
+import * as z from "zod";
 import { TEXT_BLOCK_KIND } from "../constants";
 import { type TemplateResourceRow, templateResourcesTable } from "../table";
 

package/src/template-resolver/handlers/collection-item.query.ts

@@ -4,7 +4,7 @@ import {
   crossTenantOverrideDenied,
   defineQueryHandler,
 } from "@cosmicdrift/kumiko-framework/engine";
-import { z } from "zod";
+import * as z from "zod";
 import {
   type CollectionEntryRow,
   collectionStore,

package/src/template-resolver/handlers/collection-list.query.ts

@@ -5,7 +5,7 @@ import {
   crossTenantOverrideDenied,
   defineQueryHandler,
 } from "@cosmicdrift/kumiko-framework/engine";
-import { z } from "zod";
+import * as z from "zod";
 import {
   type CollectionEntryRow,
   collectionStore,

package/src/template-resolver/handlers/collection-set.write.ts

@@ -6,7 +6,7 @@ import {
   type TenantId,
 } from "@cosmicdrift/kumiko-framework/engine";
 import { writeFailure } from "@cosmicdrift/kumiko-framework/errors";
-import { z } from "zod";
+import * as z from "zod";
 import {
   type CollectionEntryRow,
   collectionStore,

package/src/template-resolver/handlers/find-by-id.query.ts

@@ -1,6 +1,6 @@
 import { fetchOne } from "@cosmicdrift/kumiko-framework/bun-db";
 import { defineQueryHandler } from "@cosmicdrift/kumiko-framework/engine";
-import { z } from "zod";
+import * as z from "zod";
 import { type TemplateResourceRow, templateResourcesTable } from "../table";
 
 // Admin-Lookup für UI-Edit-Flow. Returnt das raw Template inkl. draft/

package/src/template-resolver/handlers/list.query.ts

@@ -1,6 +1,6 @@
 import { selectMany } from "@cosmicdrift/kumiko-framework/bun-db";
 import { defineQueryHandler } from "@cosmicdrift/kumiko-framework/engine";
-import { z } from "zod";
+import * as z from "zod";
 import { RENDER_KINDS, TEMPLATE_STATUSES } from "../constants";
 import { type TemplateResourceRow, templateResourcesTable } from "../table";
 

package/src/template-resolver/handlers/set.write.ts

@@ -6,7 +6,7 @@ import {
   type TenantId,
 } from "@cosmicdrift/kumiko-framework/engine";
 import { writeFailure } from "@cosmicdrift/kumiko-framework/errors";
-import { z } from "zod";
+import * as z from "zod";
 import { TEMPLATE_KINDS, TEXT_BLOCK_KIND } from "../constants";
 import { type TemplateResourceRow, templateResourcesTable } from "../table";
 import { contentFormatSchema, executor, folderSchema, localeSchema, slugSchema } from "./shared";

package/src/template-resolver/handlers/shared.ts

@@ -1,5 +1,5 @@
 import { createEventStoreExecutor } from "@cosmicdrift/kumiko-framework/db";
-import { z } from "zod";
+import * as z from "zod";
 import { CONTENT_FORMATS, TEMPLATE_STATUSES, UPSERT_KINDS } from "../constants";
 import { templateResourceEntity, templateResourcesTable } from "../table";