@cosmicdrift/kumiko-bundled-features 0.328.0 → 0.329.0

package/src/custom-fields/constants.ts

@@ -1,82 +0,0 @@
-// @runtime client
-// custom-fields bundle constants — feature-name + event-names.
-//
-// Spec: kumiko-platform/docs/plans/features/custom-fields.md
-// Sprint plan: kumiko-platform/docs/plans/custom-fields-sprint.md
-
-export const CUSTOM_FIELDS_FEATURE_NAME = "custom-fields";
-
-// Qualified handler names (QN format: scope:type:name). Mirror text-
-// content's Handler/Queries object pattern — Clients (z.B. die
-// CustomFieldsFormSection web-component) referenzieren über das Object
-// statt magic-strings.
-export const CustomFieldsHandlers = {
-  defineTenantField: "custom-fields:write:define-tenant-field",
-  defineSystemField: "custom-fields:write:define-system-field",
-  deleteTenantField: "custom-fields:write:delete-tenant-field",
-  deleteSystemField: "custom-fields:write:delete-system-field",
-  setCustomField: "custom-fields:write:set-custom-field",
-  clearCustomField: "custom-fields:write:clear-custom-field",
-} as const;
-
-export const CustomFieldsQueries = {
-  fieldDefinitionList: "custom-fields:query:field-definition:list",
-} as const;
-
-// Name the web component registers under in ExtensionSectionsProvider —
-// apps reference it in the screen schema via:
-// { kind: "extension", title, contributesToFormSubmit: true,
-//   component: { react: { __component: CUSTOM_FIELDS_FORM_EXTENSION_NAME } } }
-export const CUSTOM_FIELDS_FORM_EXTENSION_NAME = "CustomFieldsFormSection";
-
-// Entity-CRUD auto-events for the `field-definition` entity. registry.ts emits
-// these as `${entityName}.created`/`.updated` (dot form) — they do NOT run
-// through r.defineEvent/toKebab, so the dot MUST stay.
-export const FIELD_DEFINITION_AGGREGATE_TYPE = "field-definition";
-export const FIELD_DEFINITION_CREATED_EVENT = "field-definition.created";
-export const FIELD_DEFINITION_UPDATED_EVENT = "field-definition.updated";
-// Qualified at registration via r.defineEvent — final name is
-// `custom-fields:event:field-definition-deleted`. Short-name MUST be kebab
-// (no dots): qualifyEntityName runs toKebab which collapses dots to dashes.
-export const FIELD_DEFINITION_DELETED_EVENT = "field-definition-deleted";
-
-// Custom-field-VALUE events. Live auf host-aggregate stream (ES-Option-B).
-// Short-names werden via r.defineEvent qualified zu `custom-fields:event:
-// custom-field-set` etc. (qualifyEntityName runs toKebab which collapses dots
-// to dashes — so the short-name MUST already be in dash form, otherwise
-// handler-built strings won't match the registry key).
-export const CUSTOM_FIELD_SET_EVENT = "custom-field-set";
-export const CUSTOM_FIELD_CLEARED_EVENT = "custom-field-cleared";
-
-// Extension-name für r.useExtension("customFields", "<entity>") — registriert
-// dass eine host-entity Custom-Fields haben darf.
-export const CUSTOM_FIELDS_EXTENSION = "customFields";
-
-// Default-RBAC der Value-Write- und List-Pfade. Apps mit eigenem Rollen-
-// Vokabular (publicstatus: "Admin"/"Editor" statt "TenantAdmin"/
-// "TenantMember") überschreiben via createCustomFieldsFeature({
-// valueWriteRoles, fieldDefinitionListRoles }) — sonst sind die hart
-// verdrahteten Bundle-QNs, die die CustomFieldsFormSection dispatcht,
-// für jeden App-User access_denied.
-export const DEFAULT_VALUE_WRITE_ROLES = ["TenantAdmin", "TenantMember"] as const;
-export const DEFAULT_FIELD_DEFINITION_LIST_ROLES = ["TenantAdmin"] as const;
-// Default-RBAC of the definition-CRUD triad (define-/update-/delete-tenant-field,
-// #2296). Apps with their own role vocabulary override via
-// createCustomFieldsFeature({ fieldDefinitionWriteRoles }) — otherwise those three
-// hard-wired handler QNs are access_denied for every app-user without a
-// "TenantAdmin" role (same Role-Naming-Drift as DEFAULT_VALUE_WRITE_ROLES above).
-export const DEFAULT_FIELD_DEFINITION_WRITE_ROLES = ["TenantAdmin"] as const;
-
-// Field-type union — identisch zu Stammfeld-Field-Type-System (Spec Z.59-73:
-// `Identisch zu Entity-Feld-Typen`). Builder-Reuse-Promise: was `r.field.X()`
-// kann, kann eine Custom-Field-Definition auch.
-export const SUPPORTED_FIELD_TYPES = [
-  "text",
-  "number",
-  "boolean",
-  "date",
-  "enum",
-  "money",
-  "embedded",
-] as const;
-export type SupportedFieldType = (typeof SUPPORTED_FIELD_TYPES)[number];

package/src/custom-fields/db/queries/__tests__/unsafe-read-retrying.integration.test.ts

@@ -1,94 +0,0 @@
-// field-access.ts, quota.ts, user-data-rights.ts and retention.ts read
-// custom-field rows through unsafeReadRetrying; this proves the retry fires
-// per call site using a real captured driver error. applyRetentionRemovals
-// (an UPDATE) stays out of scope — unretried by design.
-
-import { beforeAll, describe, expect, test } from "bun:test";
-import { captureClosedConnectionError } from "@cosmicdrift/kumiko-framework/testing";
-import { selectSerializedFieldDefinition } from "../field-access";
-import { countTenantFieldDefinitions } from "../quota";
-import { selectHostRowsWithCustomFields } from "../retention";
-import { selectCustomFieldsHostRows, selectFieldDefinitionsForEntity } from "../user-data-rights";
-
-let closedConnectionError: unknown;
-
-beforeAll(async () => {
-  closedConnectionError = await captureClosedConnectionError();
-});
-
-type FakeClient = {
-  unsafe: (sql: string, params?: readonly unknown[]) => Promise<readonly unknown[]>;
-  begin: () => never;
-  options: { max: number };
-  calls: number;
-};
-
-function fakeClient(failures: unknown[], row: Record<string, unknown>): FakeClient {
-  const remaining = [...failures];
-  const client: FakeClient = {
-    calls: 0,
-    options: { max: 1 },
-    unsafe: async () => {
-      client.calls++;
-      const err = remaining.shift();
-      if (err) throw err;
-      return [row];
-    },
-    begin: () => {
-      throw new Error("not used in test");
-    },
-  };
-  return client;
-}
-
-describe("custom-fields db/queries — closed-connection retry", () => {
-  test("selectSerializedFieldDefinition retries once through db.unsafeRaw and returns the row", async () => {
-    const raw = fakeClient([closedConnectionError], { serialized_field: "sf1" });
-    const result = await selectSerializedFieldDefinition(raw, "t1", "entity", "field");
-    expect(result).toBe("sf1");
-    expect(raw.calls).toBe(2);
-  });
-
-  test("countTenantFieldDefinitions retries once through db.unsafeRaw and returns the count", async () => {
-    const raw = fakeClient([closedConnectionError], { n: 3 });
-    const result = await countTenantFieldDefinitions(raw, "t1");
-    expect(result).toBe(3);
-    expect(raw.calls).toBe(2);
-  });
-
-  test("selectCustomFieldsHostRows retries once and returns rows", async () => {
-    const db = fakeClient([closedConnectionError], { id: "1", custom_fields: {} });
-    const rows = await selectCustomFieldsHostRows(db as never, "host_table", "user_id", "u1", "t1");
-    expect(rows).toHaveLength(1);
-    expect(db.calls).toBe(2);
-  });
-
-  test("selectFieldDefinitionsForEntity retries once and returns rows", async () => {
-    const db = fakeClient([closedConnectionError], { field_key: "k1", serialized_field: "sf" });
-    const rows = await selectFieldDefinitionsForEntity(db as never, "entity", "t1");
-    expect(rows).toHaveLength(1);
-    expect(rows[0]?.field_key).toBe("k1");
-    expect(db.calls).toBe(2);
-  });
-
-  test("selectHostRowsWithCustomFields retries once and returns rows", async () => {
-    const db = fakeClient([closedConnectionError], {
-      id: "1",
-      modified_at: null,
-      custom_fields: {},
-    });
-    const rows = await selectHostRowsWithCustomFields(db as never, "host_table", "t1");
-    expect(rows).toHaveLength(1);
-    expect(db.calls).toBe(2);
-  });
-
-  test("gives up after exhausting pool-bounded retries (max: 1 → 3 total calls)", async () => {
-    const raw = fakeClient([closedConnectionError, closedConnectionError, closedConnectionError], {
-      serialized_field: "sf1",
-    });
-    await expect(selectSerializedFieldDefinition(raw, "t1", "entity", "field")).rejects.toBe(
-      closedConnectionError,
-    );
-    expect(raw.calls).toBe(3);
-  });
-});

package/src/custom-fields/db/queries/field-access.ts

@@ -1,17 +0,0 @@
-import { unsafeReadRetrying } from "@cosmicdrift/kumiko-framework/bun-db";
-import type { DbRunner } from "@cosmicdrift/kumiko-framework/db";
-
-export async function selectSerializedFieldDefinition(
-  runner: DbRunner,
-  tenantId: string,
-  entityName: string,
-  fieldKey: string,
-): Promise<unknown | null> {
-  const rows = await unsafeReadRetrying(
-    runner,
-    "SELECT serialized_field FROM read_custom_field_definitions WHERE entity_name = $1 AND field_key = $2 AND tenant_id = $3 LIMIT 1",
-    [entityName, fieldKey, tenantId],
-  );
-  const first = (rows as ReadonlyArray<Record<string, unknown>>)[0]; // @cast-boundary db-row
-  return first ? (first["serialized_field"] ?? null) : null;
-}

package/src/custom-fields/db/queries/projection.ts

@@ -1,84 +0,0 @@
-import { asRawClient } from "@cosmicdrift/kumiko-framework/bun-db";
-import type { DbRunner } from "@cosmicdrift/kumiko-framework/db";
-import type { TenantId } from "@cosmicdrift/kumiko-framework/engine";
-
-function quoteTable(tableName: string): string {
-  return `"${tableName.replace(/"/g, '""')}"`;
-}
-
-function bindJsonbParam(value: unknown): { sql: string; bound: unknown } {
-  // Scalar JSON primitives can't bind directly to ::jsonb — Postgres rejects a
-  // bound boolean/number with "cannot cast type boolean/integer to jsonb" (and
-  // Bun.SQL infers boolean[] candidates). Route them through ::text::jsonb with
-  // a JSON-encoded literal. Objects/arrays/strings already bind as ::jsonb.
-  if (typeof value === "boolean" || typeof value === "number") {
-    return { sql: "$1::text::jsonb", bound: JSON.stringify(value) };
-  }
-  // JSON.stringify throws on bigint; its decimal string is a valid JSON number literal.
-  if (typeof value === "bigint") {
-    return { sql: "$1::text::jsonb", bound: value.toString() };
-  }
-  return { sql: "$1::jsonb", bound: value };
-}
-
-// Security invariant: aggregateId is a global row UUID, so without the tenant_id
-// filter tenant A could mutate tenant B's row by its UUID (cf. removeCustomFieldKeyForTenant).
-export async function setCustomFieldValue(
-  db: DbRunner,
-  tableName: string,
-  fieldKey: string,
-  value: unknown,
-  aggregateId: string,
-  tenantId: TenantId,
-): Promise<void> {
-  const tbl = quoteTable(tableName);
-  const escapedKey = fieldKey.replace(/'/g, "''");
-  const jsonb = bindJsonbParam(value);
-  await asRawClient(db).unsafe(
-    `UPDATE ${tbl} SET custom_fields = jsonb_set(custom_fields, '{${escapedKey}}', ${jsonb.sql}, true) WHERE id = $2 AND tenant_id = $3`,
-    [jsonb.bound, aggregateId, tenantId],
-  );
-}
-
-export async function clearCustomFieldKey(
-  db: DbRunner,
-  tableName: string,
-  fieldKey: string,
-  aggregateId: string,
-  tenantId: TenantId,
-): Promise<void> {
-  const tbl = quoteTable(tableName);
-  await asRawClient(db).unsafe(
-    `UPDATE ${tbl} SET custom_fields = custom_fields - $1 WHERE id = $2 AND tenant_id = $3`,
-    [fieldKey, aggregateId, tenantId],
-  );
-}
-
-// Tenant-scoped orphan-cleanup: removes the jsonb key only from the deleting
-// tenant's rows. This is the default path for tenant-field deletions — without
-// the tenant_id filter, deleting tenant A's field strips the same kebab key
-// from every tenant's rows (cross-tenant data loss).
-export async function removeCustomFieldKeyForTenant(
-  db: DbRunner,
-  tableName: string,
-  fieldKey: string,
-  tenantId: TenantId,
-): Promise<void> {
-  const tbl = quoteTable(tableName);
-  await asRawClient(db).unsafe(
-    `UPDATE ${tbl} SET custom_fields = custom_fields - $1 WHERE tenant_id = $2`,
-    [fieldKey, tenantId],
-  );
-}
-
-// Cross-tenant cleanup: strips the key from EVERY tenant's rows. Only valid for
-// system-scope field-definition deletions (the field applied to all tenants).
-// Never call this for a tenant-scoped deletion — use removeCustomFieldKeyForTenant.
-export async function removeCustomFieldKeyFromAllTenants(
-  db: DbRunner,
-  tableName: string,
-  fieldKey: string,
-): Promise<void> {
-  const tbl = quoteTable(tableName);
-  await asRawClient(db).unsafe(`UPDATE ${tbl} SET custom_fields = custom_fields - $1`, [fieldKey]);
-}

package/src/custom-fields/db/queries/quota.ts

@@ -1,20 +0,0 @@
-import { unsafeReadRetrying } from "@cosmicdrift/kumiko-framework/bun-db";
-import type { DbRunner } from "@cosmicdrift/kumiko-framework/db";
-
-export async function countTenantFieldDefinitions(
-  runner: DbRunner,
-  tenantId: string,
-): Promise<number> {
-  // Active definitions only — delete soft-deletes (the deterministic stream is
-  // kept so a re-define can restore it), so isDeleted rows must not consume quota.
-  const rowsResult = await unsafeReadRetrying(
-    runner,
-    "SELECT COUNT(*)::int AS n FROM read_custom_field_definitions WHERE tenant_id = $1 AND is_deleted = FALSE",
-    [tenantId],
-  );
-  const rows = rowsResult as ReadonlyArray<Record<string, unknown>>; // @cast-boundary db-row
-  const first = rows[0];
-  if (!first) return 0;
-  const n = first["n"];
-  return typeof n === "number" ? n : Number.parseInt(String(n ?? 0), 10);
-}

package/src/custom-fields/db/queries/retention.ts

@@ -1,43 +0,0 @@
-import { asRawClient, unsafeReadRetrying } from "@cosmicdrift/kumiko-framework/bun-db";
-import type { DbRunner } from "@cosmicdrift/kumiko-framework/db";
-
-export async function selectHostRowsWithCustomFields(
-  db: DbRunner,
-  tableName: string,
-  tenantId: string,
-): Promise<readonly unknown[]> {
-  const quoted = `"${tableName.replace(/"/g, '""')}"`;
-  const rowsResult = await unsafeReadRetrying(
-    db,
-    `SELECT id, modified_at, custom_fields FROM ${quoted} WHERE tenant_id = $1 AND custom_fields IS NOT NULL`,
-    [tenantId],
-  );
-  return Array.isArray(rowsResult) ? rowsResult : [];
-}
-
-export async function applyRetentionRemovals(
-  db: DbRunner,
-  tableName: string,
-  deleteKeys: readonly string[],
-  anonymizeKeys: readonly string[],
-  rowId: string,
-): Promise<void> {
-  const quoted = `"${tableName.replace(/"/g, '""')}"`;
-  // Atomic per-row jsonb edit instead of read-modify-write of the whole
-  // object: delete-keys are dropped (`- $1::text[]`), anonymize-keys are set
-  // to JSON null via a merge patch. Operating on the live row value preserves
-  // a concurrent set-custom-field on any *other* key — no lost update.
-  await asRawClient(db).unsafe(
-    `UPDATE ${quoted} SET custom_fields = CASE
-       WHEN jsonb_typeof(custom_fields) = 'object' THEN
-         (custom_fields - $1::text[])
-         || COALESCE(
-              (SELECT jsonb_object_agg(k, 'null'::jsonb) FROM unnest($2::text[]) AS k),
-              '{}'::jsonb
-            )
-       ELSE custom_fields
-     END
-     WHERE id = $3`,
-    [deleteKeys, anonymizeKeys, rowId],
-  );
-}

package/src/custom-fields/db/queries/user-data-rights.ts

@@ -1,39 +0,0 @@
-import { unsafeReadRetrying } from "@cosmicdrift/kumiko-framework/bun-db";
-import type { DbRunner } from "@cosmicdrift/kumiko-framework/db";
-
-function quoteTable(tableName: string): string {
-  return `"${tableName.replace(/"/g, '""')}"`;
-}
-
-function quoteColumn(columnName: string): string {
-  return `"${columnName.replace(/"/g, '""')}"`;
-}
-
-export async function selectCustomFieldsHostRows(
-  db: DbRunner,
-  tableName: string,
-  userIdColumn: string,
-  userId: string,
-  tenantId: string,
-): Promise<readonly unknown[]> {
-  const tbl = quoteTable(tableName);
-  const userCol = quoteColumn(userIdColumn);
-  const rowsResult = await unsafeReadRetrying(
-    db,
-    `SELECT id, custom_fields FROM ${tbl} WHERE ${userCol} = $1 AND tenant_id = $2`,
-    [userId, tenantId],
-  );
-  return Array.isArray(rowsResult) ? rowsResult : [];
-}
-
-export async function selectFieldDefinitionsForEntity(
-  db: DbRunner,
-  entityName: string,
-  tenantId: string,
-): Promise<readonly { field_key: string; serialized_field: unknown }[]> {
-  return unsafeReadRetrying(
-    db,
-    "SELECT field_key, serialized_field FROM read_custom_field_definitions WHERE entity_name = $1 AND tenant_id = $2",
-    [entityName, tenantId],
-  ) as Promise<readonly { field_key: string; serialized_field: unknown }[]>;
-}

package/src/custom-fields/entity.ts

@@ -1,112 +0,0 @@
-import {
-  createBooleanField,
-  createEntity,
-  createNumberField,
-  createTextField,
-} from "@cosmicdrift/kumiko-framework/engine";
-
-// fieldDefinition — Tenant- oder System-scoped Custom-Field-Definition.
-//
-// **Tenant-Scope:** `tenantId`-Base-Column wird vom Framework automatisch
-// gesetzt. Bei system-scope-Definitionen ist `tenantId = SYSTEM_TENANT_ID`;
-// bei tenant-scope der current-tenant. Beide leben in derselben Tabelle,
-// Scope ergibt sich aus dem tenantId-Wert (no separate `scope`-column).
-//
-// **Conflict-Rule:** pro (entityName, fieldKey) darf nur eine Definition
-// existieren — entweder system oder tenant, nicht beide. Resolution beim
-// Read = `WHERE tenantId IN (SYSTEM_TENANT_ID, <current-tenant>)`.
-// Conflict-Check ist write-handler-side, NICHT DB-constraint (DB hat
-// natürliche UNIQUE auf (tenantId, entityName, fieldKey) durch Aggregate-
-// ID-Konstruktion).
-//
-// **Spec-Drift**: Spec Z.40-54 hat eine separate `custom_field_value`-
-// Tabelle. Plan-Doc v2 hat das durch jsonb-on-host-entity ersetzt
-// (D2-pur-Storage). Hier definieren wir NUR die definition-Entity; values
-// landen in `read_<entity>.customFields` jsonb via MSP (B2).
-//
-// **Was hier NICHT als Stammfeld-Spalte landet**:
-//   - `defaultValue`, `options`, `fieldAccess`, `label` — alles in
-//     `serializedField` jsonb gepackt (Builder-Reuse: dehydrierter
-//     r.field.X()-Output). Spec Z.18-38 listet sie als separate Spalten,
-//     aber Builder-Reuse macht das redundant — der serialized Builder
-//     enthält alle diese Aspekte type-safe.
-//   - `version` (optimistic-lock) — ES-redundant, wir nutzen aggregate-
-//     stream-version (Sprint E-Pattern).
-//   - `createdAt/updatedAt/createdBy/updatedBy` — automatic via base-
-//     columns + events.
-export const fieldDefinitionEntity = createEntity({
-  table: "read_custom_field_definitions",
-  description:
-    "One custom-field definition: the host entity it extends, the field key, its type and required/searchable flags, a display order, and the serialized field builder that carries the type options, default value and labels. Rows owned by the system tenant apply to every tenant; all others belong to the tenant that defined them.",
-  // softDelete is required, NOT cosmetic: the aggregate-id is deterministic
-  // (uuidv5(tenantId|entityName|fieldKey)), so deleting a definition leaves a
-  // (created+deleted) event stream under that id. A hard delete would force the
-  // next define to create() at version 0 onto that stream → version_conflict —
-  // a deleted (entity, fieldKey) could never be re-defined. With softDelete the
-  // define handlers resurrect via restore()+update() (see define-or-resurrect).
-  // NB: `retention.strategy` below is the data-retention purge policy, a
-  // SEPARATE knob from this executor flag — it does not drive executor.delete.
-  softDelete: true,
-  // B1.5 retention-policy — fieldDefinitions sind tenant-Schema-Metadaten,
-  // keine PII-Daten. Lange Retention für Audit (Compliance kann "wann hat
-  // Tenant das Feld definiert / geändert / gelöscht" fragen).
-  //
-  // 10-Jahre keepFor ist konservativer Default; per-Tenant kann via
-  // tenantRetentionOverride für eigene Edge-Cases gesetzt werden
-  // (z.B. shorter für test-tenants).
-  retention: {
-    keepFor: "10y",
-    strategy: "softDelete",
-  },
-  fields: {
-    // Ziel-Entity-Name, für die dieses Field definiert wird (z.B. "property",
-    // "customer"). Max 64 char passt zu Kumiko's entity-name-Convention.
-    entityName: createTextField({
-      required: true,
-      maxLength: 64,
-      personal: false,
-      reason: "technical_reference",
-    }),
-
-    // Field-Key (z.B. "internalNumber", "vipFlag") — kebab-case oder camelCase
-    // erlaubt; UI-rendering nutzt label statt fieldKey.
-    fieldKey: createTextField({
-      required: true,
-      maxLength: 64,
-      personal: false,
-      reason: "technical_reference",
-    }),
-
-    // Field-Type aus dem SUPPORTED_FIELD_TYPES-Set. Validiert via Zod im
-    // write-handler.
-    type: createTextField({
-      required: true,
-      maxLength: 16,
-      personal: false,
-      reason: "technical_reference",
-    }),
-
-    // Required-Flag — wird beim Entity-Write gegen den value gecheckt
-    // (Stammfeld-identische Semantik, Spec-Promise Z.4).
-    required: createBooleanField({ required: true }),
-
-    // Searchable-Flag — wenn true, contribuiert das Field zum Search-Doc
-    // via F3 search-payload-extension.
-    searchable: createBooleanField({ required: true }),
-
-    // UI-Display-Order. Tenant kann seine Felder via UI sortieren.
-    displayOrder: createNumberField({ required: true, integer: true }),
-
-    // Builder-Reuse: serialisierter r.field.X(opts)-Output als jsonb.
-    // Beinhaltet type-options (enum-values, money-currency, embedded-schema),
-    // defaultValue, fieldAccess, i18n-labels. Beim Write-Validation
-    // dehydriert der handler dies zurück zu einer r.field.X()-Instanz und
-    // nutzt deren .schema für value-Validation.
-    serializedField: createTextField({
-      required: true,
-      maxLength: 65536,
-      personal: false,
-      reason: "technical_reference",
-    }),
-  },
-});

package/src/custom-fields/events.ts

@@ -1,25 +0,0 @@
-import * as z from "zod";
-
-// Domain-Events für custom-field-VALUES. customField.set + .cleared leben
-// auf der host-aggregate stream (Plan-Doc v2 ES-Option-B: customField-Events
-// auf demselben Stream wie die host-entity's eigene Events).
-//
-// Aggregate-Type im Event ist der host-entity-name (z.B. "property"),
-// aggregate-id ist die host-entity-row-id (z.B. property-uuid). So konsumieren
-// die customFields-MSPs nur die Events ihrer wired-entities (filtered via
-// aggregate-type-match an der jeweiligen consumer-side-MSP-Registration).
-
-export const customFieldSetSchema = z.object({
-  fieldKey: z.string().min(1).max(64),
-  // Every set carries its value (custom fields hold no PII, #972) — replay
-  // reproduces the projection fully. Stays optional at the type layer only
-  // because z.unknown() is inherently optional; the apply side treats
-  // `value === undefined` as an anomaly and warns.
-  value: z.unknown().optional(),
-});
-export type CustomFieldSetPayload = z.infer<typeof customFieldSetSchema>;
-
-export const customFieldClearedSchema = z.object({
-  fieldKey: z.string().min(1).max(64),
-});
-export type CustomFieldClearedPayload = z.infer<typeof customFieldClearedSchema>;

package/src/custom-fields/executor.ts

@@ -1,10 +0,0 @@
-import { createEntityExecutor } from "@cosmicdrift/kumiko-framework/engine";
-import { fieldDefinitionEntity } from "./entity";
-
-// Single field-definition executor shared by the four define/delete handlers.
-// createEntityExecutor is side-effect-free; instantiating it once keeps the
-// table+executor pair in one place instead of rebuilding it per handler module.
-export const { executor: fieldDefinitionExecutor } = createEntityExecutor(
-  "field-definition",
-  fieldDefinitionEntity,
-);