@cosmicdrift/kumiko-bundled-features 0.35.0 → 0.38.0

package/src/auth-email-password/handlers/login.write.ts

@@ -4,7 +4,6 @@ import {
   type SessionUser,
   type TenantId,
 } from "@cosmicdrift/kumiko-framework/engine";
-import { UnprocessableError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
 import { parseRoles } from "@cosmicdrift/kumiko-framework/utils";
 import { z } from "zod";
 import { USER_STATUS, UserQueries } from "../../user";
@@ -12,60 +11,17 @@ import { parseAuthUserRow } from "../auth-user-row";
 import {
   AUTH_LOCKOUT_DEFAULT_DURATION_MINUTES,
   AUTH_LOCKOUT_DEFAULT_MAX_FAILED_ATTEMPTS,
-  AuthErrors,
 } from "../constants";
+import {
+  accountLocked,
+  accountRestricted,
+  emailNotVerified,
+  invalidCredentials,
+  noMembership,
+} from "../errors";
 import { clearLockoutState, getLockoutState, recordFailedAttempt } from "../lockout-store";
 import { verifyPassword } from "../password-hashing";
 
-function invalidCredentials() {
-  return writeFailure(
-    new UnprocessableError(AuthErrors.invalidCredentials, {
-      i18nKey: "auth.errors.invalidCredentials",
-    }),
-  );
-}
-
-function noMembership() {
-  return writeFailure(
-    new UnprocessableError(AuthErrors.noMembership, {
-      i18nKey: "auth.errors.noMembership",
-    }),
-  );
-}
-
-function emailNotVerified() {
-  return writeFailure(
-    new UnprocessableError(AuthErrors.emailNotVerified, {
-      i18nKey: "auth.errors.emailNotVerified",
-    }),
-  );
-}
-
-function accountLocked(retryAfterSeconds: number) {
-  return writeFailure(
-    new UnprocessableError(AuthErrors.accountLocked, {
-      i18nKey: "auth.errors.accountLocked",
-      // Seconds until auto-unlock — UI renders a countdown, clients can
-      // schedule a retry. Rounded up so the UI never shows 0 while the
-      // lock is still active.
-      details: { retryAfterSeconds },
-    }),
-  );
-}
-
-// S2.U6 — DSGVO Art. 18 Account-Freeze. Distinct error code (nicht zu
-// invalid_credentials collapsen) damit UI klar sagen kann "Account ist
-// pausiert, hier klicken zum Aufheben". User weiss schon dass sein Konto
-// restricted ist (er hat selbst die Restriction gesetzt), also kein
-// Enumeration-Leak.
-function accountRestricted() {
-  return writeFailure(
-    new UnprocessableError(AuthErrors.accountRestricted, {
-      i18nKey: "auth.errors.accountRestricted",
-    }),
-  );
-}
-
 export type LoginHandlerOptions = {
   // When true, a valid (email + password) login fails with email_not_verified
   // if the user row's emailVerified flag is false. Enumeration-leak is

package/src/auth-email-password/handlers/reset-password.write.ts

@@ -2,6 +2,7 @@ import { defineWriteHandler } from "@cosmicdrift/kumiko-framework/engine";
 import { UnprocessableError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
 import { z } from "zod";
 import { AuthErrors } from "../constants";
+import { invalidResetToken } from "../errors";
 import { hashPassword } from "../password-hashing";
 import { verifyResetToken } from "../reset-token";
 import { runConfirmTokenFlow } from "./confirm-token-flow";
@@ -10,14 +11,6 @@ export type ResetPasswordOptions = {
   readonly hmacSecret: string;
 };
 
-function invalidToken() {
-  return writeFailure(
-    new UnprocessableError(AuthErrors.invalidResetToken, {
-      i18nKey: "auth.errors.invalidResetToken",
-    }),
-  );
-}
-
 // Confirm step of the reset flow. Token-verify happens inline; the
 // post-verify pipeline (burn, load user, memberships, try-all-tenants,
 // burn-release-on-failure) lives in confirm-token-flow to stay in sync
@@ -45,12 +38,12 @@ export function createResetPasswordHandler(opts: ResetPasswordOptions) {
       // the same invalid_reset_token error — a probing caller can't
       // distinguish tampered from stale from random-string.
       const verify = verifyResetToken(event.payload.token, opts.hmacSecret);
-      if (!verify.ok) return invalidToken();
+      if (!verify.ok) return invalidResetToken();
 
       return runConfirmTokenFlow(ctx, verify.userId, verify.expiresAtMs, {
         purpose: "reset",
         redisRequiredMessage: "password-reset requires ctx.redis to enforce token single-use",
-        invalidToken,
+        invalidToken: invalidResetToken,
         buildChanges: async () => ({
           passwordHash: await hashPassword(event.payload.newPassword),
         }),

package/src/auth-email-password/handlers/signup-confirm.write.ts

@@ -26,17 +26,13 @@ import {
   type SessionUser,
   type TenantId,
 } from "@cosmicdrift/kumiko-framework/engine";
-import {
-  InternalError,
-  UnprocessableError,
-  writeFailure,
-} from "@cosmicdrift/kumiko-framework/errors";
+import { InternalError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
 import { generateUniqueName } from "@cosmicdrift/kumiko-framework/random";
 import { generateId } from "@cosmicdrift/kumiko-framework/utils";
 import { z } from "zod";
 // kumiko-lint-ignore cross-feature-import signup-confirm reads tenants.key for slug-uniqueness check (TOCTOU + DB-unique-index zusammen)
 import { tenantTable } from "../../tenant/schema/tenant";
-import { AuthErrors } from "../constants";
+import { invalidSignupToken } from "../errors";
 // kumiko-lint-ignore cross-feature-import provisioning needs cross-feature seeding helpers
 import { INITIAL_SIGNUP_ROLES, provisionSignupAccount } from "../seeding";
 import {
@@ -63,14 +59,6 @@ export type SignupConfirmData = {
   readonly tenantKey: string;
 };
 
-function invalidSignupToken() {
-  return writeFailure(
-    new UnprocessableError(AuthErrors.invalidSignupToken, {
-      i18nKey: "auth.errors.invalidSignupToken",
-    }),
-  );
-}
-
 export function createSignupConfirmHandler() {
   return defineWriteHandler<"signup-confirm", typeof SignupConfirmSchema, SignupConfirmData>({
     name: "signup-confirm",

package/src/auth-email-password/handlers/verify-email.write.ts

@@ -2,6 +2,7 @@ import { defineWriteHandler } from "@cosmicdrift/kumiko-framework/engine";
 import { UnprocessableError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
 import { z } from "zod";
 import { AuthErrors } from "../constants";
+import { invalidVerificationToken } from "../errors";
 import { verifyVerificationToken } from "../verification-token";
 import { runConfirmTokenFlow } from "./confirm-token-flow";
 
@@ -15,14 +16,6 @@ const VerifyEmailSchema = z.object({
 
 export type VerifyEmailData = { readonly kind: "verified" } | { readonly kind: "already-verified" };
 
-function invalidToken() {
-  return writeFailure(
-    new UnprocessableError(AuthErrors.invalidVerificationToken, {
-      i18nKey: "auth.errors.invalidVerificationToken",
-    }),
-  );
-}
-
 // Sets user.emailVerified = true on a valid token. Idempotent via the
 // `alreadyDone` short-circuit — when the row already reads verified
 // (reached through another flow), we skip the write but keep the burn
@@ -44,12 +37,12 @@ export function createVerifyEmailHandler(opts: VerifyEmailOptions) {
       }
 
       const verify = verifyVerificationToken(event.payload.token, opts.hmacSecret);
-      if (!verify.ok) return invalidToken();
+      if (!verify.ok) return invalidVerificationToken();
 
       return runConfirmTokenFlow<VerifyEmailData>(ctx, verify.userId, verify.expiresAtMs, {
         purpose: "verify",
         redisRequiredMessage: "email-verification requires ctx.redis to enforce token single-use",
-        invalidToken,
+        invalidToken: invalidVerificationToken,
         buildChanges: async () => ({ emailVerified: true }),
         successData: { kind: "verified" },
         alreadyDone: {

package/src/auth-email-password/index.ts

@@ -1,3 +1,12 @@
+// Factory für app-spezifische Auth-Mail-Configs. Baut passwordReset,
+// emailVerification, signup und invite Setups gegen mailSender + Render-
+// Funktionen — eliminiert Duplikate zwischen kumiko-studio, publicstatus
+// und solon (jede App hatte identische send*Email-Wrapper kopiert).
+export {
+  type AuthMailerConfig,
+  type CreateAuthMailerConfigArgs,
+  createAuthMailerConfig,
+} from "./auth-mailer";
 export { AUTH_EMAIL_PASSWORD_FEATURE, AuthErrors, AuthHandlers } from "./constants";
 // Default-HTML-Renderer für die Reset-Password + Verify-Email Mails.
 // Apps wiren die `sendResetEmail` / `sendVerificationEmail` callbacks

package/src/auth-email-password/web/__tests__/tenant-switcher.test.tsx

@@ -111,3 +111,27 @@ describe("TenantSwitcher", () => {
     expect(session.switchTenant).not.toHaveBeenCalled();
   });
 });
+
+describe("TenantSwitcher — key-only-Fallback im geöffneten Dropdown", () => {
+  test("Membership ohne name rendert ihren key als Dropdown-Label", async () => {
+    const user = userEvent.setup();
+    const session = makeSessionApi({
+      activeTenantId: "00000000-0000-4000-8000-000000000001",
+      tenants: [
+        {
+          tenantId: "00000000-0000-4000-8000-000000000001",
+          roles: ["Admin"],
+          name: "Status",
+          key: "status",
+        },
+        { tenantId: "00000000-0000-4000-8000-000000000002", roles: ["Admin"], key: "demo" },
+      ],
+    });
+    renderWithProviders(<TenantSwitcher />, { session });
+    await user.click(screen.getByRole("button", { name: /Status/ }));
+    // Der key-only-Pfad (kein name) muss im Dropdown sichtbar werden —
+    // nicht das UUID-Präfix "00000000".
+    expect(screen.getByText("demo")).toBeTruthy();
+    expect(screen.queryByText("00000000")).toBeNull();
+  });
+});

package/src/auth-email-password/web/forgot-password-screen.tsx

@@ -34,6 +34,7 @@ export function ForgotPasswordScreen({
   const [done, setDone] = useState(false);
   const [error, setError] = useState<string | null>(null);
 
+  // guard:dup-ok — gleiches Submit-Muster wie signup-screen, aber verschiedene API-Endpoints und State
   const doSubmit = async (): Promise<void> => {
     setSubmitting(true);
     setError(null);

package/src/auth-email-password/web/tenant-switcher.tsx

@@ -63,7 +63,8 @@ export function TenantSwitcher({ tenantName }: TenantSwitcherProps): ReactNode {
   const nameOf = (tenantId: string): string => {
     if (tenantName !== undefined) return tenantName(tenantId);
     const membership = tenants.find((m) => m.tenantId === tenantId);
-    return membership?.name ?? membership?.key ?? tenantId.slice(0, 8);
+    // || statt ??: ein leerer name/key-String darf nicht als Label durchrutschen.
+    return membership?.name || membership?.key || tenantId.slice(0, 8);
   };
 
   // Rendering-Gate: kein User → nix; nur ein Tenant → auch nix

package/src/cap-counter/enforce-cap.ts

@@ -413,6 +413,11 @@ export type StockCapResult =
  * (ein Delete gibt den Slot sofort frei), braucht keine Counter-Tabelle und
  * kein Increment/Decrement-Bookkeeping. Misst einen Bestand, keinen Fluss.
  *
+ * **TOCTOU-Caveat:** Zählen und Schreiben sind nicht atomar — zwei parallele
+ * Creates können beide `ok` sehen und das Limit um eins überschreiten (gleiche
+ * Race wie bei {@link enforceCap}). Exakt harte Slots brauchen zusätzliche
+ * Serialisierung im Create-Pfad (z.B. Unique-Index auf tenantId+slot).
+ *
  * Reine Funktion — wirft NICHT und mappt KEINEN HTTP-Status. Ein erreichtes
  * Stock-Limit heißt „Upgrade nötig", nicht „retry later" (429): der Caller
  * entscheidet die Reaktion, typisch ein app-eigener 422/`upgrade_required`

package/src/compliance-profiles/README.md

@@ -78,7 +78,7 @@ explizit als eigene Entity.
 
 ## Tests
 
-`__tests__/compliance-profiles.integration.ts` — 9 full-stack Tests via
+`__tests__/compliance-profiles.integration.test.ts` — 9 full-stack Tests via
 `setupTestStack` + echte HTTP-Calls (Memory: `feedback_no_fake_dispatcher`):
 list-profiles, for-tenant ohne/mit Setting, set-profile als TenantAdmin /
 Member (403) / mit Override / mit invalidem JSON / mit Array statt Object /

package/src/custom-fields/__tests__/feature.test.ts

@@ -12,7 +12,7 @@ describe("createCustomFieldsFeature shape", () => {
   test("registers field-definition entity + 6 write-handlers + 1 query-handler", () => {
     const feature = createCustomFieldsFeature();
 
-    expect(Object.keys(feature.entities)).toContain("field-definition");
+    expect(Object.keys(feature.entities ?? {})).toContain("field-definition");
 
     const writeHandlerNames = Object.keys(feature.writeHandlers);
     expect(writeHandlerNames).toEqual(

package/src/custom-fields/__tests__/wire-for-entity.test.ts

@@ -40,7 +40,7 @@ describe("wireCustomFieldsFor", () => {
     );
 
     // 3. postQuery entity-hook on "property"
-    expect(feature.entityHooks.postQuery["property"]).toHaveLength(1);
+    expect(feature.entityHooks?.postQuery?.["property"]).toHaveLength(1);
 
     // 4. search-payload-extension on "property"
     expect(feature.searchPayloadExtensions!["property"]).toHaveLength(1);
@@ -52,7 +52,7 @@ describe("wireCustomFieldsFor", () => {
       wireCustomFieldsFor(r, "property", propertyTable);
     });
 
-    const hook = feature.entityHooks.postQuery["property"]?.[0]?.fn;
+    const hook = feature.entityHooks?.postQuery?.["property"]?.[0]?.fn;
     expect(hook).toBeDefined();
     const result = await hook?.(
       {
@@ -82,7 +82,7 @@ describe("wireCustomFieldsFor", () => {
       wireCustomFieldsFor(r, "property", propertyTable);
     });
 
-    const hook = feature.entityHooks.postQuery["property"]?.[0]?.fn;
+    const hook = feature.entityHooks?.postQuery?.["property"]?.[0]?.fn;
     const result = await hook?.(
       {
         entityName: "property",
@@ -111,7 +111,7 @@ describe("wireCustomFieldsFor", () => {
       wireCustomFieldsFor(r, "property", propertyTable);
     });
 
-    const hook = feature.entityHooks.postQuery["property"]?.[0]?.fn;
+    const hook = feature.entityHooks?.postQuery?.["property"]?.[0]?.fn;
     const result = await hook?.(
       {
         entityName: "property",

package/src/custom-fields/db/queries/retention.ts

@@ -1,6 +1,7 @@
 import { asRawClient } from "@cosmicdrift/kumiko-framework/bun-db";
 import type { DbRunner } from "@cosmicdrift/kumiko-framework/db";
 
+// guard:dup-ok — andere SQL als selectFieldDefinitionsForEntity; gleiche Bezeichner, verschiedene Queries
 export async function selectFieldDefinitionsWithSerialized(
   db: DbRunner,
   entityName: string,

package/src/custom-fields/lib/parse-serialized-field.ts

@@ -43,3 +43,14 @@ export function parseSerializedField(raw: unknown): SerializedFieldShape | null
   const parsed = typeof raw === "string" ? parseJsonSafe<unknown>(raw, null) : raw;
   return isShape(parsed) ? parsed : null;
 }
+
+export interface FieldDefinitionRow {
+  readonly field_key: string;
+  readonly serialized_field: unknown;
+}
+
+export function isFieldDefinitionRow(value: unknown): value is FieldDefinitionRow {
+  if (!value || typeof value !== "object") return false;
+  if (!("field_key" in value)) return false;
+  return typeof value.field_key === "string";
+}

package/src/custom-fields/run-retention.ts

@@ -16,22 +16,14 @@
 // jsonb shape, which would be a breaking schema change.
 
 import type { DbRunner } from "@cosmicdrift/kumiko-framework/db";
+import { extractTableName } from "@cosmicdrift/kumiko-framework/db";
 import { getTemporal } from "@cosmicdrift/kumiko-framework/time";
 import {
   applyRetentionRemovals,
   selectFieldDefinitionsWithSerialized,
   selectHostRowsWithCustomFields,
 } from "./db/queries/retention";
-import { parseSerializedField } from "./lib/parse-serialized-field";
-
-const KUMIKO_NAME_SYMBOL = Symbol.for("kumiko:schema:Name");
-function getTableName(table: unknown): string {
-  if (typeof table === "object" && table !== null) {
-    const sym = (table as Record<symbol, unknown>)[KUMIKO_NAME_SYMBOL];
-    if (typeof sym === "string") return sym;
-  }
-  throw new Error("custom-fields/run-retention: table missing kumiko:schema:Name symbol");
-}
+import { isFieldDefinitionRow, parseSerializedField } from "./lib/parse-serialized-field";
 
 type Instant = InstanceType<ReturnType<typeof getTemporal>["Instant"]>;
 
@@ -87,7 +79,7 @@ export async function runCustomFieldsRetention(
     return { rowsScanned: 0, rowsUpdated: 0, removalsByFieldKey: {} };
   }
 
-  const tableName = getTableName(opts.entityTable);
+  const tableName = extractTableName(opts.entityTable, "custom-fields/run-retention");
   const rows = await selectHostRowsWithCustomFields(opts.db, tableName, opts.tenantId);
 
   const removalsByFieldKey: Record<string, number> = {};
@@ -159,17 +151,6 @@ function asHostRow(value: unknown): HostRow | null {
   };
 }
 
-interface FieldDefinitionRow {
-  readonly field_key: string;
-  readonly serialized_field: unknown;
-}
-
-function isFieldDefinitionRow(value: unknown): value is FieldDefinitionRow {
-  if (!value || typeof value !== "object") return false;
-  if (!("field_key" in value)) return false;
-  return typeof value.field_key === "string";
-}
-
 async function loadRetentionPolicies(
   db: DbRunner,
   tenantId: string,
@@ -192,6 +173,7 @@ interface InstantLike {
   readonly epochMilliseconds: number;
 }
 
+// guard:dup-ok — false positive: gleiche TypeGuard-Struktur wie isFieldDefinitionRow, völlig andere Semantik
 function isInstantLike(value: unknown): value is InstantLike {
   if (!value || typeof value !== "object") return false;
   if (!("epochMilliseconds" in value)) return false;

package/src/custom-fields/web/__tests__/custom-fields-form-section.test.tsx

@@ -234,3 +234,151 @@ describe("CustomFieldsFormSection", () => {
     expect(saveBtn.textContent).toBe("Save custom fields");
   });
 });
+
+describe("CustomFieldsFormSection — clear-Pfad", () => {
+  test("Leeren eines gespeicherten Werts dispatched clear-custom-field (nicht skip)", async () => {
+    mockedQueryRows = [
+      {
+        id: "f1",
+        entityName: "component",
+        fieldKey: "vendor",
+        type: "text",
+        required: false,
+        displayOrder: 1,
+      },
+    ];
+    dispatchSpy.mockClear();
+
+    render(
+      <Wrapper>
+        <CustomFieldsFormSection
+          entityName="component"
+          entityId="row-42"
+          initialValues={{ vendor: "Hetzner" }}
+        />
+      </Wrapper>,
+    );
+
+    const vendorInput = document.getElementById("custom-field-vendor") as HTMLInputElement;
+    expect(vendorInput.value).toBe("Hetzner");
+
+    fireEvent.change(vendorInput, { target: { value: "" } });
+    fireEvent.click(screen.getByTestId("custom-fields-form-save"));
+    await Promise.resolve();
+    await Promise.resolve();
+
+    expect(dispatchSpy).toHaveBeenCalledTimes(1);
+    expect(dispatchSpy).toHaveBeenCalledWith("custom-fields:write:clear-custom-field", {
+      entityName: "component",
+      entityId: "row-42",
+      fieldKey: "vendor",
+    });
+  });
+
+  test("unveränderter Bestandswert wird beim Save NICHT erneut geschrieben", async () => {
+    mockedQueryRows = [
+      {
+        id: "f1",
+        entityName: "component",
+        fieldKey: "vendor",
+        type: "text",
+        required: false,
+        displayOrder: 1,
+      },
+    ];
+    dispatchSpy.mockClear();
+
+    render(
+      <Wrapper>
+        <CustomFieldsFormSection
+          entityName="component"
+          entityId="row-42"
+          initialValues={{ vendor: "Hetzner" }}
+        />
+      </Wrapper>,
+    );
+
+    const vendorInput = document.getElementById("custom-field-vendor") as HTMLInputElement;
+    // Tippen + zurück auf den Bestandswert → nicht dirty, kein Write.
+    fireEvent.change(vendorInput, { target: { value: "Hetzner2" } });
+    fireEvent.change(vendorInput, { target: { value: "Hetzner" } });
+    fireEvent.click(screen.getByTestId("custom-fields-form-save"));
+    await Promise.resolve();
+    await Promise.resolve();
+
+    expect(dispatchSpy).not.toHaveBeenCalled();
+  });
+});
+
+describe("CustomFieldsFormSection — boolean/date-Pfade", () => {
+  test("boolean: Bestand wird als true/false-String angezeigt, Save coerced zu boolean", async () => {
+    mockedQueryRows = [
+      {
+        id: "f1",
+        entityName: "component",
+        fieldKey: "active",
+        type: "boolean",
+        required: false,
+        displayOrder: 1,
+      },
+    ];
+    dispatchSpy.mockClear();
+
+    render(
+      <Wrapper>
+        <CustomFieldsFormSection
+          entityName="component"
+          entityId="row-42"
+          initialValues={{ active: true }}
+        />
+      </Wrapper>,
+    );
+
+    // boolean rendert als Checkbox — Bestand steckt in checked, nicht value.
+    const input = document.getElementById("custom-field-active") as HTMLInputElement;
+    expect(input.checked).toBe(true);
+
+    fireEvent.click(input);
+    fireEvent.click(screen.getByTestId("custom-fields-form-save"));
+    await Promise.resolve();
+    await Promise.resolve();
+
+    expect(dispatchSpy).toHaveBeenCalledWith("custom-fields:write:set-custom-field", {
+      entityName: "component",
+      entityId: "row-42",
+      fieldKey: "active",
+      value: false,
+    });
+  });
+
+  test("date: Bestand erreicht den DateInput-Trigger (lokalisierte Anzeige)", () => {
+    mockedQueryRows = [
+      {
+        id: "f1",
+        entityName: "component",
+        fieldKey: "launchedAt",
+        type: "date",
+        required: false,
+        displayOrder: 1,
+      },
+    ];
+    dispatchSpy.mockClear();
+
+    render(
+      <Wrapper>
+        <CustomFieldsFormSection
+          entityName="component"
+          entityId="row-42"
+          initialValues={{ launchedAt: "2026-01-15" }}
+        />
+      </Wrapper>,
+    );
+
+    // DateInput ist ein Kalender-Trigger-Button (kein <input value>) mit
+    // lokalisierter Anzeige — der Kalender-Flow selbst ist jsdom-untauglich
+    // (Popover), hier zählt: der Bestand kommt im Trigger an, nicht "—".
+    const trigger = document.getElementById("custom-field-launchedAt") as HTMLButtonElement;
+    expect(trigger.textContent).toContain("2026");
+    expect(trigger.textContent).not.toContain("—");
+  });
+});

package/src/custom-fields/web/custom-fields-form-section.tsx

@@ -92,20 +92,35 @@ export function CustomFieldsFormSection({
     );
   }
 
+  // Dirty heißt: weicht vom GESPEICHERTEN Wert ab — nicht von "". Sonst ist
+  // das Leeren eines gespeicherten Werts unsichtbar (Button disabled) und
+  // handleSave würde es überspringen statt zu clearen.
+  const initialDisplay = (field: (typeof matchingFields)[number]): string =>
+    displayValue(field.type, initialValues?.[field.fieldKey]);
+  const changedFields = matchingFields.filter((field) => {
+    const raw = pending[field.fieldKey];
+    return raw !== undefined && raw !== initialDisplay(field);
+  });
+
   const handleSave = async (): Promise<void> => {
     setSaving(true);
     setErrorKey(null);
     try {
-      for (const field of matchingFields) {
-        const raw = pending[field.fieldKey];
-        if (raw === undefined || raw === "") continue;
-        const value = coerceValue(field.type, raw);
-        const result = await dispatcher.write(CustomFieldsHandlers.setCustomField, {
-          entityName,
-          entityId,
-          fieldKey: field.fieldKey,
-          value,
-        });
+      for (const field of changedFields) {
+        const raw = pending[field.fieldKey] ?? "";
+        const result =
+          raw === ""
+            ? await dispatcher.write(CustomFieldsHandlers.clearCustomField, {
+                entityName,
+                entityId,
+                fieldKey: field.fieldKey,
+              })
+            : await dispatcher.write(CustomFieldsHandlers.setCustomField, {
+                entityName,
+                entityId,
+                fieldKey: field.fieldKey,
+                value: coerceValue(field.type, raw),
+              });
         if (!result.isSuccess) {
           setErrorKey(result.error?.i18nKey ?? "custom-fields.errors.saveFailed");
           return;
@@ -117,7 +132,7 @@ export function CustomFieldsFormSection({
     }
   };
 
-  const dirty = Object.values(pending).some((v) => v !== "");
+  const dirty = changedFields.length > 0;
 
   return (
     <div data-testid="custom-fields-form-section">
@@ -204,6 +219,5 @@ function coerceValue(type: string, raw: string): unknown {
 function displayValue(type: string, value: unknown): string {
   if (value === undefined || value === null) return "";
   if (type === "boolean") return value === true ? "true" : "false";
-  if (type === "number") return typeof value === "number" ? String(value) : String(value);
   return String(value);
 }

package/src/custom-fields/wire-for-entity.ts

@@ -1,3 +1,4 @@
+import { extractTableName } from "@cosmicdrift/kumiko-framework/db";
 import {
   createJsonbField,
   type FeatureRegistrar,
@@ -13,15 +14,6 @@ import {
   setCustomFieldValue,
 } from "./db/queries/projection";
 
-const KUMIKO_NAME_SYMBOL = Symbol.for("kumiko:schema:Name");
-function getTableName(table: unknown): string {
-  if (typeof table === "object" && table !== null) {
-    const sym = (table as Record<symbol, unknown>)[KUMIKO_NAME_SYMBOL];
-    if (typeof sym === "string") return sym;
-  }
-  throw new Error("wire-for-entity: table missing kumiko:schema:Name symbol");
-}
-
 import type { CustomFieldClearedPayload, CustomFieldSetPayload } from "./events";
 import { customFieldsFeature } from "./feature";
 
@@ -107,7 +99,7 @@ export function wireCustomFieldsFor<TReg extends FeatureRegistrar<string>>(
         // jsonb_set: setze key auf value. Wenn key noch nicht existiert →
         // wird angelegt (create_missing=true ist default). value muss als
         // jsonb-literal kommen.
-        const tableName = getTableName(entityTable);
+        const tableName = extractTableName(entityTable, "custom-fields/wire-for-entity");
         await setCustomFieldValue(
           tx,
           tableName,
@@ -124,7 +116,7 @@ export function wireCustomFieldsFor<TReg extends FeatureRegistrar<string>>(
         const payload = event.payload as CustomFieldClearedPayload; // @cast-boundary engine-payload
 
         // jsonb minus operator (`-`) entfernt key aus jsonb-object.
-        const tableName = getTableName(entityTable);
+        const tableName = extractTableName(entityTable, "custom-fields/wire-for-entity");
         await clearCustomFieldKey(
           tx,
           tableName,
@@ -147,7 +139,7 @@ export function wireCustomFieldsFor<TReg extends FeatureRegistrar<string>>(
         // ihre Rows.
         if (payload.entityName !== entityName) return;
 
-        const tableName = getTableName(entityTable);
+        const tableName = extractTableName(entityTable, "custom-fields/wire-for-entity");
         // Scope cleanup to the deleted definition's owning tenant. System-scope
         // definitions apply to every tenant → cascade across all rows; tenant-
         // scope deletions must only touch that tenant's rows, else deleting one