@cosmicdrift/kumiko-framework 0.386.0 → 0.388.0

package/dist/search/reindex-entity.js

@@ -1,5 +1,5 @@
 // One-time backfill for entities that only got `searchable: true` after rows
-// already existed (#1206). buildSearchDocument() only runs on the write path
+// already existed. buildSearchDocument() only runs on the write path
 // (createSearchEventConsumer, system-hooks.ts) — pre-existing rows never
 // pass through it, so they stay unfindable until their next write. This
 // re-derives a SearchDocument straight from the read-table row for every
@@ -47,12 +47,8 @@ async function scanAndIndexEntity(db, registry, searchAdapter, entityName, tenan
     // calls searchAdapter.remove()) — resurrecting them here would make
     // erased entities findable again.
     const deletedFilter = entity.softDelete === true ? `AND ${quoteIdent("is_deleted")} IS NOT TRUE` : "";
-    const result = {
-        scannedRows: 0,
-        indexedRows: 0,
-        wouldIndexRows: 0,
-        failures: [],
-    };
+    const failures = [];
+    const result = { scannedRows: 0, indexedRows: 0, wouldIndexRows: 0, failures };
     let lastId;
     // Whether a searchable field lacks a matching read-table column depends
     // only on the table's column set (rowToState/Object.hasOwn), not on any
@@ -69,11 +65,12 @@ async function scanAndIndexEntity(db, registry, searchAdapter, entityName, tenan
         WHERE ${quoteIdent("tenant_id")} = $1 ${deletedFilter} ${afterLastId}
         ORDER BY ${quoteIdent("id")} ASC
         LIMIT $2`, lastId === undefined ? [tenantId, batchSize] : [tenantId, batchSize, lastId]);
-        if (rows.length === 0)
+        const [firstRow] = rows;
+        if (firstRow === undefined)
             break;
         if (uncheckedSchema) {
             uncheckedSchema = false;
-            const sampleState = rowToState(rows[0], fieldNames);
+            const sampleState = rowToState(firstRow, fieldNames);
             const unmappedField = searchableFields.find((fieldName) => !(fieldName in sampleState));
             if (unmappedField !== undefined) {
                 throw new Error(`reindexEntity: searchable field "${unmappedField}" is not mappable from read-table ` +

package/dist/time/boot-tz-warning.d.ts

@@ -1,5 +1,5 @@
 /**
- * Warnt einmalig beim Server-Start, wenn die Prozess-TZ nicht UTC ist.
- * Parameter sind für Tests injizierbar. Gibt zurück, ob gewarnt wurde.
+ * Warn once at server startup when the process time zone is not UTC.
+ * Parameters are injectable for tests. Returns whether a warning was emitted.
  */
 export declare function warnIfNonUtcServerTimeZone(resolvedTimeZone?: string, warn?: (message: string) => void): boolean;

package/dist/time/boot-tz-warning.js

@@ -1,17 +1,17 @@
-// Boot-Warnung wenn die Prozess-Uhr nicht in UTC läuft. Der gesamte
-// Server-Code nimmt UTC an (System-TZ ist kein Konzept — siehe timezones.md);
-// eine abweichende Prozess-TZ lässt versehentliche new Date()-Pfade
-// lokal-abhängig brechen ("grün in UTC-CI, kaputt in Berlin-Prod"). Soft:
-// nicht-UTC ist in Dev legitim, daher Warnung statt Boot-Fehler.
+// Warn at boot when the process time zone is not UTC. All server code assumes UTC
+// (the system time zone is not a framework concept); a different process time zone
+// can make accidental new Date() paths behave differently locally ("green in UTC-CI,
+// broken in Berlin production"). This is a soft check: non-UTC is legitimate in
+// development, so warn instead of failing boot.
 function resolvedServerTimeZone() {
     return Intl.DateTimeFormat().resolvedOptions().timeZone;
 }
 /**
- * Warnt einmalig beim Server-Start, wenn die Prozess-TZ nicht UTC ist.
- * Parameter sind für Tests injizierbar. Gibt zurück, ob gewarnt wurde.
+ * Warn once at server startup when the process time zone is not UTC.
+ * Parameters are injectable for tests. Returns whether a warning was emitted.
  */
 export function warnIfNonUtcServerTimeZone(resolvedTimeZone = resolvedServerTimeZone(), 
-// biome-ignore lint/suspicious/noConsole: boot-time warning, no logger wired this early
+// biome-ignore lint/suspicious/noConsole: runs before any logger exists; the default is the only console sink
 warn = console.warn) {
     // GMT and Etc/UTC are UTC-equivalent (no offset, no DST) — TZ=GMT is a
     // legitimate way to pin a process to UTC and must not trip this warning.

package/dist/time/iana.js

@@ -1,13 +1,13 @@
-// IANA-Zonenname-Validierung. Intl.supportedValuesOf("timeZone") liefert nur
-// KANONISCHE Namen — gültige Aliase wie "US/Pacific", "GMT", "Etc/UTC" fehlen
-// darin, obwohl Intl.DateTimeFormat, Temporal und ctx.tz.parse sie alle
-// klaglos akzeptieren. Intl.DateTimeFormat selbst ist aber case-INSENSITIVE
-// ("europe/berlin" resolved klaglos zu "Europe/Berlin") — ein reines
-// try/catch würde also Tippfehler in der Groß-/Kleinschreibung durchlassen.
-// Der exakte Vergleich mit resolvedOptions().timeZone schließt das: ein
-// gültiger kanonischer Name ODER Alias resolved IMMER zu sich selbst
-// (empirisch verifiziert für US/Pacific, GMT, Etc/UTC), ein falsch-gecasteter
-// String resolved zur kanonischen Form und matcht damit nicht mehr exakt.
+// IANA time zone name validation. Intl.supportedValuesOf("timeZone") returns only
+// CANONICAL names — valid aliases such as "US/Pacific", "GMT", and "Etc/UTC" are
+// missing, even though Intl.DateTimeFormat, Temporal, and ctx.tz.parse all
+// accept them without issue. Intl.DateTimeFormat itself is case-INSENSITIVE
+// ("europe/berlin" resolves to "Europe/Berlin") — a simple try/catch would
+// therefore allow capitalization errors through.
+// The exact comparison with resolvedOptions().timeZone prevents this: a valid
+// canonical name OR alias ALWAYS resolves to itself (verified empirically for
+// US/Pacific, GMT, and Etc/UTC), while a incorrectly cased string resolves to
+// the canonical form and no longer matches exactly.
 export function isValidIanaTimeZone(value) {
     try {
         return (new Intl.DateTimeFormat(undefined, { timeZone: value }).resolvedOptions().timeZone === value);

package/dist/time/index.js

@@ -1,13 +1,13 @@
-// Time-Modul: Temporal-Polyfill + ctx.tz Helper.
+// Time module: Temporal polyfill + ctx.tz helper.
 //
-// Aktueller Stand (Iteration 1-4 von Gap-03 in samples/beammycar/MIGRATION.md):
-//   - ensureTemporalPolyfill: installiert Temporal global wenn nötig
-//   - getTemporal: type-safer Zugriff auf globalThis.Temporal
-//   - createTzContext: ctx.tz Factory mit now/today/parse/toLocatedJson/...
-//   - LocatedTimestampJson: API-Boundary-Form { at, tz }
-//   - isValidIanaTimeZone: IANA-Zonennamen-Validierung (type:"tz"-Felder)
-//   - warnIfNonUtcServerTimeZone: Boot-Warnung bei nicht-UTC Prozess-TZ
-//   - GeoTzProvider: optionaler Geo→Zone-Adapter (ctx.tz.fromCoordinates/fromAddress)
+// Provides:
+//   - ensureTemporalPolyfill: installs Temporal globally when needed
+//   - getTemporal: type-safe access to globalThis.Temporal
+//   - createTzContext: ctx.tz factory with now/today/parse/toLocatedJson/...
+//   - LocatedTimestampJson: API-boundary form { at, tz }
+//   - isValidIanaTimeZone: IANA time-zone name validation (type:"tz" fields)
+//   - warnIfNonUtcServerTimeZone: boot warning for a non-UTC process time zone
+//   - GeoTzProvider: optional geo-to-zone adapter (ctx.tz.fromCoordinates/fromAddress)
 export { warnIfNonUtcServerTimeZone } from "./boot-tz-warning.js";
 export { isValidIanaTimeZone } from "./iana.js";
 export { instantToLegacyDate, legacyDateToInstant } from "./legacy-date.js";

package/dist/time/legacy-date.d.ts

@@ -1,5 +1,5 @@
 import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 export declare function instantToLegacyDate(instant: Temporal.Instant): Date;
-/** Gegenrichtung: Date aus einer Fremd-Lib (imapflow INTERNALDATE,
- *  mailparser Date-Header) → Temporal.Instant. */
+/** Converts dates from foreign libraries (imapflow INTERNALDATE,
+ *  mailparser Date headers) to Temporal.Instant. */
 export declare function legacyDateToInstant(date: Date): Temporal.Instant;

package/dist/time/legacy-date.js

@@ -1,15 +1,13 @@
 import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
-// Temporal→Date-Bridge für Lib-APIs die JS-Date verlangen (imapflow
-// search({since}), nodemailer-Header, ...). Gegenstück zur
-// dateToInstant-Richtung der DB-/Event-Store-Boundaries: Feature-Code
-// rechnet in Temporal, konvertiert erst am Aufruf der Fremd-API — der
-// no-date-api-Guard bleibt für Feature-Code scharf, die Konstruktion
-// lebt hier im allowlisteten Time-Layer.
+// Bridge to libraries that require JS `Date` (imapflow
+// search({since}), nodemailer headers, ...). Feature code uses Temporal and
+// converts only at foreign-API boundaries, keeping the no-date-api guard
+// effective outside this allowlisted time layer.
 export function instantToLegacyDate(instant) {
     return new Date(instant.epochMilliseconds);
 }
-/** Gegenrichtung: Date aus einer Fremd-Lib (imapflow INTERNALDATE,
- *  mailparser Date-Header) → Temporal.Instant. */
+/** Converts dates from foreign libraries (imapflow INTERNALDATE,
+ *  mailparser Date headers) to Temporal.Instant. */
 export function legacyDateToInstant(date) {
     return Temporal.Instant.fromEpochMilliseconds(date.getTime());
 }

package/dist/time/polyfill.js

@@ -8,7 +8,7 @@
 //
 // Idempotent: if `globalThis.Temporal` already exists the call is a no-op.
 // The check is the live global — not a sticky module flag — so tests that
-// delete the ambient global (fw#1550) still get it back on the next call.
+// delete the ambient global still get it back on the next call.
 // Re-install assigns the already-resolved module value: re-importing
 // `temporal-polyfill` here would put a polyfill instance on the global while
 // the rest of the code uses the native classes (instanceof mismatch).

package/dist/time/tz-context.d.ts

@@ -3,7 +3,7 @@ export type { Clock, LocatedTimestampJson, TzContext, TzContextOptions, } from "
 /**
  * Factory: creates a TzContext for the current request.
  * Uses the kumiko-types Temporal module export (not globalThis.Temporal) so
- * buildHandlerContext stays ambient-free (fw#1525/#1550).
+ * buildHandlerContext stays ambient-free.
  */
 export declare function createTzContext(options?: TzContextOptions): TzContext;
 /**

package/dist/time/tz-context.js

@@ -25,7 +25,7 @@ const SYSTEM_CLOCK = {
 /**
  * Factory: creates a TzContext for the current request.
  * Uses the kumiko-types Temporal module export (not globalThis.Temporal) so
- * buildHandlerContext stays ambient-free (fw#1525/#1550).
+ * buildHandlerContext stays ambient-free.
  */
 export function createTzContext(options = {}) {
     const tenant = options.tenant ?? "UTC";

package/dist/ui-types/app-schema.js

@@ -1,9 +1,9 @@
-// Client-safe Schema-Types. Wohnen in framework/ui-types statt renderer
-// damit der Server (createKumikoServer / buildAppSchema) sie produzieren
-// kann ohne renderer als Dependency zu ziehen. Renderer + Renderer-Web
-// re-exporten dieselben Symbole — Konsumenten merken den Umzug nicht.
+// Client-safe schema types. Live in framework/ui-types rather than renderer
+// so the server (createKumikoServer / buildAppSchema) can produce them
+// without pulling in renderer as a dependency. Renderer and Renderer-Web
+// re-export the same symbols, so consumers do not notice the move.
 //
-// Pattern: Types fließen "downstream" (framework → renderer → renderer-
-// web), Runtime-Helpers (toAppSchema, isAppSchema) bleiben renderer-side
-// weil das die Layer ist die mit den AppSchemas zur Laufzeit arbeitet.
+// Pattern: types flow "downstream" (framework → renderer → renderer-
+// web); runtime helpers (toAppSchema, isAppSchema) remain renderer-side
+// because that is the layer that works with AppSchemas at runtime.
 export {};

package/dist/ui-types/list-row-meta.js

@@ -39,13 +39,13 @@ export const LIST_ROW_META_REFERENCES = {
 // user:user — the convention QN is a SystemAdmin cross-tenant roster whose
 // `tenants` join must not reach a TenantAdmin, so it stays SystemAdmin-only and
 // the label lookup goes through the member directory instead: own-tenant
-// members for an admin, every user for a SystemAdmin (fw#3107).
+// members for an admin, every user for a SystemAdmin.
 //
 // tenant:tenant — the convention QN, `tenant:query:tenant:list`, is a
 // SystemAdmin-only entity-list handler, so a TenantAdmin got a 403 and every
 // tenant cell fell back to the raw UUID. The label lookup goes through the
 // tenant directory instead: the caller's own tenant for an admin, every
-// tenant for a SystemAdmin (fw#3142).
+// tenant for a SystemAdmin.
 export const REFERENCE_LOOKUP_SOURCES = {
     "user:user": { queryQn: "tenant:query:member-directory", labelKey: "label" },
     "tenant:tenant": { queryQn: "tenant:query:tenant-directory", labelKey: "label" },
@@ -56,10 +56,10 @@ export const REFERENCE_LOOKUP_SOURCES = {
 // otherwise. Keyed by `${refFeature}:${refEntity}` so useReferenceLookup can
 // consult this generically instead of any screen/hook hardcoding an entity
 // name. Central so the label applies to every screen that references this
-// entity, not just delivery-log (fw#2662).
+// entity, not just delivery-log.
 export const SYSTEM_REFERENCE_LABELS = {
     "tenant:tenant": { id: SYSTEM_TENANT_ID, labelKey: "kumiko.reference.system-tenant" },
-    // createdBy on a system write (fw#3103) — SYSTEM_USER_ID is an alias for
+    // createdBy on a system write — SYSTEM_USER_ID is an alias for
     // "no human caller", so read_users never holds a matching row.
     "user:user": {
         id: SYSTEM_USER_ID,