@cosmicdrift/kumiko-headless 0.13.0 → 0.15.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-headless",
-  "version": "0.13.0",
+  "version": "0.15.0",
   "description": "Headless UI logic for Kumiko — Dispatcher contract, Form-Controller, View-Model, Nav-Resolver. Plattform- und React-frei; jeder Renderer (renderer, renderer-web, renderer-native, …) komponiert darauf.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -28,7 +28,7 @@
     }
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-framework": "0.13.0",
+    "@cosmicdrift/kumiko-framework": "0.14.0",
     "zod": "^4.4.3"
   },
   "publishConfig": {
@@ -40,4 +40,4 @@
     "README.md",
     "LICENSE"
   ]
-}
+}

package/src/contracts/__tests__/contracts.test.ts

@@ -1,4 +1,4 @@
-import { describe, expect, test, vi } from "vitest";
+import { describe, expect, mock, test } from "bun:test";
 import type {
   AssetResolver,
   ButtonProps,
@@ -51,7 +51,7 @@ describe("Asset / Locale / Primitives contracts", () => {
     expect(resolver.translate("errors.value.minimum", { min: 3 })).toBe("≥3");
     expect(resolver.locale()).toBe("de-AT");
 
-    const listener = vi.fn();
+    const listener = mock();
     const unsubscribe = resolver.subscribe(listener);
     for (const l of listeners) l();
     expect(listener).toHaveBeenCalledTimes(1);

package/src/dispatcher/__tests__/contract.test.ts

@@ -1,4 +1,4 @@
-import { describe, expect, test } from "vitest";
+import { describe, expect, test } from "bun:test";
 import { createStore } from "../../store";
 import type {
   BatchResult,

package/src/form/__tests__/conditional-fields.test.ts

@@ -1,4 +1,4 @@
-import { describe, expect, test } from "vitest";
+import { describe, expect, test } from "bun:test";
 import { z } from "zod";
 import { createFormController } from "../form-controller";
 
@@ -97,13 +97,13 @@ describe("conditional fields — FieldState resolution", () => {
 
     // Force a snapshot build so the predicate runs once.
     form.getSnapshot();
-    expect(lastCtxSeen).toBe("user");
+    expect(lastCtxSeen!).toBe("user");
 
     form.setCtx({ role: "admin" });
     form.getSnapshot();
 
     // The predicate must have been re-called AND observed the new ctx.
-    expect(lastCtxSeen).toBe("admin");
+    expect(lastCtxSeen!).toBe("admin");
   });
 
   test("setCtx produces a new snapshot and notifies listeners", () => {

package/src/form/__tests__/form-controller.test.ts

@@ -1,4 +1,4 @@
-import { describe, expect, test, vi } from "vitest";
+import { describe, expect, mock, test } from "bun:test";
 import { createFormController } from "../form-controller";
 
 describe("createFormController — core state machine", () => {
@@ -31,7 +31,7 @@ describe("createFormController — core state machine", () => {
   test("setField to same value is a no-op: no new snapshot, no listener fires", () => {
     const form = createFormController({ initial: { title: "hello" } });
     const before = form.getSnapshot();
-    const listener = vi.fn();
+    const listener = mock();
     form.subscribe(listener);
 
     form.setField("title", "hello");
@@ -54,7 +54,7 @@ describe("createFormController — core state machine", () => {
 
   test("setValues: bulk update fires one notify, one snapshot rebuild", () => {
     const form = createFormController({ initial: { a: 1, b: 2, c: 3 } });
-    const listener = vi.fn();
+    const listener = mock();
     form.subscribe(listener);
 
     form.setValues({ a: 10, b: 20 });
@@ -66,7 +66,7 @@ describe("createFormController — core state machine", () => {
   test("setValues with no effective changes is a no-op", () => {
     const form = createFormController({ initial: { a: 1, b: 2 } });
     const before = form.getSnapshot();
-    const listener = vi.fn();
+    const listener = mock();
     form.subscribe(listener);
 
     form.setValues({ a: 1 });
@@ -77,7 +77,7 @@ describe("createFormController — core state machine", () => {
 
   test("subscribe/unsubscribe: listener stops firing after unsubscribe", () => {
     const form = createFormController({ initial: { title: "hello" } });
-    const listener = vi.fn();
+    const listener = mock();
     const unsubscribe = form.subscribe(listener);
 
     form.setField("title", "world");
@@ -125,7 +125,7 @@ describe("createFormController — core state machine", () => {
   test("reset is a no-op when already clean and error-free", () => {
     const form = createFormController({ initial: { title: "hello" } });
     const before = form.getSnapshot();
-    const listener = vi.fn();
+    const listener = mock();
     form.subscribe(listener);
 
     form.reset();

package/src/form/__tests__/submit.test.ts

@@ -1,4 +1,4 @@
-import { describe, expect, test, vi } from "vitest";
+import { describe, expect, mock, test } from "bun:test";
 import { z } from "zod";
 import type { Dispatcher, WriteResult } from "../../dispatcher";
 import { createStore } from "../../store";
@@ -7,9 +7,9 @@ import { createFormController } from "../form-controller";
 // Fake dispatcher scoped to this test file — same shape as contract.test.ts
 // but with an explicit spy on write() so assertions can inspect argv.
 function makeDispatcher(response?: WriteResult): Dispatcher & {
-  readonly writeSpy: ReturnType<typeof vi.fn>;
+  readonly writeSpy: ReturnType<typeof mock>;
 } {
-  const writeSpy = vi.fn(
+  const writeSpy = mock(
     async () => response ?? ({ isSuccess: true, data: { id: "srv-1" } } as WriteResult),
   );
   return {
@@ -261,7 +261,7 @@ describe("createFormController — submit()", () => {
       resolve = r;
     });
     const disp: Dispatcher = {
-      write: vi.fn(async () => slow) as unknown as Dispatcher["write"],
+      write: mock(async () => slow) as unknown as Dispatcher["write"],
       async query<TData>() {
         return { isSuccess: true, data: null } as unknown as { isSuccess: true; data: TData };
       },

package/src/form/__tests__/validation.test.ts

@@ -1,4 +1,4 @@
-import { describe, expect, test, vi } from "vitest";
+import { describe, expect, mock, test } from "bun:test";
 import { z } from "zod";
 import { createFormController } from "../form-controller";
 import { groupIssuesByPath, zodErrorToFieldIssues } from "../zod-bridge";
@@ -63,7 +63,7 @@ describe("groupIssuesByPath", () => {
 describe("createFormController — validate()", () => {
   test("without a schema: validate() is a no-op that returns true", () => {
     const form = createFormController({ initial: { title: "" } });
-    const listener = vi.fn();
+    const listener = mock();
     form.subscribe(listener);
 
     const ok = form.validate();

package/src/nav/__tests__/resolve.test.ts

@@ -1,5 +1,5 @@
+import { describe, expect, test } from "bun:test";
 import type { NavDefinition } from "@cosmicdrift/kumiko-framework/ui-types";
-import { describe, expect, test } from "vitest";
 import { resolveNavigation } from "../resolve";
 import type { NavRegistrySlice } from "../types";
 

package/src/store/__tests__/create-store.test.ts

@@ -1,4 +1,4 @@
-import { describe, expect, test, vi } from "vitest";
+import { describe, expect, mock, test } from "bun:test";
 import { createStore } from "../create-store";
 
 describe("createStore — snapshot & setState", () => {
@@ -31,7 +31,7 @@ describe("createStore — snapshot & setState", () => {
 describe("createStore — subscribe & notify", () => {
   test("subscribed listener fires on setState", () => {
     const store = createStore({ count: 0 });
-    const listener = vi.fn();
+    const listener = mock();
     store.subscribe(listener);
 
     store.setState({ count: 1 });
@@ -41,8 +41,8 @@ describe("createStore — subscribe & notify", () => {
 
   test("multiple listeners all fire on setState", () => {
     const store = createStore({ count: 0 });
-    const a = vi.fn();
-    const b = vi.fn();
+    const a = mock();
+    const b = mock();
     store.subscribe(a);
     store.subscribe(b);
 
@@ -54,7 +54,7 @@ describe("createStore — subscribe & notify", () => {
 
   test("unsubscribe stops further notifications", () => {
     const store = createStore({ count: 0 });
-    const listener = vi.fn();
+    const listener = mock();
     const unsub = store.subscribe(listener);
 
     store.setState({ count: 1 });
@@ -67,14 +67,14 @@ describe("createStore — subscribe & notify", () => {
   test("Object.is-equal setState does NOT notify listeners", () => {
     const store = createStore({ count: 0 });
     const same = store.getSnapshot();
-    const listener = vi.fn();
+    const listener = mock();
     store.subscribe(listener);
 
     // Same reference — gate blocks notification.
     store.setState(same);
     // Primitive-equal setState on primitive-valued store also no-ops.
     const primStore = createStore(42);
-    const primListener = vi.fn();
+    const primListener = mock();
     primStore.subscribe(primListener);
     primStore.setState(42);
 
@@ -84,7 +84,7 @@ describe("createStore — subscribe & notify", () => {
 
   test("setState inside reducer that returns same ref does NOT notify", () => {
     const store = createStore({ count: 0 });
-    const listener = vi.fn();
+    const listener = mock();
     store.subscribe(listener);
 
     store.setState((prev) => prev); // reducer returns same ref

package/src/store/__tests__/equality.test.ts

@@ -1,4 +1,4 @@
-import { describe, expect, test } from "vitest";
+import { describe, expect, test } from "bun:test";
 import { shallowEqual } from "../equality";
 
 describe("shallowEqual — primitive cases", () => {

package/src/view-model/__tests__/edit.test.ts

@@ -1,8 +1,8 @@
+import { describe, expect, test } from "bun:test";
 import type {
   EntityDefinition,
   EntityEditScreenDefinition,
 } from "@cosmicdrift/kumiko-framework/ui-types";
-import { describe, expect, test } from "vitest";
 import { computeEditViewModel } from "../edit";
 
 const orderEntity = {

package/src/view-model/__tests__/list.test.ts

@@ -1,8 +1,8 @@
+import { describe, expect, mock, test } from "bun:test";
 import type {
   EntityDefinition,
   EntityListScreenDefinition,
 } from "@cosmicdrift/kumiko-framework/ui-types";
-import { describe, expect, test, vi } from "vitest";
 import { computeListViewModel } from "../list";
 
 // Minimal EntityDefinition-shape. ui-core's view-model only reads
@@ -112,7 +112,7 @@ describe("computeListViewModel", () => {
   });
 
   test("translate is called with the expected i18n-key per field", () => {
-    const spy = vi.fn((key: string) => `T:${key}`);
+    const spy = mock((key: string) => `T:${key}`);
     computeListViewModel({
       screen: listScreen(["title", "priority"]),
       entity: taskEntity,

package/CHANGELOG.md

@@ -1,441 +0,0 @@
-# @cosmicdrift/kumiko-headless
-
-## 0.13.0
-
-### Patch Changes
-
-- Updated dependencies [7f56b2f]
-  - @cosmicdrift/kumiko-framework@0.13.0
-
-## 0.12.2
-
-### Patch Changes
-
-- Updated dependencies [597de52]
-  - @cosmicdrift/kumiko-framework@0.12.2
-
-## 0.12.1
-
-### Patch Changes
-
-- Updated dependencies [f2ad7c4]
-  - @cosmicdrift/kumiko-framework@0.12.1
-
-## 0.12.0
-
-### Patch Changes
-
-- @cosmicdrift/kumiko-framework@0.12.0
-
-## 0.11.2
-
-### Patch Changes
-
-- Updated dependencies [92a84f0]
-  - @cosmicdrift/kumiko-framework@0.11.2
-
-## 0.11.1
-
-### Patch Changes
-
-- @cosmicdrift/kumiko-framework@0.11.1
-
-## 0.11.0
-
-### Patch Changes
-
-- Updated dependencies [30ea981]
-- Updated dependencies [9347212]
-  - @cosmicdrift/kumiko-framework@0.11.0
-
-## 0.10.0
-
-### Patch Changes
-
-- Updated dependencies [d06f029]
-- Updated dependencies [753d392]
-  - @cosmicdrift/kumiko-framework@0.10.0
-
-## 0.9.0
-
-### Patch Changes
-
-- Updated dependencies [51e22f5]
-  - @cosmicdrift/kumiko-framework@0.9.0
-
-## 0.8.1
-
-### Patch Changes
-
-- Updated dependencies [4b5f91e]
-  - @cosmicdrift/kumiko-framework@0.8.1
-
-## 0.8.0
-
-### Patch Changes
-
-- Updated dependencies [f34af9a]
-- Updated dependencies [dff4123]
-  - @cosmicdrift/kumiko-framework@0.8.0
-
-## 0.7.0
-
-### Minor Changes
-
-- bcf43b6: es-ops: `SeedMembershipRow` exposes `streamTenantId` (stream-tenant aus `kumiko_events.v1`) neben dem payload-`tenantId`. Seed-Authors müssen den `kumiko_events`-JOIN nicht mehr selbst bauen — `m.streamTenantId` ist der korrekte Wert für `systemWriteAs`'s `tenantIdOverride` wenn das Aggregate von einem fremden Executor angelegt wurde (typisches `seedTenantMembership(by=systemAdmin)`-Pattern).
-
-### Patch Changes
-
-- Updated dependencies [bcf43b6]
-  - @cosmicdrift/kumiko-framework@0.7.0
-
-## 0.6.0
-
-### Minor Changes
-
-- 8489d18: feat(es-ops): Phase 1.5 — tenantIdOverride + dry-run-validator + E2E-Test + Doku
-
-  Phase 1.5 schließt die Lücken aus Phase 1 die den ersten Driver-Use-Case
-  (publicstatus admin-roles) blockten. Siehe Retro:
-  `kumiko-platform/docs/plans/features/es-ops-phase1-retro.md` (PR #9).
-
-  **A1 — tenantIdOverride:**
-  `SeedMigrationContext.systemWriteAs(qn, payload, tenantIdOverride?)`.
-  Default SYSTEM_TENANT_ID (unverändert für System-scope-Aggregates wie
-  config-values). Mit override: `createSystemUser(tenantIdOverride)` als
-  Executor, damit der Event-Store-Executor den Aggregate-Stream im
-  richtigen Tenant findet. Fix für die `version_conflict`-Klasse-Bug
-  (Memory `feedback_event_store_tenant_consistency.md`).
-
-  **A2 — dry-run-validator:**
-  Runner parsed seed-files vor `migration.run()` per regex
-  `systemWriteAs\(["']([^"']+)["']`, sammelt handler-QNs, validiert
-  gegen `registry.getWriteHandler(qn)`. Fail-fast mit klarer Message
-
-  - Datei + QN statt zur Runtime "handler not found". Catched camelCase-
-    typos (kebab-case-vs-camelCase Drift) + andere QN-Drift zur Boot-Zeit.
-    runProdApp reicht den richtigen Registry rein (`registry` neu in
-    RunPendingSeedMigrationsArgs).
-
-  **A3 — E2E-Test:**
-  `packages/bundled-features/src/__tests__/es-ops-e2e.integration.ts`
-  mit `setupTestStack`-Pattern: tenant+config Features echt geladen,
-  echtes Membership-Aggregate via TenantHandlers.addMember im Demo-Tenant,
-  seed-migration ruft update-member-roles mit tenantIdOverride → write
-  geht durch, Marker landed, Event in Store, Read-Model aktualisiert.
-  Plus typo-Test: seed mit camelCase fail-t Dry-Run mit
-  `/dry-run found.*unknown handler-QN/`. **TDD-First**: ohne A1+A2 wäre
-  der test rot.
-
-  **A4 — Doku:**
-  `framework/src/es-ops/README.md` erweitert um „Wann brauche ich
-  tenantIdOverride?" + „Deployment-Anforderungen" (Docker COPY, Idempotenz,
-  Multi-Replica) + „Lokaler Smoke vor Push". Recipe-README + seed-files
-  auf neue API aktualisiert.
-
-  **A5 — Smoke-Skript-Template:**
-  `samples/recipes/seed-migration/scripts/smoke.ts` als copy-paste-Template
-  für App-Authors: Bun-runnable, offline (read-only, kein DB-Write),
-  validiert Module-Load + QN-Resolution + System-User-Access. Recipe-
-  README dokumentiert Pflicht-Pattern.
-
-  **Bonus-Fix:**
-  `tenant:write:create`-access auf `["system", "SystemAdmin"]` erweitert
-  (symmetrisch zu update-member-roles). Aufgedeckt durch Recipe-Smoke +
-  initial-tenants-Seed. Pinning-Test in `tenant.integration.ts` updated.
-
-  **Test-State:** 45/45 grün (Pre-Push). Typecheck clean. Biome clean.
-  as-cast-Audit clean. Guard-silent-skip clean. Recipe-Smoke clean.
-
-  **Folge-Step (separater PR):** publicstatus driver-sample reaktivieren
-  mit lokalem Pre-Push-Smoke gegen publicstatus' echtes Feature-Set.
-
-### Patch Changes
-
-- Updated dependencies [8489d18]
-  - @cosmicdrift/kumiko-framework@0.6.0
-
-## 0.5.2
-
-### Patch Changes
-
-- 4f0d781: fix(tenant): updateMemberRoles erlaubt "system"-Rolle (symmetrisch zu create)
-
-  Drift innerhalb des tenant-Features: `tenant:write:create` akzeptierte
-  `["system", "SystemAdmin"]`, `tenant:write:update-member-roles` aber
-  nur `["SystemAdmin"]`. Konsequenz: ops-tooling und seed-migrations
-  (`createSystemUser` mit `roles: ["system"]`) konnten den Handler nicht
-  aufrufen — `access_denied`.
-
-  Live entdeckt beim ersten Driver-Sample der es-ops Phase 1: publicstatus
-  seed `2026-05-20-fix-admin-roles.ts` rief `update-member-roles` via
-  `systemWriteAs` → access_denied → Pod CrashLoopBackOff.
-
-  Plus access-rule-Pinning-Test in `tenant.integration.ts`-scenario-7.
-
-- Updated dependencies [4f0d781]
-  - @cosmicdrift/kumiko-framework@0.5.2
-
-## 0.5.1
-
-### Patch Changes
-
-- 0e00015: fix(es-ops): path.resolve statt path.join für seedsDir → seed-files
-
-  Bun's `await import()` braucht absolute Pfade. Wenn der App-Author
-  `runProdApp({ seedsDir: "./seeds" })` setzt (relativ), würde
-  `path.join("./seeds", "foo.ts")` einen relativen Pfad liefern → Bun's
-  Import-Resolver such relativ zum `runner.ts`-Modul (nicht zum
-  `process.cwd()`) → `Cannot find module 'seeds/...' from '<runner-path>'`.
-
-  `path.resolve` löst gegen `process.cwd()` auf → absolute Pfade →
-  Import funktioniert. Aufgedeckt beim ersten Live-Boot der publicstatus-
-  Driver-Migration (Pod CrashLoopBackOff).
-
-- Updated dependencies [0e00015]
-  - @cosmicdrift/kumiko-framework@0.5.1
-
-## 0.5.0
-
-### Minor Changes
-
-- 7ff69ab: feat(es-ops): Phase 1 — file-based seed-migrations
-
-  Neues first-class Operations-Pattern fürs Framework. Liefert `seed-migrations`
-  als drizzle-migrate-equivalent für Event-Sourcing-Aggregate-Updates die
-  idempotent-Seeder nicht erfassen können (z.B. „Member hat schon eine
-  Rolle, aber jetzt soll noch eine dazukommen").
-
-  Public-API:
-
-  - `runProdApp({ seedsDir })` — Auto-apply pending Migrations beim Boot
-  - `SeedMigration`-Interface (default-Export einer `seeds/<id>.ts`-File)
-  - `SeedMigrationContext` mit `systemWriteAs` (ruft existing write-handler
-    als System-User) + Read-Helpers (`findUserByEmail`,
-    `findMembershipsOfUser`, `findTenants`)
-  - CLI: `bunx kumiko ops seed:new|status|apply`
-  - Tracking-Table `kumiko_es_operations` mit `operation_type`-Discriminator
-    (vorbereitet auf Phase 2+ Operations: projection-rebuild, event-replay,
-    stream-migration, ...)
-  - Env-Flags: `KUMIKO_SKIP_ES_OPS=1` (alle skippen für Recovery),
-    `KUMIKO_SKIP_ES_OPS_<ID>=1` (einzelne kaputte skippen)
-
-  Garantien: single-run via tracking, atomic via per-migration-Tx,
-  chronological order via filename-prefix, fail-stop bei Failure (kein
-  Partial-Apply), ES-konform via Handler-Dispatch.
-
-  Sub-path-Export: `@cosmicdrift/kumiko-framework/es-ops`
-
-  Plan-Doc: `kumiko-platform/docs/plans/features/es-ops.md`
-  Recipe: `samples/recipes/seed-migration/`
-  Driver-Use-Case: publicstatus admin-roles-drift (parallel-Branch
-  `feat/es-ops-driver-admin-roles`).
-
-  Phase 2+ skizziert + offen markiert — Implementation pro Use-Case.
-
-### Patch Changes
-
-- Updated dependencies [7ff69ab]
-  - @cosmicdrift/kumiko-framework@0.5.0
-
-## 0.4.1
-
-### Patch Changes
-
-- 010b410: feat(auth-email-password): "Bestätigungs-Mail erneut senden" im LoginScreen
-
-  LoginScreen bietet bei reason=email_not_verified jetzt einen Resend-Link
-  im Fehler-Banner — der existierende `requestEmailVerification`-Endpoint
-  wird direkt aufgerufen, der Banner wechselt nach Erfolg zum Info-Variant
-  ("Wir haben dir eine neue Bestätigungs-Mail geschickt.").
-
-  UX-Details:
-
-  - Bei 429 → inline-Hint "Bitte warte kurz und versuche es erneut."
-  - Bei Netzwerk/sonstigen Fehlern → inline-Hint "Konnte nicht senden."
-  - Anti-Typo-Gate: ändert der User die Email-Eingabe nach dem Login-Fail,
-    verschwindet der Resend-Link — sonst würde Resend silent-success an die
-    geänderte (potentiell typoed) Adresse gehen ohne User-Feedback.
-  - Andere Failure-Codes (invalid_credentials etc.) zeigen weiterhin keinen
-    Resend-Link.
-
-  i18n: 4 neue Keys (DE+EN) im `auth.login.resend*`-Namespace, additive.
-  Apps die ihre Translations override-en müssen nichts ändern.
-
-  Additive UI-Feature — keine API-Breaks, keine Schema-Migration.
-
-- Updated dependencies [010b410]
-  - @cosmicdrift/kumiko-framework@0.4.1
-
-## 0.4.0
-
-### Minor Changes
-
-- 825e7d2: Visual-Tree V.1.4 → V.1.6 — Feature-complete Editor + Folder-Hierarchy + Roving-tabindex.
-
-  **V.1.4** — explicit `folder?: string` Schema-Field auf text-block-entity. Slug bleibt
-  kebab-only validiert, Folder explizit gesetzt. Tree gruppiert via `groupBlocksByFolder`
-  (ersetzt `groupBlocksBySlugPrefix`). `Subscribe<T>` Signature um optional `emitError`
-  erweitert für explicit async-error-Pfade. ProviderBranch zeigt Error-Banner mit
-  Retry-Button. Drift-Test pinnt seedTextBlock-vs-set.write Slug-Validation.
-
-  **V.1.4b** — URL-State-Routing für Editor-Target via `nav.searchParams`. F5 + Back-Button
-  stellen den Editor-State wieder her. Format: `?t=text-content:edit&a_slug=...&a_lang=...`.
-  Plus `useDispatchTarget` hook ersetzt globalen `dispatchTarget` als empfohlenen Production-
-  Pfad (legacy bleibt für Test-Hooks).
-
-  **V.1.5** — Arrow-Key-Navigation (`<aside role="tree">`, ARIA-tree-Pattern) + SSE-driven
-  Tree-Refresh. `ClientFeatureDefinition.treeEntities?: string[]` listet Entity-Namen pro
-  Provider; live-events triggern provider-re-mount → Stale-Tree-state="stub"→"filled"
-  flippt nach save automatisch.
-
-  **V.1.5c+d** — Active-Node-Highlight (explicit blue + 2px border-l + scrollIntoView),
-  VS-Code-Polish (compact spacing, focus-visible, folder-icon-color text-amber, indent-
-  guides per ancestor-depth), Folder-Wrapper für legal-pages ("📁 Legal" + slug-first
-  Verschachtelung) und text-content ("📁 Content").
-
-  **V.1.6** — Multi-level Folder-Splitting (`folder="page/marketing"` → nested folders,
-  walk-or-create-pattern, folder/leaf-collision-tolerant). Roving-tabindex (nur focused-
-  treeitem hat tabIndex=0, Tab cyclt aus dem Tree raus).
-
-  35/35 kumiko check PASS, 13/13 group-blocks + 22/22 text-content integration tests grün.
-  Browser + Keyboard lokal validated.
-
-  **Breaking**: `TreeContext` Type entfernt (V.1.2 SR2-Rip — war nie genutzt). Provider sind
-  session-bound: `TreeChildrenSubscribe = () => Subscribe<T>` statt `(ctx) => Subscribe<T>`.
-
-  **V.1.7-Followups**: useEffect-deps in VisualTree-focus-init (Performance), Cancellation-
-  Token in TreeProvider's fetch (emit-after-unmount-warning), inline-rename, drag-drop,
-  file-icons per slug-extension, parent-jump bei ArrowLeft auf collapsed-item.
-
-### Patch Changes
-
-- Updated dependencies [825e7d2]
-  - @cosmicdrift/kumiko-framework@0.4.0
-
-## 0.3.0
-
-### Minor Changes
-
-- 0.3.0 bringt zwei neue Subsysteme (Step-Engine Tier-3 + Visual-Tree) plus
-  eine AST-Codemod-Pipeline als Vorarbeit für den L2-AI-Layer.
-
-  ### Breaking Changes
-
-  - `skipTransitionGuard` → `unsafeSkipTransitionGuard` (Rename in
-    feature-ast + engine). Der `unsafe`-Prefix macht die Tragweite des
-    Casts sichtbar und ist konsistent zur `unsafeProjectionUpsert`- und
-    `r.rawTable`-Konvention. Migration: 1:1-Ersetzung, keine Verhaltens-Änderung.
-
-  ### Features
-
-  - **Step-Engine M.4 — Tier-3 Workflow-Engine.** Neue Step-Vocabulary
-    `wait`, `waitForEvent`, `retry` ermöglicht persistierte Long-Running-Flows
-    über Job-Boundaries hinweg. Q7 Snapshot-at-Start hängt jedem Step-Run
-    einen SHA-256-Fingerprint des Aggregat-Zustands an, sodass Replays
-    deterministisch gegen den ursprünglichen Eingangszustand laufen.
-  - **Visual-Tree V.1.x — Tree-API + Editor-Panel.** Neue `VisualTree`-
-    Component plus TreeProvider-Pattern; erste TreeProviders für
-    `text-content` und `legal-pages` (CMS-light + Impressum/Privacy).
-    Fundament für den späteren No-Code-Designer (~3000 LOC, 98 Tests).
-  - **Codemod-Pipeline.** AST-basierte Patcher-Module für strukturelle
-    Feature-Edits — wird vom kommenden L2-AI-Layer als Tool-Surface
-    verwendet, ist aber eigenständig nutzbar für ts-morph-style Migrationen.
-  - **user-data-rights Sample-Recipe.** DSGVO Art. 15/17/18/20 vollständig
-    als Sample-Recipe (`samples/recipes/`) inklusive README — zeigt die
-    Export- und Forget-Pipeline gegen den `compliance-profiles`-Default
-    (`eu-dsgvo`).
-
-  ### Fixes
-
-  - `tier-engine`: auto-default-tier-Hook benutzt jetzt `ctx.db.raw` für
-    Event-Store-Operationen (#37, vorher: stiller Bug, 22 Tage live).
-  - `engine`: unsafe-projection-upsert nutzt `as never` statt `as any` —
-    schmaler Cast-Surface, weniger Compiler-Knebel.
-  - `visual-tree`: runtime-isolation marker für client-konsumierte Files,
-    damit der Multi-Entry-Build den richtigen Bundle-Split bekommt.
-  - `feature-ast`: vollständiger `unsafeSkipTransitionGuard`-Rename (war
-    in zwei Modulen noch der alte Name).
-  - `framework`: Error-Reasons + `noConsole`-Lint + No-Date-API-Guard
-    wieder push-ready.
-
-  ### Library-Updates
-
-  hono 4.12, jose 6.2, stripe 22.1, meilisearch 0.58, marked 18,
-  bun-types 1.3.13, lucide-react 1.14, bullmq 5.76, ioredis 5.10,
-  i18next 26.0, react + radix-ui-primitives auf aktuelle Minors.
-
-### Patch Changes
-
-- Updated dependencies
-  - @cosmicdrift/kumiko-framework@0.3.0
-
-## 0.2.3
-
-### Patch Changes
-
-- @cosmicdrift/kumiko-framework@0.2.3
-
-## 0.2.2
-
-### Patch Changes
-
-- 7a7da3e: Re-publish 0.2.1 → 0.2.2 mit korrekt aufgelösten cross-package-Versionen.
-  0.2.1 hatte `workspace:*` als Wert in den dependencies (npm publish ohne
-  yarn-pack rewrite), Konsumenten bekamen "Workspace not found".
-
-  publish-with-oidc.sh nutzt jetzt `yarn pack` (rewrited workspace:\*) +
-  `npm publish <tarball>` (OIDC + provenance).
-
-- Updated dependencies [7a7da3e]
-  - @cosmicdrift/kumiko-framework@0.2.2
-
-## 0.2.1
-
-### Patch Changes
-
-- 48b7f6a: CI: switch publish to npm-CLI with OIDC Trusted Publishing + provenance.
-  No source changes — verifies the new publish path produces a verified-
-  provenance attestation on npmjs.com instead of token-based publish.
-- Updated dependencies [48b7f6a]
-  - @cosmicdrift/kumiko-framework@0.2.1
-
-## 0.2.0
-
-### Minor Changes
-
-- 6c70b6f: fix(tenant): seedTenant idempotent gegen Event-Store-Projection-Drift.
-
-  Verhindert version_conflict beim App-Boot wenn Aggregat existiert aber
-  Projection-Row fehlt (rebuild-drift, async-lag, manueller DB-Eingriff).
-
-### Patch Changes
-
-- Updated dependencies [6c70b6f]
-  - @cosmicdrift/kumiko-framework@0.2.0
-
-## 0.1.0
-
-### Minor Changes
-
-- 59ba6d7: Initial public release of Kumiko — AI-native backend builder.
-
-  What ships in 0.1.0:
-
-  - **Engine** (`@cosmicdrift/kumiko-framework`): `defineFeature`, `r.entity`, `r.writeHandler`, `r.queryHandler`, `r.projection`, `r.multiStreamProjection`, `r.hook`, `r.translations`, `r.crud`, `r.referenceData`, `r.screen`, `r.nav`, `r.authClaims`, full lifecycle pipeline with field-level access checks
-  - **Pipeline** (`@cosmicdrift/kumiko-framework`): `createDispatcher`, JWT auth via jose, Zod schema validation, role-based access checks, command/write/query split
-  - **DB** (`@cosmicdrift/kumiko-framework`): Drizzle helpers (`buildDrizzleTable`, `applyCursorQuery`), CRUD executor, Postgres dialect, optimistic locking, soft delete, multi-tenant scoping
-  - **Event sourcing** (`@cosmicdrift/kumiko-framework`): aggregate streams, single + multi-stream projections, event upcasters, asOf queries, archive support, AsyncDaemon-pattern dispatcher
-  - **Bundled features** (`@cosmicdrift/kumiko-bundled-features`): auth-email-password, sessions, tenants, users, jobs, secrets, file-provider-s3, mail-transport-smtp/inmemory, billing-foundation, cap-counter, channel-in-app, delivery, feature-toggles, legal-pages
-  - **Renderer** (`@cosmicdrift/kumiko-renderer`, `@cosmicdrift/kumiko-renderer-web`): schema-driven CRUD UI for React + Expo Web, override paths, list debounce, theme tokens
-  - **Headless** (`@cosmicdrift/kumiko-headless`): view-models for list/edit screens, locale-aware
-  - **Dev server** (`@cosmicdrift/kumiko-dev-server`): `runDevApp`, `runProdApp`, `kumiko-build` for production bundles (client + server), Docker-ready
-  - **Realtime** (`@cosmicdrift/kumiko-dispatcher-live`): SSE broadcast across tenants, Redis Pub/Sub backend
-  - **CLI** (`bin/kumiko.ts`): interactive dev menu, test runners, check pipeline (Biome + TypeScript + 18 guards + Vitest)
-
-  This is a pre-1.0 release — APIs may change between minor versions. Breaking changes will be documented per release.
-
-### Patch Changes
-
-- Updated dependencies [59ba6d7]
-  - @cosmicdrift/kumiko-framework@0.1.0