@cosmicdrift/kumiko-samples 0.352.0 → 0.354.0

package/packages/bundled-features/src/workflow-runner/handlers/resume-run.write.ts

@@ -48,6 +48,7 @@ import {
   WORKFLOW_RUN_STARTED_TYPE,
   WORKFLOW_WAITING_FOR_EVENT_TYPE,
   type WorkflowDefinition,
+  WorkflowStepError,
   type WriteEvent,
   type WriteHandlerDef,
 } from "@cosmicdrift/kumiko-framework/engine";
@@ -92,6 +93,11 @@ function checkQ7Fingerprint(
   storedFingerprint: string | null,
 ): WorkflowRunFailedPayload | null {
   const currentFingerprint = computeDefinitionFingerprint(workflow);
+  if (storedFingerprint === null) {
+    log.warn(
+      `Run ${runId} of workflow "${workflowName}" has no stored definition fingerprint — resuming against the current definition unchecked.`,
+    );
+  }
   const fingerprintChanged = storedFingerprint !== null && currentFingerprint !== storedFingerprint;
   if (!fingerprintChanged) {
     return null;
@@ -387,9 +393,13 @@ async function runResumedPipeline(ctx: HandlerContext, input: ResumedPipelineInp
     return { isSuccess: true as const, data: { outcome: "completed" as const } };
   } catch (error) {
     log.warn("workflow run failed", { runId, workflowName, stepIndex, error: String(error) });
+    // The input stepIndex is the suspended step; the failure happened at the step the resumed pass reached.
     const failedPayload: WorkflowRunFailedPayload = {
       workflowName,
-      stepIndex,
+      stepIndex:
+        error instanceof WorkflowStepError || error instanceof WorkflowSuspensionUnsupportedError
+          ? error.stepIndex
+          : stepIndex,
       error: describeWorkflowStepError(error),
     };
     await appendRunFailed(ctx, runId, failedPayload);

package/packages/bundled-features/src/workflow-runner/runner.ts

@@ -75,6 +75,8 @@ export type WorkflowRunFailedPayload = {
   readonly reason?: string;
 };
 
+export type WorkflowRunContext = Pick<HandlerContext, "unsafeAppendEvent">;
+
 export class WorkflowSuspensionUnsupportedError extends Error {
   constructor(
     readonly workflowName: string,
@@ -102,7 +104,7 @@ export async function startAndRunWorkflow(args: {
   readonly triggerEvent: WriteEvent;
   readonly triggerEventRef: TriggerEventRef;
   readonly idempotencyKey?: string;
-  readonly handlerCtx: HandlerContext;
+  readonly handlerCtx: WorkflowRunContext;
 }): Promise<{ readonly outcome: "completed" | "suspended" }> {
   const fingerprint = computeDefinitionFingerprint(args.workflow);
 
@@ -123,10 +125,14 @@ export async function startAndRunWorkflow(args: {
 
   const steps = buildPipelineSteps(args.workflow.pipelineDef, args.triggerEvent);
 
+  // @cast-boundary msp-to-handler-ctx — event-trigger hands over the narrower
+  // MultiStreamApplyContext (no query/write/writeAs). The step vocabulary this
+  // runner drives (wait, compute, return) only ever calls unsafeAppendEvent.
+  const stepCtx = args.handlerCtx as unknown as HandlerContext;
   const outcome = await runStepList(
     steps,
     args.triggerEvent,
-    args.handlerCtx,
+    stepCtx,
     {},
     {},
     {

package/samples/apps/showcase/src/features/items/feature.ts

@@ -8,6 +8,7 @@
 // hängt hier die Handler dran und ruft r.screen/r.nav.
 
 import { defineFeature } from "@cosmicdrift/kumiko-framework/engine";
+import type { TranslationsByLocale } from "@cosmicdrift/kumiko-renderer";
 import { itemsTranslations } from "./i18n";
 import {
   itemActiveScreen,
@@ -29,7 +30,7 @@ const open = {
 
 // The boot validator checks server-registered keys, while the client bundle is
 // locale-first — flip it rather than maintaining the same strings twice.
-function keyFirst(byLocale: typeof itemsTranslations): Record<string, Record<string, string>> {
+function keyFirst(byLocale: TranslationsByLocale): Record<string, Record<string, string>> {
   const out: Record<string, Record<string, string>> = {};
   for (const [locale, entries] of Object.entries(byLocale)) {
     for (const [key, value] of Object.entries(entries)) {

package/samples/apps/showcase/src/features/items/schema/item.ts

@@ -53,7 +53,6 @@ export const itemEditScreen: EntityEditScreenDefinition = {
   type: "entityEdit",
   entity: "item",
   layout: {
-    width: "3xl",
     sections: [
       {
         title: "Basics",

package/samples/apps/styleguide/src/features/widgets/demo-locale.ts

@@ -0,0 +1,47 @@
+// Server-side locale helpers for the dashboard demo queries. Not shared with
+// renderer-web's format.ts: server code must not import renderer-web.
+
+import { WIDGETS_I18N } from "./i18n";
+
+type WidgetsI18nKey = keyof typeof WIDGETS_I18N;
+type DemoCurrency = "EUR" | "USD";
+
+const FALLBACK_LOCALE = "en";
+
+// Intl throws RangeError on malformed tags.
+function usableLocale(locale: string): string {
+  try {
+    return Intl.getCanonicalLocales(locale)[0] ?? FALLBACK_LOCALE;
+  } catch {
+    return FALLBACK_LOCALE;
+  }
+}
+
+// The bundle only carries de + en: any "de" tag ("de-AT") picks de, everything else en.
+export function demoText(key: WidgetsI18nKey, locale: string): string {
+  const entry = WIDGETS_I18N[key];
+  const primarySubtag = usableLocale(locale).split("-")[0];
+  return primarySubtag === "de" ? entry.de : entry.en;
+}
+
+export function demoMoney(amount: number, currency: DemoCurrency, locale: string): string {
+  return new Intl.NumberFormat(usableLocale(locale), {
+    style: "currency",
+    currency,
+    maximumFractionDigits: 0,
+  }).format(amount);
+}
+
+export function demoPercent(fraction: number, locale: string): string {
+  return new Intl.NumberFormat(usableLocale(locale), {
+    style: "percent",
+    maximumFractionDigits: 0,
+  }).format(fraction);
+}
+
+export function demoMonthYear(year: number, month: number, locale: string): string {
+  return Temporal.PlainDate.from({ year, month, day: 1 }).toLocaleString(usableLocale(locale), {
+    month: "short",
+    year: "numeric",
+  });
+}

package/samples/apps/styleguide/src/features/widgets/feature.ts

@@ -5,6 +5,7 @@
 
 import { defineFeature } from "@cosmicdrift/kumiko-framework/engine";
 import { z } from "zod";
+import { demoMoney, demoMonthYear, demoPercent, demoText } from "./demo-locale";
 import { WIDGETS_I18N } from "./i18n";
 
 // Statische Demo-Zeitreihe (48 Punkte à 30 Minuten) — kein Date-API,
@@ -14,6 +15,44 @@ const RESPONSE_POINTS = Array.from({ length: 48 }, (_, i) => ({
   value: i === 20 ? null : 120 + Math.round(80 * Math.abs(Math.sin(i / 5))),
 }));
 
+const LOAN_START_MS = Date.UTC(2020, 0, 1);
+const LOAN_TODAY_MS = Date.UTC(2026, 5, 15);
+const LOAN_MONTHS = 240;
+const LOAN_PRINCIPAL_MINOR = 25_000_000;
+const LOAN_MONTHLY_RATE = 0.035 / 12;
+
+const loanMonthMs = (monthIndex: number): number => Date.UTC(2020, monthIndex, 1);
+
+// Annuity loan over 20 years: remaining principal falls, cumulative interest
+// grows. "Today" is a fixed date, not the clock, so the window and the
+// screenshots stay stable.
+const growth = (1 + LOAN_MONTHLY_RATE) ** LOAN_MONTHS;
+const annuityMinor = (LOAN_PRINCIPAL_MINOR * LOAN_MONTHLY_RATE * growth) / (growth - 1);
+let balanceMinor: number = LOAN_PRINCIPAL_MINOR;
+let interestPaidMinor = 0;
+const LOAN_REMAINING_POINTS = [{ atMs: loanMonthMs(0), value: LOAN_PRINCIPAL_MINOR }];
+const LOAN_INTEREST_POINTS = [{ atMs: loanMonthMs(0), value: 0 }];
+for (let i = 1; i <= LOAN_MONTHS; i++) {
+  const interest = balanceMinor * LOAN_MONTHLY_RATE;
+  balanceMinor = Math.max(0, balanceMinor - (annuityMinor - interest));
+  interestPaidMinor += interest;
+  LOAN_REMAINING_POINTS.push({ atMs: loanMonthMs(i), value: Math.round(balanceMinor) });
+  LOAN_INTEREST_POINTS.push({ atMs: loanMonthMs(i), value: Math.round(interestPaidMinor) });
+}
+const LOAN_SERIES = [
+  { key: "remaining", label: "widgets:dashboard:loan-remaining", points: LOAN_REMAINING_POINTS },
+  { key: "interest", label: "widgets:dashboard:loan-interest", points: LOAN_INTEREST_POINTS },
+];
+const LOAN_MARKERS = [
+  { atMs: loanMonthMs(84), label: { i18nKey: "widgets:dashboard:marker-extra-1" }, kind: "extra" },
+  { atMs: loanMonthMs(150), label: { i18nKey: "widgets:dashboard:marker-extra-2" }, kind: "extra" },
+  {
+    atMs: loanMonthMs(LOAN_MONTHS),
+    label: { i18nKey: "widgets:dashboard:marker-payoff" },
+    kind: "payoff",
+  },
+];
+
 const SENDERS = ["William Smith", "Alice Smith", "Bob Johnson", "Emily Davis"] as const;
 const SUBJECTS = ["Meeting Tomorrow", "Re: Project Update", "Weekend Plans", "Re: Budget"] as const;
 
@@ -33,6 +72,13 @@ const INBOX_MESSAGES = Array.from({ length: 18 }, (_, i) => ({
   unread: i % 4 === 0,
 }));
 
+function openAmount(amount: number, locale: string): string {
+  return demoText("widgets:dashboard:demo-amount-open", locale).replace(
+    "{amount}",
+    demoMoney(amount, "EUR", locale),
+  );
+}
+
 export const widgetsFeature = defineFeature("widgets", (r) => {
   r.screen({ id: "widgets", type: "custom", renderer: { react: { __component: "widgets" } } });
   r.screen({
@@ -96,6 +142,31 @@ export const widgetsFeature = defineFeature("widgets", (r) => {
         chart: "timeseries",
         query: "widgets:query:metrics:response-times",
       },
+      {
+        kind: "chart",
+        id: "loan",
+        label: "widgets:dashboard:loan",
+        chart: "stacked-area",
+        query: "widgets:query:metrics:loan",
+        valueFormat: { kind: "currency", currency: "EUR", fractionDigits: 0 },
+        brush: true,
+        legendTotals: false,
+        initialWindow: "from-today",
+        markerLegend: "legend",
+        markerKinds: {
+          extra: { tone: "active", label: "widgets:dashboard:kind-extra" },
+          payoff: { tone: "positive", label: "widgets:dashboard:kind-payoff" },
+        },
+        ranges: {
+          default: "max",
+          options: [
+            { value: "y1", label: "widgets:dashboard:range-y1", months: 12 },
+            { value: "y3", label: "widgets:dashboard:range-y3", months: 36 },
+            { value: "y5", label: "widgets:dashboard:range-y5", months: 60 },
+            { value: "max", label: "widgets:dashboard:range-all" },
+          ],
+        },
+      },
       {
         kind: "list",
         id: "latest",
@@ -129,11 +200,14 @@ export const widgetsFeature = defineFeature("widgets", (r) => {
   r.queryHandler(
     "metrics:portfolio-stat",
     z.object({ region: z.string().optional() }),
-    async ({ payload: { region } }) => ({
-      value: region === "us" ? "38.120 $" : region === "eu" ? "54.630 €" : "92.753 €",
-      sub: "über 4 Konten",
+    async ({ payload: { region } }, ctx) => ({
+      value:
+        region === "us"
+          ? demoMoney(38120, "USD", ctx.locale)
+          : demoMoney(region === "eu" ? 54630 : 92753, "EUR", ctx.locale),
+      sub: demoText("widgets:catalog:portfolio-sub", ctx.locale),
       tone: "positive",
-      delta: "12 %",
+      delta: demoPercent(0.12, ctx.locale),
       deltaDirection: "up",
       deltaTone: "positive",
     }),
@@ -150,7 +224,7 @@ export const widgetsFeature = defineFeature("widgets", (r) => {
   r.queryHandler(
     "metrics:net-worth-assets",
     z.object({ region: z.string().optional() }),
-    async () => ({ value: "120.000 €" }),
+    async (_query, ctx) => ({ value: demoMoney(120000, "EUR", ctx.locale) }),
     {
       access: {
         openToAll: {
@@ -164,7 +238,7 @@ export const widgetsFeature = defineFeature("widgets", (r) => {
   r.queryHandler(
     "metrics:net-worth-debts",
     z.object({ region: z.string().optional() }),
-    async () => ({ value: "65.370 €" }),
+    async (_query, ctx) => ({ value: demoMoney(65370, "EUR", ctx.locale) }),
     {
       access: {
         openToAll: {
@@ -194,12 +268,40 @@ export const widgetsFeature = defineFeature("widgets", (r) => {
     },
   );
   r.queryHandler(
-    "metrics:latest-items",
+    "metrics:loan",
     z.object({}),
     async () => ({
+      series: LOAN_SERIES,
+      markers: LOAN_MARKERS,
+      windowStartMs: LOAN_START_MS,
+      windowEndMs: loanMonthMs(LOAN_MONTHS),
+      todayMs: LOAN_TODAY_MS,
+    }),
+    {
+      access: {
+        openToAll: {
+          reason:
+            "demo dashboard widget: returns static canned data with no per-user or " +
+            "tenant scoping; any signed-in user may query it",
+        },
+      },
+    },
+  );
+  r.queryHandler(
+    "metrics:latest-items",
+    z.object({}),
+    async (_query, ctx) => ({
       rows: [
-        { id: "i1", name: "API-Timeout eu-central", status: "resolved" },
-        { id: "i2", name: "Zertifikat erneuert", status: "done" },
+        {
+          id: "i1",
+          name: demoText("widgets:dashboard:demo-incident-timeout", ctx.locale),
+          status: "resolved",
+        },
+        {
+          id: "i2",
+          name: demoText("widgets:dashboard:demo-incident-certificate", ctx.locale),
+          status: "done",
+        },
       ],
       nextCursor: null,
     }),
@@ -249,10 +351,16 @@ export const widgetsFeature = defineFeature("widgets", (r) => {
   r.queryHandler(
     "metrics:upcoming-events",
     z.object({}),
-    async () => ({
+    async (_query, ctx) => ({
       rows: [
-        { primary: "Zinsanpassung Baudarlehen", trailing: "Aug 2026" },
-        { primary: "Bausparvertrag zuteilungsreif", trailing: "Okt 2026" },
+        {
+          primary: demoText("widgets:dashboard:demo-event-rate-adjustment", ctx.locale),
+          trailing: demoMonthYear(2026, 8, ctx.locale),
+        },
+        {
+          primary: demoText("widgets:dashboard:demo-event-savings-contract", ctx.locale),
+          trailing: demoMonthYear(2026, 10, ctx.locale),
+        },
       ],
     }),
     {
@@ -268,10 +376,18 @@ export const widgetsFeature = defineFeature("widgets", (r) => {
   r.queryHandler(
     "metrics:goal-progress",
     z.object({}),
-    async () => ({
+    async (_query, ctx) => ({
       rows: [
-        { label: "Baudarlehen", value: "42.000 € offen", fraction: 0.71 },
-        { label: "Autokredit", value: "3.200 € offen", fraction: 0.92 },
+        {
+          label: demoText("widgets:dashboard:demo-goal-mortgage", ctx.locale),
+          value: openAmount(42000, ctx.locale),
+          fraction: 0.71,
+        },
+        {
+          label: demoText("widgets:dashboard:demo-goal-car-loan", ctx.locale),
+          value: openAmount(3200, ctx.locale),
+          fraction: 0.92,
+        },
       ],
     }),
     {

package/samples/apps/styleguide/src/features/widgets/i18n.ts

@@ -19,6 +19,18 @@ export const WIDGETS_I18N = {
   "widgets:dashboard:net-worth-assets": { de: "Vermögen", en: "Assets" },
   "widgets:dashboard:net-worth-debts": { de: "Schulden", en: "Debts" },
   "widgets:dashboard:response-times": { de: "Antwortzeit", en: "Response time" },
+  "widgets:dashboard:loan": { de: "Kreditverlauf", en: "Loan balance" },
+  "widgets:dashboard:loan-remaining": { de: "Restschuld", en: "Remaining balance" },
+  "widgets:dashboard:loan-interest": { de: "Gezahlte Zinsen", en: "Interest paid" },
+  "widgets:dashboard:kind-extra": { de: "Sondertilgung", en: "Extra repayment" },
+  "widgets:dashboard:kind-payoff": { de: "Ablösung", en: "Payoff" },
+  "widgets:dashboard:marker-extra-1": { de: "Sondertilgung 2027", en: "Extra repayment 2027" },
+  "widgets:dashboard:marker-extra-2": { de: "Sondertilgung 2032", en: "Extra repayment 2032" },
+  "widgets:dashboard:marker-payoff": { de: "Kredit getilgt", en: "Loan repaid" },
+  "widgets:dashboard:range-y1": { de: "1 Jahr", en: "1 year" },
+  "widgets:dashboard:range-y3": { de: "3 Jahre", en: "3 years" },
+  "widgets:dashboard:range-y5": { de: "5 Jahre", en: "5 years" },
+  "widgets:dashboard:range-all": { de: "Alles", en: "All" },
   "widgets:dashboard:latest": { de: "Neueste Ereignisse", en: "Latest events" },
   "widgets:dashboard:col-name": { de: "Name", en: "Name" },
   "widgets:dashboard:col-status": { de: "Status", en: "Status" },
@@ -27,6 +39,34 @@ export const WIDGETS_I18N = {
   "widgets:dashboard:filter-region": { de: "Region", en: "Region" },
   "widgets:dashboard:filter-region-eu": { de: "Europa", en: "Europe" },
   "widgets:dashboard:filter-region-us": { de: "USA", en: "USA" },
+  "widgets:dashboard:filter-echo-title": { de: "Custom-Panel", en: "Custom panel" },
+  "widgets:dashboard:filter-echo-filtered": {
+    de: "Gefiltert nach Region: {region}",
+    en: "Filtered by region: {region}",
+  },
+  "widgets:dashboard:filter-echo-unfiltered": {
+    de: "Ungefiltert (alle Regionen)",
+    en: "Unfiltered (all regions)",
+  },
+  "widgets:dashboard:demo-incident-timeout": {
+    de: "API-Timeout eu-central",
+    en: "API timeout eu-central",
+  },
+  "widgets:dashboard:demo-incident-certificate": {
+    de: "Zertifikat erneuert",
+    en: "Certificate renewed",
+  },
+  "widgets:dashboard:demo-event-rate-adjustment": {
+    de: "Zinsanpassung Baudarlehen",
+    en: "Mortgage rate adjustment",
+  },
+  "widgets:dashboard:demo-event-savings-contract": {
+    de: "Bausparvertrag zuteilungsreif",
+    en: "Building savings contract ready for allocation",
+  },
+  "widgets:dashboard:demo-goal-mortgage": { de: "Baudarlehen", en: "Mortgage" },
+  "widgets:dashboard:demo-goal-car-loan": { de: "Autokredit", en: "Car loan" },
+  "widgets:dashboard:demo-amount-open": { de: "{amount} offen", en: "{amount} outstanding" },
   "widgets:catalog:portfolio": { de: "Portfolio", en: "Portfolio" },
   "widgets:catalog:portfolio-sub": { de: "über 4 Konten", en: "across 4 accounts" },
   "widgets:catalog:remaining-debt": { de: "Restschuld", en: "Remaining debt" },

package/samples/apps/styleguide/src/features/widgets/web/DashboardFilterEcho.tsx

@@ -3,18 +3,19 @@
 // gewählten Screen-Filter-Wert über `filterParams` sieht (siehe
 // DashboardFilterDefinition in feature.ts).
 
-import type { ExtensionSectionProps } from "@cosmicdrift/kumiko-renderer";
+import { type ExtensionSectionProps, useTranslation } from "@cosmicdrift/kumiko-renderer";
 import { SectionCard } from "@cosmicdrift/kumiko-renderer-web";
 import type { ReactNode } from "react";
 
 export function DashboardFilterEcho({ filterParams }: ExtensionSectionProps): ReactNode {
+  const t = useTranslation();
   const region = filterParams?.["region"];
   return (
-    <SectionCard title="Custom-Panel">
+    <SectionCard title={t("widgets:dashboard:filter-echo-title")}>
       <p className="text-sm text-muted-foreground">
         {typeof region === "string"
-          ? `Gefiltert nach Region: ${region}`
-          : "Ungefiltert (alle Regionen)"}
+          ? t("widgets:dashboard:filter-echo-filtered", { region })
+          : t("widgets:dashboard:filter-echo-unfiltered")}
       </p>
     </SectionCard>
   );

package/samples/apps/styleguide/src/features/widgets/web/Widgets.tsx

@@ -146,6 +146,10 @@ export function Widgets(): ReactNode {
         </div>
       </SectionCard>
 
+      <div className="flex h-12 w-64 items-stretch" data-testid="progress-stretch-host">
+        <ProgressBar value={0.5} testId="progress-stretch-bar" />
+      </div>
+
       <SectionCard
         title={t("widgets:catalog:repayment-model")}
         action={

package/samples/apps/ui-walkthrough/package.json

@@ -19,5 +19,8 @@
     "react-dom": "^19.2.6",
     "zod": "^4.4.3",
     "@cosmicdrift/kumiko-locale-de": "workspace:*"
+  },
+  "devDependencies": {
+    "@cosmicdrift/kumiko-testing": "workspace:*"
   }
 }

package/samples/apps/use-all-bundled/README.md

@@ -6,8 +6,7 @@ Canonical smoke-sample. Mounts every bundled-feature so framework-CI catches fea
 
 Sprint 9.8 found 12 framework bugs in a Studio deployment that all could have
 been caught earlier: 27 of 30 bundled features had zero integration coverage
-from any real app. This sample is the gate; deployment-specific rollout notes
-belong to your private operations documentation.
+from any real app. This sample is the gate.
 
 ## CI-Gate
 

package/samples/apps/use-all-bundled/feature-manifest.json

@@ -1399,7 +1399,7 @@
     },
     {
       "name": "jobs",
-      "description": "Persistence and operator tooling for background jobs registered via `r.job(...)`. Every job execution writes directly into `store_job_runs` (current status + duration) and `store_job_run_logs` (per-line log rows) from the BullMQ callbacks — no event stream in between (#2243). A daily `retention-cleanup` job deletes runs (and their logs) older than `retentionDays`; an hourly `stale-run-sweep` job marks runs stuck at status `running` past `staleRunTimeoutHours` as `failed` (#2246 — a crashed worker never fires the completion callback, so nothing else ever revisits the row). Exposes `jobs:write:trigger` (manual run) and `jobs:write:retry` (operator retry of a failed run), plus `jobs:query:list`, `jobs:query:details`, and `jobs:query:catalog` (manual jobs) for the operator UI. A job that declares `tenantVisibleFailure` also records its last failed attempt per tenant and subject in `store_tenant_job_failures`, which the tenant itself reads through `jobs:query:failures` — a translation key only, never the provider's message (fw#3079).",
+      "description": "Persistence and operator tooling for background jobs registered via `r.job(...)`. Every job execution writes directly into `store_job_runs` (current status + duration) and `store_job_run_logs` (per-line log rows) from the BullMQ callbacks — no event stream in between (#2243). A daily `retention-cleanup` job deletes runs (and their logs) older than `retentionDays`; an hourly `stale-run-sweep` job marks runs stuck at status `running` past `staleRunTimeoutHours` as `failed` (#2246 — a crashed worker never fires the completion callback, so nothing else ever revisits the row). Exposes `jobs:write:trigger` (manual run) and `jobs:write:retry` (operator retry of a failed run), plus `jobs:query:list`, `jobs:query:details`, and `jobs:query:catalog` (manual jobs) for the operator UI. A job that declares `tenantVisibleFailure` also records its last failed attempt per tenant and subject in `store_tenant_job_failures`, which the tenant itself reads through `jobs:query:failures` — a translation key only, never the provider's message (fw#3079). A job that declares `tenantVisibleRun` also keeps its run state per tenant and subject in `store_tenant_job_runs` (queued, running, plus the latest completed or failed run, no payload, error text or logs), which the tenant reads through `jobs:query:tenant-runs` (fw#3616); the stale-run sweep fails its stuck `running` rows and drops its stuck `queued` rows.",
       "toggleableDefault": null,
       "requires": [],
       "optionalRequires": [],

package/samples/apps/user-data-rights-demo/README.md

@@ -115,9 +115,7 @@ then 500s). For a real deploy, swap to the persistent provider in
 
 Then set `S3_BUCKET` / `S3_REGION` / `S3_ACCESS_KEY` / `S3_SECRET_KEY` (plus
 optional `S3_ENDPOINT` for Hetzner/S3-compatible stores) and the app override
-`file-foundation:config:provider = "s3-env"`. For full wiring and production
-verification, follow your deployment team's private operations documentation.
-
+`file-foundation:config:provider = "s3-env"`.
 ## Adding your own domain
 
 To add another DSGVO-compliant entity to the demo:

package/samples/recipes/legal-pages/README.md

@@ -87,8 +87,8 @@ imprint" decision.
 
 ```bash
 # In the app workspace:
-bun kumiko migrate generate    # detects text-block entity → SQL migration
-bun kumiko migrate apply       # one-time (pre-deploy step in prod)
+bun kumiko-schema generate <name>    # detects text-block entity → SQL migration
+bun kumiko-schema apply       # one-time (pre-deploy step in prod)
 ```
 
 ### 3. Initial seed of the required blocks
@@ -141,8 +141,7 @@ await seedTextBlock(db, {
 ```
 
 → Templates for full legally-sound texts: e-recht24.de
-or datenschutz-generator.de by Dr. Schwenke. Follow your deployment team's
-private legal-template documentation for the approved source process.
+or datenschutz-generator.de by Dr. Schwenke.
 
 ### 4. Visit the pages
 

package/samples/recipes/managed-pages/README.md

@@ -81,8 +81,8 @@ the recipe lists `createConfigFeature()` explicitly (see `src/feature.ts`).
 ### 2. Create the table
 
 ```bash
-bun kumiko migrate generate    # detects the `page` entity → SQL migration
-bun kumiko migrate apply
+bun kumiko-schema generate <name>    # detects the `page` entity → SQL migration
+bun kumiko-schema apply
 ```
 
 ### 3. Authoring + branding

package/samples/recipes/public-share-token/README.md

@@ -3,9 +3,8 @@
 Minimal pattern for **tokenized anonymous read surfaces**: authenticated users
 mint a link; visitors resolve it without login.
 
-Domain-agnostic — no credit/folder logic. Full consumer:
-[Cashcolt money-horse](https://github.com/CosmicDriftGameStudio/money-horse)
-(`share-by-token` + 5 layout templates).
+Domain-agnostic — no credit/folder logic. A full consumer adds snapshots,
+layout templates and tier gates on top.
 
 ## What it shows
 
@@ -16,8 +15,8 @@ Domain-agnostic — no credit/folder logic. Full consumer:
 - **`anonymousAccess`** on test stack (see integration test)
 
 Client wiring: [`recipes/apex-surface-auth`](../apex-surface-auth/) or a gate
-before `createKumikoApp` (money-horse uses `public-share-gate.tsx` like the public
-calculator).
+before `createKumikoApp` (a small gate component that renders the public view when
+the URL carries a share token).
 
 ## Handlers
 

package/samples/recipes/public-share-token/src/feature.ts

@@ -3,7 +3,7 @@
 // Pattern: authenticated create → plain token show-once → anonymous
 // read-by-token with SHA-256 lookup. Revoke sets revokedAt via executor.
 //
-// See money-horse for credit/folder snapshots, layouts, tier gates.
+// A full consumer adds domain snapshots, layouts and tier gates on top.
 
 import { generateToken } from "@cosmicdrift/kumiko-framework/api";
 import { fetchOne } from "@cosmicdrift/kumiko-framework/bun-db";

package/samples/recipes/security-baseline/README.md

@@ -54,6 +54,12 @@ export const APP_FEATURES = [
 For an app that does not mount `dsgvoSelfServiceFeatures()`, use
 `securityBaselineFeatures()` with its default options, as this recipe does.
 
+Dedupe keeps the first mounted instance. Late-bound state such as
+`bindAutoRevokeOnPasswordChange` must be bound on the instance returned by
+`composeFeatures`/`createApp`, not on a locally held handle to the dropped one:
+the dropped instance's hooks never run and password changes silently stop
+revoking sessions.
+
 A `createSessionsFeature({ ... })` mounted with different options than the
 preset's own no-arg instance still produces a clear boot error — dedupe only
 collapses provably interchangeable instances, never silently picks one:

package/samples/recipes/seed-migration/README.md

@@ -88,6 +88,4 @@ Wenn eine kaputte Migration den Boot blockiert: setze `skippable: true` im seed-
 
 ## See also
 
-- **Plan-Doc:** your deployment team's private operations documentation —
-  Phase-2+ Operations (projection-rebuild, event-replay, stream-migration, ...)
 - **Driver-Use-Case:** `seeds/2026-02-01-fix-admin-roles.ts` in this recipe

package/samples/recipes/tenant-settings/README.md

@@ -20,7 +20,7 @@ import { defineCreateWithTenantDefaults } from "@cosmicdrift/kumiko-bundled-feat
 export const invoiceEntity = createEntity({
   table: "read_invoices",
   fields: {
-    title: createTextField({ required: true }),
+    title: createTextField({ personal: false, reason: "is_business_data", required: true }),
     amount: createMoneyField({ required: true }),
     language: createSelectField({ options: ["en", "de", "fr"] as const }),
   },

package/packages/bundled-features/src/shared/has-where-rule.ts

@@ -1,11 +0,0 @@
-import type { OwnershipMap } from "@cosmicdrift/kumiko-framework/engine";
-
-// `where`-rules are read-path only (buildOwnershipClause). The write path
-// decides in memory against the concrete row, so a where-rule there can only
-// ever deny — boot validation rejects the shape (fw#2626). Feature factories
-// that accept an `ownership` option reject it earlier, at build time, so the
-// author gets the option name in the message instead of an entity scope.
-export function hasWhereRule(map: OwnershipMap | undefined): boolean {
-  if (!map) return false;
-  return Object.values(map).some((rule) => rule !== "all" && rule.kind === "where");
-}