@cosmicdrift/kumiko-samples 0.359.0 → 0.361.0

package/packages/bundled-features/src/user-profile/feature.ts

@@ -12,13 +12,21 @@ import {
 } from "./constants.js";
 import { changeEmailWrite } from "./handlers/change-email.write.js";
 
-export function createUserProfileFeature(): FeatureDefinition {
+export type UserProfileFeatureOptions = {
+  /** Default true. false drops the change-email handler and the email
+   *  section — for apps whose login email is managed elsewhere (SSO, admin-set). */
+  readonly allowEmailChange?: boolean;
+};
+
+export function createUserProfileFeature(options?: UserProfileFeatureOptions): FeatureDefinition {
+  const allowEmailChange = options?.allowEmailChange ?? true;
   return defineFeature("user-profile", (r) => {
     r.describe(
       "Self-service account page (fw#2312: declarative `projectionDetail` bound to " +
         "the signed-in user's own `me` row) plus its `change-email` write handler " +
         "(re-auth via current password, uniqueness check, resets emailVerified and " +
-        "expects the app to trigger the verification flow). Change-password and " +
+        "expects the app to trigger the verification flow; opt out with " +
+        "`allowEmailChange: false`, which drops handler and section). Change-password and " +
         "change-email stay custom `EditExtensionSection` components (re-auth flows a " +
         "declarative action can't express); account deletion (user-data-rights " +
         "request/cancel with grace period) is declarative fields + actions. Apps " +
@@ -38,9 +46,7 @@ export function createUserProfileFeature(): FeatureDefinition {
     r.requires("user-data-rights");
     r.requires("user-data-rights-defaults");
 
-    const handlers = {
-      changeEmail: r.writeHandler(changeEmailWrite),
-    };
+    const handlers = allowEmailChange ? { changeEmail: r.writeHandler(changeEmailWrite) } : {};
 
     // Boot-validator requires a "screen:<id>.title" key per r.screen(), plus
     // one entry per i18nKey()-marked dot-form label below — kept inline (not
@@ -100,12 +106,16 @@ export function createUserProfileFeature(): FeatureDefinition {
       },
       layout: {
         sections: [
-          {
-            kind: "extension",
-            title: i18nKey("profile.email.title"),
-            component: { react: { __component: CHANGE_EMAIL_SECTION_EXTENSION_NAME } },
-            entityName: "user",
-          },
+          ...(allowEmailChange
+            ? [
+                {
+                  kind: "extension" as const,
+                  title: i18nKey("profile.email.title"),
+                  component: { react: { __component: CHANGE_EMAIL_SECTION_EXTENSION_NAME } },
+                  entityName: "user",
+                },
+              ]
+            : []),
           {
             kind: "extension",
             title: i18nKey("profile.password.title"),

package/packages/bundled-features/src/user-profile/index.ts

@@ -8,4 +8,4 @@ export {
   UserProfileHandlers,
   UserProfileQueries,
 } from "./constants.js";
-export { createUserProfileFeature } from "./feature.js";
+export { createUserProfileFeature, type UserProfileFeatureOptions } from "./feature.js";

package/samples/apps/styleguide/src/features/examples/feature.ts

@@ -37,14 +37,19 @@ export const shippingEntity = createEntity({
 });
 
 // Profile — testet das Avatar-Image-Upload-Feld (createImageField) in der
-// Auto-Form: runde Preview + "Change"-Button, Upload an /api/files.
+// Auto-Form: rechteckige Preview + "Change"-Button, Upload an /api/files.
 export const profileEntity = createEntity({
   table: "read_examples_profile",
   fields: {
     avatar: createImageField({ maxSize: "5mb", accept: ["jpg", "jpeg", "png"] }),
     fullName: createTextField({ personal: { of: "id" }, find: "none", required: true }),
     // Demo-Daten, kein echtes PII-Encryption-Setup → Plaintext bewusst erlaubt.
-    email: createTextField({ required: true, personal: false, reason: "is_business_data" }),
+    email: createTextField({
+      required: true,
+      personal: false,
+      reason: "is_business_data",
+      sortable: true,
+    }),
     bio: createTextField({ personal: { of: "id" }, find: "none", multiline: { rows: 3 } }),
   },
 });
@@ -105,7 +110,51 @@ export const examplesFeature = defineFeature("examples", (r) => {
     },
   });
 
-  r.crud("profile", profileEntity, editFormOnly);
+  r.crud("profile", profileEntity, {
+    ...editFormOnly,
+    verbs: { delete: false, restore: false },
+  });
+
+  r.screen({
+    id: "profile-list",
+    type: "entityList",
+    entity: "profile",
+    dormant: true,
+    columns: ["avatar", "fullName", "email"],
+    searchable: true,
+    defaultSort: { field: "email", dir: "asc" },
+    rowActions: [
+      {
+        kind: "navigate",
+        id: "view",
+        label: "examples:profile:view",
+        screen: "profile-view",
+        entityId: "id",
+        rowClick: true,
+      },
+    ],
+    access: { openToAll: { reason: openReason } },
+  });
+
+  r.screen({
+    id: "profile-view",
+    type: "entityEdit",
+    entity: "profile",
+    dormant: true,
+    listScreenId: "profile-list",
+    layout: {
+      sections: [
+        {
+          columns: 2,
+          fields: [
+            { field: "avatar", span: 2, readOnly: true },
+            { field: "fullName", readOnly: true },
+            { field: "email", readOnly: true },
+          ],
+        },
+      ],
+    },
+  });
 
   r.screen({
     id: "profile-edit",

package/samples/apps/styleguide/src/features/examples/i18n.ts

@@ -38,6 +38,9 @@ export const EXAMPLES_I18N: Readonly<Record<string, LocalizedString>> = {
     de: "Aktualisiere deine persönlichen Daten und wie andere dich sehen.",
     en: "Update your personal information and how others see you.",
   },
+  "screen:profile-list.title": { de: "Profile", en: "Profiles" },
+  "screen:profile-view.title": { de: "Profil ansehen", en: "View profile" },
+  "examples:profile:view": { de: "Ansehen", en: "View" },
   "examples:profile:submit": { de: "Änderungen speichern", en: "Save changes" },
   "examples:entity:profile:field:avatar": { de: "Avatar", en: "Avatar" },
   "examples:entity:profile:field:fullName": { de: "Vollständiger Name", en: "Full name" },

package/samples/apps/ui-walkthrough/src/app/seed-rental.ts

@@ -163,6 +163,7 @@ const BOARD_LEASES: readonly BoardLease[] = [
 
 const MAX_NACHMIETER_INDEX = 2;
 const GENERATED_LEASE_COUNT = 300;
+const TERMINATED_LEASE_ID = "00000000-0000-4000-8000-000000003999";
 const FIRST_NAMES = [
   "Anna",
   "Ben",
@@ -204,7 +205,7 @@ function generatedLease(index: number): BoardLease & { readonly terminated: bool
     einheit: `WE-${String(100 + index)}`,
     liegenschaft: PROPERTIES[index % PROPERTIES.length] ?? "Haus Eichenweg",
     beginn: `${year}-${month}-01`,
-    ...(terminated && { ende: "2025-12-31" }),
+    ...(terminated && { ende: "2027-03-31" }),
     miete: 500 + (index % 20) * 15,
     terminated,
   };
@@ -240,7 +241,7 @@ export const seedRental: SeedFn = async (stack) => {
   }
   for (let index = 0; index < GENERATED_LEASE_COUNT; index++) {
     const lease = generatedLease(index);
-    await createLease(lease, lease.terminated);
+    await createLease(lease, lease.terminated, lease.terminated ? TERMINATED_LEASE_ID : undefined);
   }
 
   const maxId = boardLeaseId(MAX_NACHMIETER_INDEX);

package/samples/apps/ui-walkthrough/src/features/rental/feature.ts

@@ -11,6 +11,7 @@ import {
   germanStatusLabel,
   idPayloadSchema,
   leaseExecutor,
+  noticePeriodEnd,
   parseLeaseRow,
   partyExecutor,
   positionExecutor,
@@ -22,9 +23,11 @@ import {
 } from "./lease-support";
 import {
   adjustRentScreen,
+  leaseDetailGapsScreen,
   leaseDetailScreen,
   leaseEditScreen,
   leaseHubScreen,
+  leaseListEmptyScreen,
   leaseListScreen,
   leaseListShortScreen,
   partyEditScreen,
@@ -86,7 +89,8 @@ export const rentalFeature = defineFeature("rental", (r) => {
       return {
         id: lease.id,
         mieter: lease.mieter,
-        statusLabel: germanStatusLabel(lease.status),
+        status: lease.status,
+        statusLabel: germanStatusLabel(lease.status, lease.ende),
         grundmiete: formatGermanMoney(lease.grundmiete),
         beginn: formatGermanDate(lease.beginn),
         kuendigungsfrist: lease.kuendigungsfrist ?? "",
@@ -152,7 +156,10 @@ export const rentalFeature = defineFeature("rental", (r) => {
       leaseExecutor.update(
         {
           id: event.payload.id,
-          changes: { status: "terminated", ende: ctx.tz.today(ctx.tz.tenant).toString() },
+          changes: {
+            status: "terminated",
+            ende: noticePeriodEnd(ctx.tz.today(ctx.tz.tenant).toString()),
+          },
         },
         event.user,
         ctx.db,
@@ -232,6 +239,8 @@ export const rentalFeature = defineFeature("rental", (r) => {
   r.screen(partyEditScreen);
   r.screen(leaseDetailScreen);
   r.screen(leaseHubScreen);
+  r.screen(leaseDetailGapsScreen);
+  r.screen(leaseListEmptyScreen);
   r.screen(rentalDashboardScreen);
   r.screen(adjustRentScreen);
   r.screen(recordPositionsScreen);

package/samples/apps/ui-walkthrough/src/features/rental/i18n.ts

@@ -29,15 +29,22 @@ export const rentalTranslations: TranslationsByLocale = {
     "rental.tab.notes": "Notizen",
 
     "rental.action.open": "Öffnen",
-    "rental.action.terminate": "Mietvertrag kündigen",
+    "rental.action.terminate": "Kündigung erfassen",
     "rental.action.editLease": "Vertragsdaten bearbeiten",
-    "rental.action.terminateConfirm": "Soll dieser Mietvertrag gekündigt werden?",
+    "rental.action.terminateConfirm": "Kündigung zum Ende der Kündigungsfrist erfassen?",
     "rental.action.addPosition": "Position hinzufügen",
     "rental.action.adjustRent": "Miete anpassen",
     "rental.adjustRent.hint":
       "Die alte Position endet am Vortag, die neue beginnt am Stichtag. Art, Menge und Einheit bleiben dabei unverändert, so bleibt die Mietgeschichte nachvollziehbar.",
+    "rental.leaseListEmpty.description":
+      "Gekündigte Verträge, die aktuell als aktiv geführt werden.",
+    "rental.leaseListEmpty.emptyTitle": "Alles in Ordnung",
+    "rental.leaseListEmpty.emptyDescription":
+      "Es gibt keine gekündigten Verträge, die noch als aktiv geführt werden.",
+    "screen:lease-detail-gaps.title": "Mietvertrag",
+    "screen:lease-list-empty.title": "Mietverträge (Prüfliste)",
     "rental.action.createLease": "Mietvertrag abschließen",
-    "rental:entity:lease:noun": { one: "Mietvertrag", other: "Mietverträgen" },
+    "rental:entity:lease:noun": { one: "Mietvertrag", other: "Mietverträge" },
     "rental.search.placeholder": "Mieter, Einheit oder Liegenschaft",
     "rental.positions.description": "Alle Positionen dieses Vertrags mit ihrem Verlauf.",
     "rental.positions.noun": { one: "Position", other: "Positionen" },
@@ -134,13 +141,18 @@ export const rentalTranslations: TranslationsByLocale = {
     "rental.tab.notes": "Notes",
 
     "rental.action.open": "Open",
-    "rental.action.terminate": "Terminate lease",
+    "rental.action.terminate": "Record notice",
     "rental.action.editLease": "Edit lease details",
-    "rental.action.terminateConfirm": "Terminate this lease?",
+    "rental.action.terminateConfirm": "Record notice to the end of the notice period?",
     "rental.action.addPosition": "Add position",
     "rental.action.adjustRent": "Adjust rent",
     "rental.adjustRent.hint":
       "The old position ends the day before, the new one starts on the effective date. Type, quantity and unit stay unchanged, so the rent history stays traceable.",
+    "rental.leaseListEmpty.description": "Terminated leases that are still marked active.",
+    "rental.leaseListEmpty.emptyTitle": "All clear",
+    "rental.leaseListEmpty.emptyDescription": "No terminated leases are still marked active.",
+    "screen:lease-detail-gaps.title": "Lease",
+    "screen:lease-list-empty.title": "Leases (review list)",
     "rental.action.createLease": "Sign lease",
     "rental:entity:lease:noun": { one: "lease", other: "leases" },
     "rental.search.placeholder": "Tenant, unit or property",

package/samples/apps/ui-walkthrough/src/features/rental/lease-support.ts

@@ -61,6 +61,7 @@ const leaseRowSchema = z.object({
   liegenschaft: z.string().nullish(),
   beginn: readDateSchema,
   status: z.string(),
+  ende: readDateSchema.nullish(),
   grundmiete: moneySchema,
   kuendigungsfrist: z.string().nullish(),
   zahltag: z.number().nullish(),
@@ -90,10 +91,20 @@ const GERMAN_STATUS_LABEL: Readonly<Record<string, string>> = {
   terminated: "Gekündigt",
 };
 
-export function germanStatusLabel(status: string): string {
+export function germanStatusLabel(status: string, ende?: string | null): string {
+  if (status === "terminated" && ende) return `Gekündigt zum ${formatGermanDate(ende)}`;
   return GERMAN_STATUS_LABEL[status] ?? status;
 }
 
+// Tenant notice (§ 573c BGB, simplified to the 3rd calendar day instead of the
+// 3rd working day): notice received by then ends the lease after the month after
+// next, later notice one month later.
+export function noticePeriodEnd(isoToday: string): string {
+  const today = getTemporal().PlainDate.from(isoToday);
+  const target = today.add({ months: today.day <= 3 ? 2 : 3 });
+  return target.with({ day: target.daysInMonth }).toString();
+}
+
 export function formatGermanDate(isoDate: string): string {
   const [year, month, day] = isoDate.split("-");
   return `${day}.${month}.${year}`;

package/samples/apps/ui-walkthrough/src/features/rental/screens.ts

@@ -165,7 +165,8 @@ export const leaseDetailScreen: ProjectionDetailScreenDefinition = {
       { field: "liegenschaft", navigate: { screen: "lease-list" } },
     ],
     status: "statusLabel",
-    statusTones: { Aktiv: "ok", Gekündigt: "bad" },
+    statusToneField: "status",
+    statusTones: { active: "ok", terminated: "bad" },
   },
   metrics: ["grundmiete", "beginn", "kuendigungsfrist", "zahltag", "mieter"],
   fieldLabels: {
@@ -286,6 +287,7 @@ export const leaseDetailScreen: ProjectionDetailScreenDefinition = {
       handler: RENTAL_WRITES.leaseTerminate,
       payload: { pick: ["id"] },
       confirm: "rental.action.terminateConfirm",
+      visible: { field: "status", eq: "active" },
     },
     {
       kind: "navigate",
@@ -452,3 +454,46 @@ export const recordPositionsScreen: ActionFormScreenDefinition = {
   submitLabel: "rental.action.recordPositions",
   access: OPEN_ACCESS,
 };
+
+// Fixtures for the UI-gap screenshots: a confirm-gated primary action that is
+// visible only while the lease is active (a terminated lease falls back to edit
+// as the main button), and a list that is empty because of its default filter.
+export const leaseDetailGapsScreen: ProjectionDetailScreenDefinition = {
+  ...leaseDetailScreen,
+  id: "lease-detail-gaps",
+  detailFor: "lease",
+  primaryAction: "terminate",
+  actions: [
+    {
+      kind: "writeHandler",
+      id: "terminate",
+      icon: "x",
+      label: "rental.action.terminate",
+      handler: RENTAL_WRITES.leaseTerminate,
+      payload: { pick: ["id"] },
+      confirm: "rental.action.terminateConfirm",
+      style: "primary",
+      visible: { field: "status", eq: "active" },
+    },
+  ],
+};
+
+export const leaseListEmptyScreen: EntityListScreenDefinition = {
+  id: "lease-list-empty",
+  type: "entityList",
+  entity: "lease",
+  dormant: true,
+  description: "rental.leaseListEmpty.description",
+  emptyState: {
+    title: "rental.leaseListEmpty.emptyTitle",
+    description: "rental.leaseListEmpty.emptyDescription",
+  },
+  columns: [...OPEN_FILL_COLUMNS],
+  defaultSort: { field: "beginn", dir: "desc" },
+  filter: { field: "status", op: "eq", value: "terminated" },
+  defaultFilters: { status: ["active"] },
+  createLabel: "rental.action.createLease",
+  searchPlaceholder: "rental.search.placeholder",
+  rowActions: [openLeaseDetail],
+  access: OPEN_ACCESS,
+};

package/samples/apps/ui-walkthrough/src/features/vehicles/feature.ts

@@ -13,6 +13,7 @@ import { vehiclesTranslations } from "./i18n";
 import {
   campaignEditScreen,
   campaignListScreen,
+  vehicleEditFlowScreen,
   vehicleEditScreen,
   vehicleListScreen,
   vehicleWizardScreen,
@@ -67,6 +68,7 @@ export const vehiclesFeature = defineFeature("vehicles", (r) => {
   r.screen(vehicleListScreen);
   r.screen(vehicleEditScreen);
   r.screen(vehicleWizardScreen);
+  r.screen(vehicleEditFlowScreen);
   r.screen(campaignListScreen);
   r.screen(campaignEditScreen);
 

package/samples/apps/ui-walkthrough/src/features/vehicles/i18n.ts

@@ -10,6 +10,7 @@ export const vehiclesTranslations: TranslationsByLocale = {
     "screen:vehicle-list.title": "Fahrzeuge",
     "screen:vehicle-edit.title": "Angaben bearbeiten",
     "screen:vehicle-wizard.title": "Fahrzeug bearbeiten",
+    "screen:vehicle-edit-flow.title": "Ausstattung bearbeiten",
     "screen:campaign-list.title": "Kampagnen",
 
     "vehicles.action.edit": "Bearbeiten",
@@ -17,7 +18,7 @@ export const vehiclesTranslations: TranslationsByLocale = {
     "vehicles.action.details": "Details",
     "vehicles.action.saveChanges": "Änderungen speichern",
     "vehicles.search.placeholder": "Fahrzeug suchen",
-    "vehicles:entity:vehicle:noun": { one: "Fahrzeug", other: "Fahrzeugen" },
+    "vehicles:entity:vehicle:noun": { one: "Fahrzeug", other: "Fahrzeuge" },
     "vehicles:entity:campaign:noun": { one: "Kampagne", other: "Kampagnen" },
 
     "vehicles.section.basics": "Basisdaten",
@@ -119,6 +120,7 @@ export const vehiclesTranslations: TranslationsByLocale = {
     "screen:vehicle-list.title": "Vehicles",
     "screen:vehicle-edit.title": "Edit details",
     "screen:vehicle-wizard.title": "Edit vehicle",
+    "screen:vehicle-edit-flow.title": "Edit equipment",
     "screen:campaign-list.title": "Campaigns",
 
     "vehicles.action.edit": "Edit",

package/samples/apps/ui-walkthrough/src/features/vehicles/screens.ts

@@ -92,6 +92,24 @@ export const vehicleEditScreen: EntityEditScreenDefinition = {
   access: OPEN_ACCESS,
 };
 
+export const vehicleEditFlowScreen: EntityEditScreenDefinition = {
+  id: "vehicle-edit-flow",
+  type: "entityEdit",
+  entity: "vehicle",
+  dormant: true,
+  listScreenId: "vehicle-list",
+  recordTitleField: "modell",
+  layout: {
+    sections: [
+      {
+        title: "vehicles.section.equipment",
+        fields: ["marke", "modell", { field: "ausstattung", span: 2 }],
+      },
+    ],
+  },
+  access: OPEN_ACCESS,
+};
+
 export const vehicleWizardScreen: EntityEditScreenDefinition = {
   id: "vehicle-wizard",
   type: "entityEdit",

package/samples/apps/use-all-bundled/feature-manifest.json

@@ -1,6 +1,6 @@
 {
   "source": "samples/apps/use-all-bundled APP_FEATURES (composeFeatures includeBundled + signup)",
-  "featureCount": 81,
+  "featureCount": 82,
   "features": [
     {
       "name": "admin-shell",
@@ -2072,6 +2072,32 @@
         "recommended": false
       }
     },
+    {
+      "name": "renderer-pdf",
+      "description": "Renderer plugin for `kind=\"document-pdf\"` that draws a table document (title, meta lines, weighted columns, repeating header, page footer) as a PDF in pure JavaScript, without a browser or Puppeteer service. `payload.variables` must be a `PdfTableDocument`. Requires `renderer-foundation`; mount a Puppeteer-based plugin instead when you need HTML/CSS layouts.",
+      "toggleableDefault": null,
+      "requires": [
+        "renderer-foundation"
+      ],
+      "optionalRequires": [],
+      "configReads": [],
+      "exposesApis": [],
+      "usesApis": [],
+      "extensionsUsed": [
+        {
+          "extensionName": "renderer",
+          "entityName": "pdf"
+        }
+      ],
+      "configKeys": [],
+      "secrets": [],
+      "writeHandlers": [],
+      "uiHints": {
+        "displayLabel": "Renderer · PDF tables",
+        "category": "notifications",
+        "recommended": false
+      }
+    },
     {
       "name": "renderer-simple",
       "description": "Default renderer plugin for `kind=\"notification\"`: takes a structured `EmailTemplateData` variable map (with `header`, `sections[]` of text/button objects, and optional `footer`; falls back to `title`/`body` if no structured fields are present) and returns rendered HTML with inline CSS. Requires `renderer-foundation`; sufficient for plain notification emails — swap it for `renderer-mail-html` if you need MJML/Markdown layouts.",
@@ -3054,7 +3080,7 @@
     },
     {
       "name": "user-profile",
-      "description": "Self-service account page (fw#2312: declarative `projectionDetail` bound to the signed-in user's own `me` row) plus its `change-email` write handler (re-auth via current password, uniqueness check, resets emailVerified and expects the app to trigger the verification flow). Change-password and change-email stay custom `EditExtensionSection` components (re-auth flows a declarative action can't express); account deletion (user-data-rights request/cancel with grace period) is declarative fields + actions. Apps place the screen (id \"profile\") in their logged-in area via r.nav — no `type: \"custom\"` / `__component` registration needed on the app side anymore. Requires `user`, `auth-email-password`, `user-data-rights`, and `user-data-rights-defaults` (so the GDPR boot-validator finds export/delete hooks for `user`'s PII fields once user-data-rights is mounted).",
+      "description": "Self-service account page (fw#2312: declarative `projectionDetail` bound to the signed-in user's own `me` row) plus its `change-email` write handler (re-auth via current password, uniqueness check, resets emailVerified and expects the app to trigger the verification flow; opt out with `allowEmailChange: false`, which drops handler and section). Change-password and change-email stay custom `EditExtensionSection` components (re-auth flows a declarative action can't express); account deletion (user-data-rights request/cancel with grace period) is declarative fields + actions. Apps place the screen (id \"profile\") in their logged-in area via r.nav — no `type: \"custom\"` / `__component` registration needed on the app side anymore. Requires `user`, `auth-email-password`, `user-data-rights`, and `user-data-rights-defaults` (so the GDPR boot-validator finds export/delete hooks for `user`'s PII fields once user-data-rights is mounted).",
       "toggleableDefault": null,
       "requires": [
         "user",

package/samples/apps/use-all-bundled/schema/generate.ts

@@ -322,6 +322,11 @@ const FEATURE_IMPORT_REGISTRY: Record<string, FeatureImport> = {
     path: "@cosmicdrift/kumiko-bundled-features/renderer-simple",
     factory: "createRendererSimpleFeature",
   },
+  "renderer-pdf": {
+    kind: "factory",
+    path: "@cosmicdrift/kumiko-bundled-features/renderer-pdf",
+    factory: "createRendererPdfFeature",
+  },
   "rate-limiting": {
     kind: "factory",
     path: "@cosmicdrift/kumiko-bundled-features/rate-limiting",

package/samples/apps/use-all-bundled/src/run-config.ts

@@ -76,6 +76,7 @@ import { createPersonalAccessTokensFeature } from "@cosmicdrift/kumiko-bundled-f
 import { securityBaselineFeatures } from "@cosmicdrift/kumiko-bundled-features/presets";
 import { readinessFeature } from "@cosmicdrift/kumiko-bundled-features/readiness";
 import { createRendererFoundationFeature } from "@cosmicdrift/kumiko-bundled-features/renderer-foundation";
+import { createRendererPdfFeature } from "@cosmicdrift/kumiko-bundled-features/renderer-pdf";
 import { createRendererSimpleFeature } from "@cosmicdrift/kumiko-bundled-features/renderer-simple";
 import { createSecretsFeature } from "@cosmicdrift/kumiko-bundled-features/secrets";
 import { createSeoFeature } from "@cosmicdrift/kumiko-bundled-features/seo";
@@ -336,6 +337,7 @@ export const APP_FEATURES = [
   collectionLabelsFeature,
   createRendererFoundationFeature(),
   createRendererSimpleFeature(),
+  createRendererPdfFeature(),
 
   // managed-pages: requires config (auto-bundled). Smoke resolver never serves
   // (boot-only). allowCustomCss:true boot-validates the CSS code path + emits

package/samples/recipes/files-post-processing/src/feature.ts

@@ -21,6 +21,9 @@ import type { DerivativePublicPredicateArgs } from "@cosmicdrift/kumiko-bundled-
 import {
   createEntity,
   createImageField,
+  defineEntityCreateHandler,
+  defineEntityDetailHandler,
+  defineEntityUpdateHandler,
   defineFeature,
   EXT_DERIVATIVE_PUBLIC_PREDICATE,
 } from "@cosmicdrift/kumiko-framework/engine";
@@ -32,7 +35,7 @@ import { z } from "zod";
 // the public route's fixed presets (thumb/card/hero/full, entry point 3)
 // share the name `thumb` but are a completely separate spec — same label,
 // different whitelist, different actual pixels.
-const photoEntity = createEntity({
+export const photoEntity = createEntity({
   table: "files_post_processing_photos",
   fields: {
     original: createImageField({
@@ -59,6 +62,13 @@ export const filesPostProcessingFeature = defineFeature("files-post-processing",
   r.requires("file-derivatives");
   r.entity("photo", photoEntity);
 
+  // Uploading a file to a photo's field needs the same rights as saving the
+  // photo, so the photo must exist and the uploader needs update access.
+  const photoAccess = { access: { roles: ["Admin"] } } as const;
+  r.writeHandler(defineEntityCreateHandler("photo", photoEntity, photoAccess));
+  r.writeHandler(defineEntityUpdateHandler("photo", photoEntity, photoAccess));
+  r.queryHandler(defineEntityDetailHandler("photo", photoEntity, photoAccess));
+
   // Entry point 2 — imperative. A real app would gate this behind real
   // roles; `openToAll` keeps the recipe's HTTP wiring to one line.
   r.writeHandler(

package/samples/recipes/pdf-audit-export/README.md

@@ -0,0 +1,22 @@
+# PDF Audit Export
+
+A write handler exports tenant data as a PDF and keeps it as a FileRef.
+
+## What it shows
+
+- `renderTablePdf` (`@cosmicdrift/kumiko-bundled-features/renderer-pdf`) draws a table document in pure JavaScript: repeating header, weighted columns, page footer. The handler passes ready-formatted strings.
+- `createFileRefFromBytes` (`@cosmicdrift/kumiko-framework/files`) stores the bytes like an upload (validation, tenant-prefixed storage key, `fileRef.created` event); the tenant comes from the caller.
+- The result is a normal FileRef: `GET /api/files/:id` serves it with `Content-Type: application/pdf`, other tenants get 404.
+
+## Source
+
+Feature entry point: `src/feature.ts`. The export reads at most 200 inspections per call.
+
+## Tests
+
+Needs a running Postgres and `TEST_DATABASE_URL` set (e.g. `postgres://postgres:postgres@127.0.0.1:5432/postgres`, see `demo/.env.example`).
+
+```bash
+cd samples/recipes/pdf-audit-export
+bun test
+```

package/samples/recipes/pdf-audit-export/package.json

@@ -0,0 +1,12 @@
+{
+  "name": "@cosmicdrift/kumiko-sample-pdf-audit-export",
+  "description": "Exports an audit table as a PDF: a write handler renders rows with renderTablePdf and stores the bytes as a FileRef via createFileRefFromBytes.",
+  "private": true,
+  "dependencies": {
+    "@cosmicdrift/kumiko-bundled-features": "workspace:*",
+    "@cosmicdrift/kumiko-framework": "workspace:*"
+  },
+  "devDependencies": {
+    "unpdf": "^1.8.1"
+  }
+}