@cosmicdrift/kumiko-samples 0.365.1 → 0.366.0

package/samples/recipes/anonymous-access/src/feature.ts

@@ -52,41 +52,37 @@ export const productTable = buildEntityTable("product", productEntity);
 export const guestOrderTable = buildEntityTable("guest-order", guestOrderEntity);
 
 export const anonymousAccessFeature = defineFeature("shop", (r) => {
-  r.entity("product", productEntity);
-  r.entity("guest-order", guestOrderEntity);
+  r.entity({ name: "product", ...productEntity });
+  r.entity({ name: "guest-order", ...guestOrderEntity });
 
   // Public listing: anonymous + authenticated customers see it. Combining
   // the roles in one handler is preferred over duplicating the read path —
   // the handler body can branch on `event.user.id === "anonymous"` if it
   // needs to personalise (e.g. show a sign-in CTA, hide a wishlist button).
-  r.queryHandler(
-    "product:list",
-    z.object({}),
-    async (_event, ctx) => ctx.db.selectMany(productTable),
-    {
-      access: { roles: [...access.anonymous, "User", "Admin"] },
-      rateLimit: { per: "ip+handler", limit: 60, windowSeconds: 60 },
-    },
-  );
+  r.queryHandler({
+    name: "product:list",
+    schema: z.object({}),
+    handler: async (_event, ctx) => ctx.db.selectMany(productTable),
+    access: { roles: [...access.anonymous, "User", "Admin"] },
+    rateLimit: { per: "ip+handler", limit: 60, windowSeconds: 60 },
+  });
 
   // Authenticated-only listing — same data, different access rule. The
   // openToAll declaration here is the regression-guard: even with
   // anonymousAccess enabled on the server, this endpoint stays gated to
   // logged-in users.
-  r.queryHandler(
-    "product:authenticated-only",
-    z.object({}),
-    async (_event, ctx) => ctx.db.selectMany(productTable),
-    {
-      access: {
-        openToAll: {
-          reason:
-            "any signed-in (non-anonymous) user may list products here; this handler is " +
-            "the regression-guard proving anonymousAccess never silently exposes an authenticated-only endpoint",
-        },
+  r.queryHandler({
+    name: "product:authenticated-only",
+    schema: z.object({}),
+    handler: async (_event, ctx) => ctx.db.selectMany(productTable),
+    access: {
+      openToAll: {
+        reason:
+          "any signed-in (non-anonymous) user may list products here; this handler is " +
+          "the regression-guard proving anonymousAccess never silently exposes an authenticated-only endpoint",
       },
     },
-  );
+  });
 
   // Anonymous + authenticated guest checkout. Stores the synthesised user-id
   // ("anonymous") in `placedBy` so audit-trail / support queries can tell
@@ -97,36 +93,33 @@ export const anonymousAccessFeature = defineFeature("shop", (r) => {
   const guestOrderExecutor = createEventStoreExecutor(guestOrderTable, guestOrderEntity, {
     entityName: "guest-order",
   });
-  r.writeHandler(
-    "guest-order:place",
-    z.object({
+  r.writeHandler({
+    name: "guest-order:place",
+    schema: z.object({
       productId: z.uuid(),
       email: z.string().email(),
     }),
-    async (event, ctx) =>
-      guestOrderExecutor.create({ ...event.payload, placedBy: event.user.id }, event.user, ctx.db),
-    {
-      // `email` is recordOwned PII (personal: { of: "id" }) written by an
-      // anonymous root handler — the runtime personal-data gate
-      // (write-origin.ts) requires this explicit opt-in, the same way the
-      // boot validator would reject an openToAll declaration missing it.
-      access: { roles: [...access.anonymous, "User"], personalData: "public-intake" },
-      rateLimit: { per: "ip+handler", limit: 30, windowSeconds: 60 },
-    },
-  );
+    handler: async (event, ctx) =>
+      guestOrderExecutor.create({ ...event.payload, placedBy: event.user.id }, event.user, ctx.db), // `email` is recordOwned PII (personal: { of: "id" }) written by an
+    // anonymous root handler — the runtime personal-data gate
+    // (write-origin.ts) requires this explicit opt-in, the same way the
+    // boot validator would reject an openToAll declaration missing it.
+    access: { roles: [...access.anonymous, "User"], personalData: "public-intake" },
+    rateLimit: { per: "ip+handler", limit: 30, windowSeconds: 60 },
+  });
 
   // Admin-only product CRUD — proves role-gated handlers still reject
   // anonymous callers. Same shape as any other handler in the framework:
   // anonymous is just a regular role, not a special case.
-  r.writeHandler(
-    "product:create",
-    z.object({ name: z.string().min(1), priceCents: z.string() }),
-    async (event, ctx) => {
+  r.writeHandler({
+    name: "product:create",
+    schema: z.object({ name: z.string().min(1), priceCents: z.string() }),
+    handler: async (event, ctx) => {
       const exec = createEventStoreExecutor(productTable, productEntity, {
         entityName: "product",
       });
       return exec.create(event.payload, event.user, ctx.db);
     },
-    { access: { roles: ["Admin"] } },
-  );
+    access: { roles: ["Admin"] },
+  });
 });

package/samples/recipes/anonymous-access-multitenant/src/feature.ts

@@ -34,32 +34,30 @@ export const productEntity = createEntity({
 export const productTable = buildEntityTable("product", productEntity);
 
 export const multiTenantShopFeature = defineFeature("mtshop", (r) => {
-  r.entity("product", productEntity);
+  r.entity({ name: "product", ...productEntity });
 
   // Public listing — every tenant has its own products, scoped by tenantId
   // automatically via the framework's tenant-isolation. Anonymous visitors
   // see only the tenant they landed on.
-  r.queryHandler(
-    "product:list",
-    z.object({}),
-    async (_event, ctx) => ctx.db.selectMany(productTable),
-    {
-      access: { roles: [...access.anonymous, "User", "Admin"] },
-      rateLimit: { per: "ip+handler", limit: 60, windowSeconds: 60 },
-    },
-  );
+  r.queryHandler({
+    name: "product:list",
+    schema: z.object({}),
+    handler: async (_event, ctx) => ctx.db.selectMany(productTable),
+    access: { roles: [...access.anonymous, "User", "Admin"] },
+    rateLimit: { per: "ip+handler", limit: 60, windowSeconds: 60 },
+  });
 
   // Admin-only — proves role-gating still works on top of the multi-tenant
   // anonymous resolution.
-  r.writeHandler(
-    "product:create",
-    z.object({ name: z.string().min(1) }),
-    async (event, ctx) => {
+  r.writeHandler({
+    name: "product:create",
+    schema: z.object({ name: z.string().min(1) }),
+    handler: async (event, ctx) => {
       const exec = createEventStoreExecutor(productTable, productEntity, {
         entityName: "product",
       });
       return exec.create(event.payload, event.user, ctx.db);
     },
-    { access: { roles: ["Admin"] } },
-  );
+    access: { roles: ["Admin"] },
+  });
 });

package/samples/recipes/auth-foundation-providers/src/feature.ts

@@ -47,7 +47,7 @@ export function createSubdomainTenantRoutingFeature(
   const reserved = new Set(opts.reservedSubdomains ?? ["www", "app", "api", "admin"]);
 
   return defineFeature("sample-subdomain-tenant-routing", (r) => {
-    r.requires("auth-foundation");
+    r.requires({ features: ["auth-foundation"] });
 
     const resolverPlugin: TenantResolverProvider = {
       trust,

package/samples/recipes/basic-entity/README.md

@@ -28,7 +28,7 @@ task-management → single feature, single `task` entity, six CRUD handlers
 ```
 
 No bundled features required — this is the baseline before you add
-`r.requires("tenant")`, auth, or cross-feature extensions.
+`r.requires({ features: ["tenant"] })`, auth, or cross-feature extensions.
 
 ## Flow
 

package/samples/recipes/boot-check/README.md

@@ -13,7 +13,7 @@ never mounted, and nothing caught it — until now.
   feature-prefixed message.
 - **Conditional invariants `r.requires` can't express** — the check only
   fails when *this* feature's own shape demands it (has a PII field), not
-  unconditionally. A plain `r.requires("user-data-hook")` would fail even
+  unconditionally. A plain `r.requires({ features: ["user-data-hook"] })` would fail even
   for a prompt-store variant with no PII fields at all.
 - **`validateBoot`** — the framework's boot-time validator, run directly
   against a feature list. `bootCheck` has no DB dependency, so this is the

package/samples/recipes/boot-check/src/feature.ts

@@ -6,7 +6,7 @@ import { createEntity, createTextField, defineFeature } from "@cosmicdrift/kumik
 
 // A prompt-store integration trap: a feature with a PII field was mounted
 // without its required companion feature, and nothing caught it at boot.
-// r.requires("user-data-hook") can't express this — it would
+// r.requires({ features: ["user-data-hook"] }) can't express this — it would
 // fail even for a prompt-store variant with no PII fields at all.
 const promptFields = {
   text: createTextField({
@@ -16,7 +16,7 @@ const promptFields = {
 };
 
 export const promptStoreFeature = defineFeature("prompt-store", (r) => {
-  r.entity("prompt", createEntity({ fields: promptFields }));
+  r.entity({ name: "prompt", ...createEntity({ fields: promptFields }) });
   r.bootCheck(({ features }) => {
     const hasPiiField = Object.values(promptFields).some((field) => field.pii);
     const hasUserDataHook = features.some((f) => f.name === "user-data-hook");

package/samples/recipes/chat-channels/src/feature.ts

@@ -16,7 +16,7 @@ import * as z from "zod";
 export const OPS_ANNOUNCEMENT_TYPE = qn("ops", "notify", "announcement");
 
 export const opsFeature = defineFeature("ops", (r) => {
-  r.requires("delivery");
+  r.requires({ features: ["delivery"] });
 
   r.writeHandler(
     defineWriteHandler({

package/samples/recipes/cross-feature-events/src/feature.ts

@@ -64,7 +64,7 @@ export const capturedEvents: CapturedEvent[] = [];
 // --- Feature ---
 
 export const pubsubOrderFeature = defineFeature("pubsubOrders", (r) => {
-  r.entity("pubsub-order", orderEntity);
+  r.entity({ name: "pubsub-order", ...orderEntity });
 
   // Define the event shape once. The returned `.name` is the qualified
   // name ("pubsub-orders:event:order-placed") — pass it to ctx.appendEvent.
@@ -76,10 +76,10 @@ export const pubsubOrderFeature = defineFeature("pubsubOrders", (r) => {
 
   const { executor: orderExecutor } = createEntityExecutor("pubsub-order", orderEntity);
 
-  r.writeHandler(
-    "order:place",
-    z.object({ customer: z.string().min(1), product: z.string().min(1) }),
-    async (event, ctx) => {
+  r.writeHandler({
+    name: "order:place",
+    schema: z.object({ customer: z.string().min(1), product: z.string().min(1) }),
+    handler: async (event, ctx) => {
       const result = await orderExecutor.create(event.payload, event.user, ctx.db);
       if (result.isSuccess) {
         // emitEvent runs inside the executor's TX and is typed against
@@ -100,8 +100,8 @@ export const pubsubOrderFeature = defineFeature("pubsubOrders", (r) => {
       }
       return result;
     },
-    { access: { roles: ["Admin", "Customer"] } },
-  );
+    access: { roles: ["Admin", "Customer"] },
+  });
 
   // Async consumer — Marten-style. Fires after commit, via the event-
   // dispatcher. No `table` means this MSP is pure side-effect (no state

package/samples/recipes/currencies-global/src/feature.ts

@@ -49,9 +49,9 @@ const CURRENCY_CATALOG = [
 ] as const;
 
 export const currenciesGlobalFeature = defineFeature("currenciesGlobal", (r) => {
-  const currency = r.entity("currency", currencyEntity);
-  r.entity("tenant-currency", tenantCurrencyEntity);
-  r.entity("invoice", invoiceEntity);
+  const currency = r.entity({ name: "currency", ...currencyEntity });
+  r.entity({ name: "tenant-currency", ...tenantCurrencyEntity });
+  r.entity({ name: "invoice", ...invoiceEntity });
 
   // Seed global currency table — available for all tenants to pick from
   r.referenceData(currency, [...CURRENCY_CATALOG], { upsertKey: "code" });

package/samples/recipes/currencies-per-tenant/src/feature.ts

@@ -19,8 +19,8 @@ export { currencyEntity } from "./entities/currency";
 export { invoiceEntity } from "./entities/invoice";
 
 export const currenciesPerTenantFeature = defineFeature("currenciesPerTenant", (r) => {
-  r.entity("currency", currencyEntity);
-  r.entity("invoice", invoiceEntity);
+  r.entity({ name: "currency", ...currencyEntity });
+  r.entity({ name: "invoice", ...invoiceEntity });
 
   // No r.referenceData() — tenants create currencies themselves
   r.writeHandler(currencyCreate);

package/samples/recipes/custom-fields-basic/README.md

@@ -36,7 +36,7 @@ property-management    → our feature: opts the `property` entity into
                          custom-fields via wireCustomFieldsFor
 ```
 
-The `property-management` feature `r.requires("custom-fields")` — the
+The `property-management` feature `r.requires({ features: ["custom-fields"] })` — the
 bundle is non-optional for this recipe because the wired entity would
 otherwise have an empty jsonb column and no way to write into it.
 

package/samples/recipes/custom-fields-basic/src/feature.ts

@@ -53,9 +53,10 @@ function propertyExecutor() {
 // --- Feature ---
 
 export const propertyFeature = defineFeature("property-management", (r) => {
-  r.requires("custom-fields");
+  r.requires({ features: ["custom-fields"] });
 
-  r.entity("property", {
+  r.entity({
+    name: "property",
     table: "read_sample_cf_properties",
     fields: {
       name: { type: "text", required: true, maxLength: 200 },

package/samples/recipes/custom-handlers/README.md

@@ -13,9 +13,9 @@ logic is yours.
 
 ## What it shows
 
-- **`r.writeHandler(name, schema, handler, options)`** — the positional
-  inline form, useful when the handler body is short and stays close to
-  its registration.
+- **`r.writeHandler({ name, schema, handler, access })`** — the inline
+  form, useful when the handler body is short and stays close to its
+  registration.
 - **Read-modify-write with optimistic locking** — `increment` reads the
   current count, computes the new one, and updates with the version it
   read. Two concurrent increments cannot both succeed.

package/samples/recipes/custom-handlers/src/feature.ts

@@ -25,7 +25,7 @@ export const counterEntity = createEntity({
 });
 
 export const counterFeature = defineFeature("counters", (r) => {
-  r.entity("counter", counterEntity);
+  r.entity({ name: "counter", ...counterEntity });
 
   // createEntityExecutor bundles buildEntityTable + createEventStoreExecutor —
   // the same pair every custom write-handler opens with. Collapses 3 lines
@@ -33,19 +33,19 @@ export const counterFeature = defineFeature("counters", (r) => {
   const { executor: counterExecutor } = createEntityExecutor("counter", counterEntity);
 
   // Standard create
-  r.writeHandler(
-    "counter:create",
-    z.object({ name: z.string().min(1) }),
-    async (event, ctx) =>
+  r.writeHandler({
+    name: "counter:create",
+    schema: z.object({ name: z.string().min(1) }),
+    handler: async (event, ctx) =>
       counterExecutor.create({ ...event.payload, count: 0 }, event.user, ctx.db),
-    { access: { roles: ["Admin"] } },
-  );
+    access: { roles: ["Admin"] },
+  });
 
   // Custom handler: increment with business logic
-  r.writeHandler(
-    "counter:increment",
-    z.object({ id: z.uuid(), amount: z.number().min(1).max(100) }),
-    async (event, ctx) => {
+  r.writeHandler({
+    name: "counter:increment",
+    schema: z.object({ id: z.uuid(), amount: z.number().min(1).max(100) }),
+    handler: async (event, ctx) => {
       const current = await counterExecutor.detail({ id: event.payload.id }, event.user, ctx.db);
       if (!current) {
         return failNotFound("counter", event.payload.id);
@@ -65,14 +65,14 @@ export const counterFeature = defineFeature("counters", (r) => {
         ctx.db,
       );
     },
-    { access: { roles: ["Admin", "User"] } },
-  );
+    access: { roles: ["Admin", "User"] },
+  });
 
   // Custom handler: reset to zero
-  r.writeHandler(
-    "counter:reset",
-    z.object({ id: z.uuid() }),
-    async (event, ctx) =>
+  r.writeHandler({
+    name: "counter:reset",
+    schema: z.object({ id: z.uuid() }),
+    handler: async (event, ctx) =>
       // Admin reset: last-writer-wins is intentional — there's no useful
       // concurrent-reset race to guard against.
       counterExecutor.update(
@@ -81,16 +81,16 @@ export const counterFeature = defineFeature("counters", (r) => {
         ctx.db,
         { skipOptimisticLock: true },
       ),
-    { access: { roles: ["Admin"] } },
-  );
+    access: { roles: ["Admin"] },
+  });
 
   // Custom query: only counters above a threshold. list() returns one page
   // (default 50, max 200, MAX_LIST_LIMIT), so a JS filter would miss rows after
   // page 1; filter in the query instead. totalCount counts over the whole WHERE.
-  r.queryHandler(
-    "counter:active",
-    z.object({ minCount: z.number().int().default(1), cursor: z.string().optional() }),
-    async (query, ctx) =>
+  r.queryHandler({
+    name: "counter:active",
+    schema: z.object({ minCount: z.number().int().default(1), cursor: z.string().optional() }),
+    handler: async (query, ctx) =>
       counterExecutor.list(
         {
           filter: { field: "count", op: "gte", value: query.payload.minCount },
@@ -100,28 +100,24 @@ export const counterFeature = defineFeature("counters", (r) => {
         query.user,
         ctx.db,
       ),
-    {
-      access: {
-        openToAll: {
-          reason:
-            "any signed-in user may list active counters; the sample has no per-user counter ownership",
-        },
+    access: {
+      openToAll: {
+        reason:
+          "any signed-in user may list active counters; the sample has no per-user counter ownership",
       },
     },
-  );
+  });
 
   // Standard detail
-  r.queryHandler(
-    "counter:detail",
-    z.object({ id: z.uuid() }),
-    async (query, ctx) => counterExecutor.detail(query.payload, query.user, ctx.db),
-    {
-      access: {
-        openToAll: {
-          reason:
-            "any signed-in user may read a counter by id; the sample has no per-user counter ownership",
-        },
+  r.queryHandler({
+    name: "counter:detail",
+    schema: z.object({ id: z.uuid() }),
+    handler: async (query, ctx) => counterExecutor.detail(query.payload, query.user, ctx.db),
+    access: {
+      openToAll: {
+        reason:
+          "any signed-in user may read a counter by id; the sample has no per-user counter ownership",
       },
     },
-  );
+  });
 });

package/samples/recipes/dashboard-stats/src/feature.ts

@@ -36,10 +36,10 @@ export const ticketFeature = defineFeature("tickets", (r) => {
   // Flat result: each dashboard stat reads one field via its valueField.
   // limit: 1 keeps the page tiny; totalCount counts over the whole WHERE in
   // the database, so no rows are loaded just to be counted.
-  r.queryHandler(
-    "ticket:stats",
-    z.object({}),
-    async (query, ctx) => {
+  r.queryHandler({
+    name: "ticket:stats",
+    schema: z.object({}),
+    handler: async (query, ctx) => {
       const countWithStatus = async (status: (typeof TICKET_STATUSES)[number]): Promise<number> => {
         const page = await ticketExecutor.list(
           { filter: { field: "status", op: "eq", value: status }, limit: 1, totalCount: true },
@@ -54,8 +54,8 @@ export const ticketFeature = defineFeature("tickets", (r) => {
       ]);
       return { open, closed, total: open + closed };
     },
-    { access: readerRoles },
-  );
+    access: readerRoles,
+  });
 
   r.translations({
     keys: {

package/samples/recipes/delivery-notifications/README.md

@@ -28,7 +28,7 @@ channel-inApp / channel-email / channel-push
 support           → our business logic (tickets + the notification declaration)
 ```
 
-The `support` feature `r.requires("delivery")`: channels are features that attach to delivery, but `support` doesn't need to know them.
+The `support` feature `r.requires({ features: ["delivery"] })`: channels are features that attach to delivery, but `support` doesn't need to know them.
 
 ## Flow
 

package/samples/recipes/delivery-notifications/src/feature.ts

@@ -47,9 +47,9 @@ function ticketExecutor() {
 export const TICKET_ASSIGNED = qn("support", QnTypes.notify, "ticket-assigned");
 
 export const supportFeature = defineFeature("support", (r) => {
-  r.requires("delivery");
+  r.requires({ features: ["delivery"] });
 
-  r.entity("ticket", ticketEntity);
+  r.entity({ name: "ticket", ...ticketEntity });
 
   r.notification("ticket-assigned", {
     variables: {
@@ -79,16 +79,16 @@ export const supportFeature = defineFeature("support", (r) => {
     },
   });
 
-  r.writeHandler(
-    "ticket:create",
-    z.object({
+  r.writeHandler({
+    name: "ticket:create",
+    schema: z.object({
       title: z.string().min(1),
       description: z.string().optional(),
       assigneeId: z.uuid().optional(),
       priority: z.enum(["low", "normal", "critical"]),
       status: z.string().default("open"),
     }),
-    async (event, ctx) => {
+    handler: async (event, ctx) => {
       const created = await ticketExecutor().create(event.payload, event.user, ctx.db);
       const assigneeId = event.payload.assigneeId;
       // No assignee, no notification.
@@ -109,6 +109,6 @@ export const supportFeature = defineFeature("support", (r) => {
       });
       return created;
     },
-    { access: { roles: ["Admin", "Support"] } },
-  );
+    access: { roles: ["Admin", "Support"] },
+  });
 });

package/samples/recipes/designer-demo/src/feature.ts

@@ -12,7 +12,8 @@ import { z } from "zod";
 defineFeature("designerDemo", (r) => {
   r.optionalRequires("analytics");
 
-  r.entity("task", {
+  r.entity({
+    name: "task",
     fields: {
       title: { type: "text", required: true },
       done: { type: "boolean", default: false },

package/samples/recipes/embedded/src/feature.ts

@@ -39,7 +39,7 @@ const openRead = {
 } as const;
 
 export const embeddedFeature = defineFeature("contacts", (r) => {
-  r.entity("contact", contactEntity);
+  r.entity({ name: "contact", ...contactEntity });
 
   r.writeHandler(contactCreate);
   r.queryHandler(contactDetail);

package/samples/recipes/embedded-entity-form/src/feature.ts

@@ -55,7 +55,7 @@ export const prospectsFeature = defineFeature("prospects", (r) => {
     read: openRead,
     verbs: { update: false },
   });
-  r.entity("prospect", prospectEntity);
+  r.entity({ name: "prospect", ...prospectEntity });
 
   const { executor: suggestionExecutor } = createEntityExecutor("suggestion", suggestionEntity);
   const { executor: prospectExecutor } = createEntityExecutor("prospect", prospectEntity);
@@ -64,10 +64,10 @@ export const prospectsFeature = defineFeature("prospects", (r) => {
   // edited (RenderEdit's onChange `changes`, same delta the controlled mode
   // reports) — the handler owns merging that onto the suggestion it already
   // has, so an untouched field never has to round-trip through the browser.
-  r.writeHandler(
-    "prospect:accept",
-    z.object({ suggestionId: z.uuid(), changes: acceptChangesSchema }),
-    async (event, ctx) => {
+  r.writeHandler({
+    name: "prospect:accept",
+    schema: z.object({ suggestionId: z.uuid(), changes: acceptChangesSchema }),
+    handler: async (event, ctx) => {
       const suggestion = await suggestionExecutor.detail(
         { id: event.payload.suggestionId },
         event.user,
@@ -108,13 +108,13 @@ export const prospectsFeature = defineFeature("prospects", (r) => {
       if (!flipped.isSuccess) return flipped;
       return created;
     },
-    adminWrite,
-  );
+    ...adminWrite,
+  });
 
-  r.queryHandler(
-    "prospect:detail",
-    z.object({ id: z.uuid() }),
-    async (query, ctx) => prospectExecutor.detail(query.payload, query.user, ctx.db),
-    openRead,
-  );
+  r.queryHandler({
+    name: "prospect:detail",
+    schema: z.object({ id: z.uuid() }),
+    handler: async (query, ctx) => prospectExecutor.detail(query.payload, query.user, ctx.db),
+    ...openRead,
+  });
 });

package/samples/recipes/encrypted-tenant-config/src/feature.ts

@@ -80,7 +80,7 @@ const chargeHandler = defineWriteHandler({
 });
 
 export const billingFeature = defineFeature(FEATURE, (r) => {
-  r.requires("config");
+  r.requires({ features: ["config"] });
   r.config("stripe-api-key", stripeApiKeyDef);
   r.writeHandler(chargeHandler);
   // Kein r.screen/r.nav: der `mask`-Eintrag auf dem Key lässt