@cosmicdrift/kumiko-samples 0.403.0 → 0.404.1

package/samples/recipes/record-detail-layout/package.json

@@ -9,14 +9,14 @@
   "dependencies": {
     "@cosmicdrift/kumiko-framework": "workspace:*",
     "@cosmicdrift/kumiko-renderer": "workspace:*",
-    "react": "^19.2.6"
+    "react": "^19.3.1"
   },
   "devDependencies": {
     "@cosmicdrift/kumiko-server-runtime": "workspace:*",
     "@cosmicdrift/kumiko-testing": "workspace:*",
-    "@playwright/test": "^1.62.1",
+    "@playwright/test": "^1.64.1",
     "@tailwindcss/cli": "^4.3.3",
-    "@types/react": "^19.2.14",
+    "@types/react": "^19.3.0",
     "tailwindcss": "^4.3.3"
   }
 }

package/samples/recipes/security-baseline/README.md

@@ -45,7 +45,10 @@ mounts `sessions` as part of its own require-chain. Combine both directly;
 `dedupeFeatures()` collapses the two identical `sessions` instances at boot:
 
 ```ts illustration
-import { composeGdprStack, composeSecurityStack } from "@cosmicdrift/kumiko-dev-server/compose-stacks";
+import {
+  composeGdprStack,
+  composeSecurityStack,
+} from "@cosmicdrift/kumiko-dev-server/compose-stacks";
 
 export const APP_FEATURES = [
   // ...config, user, tenant, auth-foundation...

package/samples/recipes/session-revocation/README.md

@@ -25,7 +25,7 @@ const server = buildServer({
     }),
     // ... other features
   ]),
-  context: { db, /* ... */ },
+  context: { db /* ... */ },
   jwtSecret: process.env.JWT_SECRET,
   auth: {
     membershipQuery: "tenant:query:memberships",

package/samples/recipes/tenant-settings/README.md

@@ -56,12 +56,12 @@ role vocabulary overrides those instead of forking the feature.
 
 ## Why the schema needs a special case
 
-`buildInsertSchema` always makes `currency` required *inside* a money field's
+`buildInsertSchema` always makes `currency` required _inside_ a money field's
 value object, even when the field itself is optional — a caller literally
 cannot submit `{ amount: 1000 }` against the plain `defineEntityCreateHandler`.
 `defineCreateWithTenantDefaults` swaps in its own schema (`.extend()` over the
 same `buildInsertSchema` output, with just the declared `currencyFields`
-relaxed) so the caller *can* omit `currency`, then fills it from
+relaxed) so the caller _can_ omit `currency`, then fills it from
 `ctx.config(TenantSettingsConfig.currency)` before delegating to the same
 `executor.create()` the generic factory uses.
 
@@ -74,13 +74,13 @@ changes them from **Settings → Tenant → Default Currency / Default Locale**.
 
 ## Flow
 
-1. No tenant override yet → a new invoice gets the *feature's own* default
+1. No tenant override yet → a new invoice gets the _feature's own_ default
    (`"EUR"`/`"en"`, set via `createTenantSettingsFeature()`'s own defaults).
 2. Tenant sets `currency` to `"CHF"` and `locale` to `"de"` via the
    Settings-Hub (or `config:write:set` directly).
 3. A new invoice that doesn't specify `amount.currency`/`language` picks up
    `"CHF"`/`"de"` — no entity code changed, no second migration.
-4. A caller that *does* specify `amount.currency` still wins — the tenant
+4. A caller that _does_ specify `amount.currency` still wins — the tenant
    setting only fills gaps, it never overrides an explicit value.
 
 ## Tests

package/samples/recipes/tier-admin/README.md

@@ -9,7 +9,7 @@ toggleable features unlock in the same request.
 ## What it shows
 
 - **`tier-engine:write:set-tenant-tier`** — a SystemAdmin assigns a tier
-  to *any* tenant, cross-tenant. Stamps `source: "manual"` so a future
+  to _any_ tenant, cross-tenant. Stamps `source: "manual"` so a future
   Stripe → tier sync won't overwrite the grant.
 - **`tier-engine:query:get-tenant-tier`** — SystemAdmin reads back which
   tier a tenant is on plus its source (`"manual"` vs `"billing"`).
@@ -50,7 +50,7 @@ notes-export → r.toggleable() domain feature unlocked by pro tier
 path bypasses the `postSave` entity-hook the resolver normally uses to
 invalidate the cache after a tier-assignment change. Without an explicit
 cache update the grant would persist (next request would see it) but
-*this* request still sees the old tier — surprising for an operator who
+_this_ request still sees the old tier — surprising for an operator who
 just clicked "set tier to pro".
 
 The feature wires `onAssigned` into `createSetTenantTierWrite` for

package/samples/recipes/user-data-rights/README.md

@@ -17,13 +17,13 @@ defineFeature("notes", (r) => {
   r.useExtension(EXT_USER_DATA, "note", {
     export: async (ctx) => ({
       entity: "note",
-      rows: await ctx.db.select().from(notesTable)
-        .where(and(eq(notesTable.tenantId, ctx.tenantId),
-                   eq(notesTable.authorId, ctx.userId))),
+      rows: await ctx.db
+        .select()
+        .from(notesTable)
+        .where(and(eq(notesTable.tenantId, ctx.tenantId), eq(notesTable.authorId, ctx.userId))),
     }),
     delete: async (ctx, strategy) => {
-      const where = and(eq(notesTable.tenantId, ctx.tenantId),
-                        eq(notesTable.authorId, ctx.userId));
+      const where = and(eq(notesTable.tenantId, ctx.tenantId), eq(notesTable.authorId, ctx.userId));
       if (strategy === "anonymize") {
         await ctx.db.update(notesTable).set({ authorId: null }).where(where);
       } else {
@@ -36,21 +36,21 @@ defineFeature("notes", (r) => {
 
 ## What runs automatically
 
-| Article | What happens | Trigger |
-|---|---|---|
+| Article      | What happens                                   | Trigger                                |
+| ------------ | ---------------------------------------------- | -------------------------------------- |
 | Art. 15 + 20 | Notes snippet in export ZIP + magic-link email | `runUserExport` (via `request-export`) |
-| Art. 17 | Notes deleted or anonymized after grace | `runForgetCleanup` cron |
-| Art. 18 | Restriction blocks login while active | Auth middleware |
-| Operator | Brute-force detection on magic-link endpoint | Edge rate-limit + audit log |
+| Art. 17      | Notes deleted or anonymized after grace        | `runForgetCleanup` cron                |
+| Art. 18      | Restriction blocks login while active          | Auth middleware                        |
+| Operator     | Brute-force detection on magic-link endpoint   | Edge rate-limit + audit log            |
 
 ## Strategy-aware delete
 
 `retention.policyFor("note")` resolves per entity:
 
-| Profile | Strategy | Effect |
-|---|---|---|
-| `eu-dsgvo` (default) | `delete` | Notes hard-deleted |
-| `de-hr-dsgvo-hgb` | `anonymize` for HR entities | `authorId=null`, row kept for multi-user refs |
+| Profile              | Strategy                    | Effect                                        |
+| -------------------- | --------------------------- | --------------------------------------------- |
+| `eu-dsgvo` (default) | `delete`                    | Notes hard-deleted                            |
+| `de-hr-dsgvo-hgb`    | `anonymize` for HR entities | `authorId=null`, row kept for multi-user refs |
 
 The integration test pins both paths.
 
@@ -91,7 +91,9 @@ const result = await runRetentionCleanup({
   registry: stack.registry,
   tenantId,
   preloadedTenantPreset: null,
-  now: getTemporal().Now.instant().add({ hours: 31 * 24 }), // keepFor 30d + 1 day
+  now: getTemporal()
+    .Now.instant()
+    .add({ hours: 31 * 24 }), // keepFor 30d + 1 day
   files: createFileContext(() => Promise.resolve(provider)), // the stack's storage provider
 });
 // result.hardDeleted === 1, bytes and file_refs row gone
@@ -99,10 +101,10 @@ const result = await runRetentionCleanup({
 
 ## Full app vs this recipe
 
-| | This recipe | [user-data-rights-demo](/en/samples/apps-user-data-rights-demo/) |
-|---|---|---|
-| Scope | One hook pattern | Runnable app + todos + files |
-| Boot | Integration test only | `bun dev` on port 4291 |
+|       | This recipe           | [user-data-rights-demo](/en/samples/apps-user-data-rights-demo/) |
+| ----- | --------------------- | ---------------------------------------------------------------- |
+| Scope | One hook pattern      | Runnable app + todos + files                                     |
+| Boot  | Integration test only | `bun dev` on port 4291                                           |
 
 ## Dependencies
 

package/samples/recipes/wizard-form/package.json

@@ -10,14 +10,14 @@
     "@cosmicdrift/kumiko-bundled-features": "workspace:*",
     "@cosmicdrift/kumiko-framework": "workspace:*",
     "@cosmicdrift/kumiko-renderer": "workspace:*",
-    "react": "^19.2.6"
+    "react": "^19.3.1"
   },
   "devDependencies": {
     "@cosmicdrift/kumiko-server-runtime": "workspace:*",
     "@cosmicdrift/kumiko-testing": "workspace:*",
-    "@playwright/test": "^1.62.1",
+    "@playwright/test": "^1.64.1",
     "@tailwindcss/cli": "^4.3.3",
-    "@types/react": "^19.2.14",
+    "@types/react": "^19.3.0",
     "tailwindcss": "^4.3.3"
   }
 }

package/samples/recipes/writeform-section/package.json

@@ -10,14 +10,14 @@
   "dependencies": {
     "@cosmicdrift/kumiko-framework": "workspace:*",
     "@cosmicdrift/kumiko-renderer": "workspace:*",
-    "react": "^19.2.6"
+    "react": "^19.3.1"
   },
   "devDependencies": {
     "@cosmicdrift/kumiko-server-runtime": "workspace:*",
     "@cosmicdrift/kumiko-testing": "workspace:*",
-    "@playwright/test": "^1.62.1",
+    "@playwright/test": "^1.64.1",
     "@tailwindcss/cli": "^4.3.3",
-    "@types/react": "^19.2.14",
+    "@types/react": "^19.3.0",
     "tailwindcss": "^4.3.3"
   }
 }