@ultimat3/admin 6.0.0 → 8.0.0

package/CLAUDE.md

@@ -34,6 +34,7 @@ Two products, one package, **two entry points**: `@ultimat3/admin/dev` (`src/dev
 - **One cursor codec.** `pagination.ts` is the only file calling core's `encodeCursor`/`decodeCursor`; it wraps them as `encodeAdminCursor`/`decodeAdminCursor`, scoped `admin:<resource>`. An invalid cursor is page one here, not an error page — but the signature is checked first, so a forged one cannot seek.
 - Labels are i18n keys derived in `resource.ts` (`admin.<entity>.field.<name>`); only `.tsx` calls `t()`. MCP tool descriptions are literal English (protocol payload, not UI copy).
 - Colours only via `ThemeTokenRef` (`--x-*`). Raw hex does not typecheck.
+- **One owner of `globalThis.React`, and it is `@ultimat3/ui`'s.** `inert-jsx.ts` keeps the walkers (`nodesOf`, `shallowNodesOf`, `renderNodes`, `renderHtml`) and delegates install/restore to `probe`/`unprobe` from `@ultimat3/ui/jsx-probe` — tier 5 → tier 4, downward, no declared edge needed. It kept its own `depth`/`saved` pair until 2026-08-22 and two counters over one property restore in the wrong order: admin installs (saving the real binding), ui installs (saving ADMIN's factory), admin restores, ui restores admin's factory back over the top. `bun test` seats both packages in one process, so the interleave is reachable; `inert-jsx.test.ts` drives it in both orders.
 - Views are pure functions of props — no `createSignal`, no local state; the route owns it.
 
 ## Layout

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ultimat3/admin",
-  "version": "6.0.0",
+  "version": "8.0.0",
   "description": "Two dashboards: the /_x framework dev panels and the generated, AI-first app admin",
   "license": "MIT",
   "type": "module",
@@ -32,20 +32,20 @@
     "test": "bun test"
   },
   "dependencies": {
-    "@ultimat3/action": "6.0.0",
-    "@ultimat3/ai": "6.0.0",
-    "@ultimat3/cache": "6.0.0",
-    "@ultimat3/core": "6.0.0",
-    "@ultimat3/db": "6.0.0",
-    "@ultimat3/entity": "6.0.0",
-    "@ultimat3/i18n": "6.0.0",
-    "@ultimat3/jobs": "6.0.0",
-    "@ultimat3/mcp": "6.0.0",
-    "@ultimat3/money": "6.0.0",
-    "@ultimat3/policy": "6.0.0",
-    "@ultimat3/query": "6.0.0",
-    "@ultimat3/render": "6.0.0",
-    "@ultimat3/schema": "6.0.0",
-    "@ultimat3/ui": "6.0.0"
+    "@ultimat3/action": "8.0.0",
+    "@ultimat3/ai": "8.0.0",
+    "@ultimat3/cache": "8.0.0",
+    "@ultimat3/core": "8.0.0",
+    "@ultimat3/db": "8.0.0",
+    "@ultimat3/entity": "8.0.0",
+    "@ultimat3/i18n": "8.0.0",
+    "@ultimat3/jobs": "8.0.0",
+    "@ultimat3/mcp": "8.0.0",
+    "@ultimat3/money": "8.0.0",
+    "@ultimat3/policy": "8.0.0",
+    "@ultimat3/query": "8.0.0",
+    "@ultimat3/render": "8.0.0",
+    "@ultimat3/schema": "8.0.0",
+    "@ultimat3/ui": "8.0.0"
   }
 }

package/src/inert-jsx.ts

@@ -8,6 +8,10 @@
 // both and the run's file order stops deciding. Recognising neither is what falls through to
 // `String(value)` and asserts against `"[object Object]"`.
 
+// The subpath, never the barrel: this is a test harness and the design system's `index.ts` is its
+// semver'd contract (`packages/ui/CLAUDE.md`). It is imported for `globalThis.React`'s ONE counter.
+import { probe, unprobe } from '@ultimat3/ui/jsx-probe';
+
 /** `@ultimat3/render`'s node brand, read off the GLOBAL symbol registry rather than imported. */
 const RENDER_NODE: symbol = Symbol.for('ultimate.render.jsx');
 
@@ -23,7 +27,11 @@ export function isInertNode(value: unknown): value is InertNode {
   return 'inert' in value || RENDER_NODE in value;
 }
 
-/** The classic factory these `.tsx` files fall back to under `jsx: 'preserve'`. */
+/**
+ * Build a node by hand, the shape the installed factory builds. NOT the installed factory — that is
+ * `@ultimat3/ui`'s, so there is one owner of `globalThis.React` (see `installFactory` below). This
+ * is what a test uses to construct a tree it did not render.
+ */
 export function h(
   type: string | InertComponent,
   props: Record<string, unknown> | null,
@@ -35,37 +43,24 @@ export function h(
 }
 
 /**
- * How many installs are live, and what `globalThis.React` was before the first one. A harness that
- * DELETED the property on the way out destroys a binding it did not create, and a nested install
- * would tear the factory out from under the suite still using it — the counter is what makes the
- * last restore the only one that acts.
+ * Install the classic-factory global, through `@ultimat3/ui`'s ONE counter over `globalThis.React`.
+ *
+ * This package kept its own `depth`/`saved` pair until 2026-08-22, and two counters over one
+ * property restore in the wrong order: admin installs (saving the real binding), ui installs
+ * (saving ADMIN's factory), admin restores (its counter hits 0 → the real binding is back), ui
+ * restores (its counter hits 0 → admin's factory goes back over it). `bun test` is one process and
+ * `packages/ui` and `packages/admin` are one run, so the interleave is reachable, and the global
+ * was left holding a harness the run had already torn down. `admin` is tier 5 and `ui` is tier 4,
+ * so importing down is the fix; the two factories build the same `{ inert, type, props }` shape,
+ * which is what `isInertNode` recognises.
  */
-let depth = 0;
-let saved: PropertyDescriptor | undefined;
-
 export function installFactory(): void {
-  if (depth === 0) {
-    // The descriptor, not the value: the property may be a getter or non-writable, and `assign`
-    // onto either throws or silently loses.
-    saved = Object.getOwnPropertyDescriptor(globalThis, 'React');
-    Object.defineProperty(globalThis, 'React', {
-      value: { createElement: h },
-      configurable: true,
-      writable: true,
-      enumerable: true,
-    });
-  }
-  depth += 1;
+  probe();
 }
 
 /** Undo the matching `installFactory()`. Unbalanced calls are inert. */
 export function restoreFactory(): void {
-  if (depth === 0) return;
-  depth -= 1;
-  if (depth > 0) return;
-  if (saved === undefined) Reflect.deleteProperty(globalThis, 'React');
-  else Object.defineProperty(globalThis, 'React', saved);
-  saved = undefined;
+  unprobe();
 }
 
 /**

package/src/routes.ts

@@ -50,9 +50,11 @@ export function adminRouteConfig(route: AdminRoute): AdminRouteConfig {
       // shell the browser was supposed to fill — until `spa` was deleted: nothing ever built the
       // client bundle it preloaded and `renderSpa` never read the route's component, so every
       // generated view served an empty `<div id="x-root">`. `ssr` renders the same rows behind the
-      // same guard, and the interactive part of a screen arrives as an `island({ src })`, budgeted
-      // in real bytes. `hydrate: 'never'` follows from that: an admin view is a pure function of
-      // its props (no `createSignal`, no local state), so the page level has nothing to hydrate.
+      // same guard, once per request, and `hydrate: 'never'` means the screen ships no JS at all:
+      // an admin view is a pure function of its props (no `createSignal`, no local state), so
+      // there is nothing to hydrate. `never` is a REFUSAL and not just a default — an `island()`
+      // rendered on this route throws `X_ISLAND_NOT_HYDRATED` (`@ultimat3/render`'s
+      // `island-collector.ts`), and no admin module declares one.
       render: 'ssr',
       offline: 'network-only',
       hydrate: 'never',