@cosmicdrift/kumiko-bundled-features 0.1.0 → 0.2.0

package/LICENSE

@@ -0,0 +1,57 @@
+Business Source License 1.1
+
+Parameters
+
+Licensor:             Marc Frost
+
+Licensed Work:        @cosmicdrift/kumiko-framework
+                      The Licensed Work is © 2026 Marc Frost.
+
+Additional Use Grant: 
+You may use the Licensed Work in production for any purpose, including 
+commercially, EXCEPT for the Restricted Use. 
+
+"Restricted Use" is defined as using the Licensed Work to provide a platform 
+or service to third parties that allows them to host, deploy, or run their 
+own applications built with the Licensed Work. This includes, but is not 
+limited to: managed hosting services, software-as-a-service (SaaS) platforms, 
+platform-as-a-service (PaaS), developer platforms, or any multi-tenant 
+managed offering of the Licensed Work.
+
+This restriction does not apply to the Licensor, any entity controlled by, 
+controlling, or under common control with the Licensor ("Affiliates"), or 
+contractors acting on their behalf. The Licensor remains free to use the 
+Licensed Work for any purpose, including for the operation of kumiko.so.
+
+Change Date:          2030-05-05
+Change License:       Apache License, Version 2.0
+
+
+Terms
+
+The Licensor hereby grants you the right to copy, modify, create derivative works, 
+redistribute, and make non-production use of the Licensed Work. The Licensor may 
+make an Additional Use Grant, above, permitting limited production use.
+
+Effective on the Change Date, or the fourth anniversary of the first publicly 
+available distribution of the Licensed Work under this License, whichever comes 
+first, this License will convert to the Change License.
+
+This Business Source License governs use of the Licensed Work in all cases, except 
+as to any use that is explicitly granted in the Additional Use Grant above or 
+under the Change License after the Change Date.
+
+If your use of the Licensed Work does not comply with the requirements of this 
+License, you must cease use of the Licensed Work immediately.
+
+All copies of the Licensed Work, and all derivative works thereof, must include 
+this License.
+
+This License does not grant you any right, title, or interest in any trademark, 
+logo, or branding of the Licensor, except as required to comply with this License.
+
+TO THE EXTENT PERMITTED BY APPLICABLE LAW, THE LICENSED WORK IS PROVIDED ON AN 
+“AS IS” BASIS. LICENSOR DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING 
+WITHOUT LIMITATION WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, 
+TITLE, AND NON-INFRINGEMENT. IN NO EVENT WILL LICENSOR BE LIABLE FOR ANY DAMAGES 
+ARISING OUT OF OR RELATED TO THIS LICENSE OR THE USE OF THE LICENSED WORK.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-bundled-features",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "Built-in features — tenant, user, auth, delivery. The stuff you'd rewrite anyway, already typed.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",

package/src/audit/__tests__/audit.integration.ts

@@ -10,13 +10,13 @@ import {
   type SessionUser,
 } from "@cosmicdrift/kumiko-framework/engine";
 import {
-  createEntityTable,
   createTestUser,
   resetEventStore,
   setupTestStack,
   type TestStack,
   TestUsers,
   testTenantId,
+  unsafeCreateEntityTable,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { sql } from "drizzle-orm";
 import { afterAll, beforeAll, beforeEach, describe, expect, test } from "vitest";
@@ -60,7 +60,7 @@ beforeAll(async () => {
   stack = await setupTestStack({
     features: [widgetFeature, createAuditFeature()],
   });
-  await createEntityTable(stack.db, widgetEntity);
+  await unsafeCreateEntityTable(stack.db, widgetEntity);
 });
 
 afterAll(async () => {

package/src/auth-email-password/__tests__/account-lockout-no-redis.integration.ts

@@ -14,11 +14,11 @@ import { randomBytes } from "node:crypto";
 import { createEncryptionProvider } from "@cosmicdrift/kumiko-framework/db";
 import type { TenantId } from "@cosmicdrift/kumiko-framework/engine";
 import {
-  createEntityTable,
-  pushTables,
   setupTestStack,
   type TestStack,
   TestUsers,
+  unsafeCreateEntityTable,
+  unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { afterAll, beforeAll, beforeEach, describe, expect, test } from "vitest";
 import { createConfigFeature } from "../../config";
@@ -74,9 +74,9 @@ beforeAll(async () => {
     },
   });
 
-  await createEntityTable(stack.db, userEntity);
-  await createEntityTable(stack.db, tenantEntity);
-  await pushTables(stack.db, { configValuesTable, tenantMembershipsTable });
+  await unsafeCreateEntityTable(stack.db, userEntity);
+  await unsafeCreateEntityTable(stack.db, tenantEntity);
+  await unsafePushTables(stack.db, { configValuesTable, tenantMembershipsTable });
 });
 
 afterAll(async () => {

package/src/auth-email-password/__tests__/account-lockout.integration.ts

@@ -13,11 +13,11 @@ import { randomBytes } from "node:crypto";
 import { createEncryptionProvider } from "@cosmicdrift/kumiko-framework/db";
 import type { TenantId } from "@cosmicdrift/kumiko-framework/engine";
 import {
-  createEntityTable,
-  pushTables,
   setupTestStack,
   type TestStack,
   TestUsers,
+  unsafeCreateEntityTable,
+  unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { afterAll, beforeAll, beforeEach, describe, expect, test } from "vitest";
 import { createConfigFeature } from "../../config";
@@ -74,9 +74,9 @@ beforeAll(async () => {
     },
   });
 
-  await createEntityTable(stack.db, userEntity);
-  await createEntityTable(stack.db, tenantEntity);
-  await pushTables(stack.db, { configValuesTable, tenantMembershipsTable });
+  await unsafeCreateEntityTable(stack.db, userEntity);
+  await unsafeCreateEntityTable(stack.db, tenantEntity);
+  await unsafePushTables(stack.db, { configValuesTable, tenantMembershipsTable });
 });
 
 afterAll(async () => {

package/src/auth-email-password/__tests__/auth-claims.integration.ts

@@ -3,12 +3,12 @@ import { createEncryptionProvider } from "@cosmicdrift/kumiko-framework/db";
 import type { TenantId } from "@cosmicdrift/kumiko-framework/engine";
 import { defineFeature } from "@cosmicdrift/kumiko-framework/engine";
 import {
-  createEntityTable,
-  pushTables,
   setupTestStack,
   type TestStack,
   TestUsers,
   testTenantId,
+  unsafeCreateEntityTable,
+  unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { afterAll, beforeAll, beforeEach, describe, expect, test } from "vitest";
 import { createConfigFeature } from "../../config";
@@ -91,9 +91,9 @@ beforeAll(async () => {
     },
   });
 
-  await createEntityTable(stack.db, userEntity);
-  await createEntityTable(stack.db, tenantEntity);
-  await pushTables(stack.db, { configValuesTable, tenantMembershipsTable });
+  await unsafeCreateEntityTable(stack.db, userEntity);
+  await unsafeCreateEntityTable(stack.db, tenantEntity);
+  await unsafePushTables(stack.db, { configValuesTable, tenantMembershipsTable });
 });
 
 afterAll(async () => {
@@ -294,9 +294,9 @@ describe("scenario 2.5: reserved separator + multi-feature isolation", () => {
       },
     });
     try {
-      await createEntityTable(localStack.db, userEntity);
-      await createEntityTable(localStack.db, tenantEntity);
-      await pushTables(localStack.db, { configValuesTable, tenantMembershipsTable });
+      await unsafeCreateEntityTable(localStack.db, userEntity);
+      await unsafeCreateEntityTable(localStack.db, tenantEntity);
+      await unsafePushTables(localStack.db, { configValuesTable, tenantMembershipsTable });
 
       const hash = await hashPassword("pw-long-enough");
       const created = await localStack.http.writeOk<{ id: string }>(
@@ -386,9 +386,9 @@ describe("scenario 2.6: multi-feature drift warnings fire independently", () =>
       },
     });
     try {
-      await createEntityTable(localStack.db, userEntity);
-      await createEntityTable(localStack.db, tenantEntity);
-      await pushTables(localStack.db, { configValuesTable, tenantMembershipsTable });
+      await unsafeCreateEntityTable(localStack.db, userEntity);
+      await unsafeCreateEntityTable(localStack.db, tenantEntity);
+      await unsafePushTables(localStack.db, { configValuesTable, tenantMembershipsTable });
 
       const hash = await hashPassword("pw-long-enough");
       const created = await localStack.http.writeOk<{ id: string }>(
@@ -472,9 +472,9 @@ describe("scenario 3: a broken claims hook does not break login", () => {
       },
     });
     try {
-      await createEntityTable(localStack.db, userEntity);
-      await createEntityTable(localStack.db, tenantEntity);
-      await pushTables(localStack.db, { configValuesTable, tenantMembershipsTable });
+      await unsafeCreateEntityTable(localStack.db, userEntity);
+      await unsafeCreateEntityTable(localStack.db, tenantEntity);
+      await unsafePushTables(localStack.db, { configValuesTable, tenantMembershipsTable });
 
       const hash = await hashPassword("pw-long-enough");
       const created = await localStack.http.writeOk<{ id: string }>(

package/src/auth-email-password/__tests__/auth.integration.ts

@@ -2,13 +2,13 @@ import { randomBytes } from "node:crypto";
 import { createEncryptionProvider } from "@cosmicdrift/kumiko-framework/db";
 import type { TenantId } from "@cosmicdrift/kumiko-framework/engine";
 import {
-  createEntityTable,
   createTestUser,
-  pushTables,
   setupTestStack,
   type TestStack,
   TestUsers,
   testTenantId,
+  unsafeCreateEntityTable,
+  unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
 import {
   expectErrorIncludes,
@@ -57,9 +57,9 @@ beforeAll(async () => {
     },
   });
 
-  await createEntityTable(stack.db, userEntity);
-  await createEntityTable(stack.db, tenantEntity);
-  await pushTables(stack.db, { configValuesTable, tenantMembershipsTable });
+  await unsafeCreateEntityTable(stack.db, userEntity);
+  await unsafeCreateEntityTable(stack.db, tenantEntity);
+  await unsafePushTables(stack.db, { configValuesTable, tenantMembershipsTable });
 });
 
 afterAll(async () => {
@@ -359,9 +359,9 @@ describe("scenario 7b: login rate limiting", () => {
         loginRateLimit: createInMemoryLoginRateLimiter(3, 60_000),
       },
     });
-    await createEntityTable(rlStack.db, userEntity);
-    await createEntityTable(rlStack.db, tenantEntity);
-    await pushTables(rlStack.db, { configValuesTable, tenantMembershipsTable });
+    await unsafeCreateEntityTable(rlStack.db, userEntity);
+    await unsafeCreateEntityTable(rlStack.db, tenantEntity);
+    await unsafePushTables(rlStack.db, { configValuesTable, tenantMembershipsTable });
 
     // Seed one real user
     const hash = await hashPassword("right-password");

package/src/auth-email-password/__tests__/email-verification.integration.ts

@@ -2,11 +2,11 @@ import { randomBytes } from "node:crypto";
 import { createEncryptionProvider } from "@cosmicdrift/kumiko-framework/db";
 import type { TenantId } from "@cosmicdrift/kumiko-framework/engine";
 import {
-  createEntityTable,
-  pushTables,
   setupTestStack,
   type TestStack,
   TestUsers,
+  unsafeCreateEntityTable,
+  unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { eq } from "drizzle-orm";
 import { Temporal } from "temporal-polyfill";
@@ -84,9 +84,9 @@ beforeAll(async () => {
     },
   });
 
-  await createEntityTable(stack.db, userEntity);
-  await createEntityTable(stack.db, tenantEntity);
-  await pushTables(stack.db, { configValuesTable, tenantMembershipsTable });
+  await unsafeCreateEntityTable(stack.db, userEntity);
+  await unsafeCreateEntityTable(stack.db, tenantEntity);
+  await unsafePushTables(stack.db, { configValuesTable, tenantMembershipsTable });
 });
 
 afterAll(async () => {

package/src/auth-email-password/__tests__/identity-v3-login.integration.ts

@@ -9,11 +9,11 @@ import { pbkdf2Sync, randomBytes } from "node:crypto";
 import { createEncryptionProvider } from "@cosmicdrift/kumiko-framework/db";
 import type { TenantId } from "@cosmicdrift/kumiko-framework/engine";
 import {
-  createEntityTable,
-  pushTables,
   setupTestStack,
   type TestStack,
   TestUsers,
+  unsafeCreateEntityTable,
+  unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { afterAll, beforeAll, beforeEach, describe, expect, test } from "vitest";
 import { createConfigFeature } from "../../config";
@@ -69,9 +69,9 @@ beforeAll(async () => {
     },
   });
 
-  await createEntityTable(stack.db, userEntity);
-  await createEntityTable(stack.db, tenantEntity);
-  await pushTables(stack.db, { configValuesTable, tenantMembershipsTable });
+  await unsafeCreateEntityTable(stack.db, userEntity);
+  await unsafeCreateEntityTable(stack.db, tenantEntity);
+  await unsafePushTables(stack.db, { configValuesTable, tenantMembershipsTable });
 });
 
 afterAll(async () => {

package/src/auth-email-password/__tests__/invite-flow.integration.ts

@@ -21,10 +21,10 @@ import {
   type TenantId,
 } from "@cosmicdrift/kumiko-framework/engine";
 import {
-  createEntityTable,
-  pushTables,
   setupTestStack,
   type TestStack,
+  unsafeCreateEntityTable,
+  unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { eq } from "drizzle-orm";
 import { afterAll, beforeAll, beforeEach, describe, expect, test } from "vitest";
@@ -103,10 +103,10 @@ beforeAll(async () => {
     },
   });
 
-  await createEntityTable(stack.db, userEntity);
-  await createEntityTable(stack.db, tenantEntity);
-  await createEntityTable(stack.db, tenantInvitationEntity);
-  await pushTables(stack.db, { configValuesTable, tenantMembershipsTable });
+  await unsafeCreateEntityTable(stack.db, userEntity);
+  await unsafeCreateEntityTable(stack.db, tenantEntity);
+  await unsafeCreateEntityTable(stack.db, tenantInvitationEntity);
+  await unsafePushTables(stack.db, { configValuesTable, tenantMembershipsTable });
 });
 
 afterAll(async () => {

package/src/auth-email-password/__tests__/multi-roles.integration.ts

@@ -10,12 +10,12 @@
 
 import type { TenantId } from "@cosmicdrift/kumiko-framework/engine";
 import {
-  createEntityTable,
-  pushTables,
   setupTestStack,
   type TestStack,
   TestUsers,
   testTenantId,
+  unsafeCreateEntityTable,
+  unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { afterAll, beforeAll, beforeEach, describe, expect, test } from "vitest";
 import { createConfigFeature } from "../../config";
@@ -61,9 +61,9 @@ beforeAll(async () => {
     },
   });
 
-  await createEntityTable(stack.db, userEntity);
-  await createEntityTable(stack.db, tenantEntity);
-  await pushTables(stack.db, { configValuesTable, tenantMembershipsTable });
+  await unsafeCreateEntityTable(stack.db, userEntity);
+  await unsafeCreateEntityTable(stack.db, tenantEntity);
+  await unsafePushTables(stack.db, { configValuesTable, tenantMembershipsTable });
 });
 
 afterAll(async () => {

package/src/auth-email-password/__tests__/password-reset.integration.ts

@@ -2,11 +2,11 @@ import { randomBytes } from "node:crypto";
 import { createEncryptionProvider } from "@cosmicdrift/kumiko-framework/db";
 import type { TenantId } from "@cosmicdrift/kumiko-framework/engine";
 import {
-  createEntityTable,
-  pushTables,
   setupTestStack,
   type TestStack,
   TestUsers,
+  unsafeCreateEntityTable,
+  unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { Temporal } from "temporal-polyfill";
 import { afterAll, beforeAll, beforeEach, describe, expect, test } from "vitest";
@@ -79,9 +79,9 @@ beforeAll(async () => {
     },
   });
 
-  await createEntityTable(stack.db, userEntity);
-  await createEntityTable(stack.db, tenantEntity);
-  await pushTables(stack.db, {
+  await unsafeCreateEntityTable(stack.db, userEntity);
+  await unsafeCreateEntityTable(stack.db, tenantEntity);
+  await unsafePushTables(stack.db, {
     configValuesTable,
     tenantMembershipsTable,
     userSessionTable,

package/src/auth-email-password/__tests__/public-routes-rate-limit.integration.ts

@@ -7,10 +7,10 @@
 import { randomBytes } from "node:crypto";
 import { createEncryptionProvider } from "@cosmicdrift/kumiko-framework/db";
 import {
-  createEntityTable,
-  pushTables,
   setupTestStack,
   type TestStack,
+  unsafeCreateEntityTable,
+  unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { afterAll, beforeAll, beforeEach, describe, expect, test } from "vitest";
 import { createConfigFeature } from "../../config";
@@ -67,9 +67,9 @@ beforeAll(async () => {
     },
   });
 
-  await createEntityTable(stack.db, userEntity);
-  await createEntityTable(stack.db, tenantEntity);
-  await pushTables(stack.db, { configValuesTable, tenantMembershipsTable });
+  await unsafeCreateEntityTable(stack.db, userEntity);
+  await unsafeCreateEntityTable(stack.db, tenantEntity);
+  await unsafePushTables(stack.db, { configValuesTable, tenantMembershipsTable });
 });
 
 afterAll(async () => {

package/src/auth-email-password/__tests__/seed-admin.integration.ts

@@ -13,10 +13,10 @@
 import type { TenantId } from "@cosmicdrift/kumiko-framework/engine";
 import { createEventsTable, eventsTable } from "@cosmicdrift/kumiko-framework/event-store";
 import {
-  createEntityTable,
-  pushTables,
   setupTestStack,
   type TestStack,
+  unsafeCreateEntityTable,
+  unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { and, eq } from "drizzle-orm";
 import { afterAll, beforeAll, beforeEach, describe, expect, test } from "vitest";
@@ -42,9 +42,9 @@ beforeAll(async () => {
     features: [createConfigFeature(), createUserFeature(), createTenantFeature()],
     extraContext: { configResolver: resolver },
   });
-  await createEntityTable(stack.db, tenantEntity);
-  await createEntityTable(stack.db, userEntity);
-  await pushTables(stack.db, { configValuesTable, tenantMembershipsTable });
+  await unsafeCreateEntityTable(stack.db, tenantEntity);
+  await unsafeCreateEntityTable(stack.db, userEntity);
+  await unsafePushTables(stack.db, { configValuesTable, tenantMembershipsTable });
   await createEventsTable(stack.db);
 });
 

package/src/auth-email-password/__tests__/session-callbacks.integration.ts

@@ -2,11 +2,11 @@ import { randomBytes } from "node:crypto";
 import { createEncryptionProvider } from "@cosmicdrift/kumiko-framework/db";
 import type { TenantId } from "@cosmicdrift/kumiko-framework/engine";
 import {
-  createEntityTable,
-  pushTables,
   setupTestStack,
   type TestStack,
   TestUsers,
+  unsafeCreateEntityTable,
+  unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
 import * as jose from "jose";
 import { afterAll, beforeAll, beforeEach, describe, expect, test } from "vitest";
@@ -116,9 +116,9 @@ beforeAll(async () => {
     },
   });
 
-  await createEntityTable(stack.db, userEntity);
-  await createEntityTable(stack.db, tenantEntity);
-  await pushTables(stack.db, { configValuesTable, tenantMembershipsTable });
+  await unsafeCreateEntityTable(stack.db, userEntity);
+  await unsafeCreateEntityTable(stack.db, tenantEntity);
+  await unsafePushTables(stack.db, { configValuesTable, tenantMembershipsTable });
 });
 
 afterAll(async () => {

package/src/auth-email-password/__tests__/signup-flow.integration.ts

@@ -25,10 +25,10 @@
 //      zusammen).
 
 import {
-  createEntityTable,
-  pushTables,
   setupTestStack,
   type TestStack,
+  unsafeCreateEntityTable,
+  unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { eq } from "drizzle-orm";
 import { afterAll, beforeAll, beforeEach, describe, expect, test } from "vitest";
@@ -77,12 +77,12 @@ beforeAll(async () => {
     },
   });
 
-  await createEntityTable(stack.db, userEntity);
+  await unsafeCreateEntityTable(stack.db, userEntity);
   // tenant-entity hat den unique-constraint auf .key (siehe
-  // tenant.schema.indexes). createEntityTable baut das via
+  // tenant.schema.indexes). unsafeCreateEntityTable baut das via
   // buildDrizzleTable nach — pinst den TOCTOU-Schutz für signup-confirm.
-  await createEntityTable(stack.db, tenantEntity);
-  await pushTables(stack.db, { configValuesTable, tenantMembershipsTable });
+  await unsafeCreateEntityTable(stack.db, tenantEntity);
+  await unsafePushTables(stack.db, { configValuesTable, tenantMembershipsTable });
 });
 
 afterAll(async () => {

package/src/cap-counter/__tests__/cap-counter.integration.ts

@@ -10,12 +10,12 @@ import type { DbConnection } from "@cosmicdrift/kumiko-framework/db";
 import { defineFeature, type WriteHandlerDef } from "@cosmicdrift/kumiko-framework/engine";
 import { createEventsTable } from "@cosmicdrift/kumiko-framework/event-store";
 import {
-  createEntityTable,
   createTestUser,
   setupTestStack,
   type TestStack,
   TestUsers,
   testTenantId,
+  unsafeCreateEntityTable,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { afterAll, beforeAll, describe, expect, test } from "vitest";
 import { z } from "zod";
@@ -180,7 +180,7 @@ beforeAll(async () => {
   });
   db = stack.db;
 
-  await createEntityTable(db, capCounterEntity);
+  await unsafeCreateEntityTable(db, capCounterEntity);
   await createEventsTable(db);
 });
 

package/src/cap-counter/__tests__/with-cap-enforcement.integration.ts

@@ -12,11 +12,11 @@ import type { DbConnection } from "@cosmicdrift/kumiko-framework/db";
 import { defineFeature, type WriteHandlerDef } from "@cosmicdrift/kumiko-framework/engine";
 import { createEventsTable } from "@cosmicdrift/kumiko-framework/event-store";
 import {
-  createEntityTable,
   createTestUser,
   setupTestStack,
   type TestStack,
   testTenantId,
+  unsafeCreateEntityTable,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { afterAll, beforeAll, describe, expect, test } from "vitest";
 import { z } from "zod";
@@ -95,7 +95,7 @@ let db: DbConnection;
 beforeAll(async () => {
   stack = await setupTestStack({ features: [capCounterFeature, newsletterFeature] });
   db = stack.db;
-  await createEntityTable(db, capCounterEntity);
+  await unsafeCreateEntityTable(db, capCounterEntity);
   await createEventsTable(db);
 });
 

package/src/config/__tests__/config.integration.ts

@@ -10,10 +10,10 @@ import {
 import { eventsTable } from "@cosmicdrift/kumiko-framework/event-store";
 import {
   createTestUser,
-  pushTables,
   setupTestStack,
   type TestStack,
   TestUsers,
+  unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { expectErrorIncludes } from "@cosmicdrift/kumiko-framework/testing";
 import { eq } from "drizzle-orm";
@@ -199,7 +199,7 @@ beforeAll(async () => {
   });
   db = stack.db;
 
-  await pushTables(db, { configValuesTable });
+  await unsafePushTables(db, { configValuesTable });
   // setupTestStack already calls createEventsTable + createArchivedStreamsTable
   // for us; nothing extra needed for the config-changed event-store writes.
 });

package/src/delivery/__tests__/delivery-events.integration.ts

@@ -9,12 +9,12 @@
 import type { DbConnection } from "@cosmicdrift/kumiko-framework/db";
 import { eventsTable } from "@cosmicdrift/kumiko-framework/event-store";
 import {
-  createEntityTable,
   createTestUser,
-  pushTables,
   setupTestStack,
   type TestStack,
   TestUsers,
+  unsafeCreateEntityTable,
+  unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { eq } from "drizzle-orm";
 import { afterAll, beforeAll, beforeEach, describe, expect, test } from "vitest";
@@ -51,12 +51,12 @@ beforeAll(async () => {
     extraContext: { configResolver: createConfigResolver() },
   });
   db = stack.db;
-  await createEntityTable(db, tenantEntity);
+  await unsafeCreateEntityTable(db, tenantEntity);
   // Events-table is auto-pushed by setupTestStack; we only need to add
   // the feature-specific projection + lookup tables here. notificationPre-
   // ferencesTable is explicit because delivery-service queries it on
   // every notify() — without it, notify() crashes before the event append.
-  await pushTables(db, {
+  await unsafePushTables(db, {
     configValuesTable,
     tenantMembershipsTable,
     inAppMessagesTable,

package/src/delivery/__tests__/delivery.integration.ts

@@ -10,10 +10,10 @@ import {
 } from "@cosmicdrift/kumiko-framework/engine";
 import {
   createTestUser,
-  pushTables,
   setupTestStack,
   type TestStack,
   TestUsers,
+  unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { and, eq } from "drizzle-orm";
 import { afterAll, beforeAll, beforeEach, describe, expect, test } from "vitest";
@@ -289,7 +289,7 @@ beforeAll(async () => {
   // deliveryAttemptsTable is auto-pushed by setupTestStack as MSP-projection-table;
   // notificationPreferencesTable is an ES-entity, so it still needs explicit
   // push here (entity-tables are not auto-provisioned — only projection ones).
-  await pushTables(db, {
+  await unsafePushTables(db, {
     configValuesTable,
     tenantMembershipsTable,
     notificationPreferencesTable,
@@ -298,8 +298,8 @@ beforeAll(async () => {
   });
 
   // Create tenant entity table + seed memberships for tenant broadcast tests
-  const { createEntityTable } = await import("@cosmicdrift/kumiko-framework/stack");
-  await createEntityTable(db, tenantEntity, "tenant");
+  const { unsafeCreateEntityTable } = await import("@cosmicdrift/kumiko-framework/stack");
+  await unsafeCreateEntityTable(db, tenantEntity, "tenant");
 
   // Create tenant + members via real API
   await stack.http.writeOk(

package/src/feature-toggles/__tests__/feature-toggles.integration.ts

@@ -16,11 +16,11 @@ import {
 } from "@cosmicdrift/kumiko-framework/engine";
 import { createEventDispatcher, type EventConsumer } from "@cosmicdrift/kumiko-framework/pipeline";
 import {
-  createEntityTable,
   createTestUser,
-  pushTables,
   setupTestStack,
   type TestStack,
+  unsafeCreateEntityTable,
+  unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { createLateBoundHolder } from "@cosmicdrift/kumiko-framework/testing";
 import { generateId } from "@cosmicdrift/kumiko-framework/utils";
@@ -165,12 +165,12 @@ beforeAll(async () => {
     systemHooks: [],
   });
 
-  await pushTables(stack.db, { globalFeatureStateTable });
+  await unsafePushTables(stack.db, { globalFeatureStateTable });
   // widgetTrackerTable is auto-pushed by setupTestStack because it's the
   // projection-table of a registered r.multiStreamProjection — manually
   // pushing again would re-run the CREATE TABLE and fail duplicate.
-  await createEntityTable(stack.db, widgetEntity);
-  await createEntityTable(stack.db, widgetAuditEntity, "widget-audit");
+  await unsafeCreateEntityTable(stack.db, widgetEntity);
+  await unsafeCreateEntityTable(stack.db, widgetAuditEntity, "widget-audit");
 
   runtime = new GlobalFeatureToggleRuntime(stack.db, stack.registry);
   await runtime.initialize();

package/src/file-foundation/__tests__/file-foundation.integration.ts

@@ -8,12 +8,12 @@ import { defineFeature, defineWriteHandler } from "@cosmicdrift/kumiko-framework
 import { createEventsTable } from "@cosmicdrift/kumiko-framework/event-store";
 import { createEnvMasterKeyProvider } from "@cosmicdrift/kumiko-framework/secrets";
 import {
-  createEntityTable,
   createTestUser,
-  pushTables,
   setupTestStack,
   type TestStack,
   testTenantId,
+  unsafeCreateEntityTable,
+  unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
 import {
   createMutableMasterKeyProvider,
@@ -102,8 +102,8 @@ beforeAll(async () => {
   });
   db = stack.db;
 
-  await createEntityTable(db, tenantEntity);
-  await pushTables(db, { configValuesTable, tenant_secrets: tenantSecretsTable });
+  await unsafeCreateEntityTable(db, tenantEntity);
+  await unsafePushTables(db, { configValuesTable, tenant_secrets: tenantSecretsTable });
   await createEventsTable(db);
 });
 

package/src/jobs/__tests__/job-system-user.integration.ts

@@ -20,10 +20,10 @@ import { createJobRunner, type JobRunner } from "@cosmicdrift/kumiko-framework/j
 import {
   createTestDb,
   createTestRedis,
-  pushTables,
   type TestDb,
   type TestRedis,
   TestUsers,
+  unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { bridgeStub, sleep } from "@cosmicdrift/kumiko-framework/testing";
 import { afterAll, beforeAll, describe, expect, test } from "vitest";
@@ -99,11 +99,11 @@ beforeAll(async () => {
   testRedis = await createTestRedis();
   db = testDb.db;
 
-  await pushTables(db, { configValuesTable });
+  await unsafePushTables(db, { configValuesTable });
   // Post-ES config writes go through the event-store executor, which needs
   // the framework events + archived-streams tables to exist before the
   // first append. setupTestStack provisions them automatically; this test
-  // builds its DB manually (createTestDb + pushTables), so we do it here.
+  // builds its DB manually (createTestDb + unsafePushTables), so we do it here.
   await createEventsTable(db);
   await createArchivedStreamsTable(db);
 

package/src/jobs/__tests__/jobs-events.integration.ts

@@ -13,9 +13,9 @@ import { createEventsTable, eventsTable } from "@cosmicdrift/kumiko-framework/ev
 import {
   createTestDb,
   createTestRedis,
-  pushTables,
   type TestDb,
   type TestRedis,
+  unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { eq } from "drizzle-orm";
 import { afterAll, beforeAll, beforeEach, describe, expect, test } from "vitest";
@@ -37,7 +37,7 @@ beforeAll(async () => {
   testDb = await createTestDb();
   testRedis = await createTestRedis();
   const registry = createRegistry([createJobsFeature()]);
-  await pushTables(testDb.db, { jobRunsTable, jobRunLogsTable });
+  await unsafePushTables(testDb.db, { jobRunsTable, jobRunLogsTable });
   await createEventsTable(testDb.db);
   logger = createJobRunLogger({ db: testDb.db, registry });
 });

package/src/jobs/__tests__/jobs-feature.integration.ts

@@ -11,10 +11,10 @@ import {
   createTestDb,
   createTestRedis,
   createTestUser,
-  pushTables,
   type TestDb,
   type TestRedis,
   TestUsers,
+  unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { sleep } from "@cosmicdrift/kumiko-framework/testing";
 import type { Hono } from "hono";
@@ -72,10 +72,10 @@ beforeAll(async () => {
   const registry = createRegistry([appFeature, jobsFeature]);
 
   // jobRuns + jobRunLogs are projection tables (auto-pushed by
-  // pushTables via the registry-declared inline projections in jobs-feature).
+  // unsafePushTables via the registry-declared inline projections in jobs-feature).
   // We need events + archived_streams for the ES writes the job-runner's
   // logger does.
-  await pushTables(db, { jobRunsTable, jobRunLogsTable });
+  await unsafePushTables(db, { jobRunsTable, jobRunLogsTable });
   await createEventsTable(db);
 
   const redisUrl = `redis://${testRedis.redis.options.host}:${testRedis.redis.options.port}/${testRedis.redis.options.db}`;

package/src/legal-pages/__tests__/legal-pages.integration.ts

@@ -9,9 +9,9 @@ import type { DbConnection } from "@cosmicdrift/kumiko-framework/db";
 import { SYSTEM_TENANT_ID } from "@cosmicdrift/kumiko-framework/engine";
 import { createEventsTable } from "@cosmicdrift/kumiko-framework/event-store";
 import {
-  createEntityTable,
   setupTestStack,
   type TestStack,
+  unsafeCreateEntityTable,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { afterAll, beforeAll, describe, expect, test } from "vitest";
 import { createLegalPagesFeature, runLegalPagesBootCheck } from "../feature";
@@ -36,7 +36,7 @@ beforeAll(async () => {
     }),
   });
   db = stack.db;
-  await createEntityTable(db, textBlockEntity);
+  await unsafeCreateEntityTable(db, textBlockEntity);
   await createEventsTable(db);
 
   // Seed legal blocks für SYSTEM_TENANT in DE
@@ -219,7 +219,7 @@ describe("legal-pages :: SYSTEM_TENANT-routing (production-bug-regression)", ()
       }),
     });
     try {
-      await createEntityTable(hostScopedStack.db, textBlockEntity);
+      await unsafeCreateEntityTable(hostScopedStack.db, textBlockEntity);
       await createEventsTable(hostScopedStack.db);
 
       // Block NUR im SYSTEM_TENANT seeden — NICHT im otherTenantId

package/src/mail-foundation/__tests__/mail-foundation.integration.ts

@@ -14,12 +14,12 @@ import { defineFeature, defineWriteHandler } from "@cosmicdrift/kumiko-framework
 import { createEventsTable } from "@cosmicdrift/kumiko-framework/event-store";
 import { createEnvMasterKeyProvider } from "@cosmicdrift/kumiko-framework/secrets";
 import {
-  createEntityTable,
   createTestUser,
-  pushTables,
   setupTestStack,
   type TestStack,
   testTenantId,
+  unsafeCreateEntityTable,
+  unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
 import {
   createMutableMasterKeyProvider,
@@ -106,8 +106,8 @@ beforeAll(async () => {
   });
   db = stack.db;
 
-  await createEntityTable(db, tenantEntity);
-  await pushTables(db, { configValuesTable, tenant_secrets: tenantSecretsTable });
+  await unsafeCreateEntityTable(db, tenantEntity);
+  await unsafePushTables(db, { configValuesTable, tenant_secrets: tenantSecretsTable });
   await createEventsTable(db);
 });
 

package/src/secrets/__tests__/rotate.integration.ts

@@ -12,9 +12,9 @@ import {
 } from "@cosmicdrift/kumiko-framework/secrets";
 import {
   createTestUser,
-  pushTables,
   setupTestStack,
   type TestStack,
+  unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { eq, sql } from "drizzle-orm";
 import { afterAll, beforeAll, describe, expect, test } from "vitest";
@@ -76,7 +76,7 @@ beforeAll(async () => {
       secrets: createSecretsContext({ db, masterKeyProvider: seedProvider }),
     }),
   });
-  await pushTables(stack.db, {
+  await unsafePushTables(stack.db, {
     tenant_secrets: tenantSecretsTable,
   });
 

package/src/secrets/__tests__/secrets-events.integration.ts

@@ -13,9 +13,9 @@ import {
 } from "@cosmicdrift/kumiko-framework/secrets";
 import {
   createTestUser,
-  pushTables,
   setupTestStack,
   type TestStack,
+  unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { eq } from "drizzle-orm";
 import { afterAll, beforeAll, beforeEach, describe, expect, test } from "vitest";
@@ -50,7 +50,7 @@ beforeAll(async () => {
       secrets: createSecretsContext({ db, masterKeyProvider: provider }),
     }),
   });
-  await pushTables(stack.db, { tenantSecretsTable });
+  await unsafePushTables(stack.db, { tenantSecretsTable });
   await createEventsTable(stack.db);
 });
 

package/src/secrets/__tests__/secrets.integration.ts

@@ -12,9 +12,9 @@ import {
 } from "@cosmicdrift/kumiko-framework/secrets";
 import {
   createTestUser,
-  pushTables,
   setupTestStack,
   type TestStack,
+  unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { and, eq } from "drizzle-orm";
 import { afterAll, beforeAll, describe, expect, test } from "vitest";
@@ -49,7 +49,7 @@ beforeAll(async () => {
   // table (tenant_secrets) still needs an explicit push here, since it
   // belongs to an ES entity (and entity-tables aren't auto-pushed by
   // setupTestStack).
-  await pushTables(stack.db, { tenant_secrets: tenantSecretsTable });
+  await unsafePushTables(stack.db, { tenant_secrets: tenantSecretsTable });
   await createEventsTable(stack.db);
 });
 

package/src/sessions/__tests__/cleanup.integration.ts

@@ -6,10 +6,10 @@
 
 import type { AppContext } from "@cosmicdrift/kumiko-framework/engine";
 import {
-  createEntityTable,
   setupTestStack,
   type TestStack,
   testTenantId,
+  unsafeCreateEntityTable,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { sql } from "drizzle-orm";
 import { afterAll, beforeAll, beforeEach, describe, expect, test } from "vitest";
@@ -38,7 +38,7 @@ beforeAll(async () => {
   stack = await setupTestStack({
     features: [createSessionsFeature()],
   });
-  await createEntityTable(stack.db, userSessionEntity);
+  await unsafeCreateEntityTable(stack.db, userSessionEntity);
 });
 
 afterAll(async () => {

package/src/sessions/__tests__/password-auto-revoke.integration.ts

@@ -2,11 +2,11 @@ import { randomBytes } from "node:crypto";
 import { createEncryptionProvider } from "@cosmicdrift/kumiko-framework/db";
 import type { TenantId } from "@cosmicdrift/kumiko-framework/engine";
 import {
-  createEntityTable,
-  pushTables,
   setupTestStack,
   type TestStack,
   testTenantId,
+  unsafeCreateEntityTable,
+  unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { createLateBoundHolder } from "@cosmicdrift/kumiko-framework/testing";
 import { afterAll, beforeAll, beforeEach, describe, expect, test, vi } from "vitest";
@@ -77,10 +77,10 @@ beforeAll(async () => {
   callbacks.set(createSessionCallbacks({ db: stack.db }));
   h = makeSessionHelpers(stack, TENANT);
 
-  await createEntityTable(stack.db, userEntity);
-  await createEntityTable(stack.db, tenantEntity);
-  await createEntityTable(stack.db, userSessionEntity);
-  await pushTables(stack.db, { configValuesTable, tenantMembershipsTable });
+  await unsafeCreateEntityTable(stack.db, userEntity);
+  await unsafeCreateEntityTable(stack.db, tenantEntity);
+  await unsafeCreateEntityTable(stack.db, userSessionEntity);
+  await unsafePushTables(stack.db, { configValuesTable, tenantMembershipsTable });
 });
 
 afterAll(async () => {

package/src/sessions/__tests__/sessions.integration.ts

@@ -2,11 +2,11 @@ import { randomBytes } from "node:crypto";
 import { createEncryptionProvider } from "@cosmicdrift/kumiko-framework/db";
 import type { TenantId } from "@cosmicdrift/kumiko-framework/engine";
 import {
-  createEntityTable,
-  pushTables,
   setupTestStack,
   type TestStack,
   testTenantId,
+  unsafeCreateEntityTable,
+  unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { createLateBoundHolder } from "@cosmicdrift/kumiko-framework/testing";
 import { and, eq } from "drizzle-orm";
@@ -64,10 +64,10 @@ beforeAll(async () => {
   callbacks.set(createSessionCallbacks({ db: stack.db }));
   h = makeSessionHelpers(stack, TENANT);
 
-  await createEntityTable(stack.db, userEntity);
-  await createEntityTable(stack.db, tenantEntity);
-  await createEntityTable(stack.db, userSessionEntity);
-  await pushTables(stack.db, { configValuesTable, tenantMembershipsTable });
+  await unsafeCreateEntityTable(stack.db, userEntity);
+  await unsafeCreateEntityTable(stack.db, tenantEntity);
+  await unsafeCreateEntityTable(stack.db, userSessionEntity);
+  await unsafePushTables(stack.db, { configValuesTable, tenantMembershipsTable });
 });
 
 afterAll(async () => {

package/src/tenant/__tests__/multi-tenant.integration.ts

@@ -9,15 +9,15 @@ import {
 import { createEventsTable } from "@cosmicdrift/kumiko-framework/event-store";
 import { createJobRunner, type JobRunner } from "@cosmicdrift/kumiko-framework/jobs";
 import {
-  createEntityTable,
   createTestDb,
   createTestRedis,
   createTestUser,
-  pushTables,
   type TestDb,
   type TestRedis,
   TestUsers,
   testTenantId,
+  unsafeCreateEntityTable,
+  unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { bridgeStub, sleep } from "@cosmicdrift/kumiko-framework/testing";
 import type { Hono } from "hono";
@@ -60,8 +60,8 @@ beforeAll(async () => {
   testRedis = await createTestRedis();
   db = testDb.db;
 
-  await createEntityTable(db, tenantEntity);
-  await pushTables(db, { tenantMembershipsTable, configValuesTable });
+  await unsafeCreateEntityTable(db, tenantEntity);
+  await unsafePushTables(db, { tenantMembershipsTable, configValuesTable });
   await createEventsTable(db);
 
   const configFeature = createConfigFeature();

package/src/tenant/__tests__/seed-testing.integration.ts

@@ -14,12 +14,12 @@
 import type { TenantId } from "@cosmicdrift/kumiko-framework/engine";
 import { createEventsTable, eventsTable } from "@cosmicdrift/kumiko-framework/event-store";
 import {
-  createEntityTable,
   createTestUser,
-  pushTables,
   setupTestStack,
   type TestStack,
   TestUsers,
+  unsafeCreateEntityTable,
+  unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { and, eq } from "drizzle-orm";
 import { afterAll, beforeAll, beforeEach, describe, expect, test } from "vitest";
@@ -43,8 +43,8 @@ beforeAll(async () => {
     features: [createConfigFeature(), createTenantFeature()],
     extraContext: { configResolver: resolver },
   });
-  await createEntityTable(stack.db, tenantEntity);
-  await pushTables(stack.db, { configValuesTable, tenantMembershipsTable });
+  await unsafeCreateEntityTable(stack.db, tenantEntity);
+  await unsafePushTables(stack.db, { configValuesTable, tenantMembershipsTable });
   await createEventsTable(stack.db);
 });
 

package/src/tenant/__tests__/tenant.integration.ts

@@ -2,12 +2,12 @@ import { randomBytes } from "node:crypto";
 import { createEncryptionProvider, type DbConnection } from "@cosmicdrift/kumiko-framework/db";
 import { createEventsTable } from "@cosmicdrift/kumiko-framework/event-store";
 import {
-  createEntityTable,
   createTestUser,
-  pushTables,
   setupTestStack,
   type TestStack,
   TestUsers,
+  unsafeCreateEntityTable,
+  unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { expectErrorIncludes, rolesOf } from "@cosmicdrift/kumiko-framework/testing";
 import { afterAll, beforeAll, describe, expect, test } from "vitest";
@@ -42,8 +42,8 @@ beforeAll(async () => {
   });
   db = stack.db;
 
-  await createEntityTable(db, tenantEntity);
-  await pushTables(db, { configValuesTable });
+  await unsafeCreateEntityTable(db, tenantEntity);
+  await unsafePushTables(db, { configValuesTable });
   await createEventsTable(db);
 });
 

package/src/tenant/seeding.ts

@@ -38,8 +38,9 @@ import {
   fetchOne,
 } from "@cosmicdrift/kumiko-framework/db";
 import type { SessionUser, TenantId } from "@cosmicdrift/kumiko-framework/engine";
+import { eventsTable } from "@cosmicdrift/kumiko-framework/event-store";
 import { TestUsers } from "@cosmicdrift/kumiko-framework/stack";
-import { eq } from "drizzle-orm";
+import { eq, max as maxFn } from "drizzle-orm";
 import { tenantMembershipEntity, tenantMembershipsTable } from "./membership-table";
 import { tenantEntity, tenantTable } from "./schema/tenant";
 
@@ -94,6 +95,16 @@ export async function seedTenant(db: DbConnection, options: SeedTenantOptions):
   const existing = await fetchOne(db, tenantTable, eq(tenantTable["id"], options.id));
   if (existing) return options.id;
 
+  // Idempotenz: Aggregate kann im Event-Store existieren ohne Projection-Row
+  // (Projection-Drift nach rebuild, manuellem DELETE, oder async-lag). Wenn
+  // Stream-Version > 0 → kein create() — wäre version_conflict. Caller
+  // bekommt die ID, Projection wird beim nächsten Dispatcher-Cycle aufgebaut.
+  const [streamRow] = await db
+    .select({ v: maxFn(eventsTable.version) })
+    .from(eventsTable)
+    .where(eq(eventsTable.aggregateId, options.id));
+  if ((streamRow?.v ?? 0) > 0) return options.id;
+
   const result = await tenantExecutor.create(
     { id: options.id, key: options.key, name: options.name },
     by,

package/src/text-content/README.md

@@ -38,12 +38,16 @@ container exits. No auto-heal in production. See
 In integration tests (vitest) it's enough to do:
 
 ```typescript
-import { createEntityTable } from "@cosmicdrift/kumiko-framework/stack";
+import { unsafeCreateEntityTable } from "@cosmicdrift/kumiko-framework/stack";
 import { textBlockEntity } from "@cosmicdrift/kumiko-bundled-features/text-content";
 
-await createEntityTable(stack.db, textBlockEntity);
+await unsafeCreateEntityTable(stack.db, textBlockEntity);
 ```
 
+The `unsafe` prefix is intentional — it bypasses the projection
+registry and is reserved for test setup and framework-internals. Apps
+declare data via `r.entity(...)` everywhere else.
+
 ## Use cases
 
 text-content is generic — anything that's static Markdown text per

package/src/text-content/__tests__/text-content.integration.ts

@@ -1,11 +1,11 @@
 import type { DbConnection } from "@cosmicdrift/kumiko-framework/db";
 import { createEventsTable } from "@cosmicdrift/kumiko-framework/event-store";
 import {
-  createEntityTable,
   createTestUser,
   setupTestStack,
   type TestStack,
   TestUsers,
+  unsafeCreateEntityTable,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { expectErrorIncludes } from "@cosmicdrift/kumiko-framework/testing";
 import { afterAll, beforeAll, describe, expect, test } from "vitest";
@@ -26,7 +26,7 @@ const feature = createTextContentFeature();
 beforeAll(async () => {
   stack = await setupTestStack({ features: [feature] });
   db = stack.db;
-  await createEntityTable(db, textBlockEntity);
+  await unsafeCreateEntityTable(db, textBlockEntity);
   await createEventsTable(db);
 });
 

package/src/tier-engine/__tests__/tier-engine.integration.ts

@@ -2,13 +2,13 @@ import { randomBytes } from "node:crypto";
 import { createEncryptionProvider, type DbConnection } from "@cosmicdrift/kumiko-framework/db";
 import { createEventsTable } from "@cosmicdrift/kumiko-framework/event-store";
 import {
-  createEntityTable,
   createTestUser,
-  pushTables,
   setupTestStack,
   type TestStack,
   TestUsers,
   testTenantId,
+  unsafeCreateEntityTable,
+  unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { expectErrorIncludes } from "@cosmicdrift/kumiko-framework/testing";
 import { afterAll, beforeAll, describe, expect, test } from "vitest";
@@ -47,9 +47,9 @@ beforeAll(async () => {
   });
   db = stack.db;
 
-  await createEntityTable(db, tenantEntity);
-  await createEntityTable(db, tierAssignmentEntity);
-  await pushTables(db, { configValuesTable });
+  await unsafeCreateEntityTable(db, tenantEntity);
+  await unsafeCreateEntityTable(db, tierAssignmentEntity);
+  await unsafePushTables(db, { configValuesTable });
   await createEventsTable(db);
 });
 

package/src/user/__tests__/seed-testing.integration.ts

@@ -8,11 +8,11 @@
 
 import { createEventsTable, eventsTable } from "@cosmicdrift/kumiko-framework/event-store";
 import {
-  createEntityTable,
-  pushTables,
   setupTestStack,
   type TestStack,
   TestUsers,
+  unsafeCreateEntityTable,
+  unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { eq } from "drizzle-orm";
 import { afterAll, beforeAll, beforeEach, describe, expect, test } from "vitest";
@@ -31,8 +31,8 @@ beforeAll(async () => {
     features: [createConfigFeature(), createUserFeature()],
     extraContext: { configResolver: resolver },
   });
-  await createEntityTable(stack.db, userEntity);
-  await pushTables(stack.db, { configValuesTable });
+  await unsafeCreateEntityTable(stack.db, userEntity);
+  await unsafePushTables(stack.db, { configValuesTable });
   await createEventsTable(stack.db);
 });
 

package/src/user/__tests__/user.integration.ts

@@ -1,9 +1,9 @@
 import {
-  createEntityTable,
   createTestUser,
   setupTestStack,
   type TestStack,
   TestUsers,
+  unsafeCreateEntityTable,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { expectErrorIncludes } from "@cosmicdrift/kumiko-framework/testing";
 import { afterAll, beforeAll, beforeEach, describe, expect, test } from "vitest";
@@ -18,7 +18,7 @@ const userFeature = createUserFeature();
 
 beforeAll(async () => {
   stack = await setupTestStack({ features: [userFeature] });
-  await createEntityTable(stack.db, userEntity);
+  await unsafeCreateEntityTable(stack.db, userEntity);
 });
 
 afterAll(async () => {