@cosmicdrift/kumiko-bundled-features 0.1.0 → 0.2.1

package/LICENSE

@@ -0,0 +1,57 @@
+Business Source License 1.1
+
+Parameters
+
+Licensor:             Marc Frost
+
+Licensed Work:        @cosmicdrift/kumiko-framework
+                      The Licensed Work is © 2026 Marc Frost.
+
+Additional Use Grant: 
+You may use the Licensed Work in production for any purpose, including 
+commercially, EXCEPT for the Restricted Use. 
+
+"Restricted Use" is defined as using the Licensed Work to provide a platform 
+or service to third parties that allows them to host, deploy, or run their 
+own applications built with the Licensed Work. This includes, but is not 
+limited to: managed hosting services, software-as-a-service (SaaS) platforms, 
+platform-as-a-service (PaaS), developer platforms, or any multi-tenant 
+managed offering of the Licensed Work.
+
+This restriction does not apply to the Licensor, any entity controlled by, 
+controlling, or under common control with the Licensor ("Affiliates"), or 
+contractors acting on their behalf. The Licensor remains free to use the 
+Licensed Work for any purpose, including for the operation of kumiko.so.
+
+Change Date:          2030-05-05
+Change License:       Apache License, Version 2.0
+
+
+Terms
+
+The Licensor hereby grants you the right to copy, modify, create derivative works, 
+redistribute, and make non-production use of the Licensed Work. The Licensor may 
+make an Additional Use Grant, above, permitting limited production use.
+
+Effective on the Change Date, or the fourth anniversary of the first publicly 
+available distribution of the Licensed Work under this License, whichever comes 
+first, this License will convert to the Change License.
+
+This Business Source License governs use of the Licensed Work in all cases, except 
+as to any use that is explicitly granted in the Additional Use Grant above or 
+under the Change License after the Change Date.
+
+If your use of the Licensed Work does not comply with the requirements of this 
+License, you must cease use of the Licensed Work immediately.
+
+All copies of the Licensed Work, and all derivative works thereof, must include 
+this License.
+
+This License does not grant you any right, title, or interest in any trademark, 
+logo, or branding of the Licensor, except as required to comply with this License.
+
+TO THE EXTENT PERMITTED BY APPLICABLE LAW, THE LICENSED WORK IS PROVIDED ON AN 
+“AS IS” BASIS. LICENSOR DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING 
+WITHOUT LIMITATION WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, 
+TITLE, AND NON-INFRINGEMENT. IN NO EVENT WILL LICENSOR BE LIABLE FOR ANY DAMAGES 
+ARISING OUT OF OR RELATED TO THIS LICENSE OR THE USE OF THE LICENSED WORK.

package/package.json

@@ -1,16 +1,16 @@
 {
   "name": "@cosmicdrift/kumiko-bundled-features",
-  "version": "0.1.0",
+  "version": "0.2.1",
   "description": "Built-in features — tenant, user, auth, delivery. The stuff you'd rewrite anyway, already typed.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/cosmicdriftgamestudio/kumiko-framework.git",
+    "url": "git+https://github.com/CosmicDriftGameStudio/kumiko-framework.git",
     "directory": "packages/bundled-features"
   },
   "bugs": {
-    "url": "https://github.com/cosmicdriftgamestudio/kumiko-framework/issues"
+    "url": "https://github.com/CosmicDriftGameStudio/kumiko-framework/issues"
   },
   "homepage": "https://kumiko.so",
   "type": "module",

package/src/audit/__tests__/audit.integration.ts

@@ -10,13 +10,13 @@ import {
   type SessionUser,
 } from "@cosmicdrift/kumiko-framework/engine";
 import {
-  createEntityTable,
   createTestUser,
   resetEventStore,
   setupTestStack,
   type TestStack,
   TestUsers,
   testTenantId,
+  unsafeCreateEntityTable,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { sql } from "drizzle-orm";
 import { afterAll, beforeAll, beforeEach, describe, expect, test } from "vitest";
@@ -60,7 +60,7 @@ beforeAll(async () => {
   stack = await setupTestStack({
     features: [widgetFeature, createAuditFeature()],
   });
-  await createEntityTable(stack.db, widgetEntity);
+  await unsafeCreateEntityTable(stack.db, widgetEntity);
 });
 
 afterAll(async () => {

package/src/auth-email-password/__tests__/account-lockout-no-redis.integration.ts

@@ -14,11 +14,11 @@ import { randomBytes } from "node:crypto";
 import { createEncryptionProvider } from "@cosmicdrift/kumiko-framework/db";
 import type { TenantId } from "@cosmicdrift/kumiko-framework/engine";
 import {
-  createEntityTable,
-  pushTables,
   setupTestStack,
   type TestStack,
   TestUsers,
+  unsafeCreateEntityTable,
+  unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { afterAll, beforeAll, beforeEach, describe, expect, test } from "vitest";
 import { createConfigFeature } from "../../config";
@@ -74,9 +74,9 @@ beforeAll(async () => {
     },
   });
 
-  await createEntityTable(stack.db, userEntity);
-  await createEntityTable(stack.db, tenantEntity);
-  await pushTables(stack.db, { configValuesTable, tenantMembershipsTable });
+  await unsafeCreateEntityTable(stack.db, userEntity);
+  await unsafeCreateEntityTable(stack.db, tenantEntity);
+  await unsafePushTables(stack.db, { configValuesTable, tenantMembershipsTable });
 });
 
 afterAll(async () => {

package/src/auth-email-password/__tests__/account-lockout.integration.ts

@@ -13,11 +13,11 @@ import { randomBytes } from "node:crypto";
 import { createEncryptionProvider } from "@cosmicdrift/kumiko-framework/db";
 import type { TenantId } from "@cosmicdrift/kumiko-framework/engine";
 import {
-  createEntityTable,
-  pushTables,
   setupTestStack,
   type TestStack,
   TestUsers,
+  unsafeCreateEntityTable,
+  unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { afterAll, beforeAll, beforeEach, describe, expect, test } from "vitest";
 import { createConfigFeature } from "../../config";
@@ -74,9 +74,9 @@ beforeAll(async () => {
     },
   });
 
-  await createEntityTable(stack.db, userEntity);
-  await createEntityTable(stack.db, tenantEntity);
-  await pushTables(stack.db, { configValuesTable, tenantMembershipsTable });
+  await unsafeCreateEntityTable(stack.db, userEntity);
+  await unsafeCreateEntityTable(stack.db, tenantEntity);
+  await unsafePushTables(stack.db, { configValuesTable, tenantMembershipsTable });
 });
 
 afterAll(async () => {

package/src/auth-email-password/__tests__/auth-claims.integration.ts

@@ -3,12 +3,12 @@ import { createEncryptionProvider } from "@cosmicdrift/kumiko-framework/db";
 import type { TenantId } from "@cosmicdrift/kumiko-framework/engine";
 import { defineFeature } from "@cosmicdrift/kumiko-framework/engine";
 import {
-  createEntityTable,
-  pushTables,
   setupTestStack,
   type TestStack,
   TestUsers,
   testTenantId,
+  unsafeCreateEntityTable,
+  unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { afterAll, beforeAll, beforeEach, describe, expect, test } from "vitest";
 import { createConfigFeature } from "../../config";
@@ -91,9 +91,9 @@ beforeAll(async () => {
     },
   });
 
-  await createEntityTable(stack.db, userEntity);
-  await createEntityTable(stack.db, tenantEntity);
-  await pushTables(stack.db, { configValuesTable, tenantMembershipsTable });
+  await unsafeCreateEntityTable(stack.db, userEntity);
+  await unsafeCreateEntityTable(stack.db, tenantEntity);
+  await unsafePushTables(stack.db, { configValuesTable, tenantMembershipsTable });
 });
 
 afterAll(async () => {
@@ -294,9 +294,9 @@ describe("scenario 2.5: reserved separator + multi-feature isolation", () => {
       },
     });
     try {
-      await createEntityTable(localStack.db, userEntity);
-      await createEntityTable(localStack.db, tenantEntity);
-      await pushTables(localStack.db, { configValuesTable, tenantMembershipsTable });
+      await unsafeCreateEntityTable(localStack.db, userEntity);
+      await unsafeCreateEntityTable(localStack.db, tenantEntity);
+      await unsafePushTables(localStack.db, { configValuesTable, tenantMembershipsTable });
 
       const hash = await hashPassword("pw-long-enough");
       const created = await localStack.http.writeOk<{ id: string }>(
@@ -386,9 +386,9 @@ describe("scenario 2.6: multi-feature drift warnings fire independently", () =>
       },
     });
     try {
-      await createEntityTable(localStack.db, userEntity);
-      await createEntityTable(localStack.db, tenantEntity);
-      await pushTables(localStack.db, { configValuesTable, tenantMembershipsTable });
+      await unsafeCreateEntityTable(localStack.db, userEntity);
+      await unsafeCreateEntityTable(localStack.db, tenantEntity);
+      await unsafePushTables(localStack.db, { configValuesTable, tenantMembershipsTable });
 
       const hash = await hashPassword("pw-long-enough");
       const created = await localStack.http.writeOk<{ id: string }>(
@@ -472,9 +472,9 @@ describe("scenario 3: a broken claims hook does not break login", () => {
       },
     });
     try {
-      await createEntityTable(localStack.db, userEntity);
-      await createEntityTable(localStack.db, tenantEntity);
-      await pushTables(localStack.db, { configValuesTable, tenantMembershipsTable });
+      await unsafeCreateEntityTable(localStack.db, userEntity);
+      await unsafeCreateEntityTable(localStack.db, tenantEntity);
+      await unsafePushTables(localStack.db, { configValuesTable, tenantMembershipsTable });
 
       const hash = await hashPassword("pw-long-enough");
       const created = await localStack.http.writeOk<{ id: string }>(

package/src/auth-email-password/__tests__/auth.integration.ts

@@ -2,13 +2,13 @@ import { randomBytes } from "node:crypto";
 import { createEncryptionProvider } from "@cosmicdrift/kumiko-framework/db";
 import type { TenantId } from "@cosmicdrift/kumiko-framework/engine";
 import {
-  createEntityTable,
   createTestUser,
-  pushTables,
   setupTestStack,
   type TestStack,
   TestUsers,
   testTenantId,
+  unsafeCreateEntityTable,
+  unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
 import {
   expectErrorIncludes,
@@ -57,9 +57,9 @@ beforeAll(async () => {
     },
   });
 
-  await createEntityTable(stack.db, userEntity);
-  await createEntityTable(stack.db, tenantEntity);
-  await pushTables(stack.db, { configValuesTable, tenantMembershipsTable });
+  await unsafeCreateEntityTable(stack.db, userEntity);
+  await unsafeCreateEntityTable(stack.db, tenantEntity);
+  await unsafePushTables(stack.db, { configValuesTable, tenantMembershipsTable });
 });
 
 afterAll(async () => {
@@ -359,9 +359,9 @@ describe("scenario 7b: login rate limiting", () => {
         loginRateLimit: createInMemoryLoginRateLimiter(3, 60_000),
       },
     });
-    await createEntityTable(rlStack.db, userEntity);
-    await createEntityTable(rlStack.db, tenantEntity);
-    await pushTables(rlStack.db, { configValuesTable, tenantMembershipsTable });
+    await unsafeCreateEntityTable(rlStack.db, userEntity);
+    await unsafeCreateEntityTable(rlStack.db, tenantEntity);
+    await unsafePushTables(rlStack.db, { configValuesTable, tenantMembershipsTable });
 
     // Seed one real user
     const hash = await hashPassword("right-password");

package/src/auth-email-password/__tests__/email-verification.integration.ts

@@ -2,11 +2,11 @@ import { randomBytes } from "node:crypto";
 import { createEncryptionProvider } from "@cosmicdrift/kumiko-framework/db";
 import type { TenantId } from "@cosmicdrift/kumiko-framework/engine";
 import {
-  createEntityTable,
-  pushTables,
   setupTestStack,
   type TestStack,
   TestUsers,
+  unsafeCreateEntityTable,
+  unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { eq } from "drizzle-orm";
 import { Temporal } from "temporal-polyfill";
@@ -84,9 +84,9 @@ beforeAll(async () => {
     },
   });
 
-  await createEntityTable(stack.db, userEntity);
-  await createEntityTable(stack.db, tenantEntity);
-  await pushTables(stack.db, { configValuesTable, tenantMembershipsTable });
+  await unsafeCreateEntityTable(stack.db, userEntity);
+  await unsafeCreateEntityTable(stack.db, tenantEntity);
+  await unsafePushTables(stack.db, { configValuesTable, tenantMembershipsTable });
 });
 
 afterAll(async () => {

package/src/auth-email-password/__tests__/identity-v3-login.integration.ts

@@ -9,11 +9,11 @@ import { pbkdf2Sync, randomBytes } from "node:crypto";
 import { createEncryptionProvider } from "@cosmicdrift/kumiko-framework/db";
 import type { TenantId } from "@cosmicdrift/kumiko-framework/engine";
 import {
-  createEntityTable,
-  pushTables,
   setupTestStack,
   type TestStack,
   TestUsers,
+  unsafeCreateEntityTable,
+  unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { afterAll, beforeAll, beforeEach, describe, expect, test } from "vitest";
 import { createConfigFeature } from "../../config";
@@ -69,9 +69,9 @@ beforeAll(async () => {
     },
   });
 
-  await createEntityTable(stack.db, userEntity);
-  await createEntityTable(stack.db, tenantEntity);
-  await pushTables(stack.db, { configValuesTable, tenantMembershipsTable });
+  await unsafeCreateEntityTable(stack.db, userEntity);
+  await unsafeCreateEntityTable(stack.db, tenantEntity);
+  await unsafePushTables(stack.db, { configValuesTable, tenantMembershipsTable });
 });
 
 afterAll(async () => {

package/src/auth-email-password/__tests__/invite-flow.integration.ts

@@ -21,10 +21,10 @@ import {
   type TenantId,
 } from "@cosmicdrift/kumiko-framework/engine";
 import {
-  createEntityTable,
-  pushTables,
   setupTestStack,
   type TestStack,
+  unsafeCreateEntityTable,
+  unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { eq } from "drizzle-orm";
 import { afterAll, beforeAll, beforeEach, describe, expect, test } from "vitest";
@@ -103,10 +103,10 @@ beforeAll(async () => {
     },
   });
 
-  await createEntityTable(stack.db, userEntity);
-  await createEntityTable(stack.db, tenantEntity);
-  await createEntityTable(stack.db, tenantInvitationEntity);
-  await pushTables(stack.db, { configValuesTable, tenantMembershipsTable });
+  await unsafeCreateEntityTable(stack.db, userEntity);
+  await unsafeCreateEntityTable(stack.db, tenantEntity);
+  await unsafeCreateEntityTable(stack.db, tenantInvitationEntity);
+  await unsafePushTables(stack.db, { configValuesTable, tenantMembershipsTable });
 });
 
 afterAll(async () => {

package/src/auth-email-password/__tests__/multi-roles.integration.ts

@@ -10,12 +10,12 @@
 
 import type { TenantId } from "@cosmicdrift/kumiko-framework/engine";
 import {
-  createEntityTable,
-  pushTables,
   setupTestStack,
   type TestStack,
   TestUsers,
   testTenantId,
+  unsafeCreateEntityTable,
+  unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { afterAll, beforeAll, beforeEach, describe, expect, test } from "vitest";
 import { createConfigFeature } from "../../config";
@@ -61,9 +61,9 @@ beforeAll(async () => {
     },
   });
 
-  await createEntityTable(stack.db, userEntity);
-  await createEntityTable(stack.db, tenantEntity);
-  await pushTables(stack.db, { configValuesTable, tenantMembershipsTable });
+  await unsafeCreateEntityTable(stack.db, userEntity);
+  await unsafeCreateEntityTable(stack.db, tenantEntity);
+  await unsafePushTables(stack.db, { configValuesTable, tenantMembershipsTable });
 });
 
 afterAll(async () => {

package/src/auth-email-password/__tests__/password-reset.integration.ts

@@ -2,11 +2,11 @@ import { randomBytes } from "node:crypto";
 import { createEncryptionProvider } from "@cosmicdrift/kumiko-framework/db";
 import type { TenantId } from "@cosmicdrift/kumiko-framework/engine";
 import {
-  createEntityTable,
-  pushTables,
   setupTestStack,
   type TestStack,
   TestUsers,
+  unsafeCreateEntityTable,
+  unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { Temporal } from "temporal-polyfill";
 import { afterAll, beforeAll, beforeEach, describe, expect, test } from "vitest";
@@ -79,9 +79,9 @@ beforeAll(async () => {
     },
   });
 
-  await createEntityTable(stack.db, userEntity);
-  await createEntityTable(stack.db, tenantEntity);
-  await pushTables(stack.db, {
+  await unsafeCreateEntityTable(stack.db, userEntity);
+  await unsafeCreateEntityTable(stack.db, tenantEntity);
+  await unsafePushTables(stack.db, {
     configValuesTable,
     tenantMembershipsTable,
     userSessionTable,

package/src/auth-email-password/__tests__/public-routes-rate-limit.integration.ts

@@ -7,10 +7,10 @@
 import { randomBytes } from "node:crypto";
 import { createEncryptionProvider } from "@cosmicdrift/kumiko-framework/db";
 import {
-  createEntityTable,
-  pushTables,
   setupTestStack,
   type TestStack,
+  unsafeCreateEntityTable,
+  unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { afterAll, beforeAll, beforeEach, describe, expect, test } from "vitest";
 import { createConfigFeature } from "../../config";
@@ -67,9 +67,9 @@ beforeAll(async () => {
     },
   });
 
-  await createEntityTable(stack.db, userEntity);
-  await createEntityTable(stack.db, tenantEntity);
-  await pushTables(stack.db, { configValuesTable, tenantMembershipsTable });
+  await unsafeCreateEntityTable(stack.db, userEntity);
+  await unsafeCreateEntityTable(stack.db, tenantEntity);
+  await unsafePushTables(stack.db, { configValuesTable, tenantMembershipsTable });
 });
 
 afterAll(async () => {

package/src/auth-email-password/__tests__/seed-admin.integration.ts

@@ -13,10 +13,10 @@
 import type { TenantId } from "@cosmicdrift/kumiko-framework/engine";
 import { createEventsTable, eventsTable } from "@cosmicdrift/kumiko-framework/event-store";
 import {
-  createEntityTable,
-  pushTables,
   setupTestStack,
   type TestStack,
+  unsafeCreateEntityTable,
+  unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { and, eq } from "drizzle-orm";
 import { afterAll, beforeAll, beforeEach, describe, expect, test } from "vitest";
@@ -42,9 +42,9 @@ beforeAll(async () => {
     features: [createConfigFeature(), createUserFeature(), createTenantFeature()],
     extraContext: { configResolver: resolver },
   });
-  await createEntityTable(stack.db, tenantEntity);
-  await createEntityTable(stack.db, userEntity);
-  await pushTables(stack.db, { configValuesTable, tenantMembershipsTable });
+  await unsafeCreateEntityTable(stack.db, tenantEntity);
+  await unsafeCreateEntityTable(stack.db, userEntity);
+  await unsafePushTables(stack.db, { configValuesTable, tenantMembershipsTable });
   await createEventsTable(stack.db);
 });
 

package/src/auth-email-password/__tests__/session-callbacks.integration.ts

@@ -2,11 +2,11 @@ import { randomBytes } from "node:crypto";
 import { createEncryptionProvider } from "@cosmicdrift/kumiko-framework/db";
 import type { TenantId } from "@cosmicdrift/kumiko-framework/engine";
 import {
-  createEntityTable,
-  pushTables,
   setupTestStack,
   type TestStack,
   TestUsers,
+  unsafeCreateEntityTable,
+  unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
 import * as jose from "jose";
 import { afterAll, beforeAll, beforeEach, describe, expect, test } from "vitest";
@@ -116,9 +116,9 @@ beforeAll(async () => {
     },
   });
 
-  await createEntityTable(stack.db, userEntity);
-  await createEntityTable(stack.db, tenantEntity);
-  await pushTables(stack.db, { configValuesTable, tenantMembershipsTable });
+  await unsafeCreateEntityTable(stack.db, userEntity);
+  await unsafeCreateEntityTable(stack.db, tenantEntity);
+  await unsafePushTables(stack.db, { configValuesTable, tenantMembershipsTable });
 });
 
 afterAll(async () => {

package/src/auth-email-password/__tests__/signup-flow.integration.ts

@@ -25,10 +25,10 @@
 //      zusammen).
 
 import {
-  createEntityTable,
-  pushTables,
   setupTestStack,
   type TestStack,
+  unsafeCreateEntityTable,
+  unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { eq } from "drizzle-orm";
 import { afterAll, beforeAll, beforeEach, describe, expect, test } from "vitest";
@@ -77,12 +77,12 @@ beforeAll(async () => {
     },
   });
 
-  await createEntityTable(stack.db, userEntity);
+  await unsafeCreateEntityTable(stack.db, userEntity);
   // tenant-entity hat den unique-constraint auf .key (siehe
-  // tenant.schema.indexes). createEntityTable baut das via
+  // tenant.schema.indexes). unsafeCreateEntityTable baut das via
   // buildDrizzleTable nach — pinst den TOCTOU-Schutz für signup-confirm.
-  await createEntityTable(stack.db, tenantEntity);
-  await pushTables(stack.db, { configValuesTable, tenantMembershipsTable });
+  await unsafeCreateEntityTable(stack.db, tenantEntity);
+  await unsafePushTables(stack.db, { configValuesTable, tenantMembershipsTable });
 });
 
 afterAll(async () => {

package/src/cap-counter/__tests__/cap-counter.integration.ts

@@ -10,12 +10,12 @@ import type { DbConnection } from "@cosmicdrift/kumiko-framework/db";
 import { defineFeature, type WriteHandlerDef } from "@cosmicdrift/kumiko-framework/engine";
 import { createEventsTable } from "@cosmicdrift/kumiko-framework/event-store";
 import {
-  createEntityTable,
   createTestUser,
   setupTestStack,
   type TestStack,
   TestUsers,
   testTenantId,
+  unsafeCreateEntityTable,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { afterAll, beforeAll, describe, expect, test } from "vitest";
 import { z } from "zod";
@@ -180,7 +180,7 @@ beforeAll(async () => {
   });
   db = stack.db;
 
-  await createEntityTable(db, capCounterEntity);
+  await unsafeCreateEntityTable(db, capCounterEntity);
   await createEventsTable(db);
 });
 

package/src/cap-counter/__tests__/with-cap-enforcement.integration.ts

@@ -12,11 +12,11 @@ import type { DbConnection } from "@cosmicdrift/kumiko-framework/db";
 import { defineFeature, type WriteHandlerDef } from "@cosmicdrift/kumiko-framework/engine";
 import { createEventsTable } from "@cosmicdrift/kumiko-framework/event-store";
 import {
-  createEntityTable,
   createTestUser,
   setupTestStack,
   type TestStack,
   testTenantId,
+  unsafeCreateEntityTable,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { afterAll, beforeAll, describe, expect, test } from "vitest";
 import { z } from "zod";
@@ -95,7 +95,7 @@ let db: DbConnection;
 beforeAll(async () => {
   stack = await setupTestStack({ features: [capCounterFeature, newsletterFeature] });
   db = stack.db;
-  await createEntityTable(db, capCounterEntity);
+  await unsafeCreateEntityTable(db, capCounterEntity);
   await createEventsTable(db);
 });
 

package/src/config/__tests__/config.integration.ts

@@ -10,10 +10,10 @@ import {
 import { eventsTable } from "@cosmicdrift/kumiko-framework/event-store";
 import {
   createTestUser,
-  pushTables,
   setupTestStack,
   type TestStack,
   TestUsers,
+  unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { expectErrorIncludes } from "@cosmicdrift/kumiko-framework/testing";
 import { eq } from "drizzle-orm";
@@ -199,7 +199,7 @@ beforeAll(async () => {
   });
   db = stack.db;
 
-  await pushTables(db, { configValuesTable });
+  await unsafePushTables(db, { configValuesTable });
   // setupTestStack already calls createEventsTable + createArchivedStreamsTable
   // for us; nothing extra needed for the config-changed event-store writes.
 });

package/src/delivery/__tests__/delivery-events.integration.ts

@@ -9,12 +9,12 @@
 import type { DbConnection } from "@cosmicdrift/kumiko-framework/db";
 import { eventsTable } from "@cosmicdrift/kumiko-framework/event-store";
 import {
-  createEntityTable,
   createTestUser,
-  pushTables,
   setupTestStack,
   type TestStack,
   TestUsers,
+  unsafeCreateEntityTable,
+  unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { eq } from "drizzle-orm";
 import { afterAll, beforeAll, beforeEach, describe, expect, test } from "vitest";
@@ -51,12 +51,12 @@ beforeAll(async () => {
     extraContext: { configResolver: createConfigResolver() },
   });
   db = stack.db;
-  await createEntityTable(db, tenantEntity);
+  await unsafeCreateEntityTable(db, tenantEntity);
   // Events-table is auto-pushed by setupTestStack; we only need to add
   // the feature-specific projection + lookup tables here. notificationPre-
   // ferencesTable is explicit because delivery-service queries it on
   // every notify() — without it, notify() crashes before the event append.
-  await pushTables(db, {
+  await unsafePushTables(db, {
     configValuesTable,
     tenantMembershipsTable,
     inAppMessagesTable,

package/src/delivery/__tests__/delivery.integration.ts

@@ -10,10 +10,10 @@ import {
 } from "@cosmicdrift/kumiko-framework/engine";
 import {
   createTestUser,
-  pushTables,
   setupTestStack,
   type TestStack,
   TestUsers,
+  unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { and, eq } from "drizzle-orm";
 import { afterAll, beforeAll, beforeEach, describe, expect, test } from "vitest";
@@ -289,7 +289,7 @@ beforeAll(async () => {
   // deliveryAttemptsTable is auto-pushed by setupTestStack as MSP-projection-table;
   // notificationPreferencesTable is an ES-entity, so it still needs explicit
   // push here (entity-tables are not auto-provisioned — only projection ones).
-  await pushTables(db, {
+  await unsafePushTables(db, {
     configValuesTable,
     tenantMembershipsTable,
     notificationPreferencesTable,
@@ -298,8 +298,8 @@ beforeAll(async () => {
   });
 
   // Create tenant entity table + seed memberships for tenant broadcast tests
-  const { createEntityTable } = await import("@cosmicdrift/kumiko-framework/stack");
-  await createEntityTable(db, tenantEntity, "tenant");
+  const { unsafeCreateEntityTable } = await import("@cosmicdrift/kumiko-framework/stack");
+  await unsafeCreateEntityTable(db, tenantEntity, "tenant");
 
   // Create tenant + members via real API
   await stack.http.writeOk(