@cosmicdrift/kumiko-bundled-features 0.1.0 → 0.2.1

package/src/feature-toggles/__tests__/feature-toggles.integration.ts

@@ -16,11 +16,11 @@ import {
 } from "@cosmicdrift/kumiko-framework/engine";
 import { createEventDispatcher, type EventConsumer } from "@cosmicdrift/kumiko-framework/pipeline";
 import {
-  createEntityTable,
   createTestUser,
-  pushTables,
   setupTestStack,
   type TestStack,
+  unsafeCreateEntityTable,
+  unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { createLateBoundHolder } from "@cosmicdrift/kumiko-framework/testing";
 import { generateId } from "@cosmicdrift/kumiko-framework/utils";
@@ -165,12 +165,12 @@ beforeAll(async () => {
     systemHooks: [],
   });
 
-  await pushTables(stack.db, { globalFeatureStateTable });
+  await unsafePushTables(stack.db, { globalFeatureStateTable });
   // widgetTrackerTable is auto-pushed by setupTestStack because it's the
   // projection-table of a registered r.multiStreamProjection — manually
   // pushing again would re-run the CREATE TABLE and fail duplicate.
-  await createEntityTable(stack.db, widgetEntity);
-  await createEntityTable(stack.db, widgetAuditEntity, "widget-audit");
+  await unsafeCreateEntityTable(stack.db, widgetEntity);
+  await unsafeCreateEntityTable(stack.db, widgetAuditEntity, "widget-audit");
 
   runtime = new GlobalFeatureToggleRuntime(stack.db, stack.registry);
   await runtime.initialize();

package/src/feature-toggles/__tests__/registered-system-tenant.test.ts

@@ -0,0 +1,84 @@
+// Sprint 8a recipe-test pin: registered.query nutzt SYSTEM_TENANT_ID
+// statt event.user.tenantId. Operator-tooling muss PLATTFORM-truth
+// sehen, nicht den eigenen tier-cut. Convention ist in DispatcherOptions.
+// effectiveFeatures dokumentiert; dieser test pinst sie damit ein
+// future-refactor (z.B. mechanisches sed oder copy-paste) sie nicht
+// silent zurückdreht zu event.user.tenantId.
+//
+// Pure unit-test ist nicht möglich weil registered.query einen DB-select
+// auf globalFeatureStateTable macht BEVOR der effectiveFeatures-call
+// läuft. Wir mocken den ctx.db.select-pfad damit der handler komplett
+// durchläuft. Die Convention-Pin ist die einzige Aussage des tests —
+// echtes integration-Verhalten deckt feature-toggles.integration.ts ab.
+
+import {
+  createEntity,
+  createRegistry,
+  createTextField,
+  defineFeature,
+  SYSTEM_TENANT_ID,
+  type TenantId,
+} from "@cosmicdrift/kumiko-framework/engine";
+import { createDispatcher } from "@cosmicdrift/kumiko-framework/pipeline";
+import { createTestUser } from "@cosmicdrift/kumiko-framework/stack";
+import { describe, expect, test } from "vitest";
+import { createFeatureTogglesFeature } from "../feature";
+import type { GlobalFeatureToggleRuntime } from "../toggle-runtime";
+
+describe("Sprint 8a: registered.query SYSTEM_TENANT_ID convention", () => {
+  test("ruft effectiveFeatures mit SYSTEM_TENANT_ID, nicht mit caller-tenantId", async () => {
+    const observed: string[] = [];
+
+    const dummy = defineFeature("dummy", (r) => {
+      r.entity("widget", createEntity({ table: "Widgets", fields: { name: createTextField() } }));
+    });
+
+    const runtime: GlobalFeatureToggleRuntime | null = null;
+    const featureToggles = createFeatureTogglesFeature({
+      getRuntime: () => {
+        if (!runtime) throw new Error("runtime not initialized");
+        return runtime;
+      },
+    });
+
+    const registry = createRegistry([dummy, featureToggles]);
+
+    // Mock ctx.db.select-chain damit der handler durch den DB-Pfad
+    // kommt. Wir liefern leere overrides (.from() returnt []), das
+    // genügt — registered.query iteriert dann über registry.features
+    // und ruft ctx.effectiveFeatures, was unser observable ist.
+    const mockDb = {
+      select: () => ({ from: async () => [] as unknown[] }),
+    } as unknown as Parameters<typeof createDispatcher>[1]["db"];
+
+    const callerTenant = "00000000-0000-4000-8000-0000000000c1" as TenantId;
+
+    const dispatcher = createDispatcher(
+      registry,
+      { db: mockDb },
+      {
+        effectiveFeatures: (tenantId) => {
+          observed.push(tenantId);
+          return new Set(["dummy", "feature-toggles"]);
+        },
+      },
+    );
+
+    const admin = createTestUser({
+      id: "admin-1",
+      tenantId: callerTenant,
+      roles: ["SystemAdmin"],
+    });
+
+    await dispatcher.query("feature-toggles:query:registered", {}, admin);
+
+    // Pin: registered.query call führt zu MINDESTENS zwei effectiveFeatures-
+    // calls:
+    //   1. dispatcher's checkFeatureEnabled (mit user.tenantId = callerTenant)
+    //   2. registered.query handler-body (mit SYSTEM_TENANT_ID)
+    // Wenn ein future-refactor SYSTEM_TENANT_ID zu event.user.tenantId zurück-
+    // dreht, fehlt der zweite call und dieser test fail't.
+    expect(observed).toContain(callerTenant);
+    expect(observed).toContain(SYSTEM_TENANT_ID);
+  });
+});

package/src/feature-toggles/handlers/registered.query.ts

@@ -1,4 +1,4 @@
-import { defineQueryHandler } from "@cosmicdrift/kumiko-framework/engine";
+import { defineQueryHandler, SYSTEM_TENANT_ID } from "@cosmicdrift/kumiko-framework/engine";
 import { z } from "zod";
 import { globalFeatureStateTable } from "../global-feature-state-table";
 
@@ -24,7 +24,12 @@ export const registeredQuery = defineQueryHandler({
       .from(globalFeatureStateTable)) as OverrideRow[];
     const overrides = new Map(overrideRows.map((r) => [r.featureName, r.enabled]));
 
-    const effective = ctx.effectiveFeatures?.();
+    // SystemAdmin operator-tooling: das listing soll die PLATTFORM-truth
+    // zeigen (alle features im Registry), nicht den eigenen tier-cut.
+    // Sprint-8a per-tenant signature → wir rufen mit SYSTEM_TENANT_ID,
+    // App-resolver returnt union-of-all-tier-features. Sentinel-Convention
+    // dokumentiert in DispatcherOptions.effectiveFeatures.
+    const effective = ctx.effectiveFeatures?.(SYSTEM_TENANT_ID);
 
     const items = [];
     for (const feature of ctx.registry.features.values()) {

package/src/file-foundation/__tests__/file-foundation.integration.ts

@@ -8,12 +8,12 @@ import { defineFeature, defineWriteHandler } from "@cosmicdrift/kumiko-framework
 import { createEventsTable } from "@cosmicdrift/kumiko-framework/event-store";
 import { createEnvMasterKeyProvider } from "@cosmicdrift/kumiko-framework/secrets";
 import {
-  createEntityTable,
   createTestUser,
-  pushTables,
   setupTestStack,
   type TestStack,
   testTenantId,
+  unsafeCreateEntityTable,
+  unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
 import {
   createMutableMasterKeyProvider,
@@ -102,8 +102,8 @@ beforeAll(async () => {
   });
   db = stack.db;
 
-  await createEntityTable(db, tenantEntity);
-  await pushTables(db, { configValuesTable, tenant_secrets: tenantSecretsTable });
+  await unsafeCreateEntityTable(db, tenantEntity);
+  await unsafePushTables(db, { configValuesTable, tenant_secrets: tenantSecretsTable });
   await createEventsTable(db);
 });
 

package/src/jobs/__tests__/job-system-user.integration.ts

@@ -20,10 +20,10 @@ import { createJobRunner, type JobRunner } from "@cosmicdrift/kumiko-framework/j
 import {
   createTestDb,
   createTestRedis,
-  pushTables,
   type TestDb,
   type TestRedis,
   TestUsers,
+  unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { bridgeStub, sleep } from "@cosmicdrift/kumiko-framework/testing";
 import { afterAll, beforeAll, describe, expect, test } from "vitest";
@@ -99,11 +99,11 @@ beforeAll(async () => {
   testRedis = await createTestRedis();
   db = testDb.db;
 
-  await pushTables(db, { configValuesTable });
+  await unsafePushTables(db, { configValuesTable });
   // Post-ES config writes go through the event-store executor, which needs
   // the framework events + archived-streams tables to exist before the
   // first append. setupTestStack provisions them automatically; this test
-  // builds its DB manually (createTestDb + pushTables), so we do it here.
+  // builds its DB manually (createTestDb + unsafePushTables), so we do it here.
   await createEventsTable(db);
   await createArchivedStreamsTable(db);
 

package/src/jobs/__tests__/jobs-events.integration.ts

@@ -13,9 +13,9 @@ import { createEventsTable, eventsTable } from "@cosmicdrift/kumiko-framework/ev
 import {
   createTestDb,
   createTestRedis,
-  pushTables,
   type TestDb,
   type TestRedis,
+  unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { eq } from "drizzle-orm";
 import { afterAll, beforeAll, beforeEach, describe, expect, test } from "vitest";
@@ -37,7 +37,7 @@ beforeAll(async () => {
   testDb = await createTestDb();
   testRedis = await createTestRedis();
   const registry = createRegistry([createJobsFeature()]);
-  await pushTables(testDb.db, { jobRunsTable, jobRunLogsTable });
+  await unsafePushTables(testDb.db, { jobRunsTable, jobRunLogsTable });
   await createEventsTable(testDb.db);
   logger = createJobRunLogger({ db: testDb.db, registry });
 });

package/src/jobs/__tests__/jobs-feature.integration.ts

@@ -11,10 +11,10 @@ import {
   createTestDb,
   createTestRedis,
   createTestUser,
-  pushTables,
   type TestDb,
   type TestRedis,
   TestUsers,
+  unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { sleep } from "@cosmicdrift/kumiko-framework/testing";
 import type { Hono } from "hono";
@@ -72,10 +72,10 @@ beforeAll(async () => {
   const registry = createRegistry([appFeature, jobsFeature]);
 
   // jobRuns + jobRunLogs are projection tables (auto-pushed by
-  // pushTables via the registry-declared inline projections in jobs-feature).
+  // unsafePushTables via the registry-declared inline projections in jobs-feature).
   // We need events + archived_streams for the ES writes the job-runner's
   // logger does.
-  await pushTables(db, { jobRunsTable, jobRunLogsTable });
+  await unsafePushTables(db, { jobRunsTable, jobRunLogsTable });
   await createEventsTable(db);
 
   const redisUrl = `redis://${testRedis.redis.options.host}:${testRedis.redis.options.port}/${testRedis.redis.options.db}`;

package/src/legal-pages/__tests__/legal-pages.integration.ts

@@ -9,9 +9,9 @@ import type { DbConnection } from "@cosmicdrift/kumiko-framework/db";
 import { SYSTEM_TENANT_ID } from "@cosmicdrift/kumiko-framework/engine";
 import { createEventsTable } from "@cosmicdrift/kumiko-framework/event-store";
 import {
-  createEntityTable,
   setupTestStack,
   type TestStack,
+  unsafeCreateEntityTable,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { afterAll, beforeAll, describe, expect, test } from "vitest";
 import { createLegalPagesFeature, runLegalPagesBootCheck } from "../feature";
@@ -36,7 +36,7 @@ beforeAll(async () => {
     }),
   });
   db = stack.db;
-  await createEntityTable(db, textBlockEntity);
+  await unsafeCreateEntityTable(db, textBlockEntity);
   await createEventsTable(db);
 
   // Seed legal blocks für SYSTEM_TENANT in DE
@@ -219,7 +219,7 @@ describe("legal-pages :: SYSTEM_TENANT-routing (production-bug-regression)", ()
       }),
     });
     try {
-      await createEntityTable(hostScopedStack.db, textBlockEntity);
+      await unsafeCreateEntityTable(hostScopedStack.db, textBlockEntity);
       await createEventsTable(hostScopedStack.db);
 
       // Block NUR im SYSTEM_TENANT seeden — NICHT im otherTenantId

package/src/mail-foundation/__tests__/mail-foundation.integration.ts

@@ -14,12 +14,12 @@ import { defineFeature, defineWriteHandler } from "@cosmicdrift/kumiko-framework
 import { createEventsTable } from "@cosmicdrift/kumiko-framework/event-store";
 import { createEnvMasterKeyProvider } from "@cosmicdrift/kumiko-framework/secrets";
 import {
-  createEntityTable,
   createTestUser,
-  pushTables,
   setupTestStack,
   type TestStack,
   testTenantId,
+  unsafeCreateEntityTable,
+  unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
 import {
   createMutableMasterKeyProvider,
@@ -106,8 +106,8 @@ beforeAll(async () => {
   });
   db = stack.db;
 
-  await createEntityTable(db, tenantEntity);
-  await pushTables(db, { configValuesTable, tenant_secrets: tenantSecretsTable });
+  await unsafeCreateEntityTable(db, tenantEntity);
+  await unsafePushTables(db, { configValuesTable, tenant_secrets: tenantSecretsTable });
   await createEventsTable(db);
 });
 

package/src/secrets/__tests__/rotate.integration.ts

@@ -12,9 +12,9 @@ import {
 } from "@cosmicdrift/kumiko-framework/secrets";
 import {
   createTestUser,
-  pushTables,
   setupTestStack,
   type TestStack,
+  unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { eq, sql } from "drizzle-orm";
 import { afterAll, beforeAll, describe, expect, test } from "vitest";
@@ -76,7 +76,7 @@ beforeAll(async () => {
       secrets: createSecretsContext({ db, masterKeyProvider: seedProvider }),
     }),
   });
-  await pushTables(stack.db, {
+  await unsafePushTables(stack.db, {
     tenant_secrets: tenantSecretsTable,
   });
 

package/src/secrets/__tests__/secrets-events.integration.ts

@@ -13,9 +13,9 @@ import {
 } from "@cosmicdrift/kumiko-framework/secrets";
 import {
   createTestUser,
-  pushTables,
   setupTestStack,
   type TestStack,
+  unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { eq } from "drizzle-orm";
 import { afterAll, beforeAll, beforeEach, describe, expect, test } from "vitest";
@@ -50,7 +50,7 @@ beforeAll(async () => {
       secrets: createSecretsContext({ db, masterKeyProvider: provider }),
     }),
   });
-  await pushTables(stack.db, { tenantSecretsTable });
+  await unsafePushTables(stack.db, { tenantSecretsTable });
   await createEventsTable(stack.db);
 });
 

package/src/secrets/__tests__/secrets.integration.ts

@@ -12,9 +12,9 @@ import {
 } from "@cosmicdrift/kumiko-framework/secrets";
 import {
   createTestUser,
-  pushTables,
   setupTestStack,
   type TestStack,
+  unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { and, eq } from "drizzle-orm";
 import { afterAll, beforeAll, describe, expect, test } from "vitest";
@@ -49,7 +49,7 @@ beforeAll(async () => {
   // table (tenant_secrets) still needs an explicit push here, since it
   // belongs to an ES entity (and entity-tables aren't auto-pushed by
   // setupTestStack).
-  await pushTables(stack.db, { tenant_secrets: tenantSecretsTable });
+  await unsafePushTables(stack.db, { tenant_secrets: tenantSecretsTable });
   await createEventsTable(stack.db);
 });
 

package/src/sessions/__tests__/cleanup.integration.ts

@@ -6,10 +6,10 @@
 
 import type { AppContext } from "@cosmicdrift/kumiko-framework/engine";
 import {
-  createEntityTable,
   setupTestStack,
   type TestStack,
   testTenantId,
+  unsafeCreateEntityTable,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { sql } from "drizzle-orm";
 import { afterAll, beforeAll, beforeEach, describe, expect, test } from "vitest";
@@ -38,7 +38,7 @@ beforeAll(async () => {
   stack = await setupTestStack({
     features: [createSessionsFeature()],
   });
-  await createEntityTable(stack.db, userSessionEntity);
+  await unsafeCreateEntityTable(stack.db, userSessionEntity);
 });
 
 afterAll(async () => {

package/src/sessions/__tests__/password-auto-revoke.integration.ts

@@ -2,11 +2,11 @@ import { randomBytes } from "node:crypto";
 import { createEncryptionProvider } from "@cosmicdrift/kumiko-framework/db";
 import type { TenantId } from "@cosmicdrift/kumiko-framework/engine";
 import {
-  createEntityTable,
-  pushTables,
   setupTestStack,
   type TestStack,
   testTenantId,
+  unsafeCreateEntityTable,
+  unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { createLateBoundHolder } from "@cosmicdrift/kumiko-framework/testing";
 import { afterAll, beforeAll, beforeEach, describe, expect, test, vi } from "vitest";
@@ -77,10 +77,10 @@ beforeAll(async () => {
   callbacks.set(createSessionCallbacks({ db: stack.db }));
   h = makeSessionHelpers(stack, TENANT);
 
-  await createEntityTable(stack.db, userEntity);
-  await createEntityTable(stack.db, tenantEntity);
-  await createEntityTable(stack.db, userSessionEntity);
-  await pushTables(stack.db, { configValuesTable, tenantMembershipsTable });
+  await unsafeCreateEntityTable(stack.db, userEntity);
+  await unsafeCreateEntityTable(stack.db, tenantEntity);
+  await unsafeCreateEntityTable(stack.db, userSessionEntity);
+  await unsafePushTables(stack.db, { configValuesTable, tenantMembershipsTable });
 });
 
 afterAll(async () => {

package/src/sessions/__tests__/sessions.integration.ts

@@ -2,11 +2,11 @@ import { randomBytes } from "node:crypto";
 import { createEncryptionProvider } from "@cosmicdrift/kumiko-framework/db";
 import type { TenantId } from "@cosmicdrift/kumiko-framework/engine";
 import {
-  createEntityTable,
-  pushTables,
   setupTestStack,
   type TestStack,
   testTenantId,
+  unsafeCreateEntityTable,
+  unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { createLateBoundHolder } from "@cosmicdrift/kumiko-framework/testing";
 import { and, eq } from "drizzle-orm";
@@ -64,10 +64,10 @@ beforeAll(async () => {
   callbacks.set(createSessionCallbacks({ db: stack.db }));
   h = makeSessionHelpers(stack, TENANT);
 
-  await createEntityTable(stack.db, userEntity);
-  await createEntityTable(stack.db, tenantEntity);
-  await createEntityTable(stack.db, userSessionEntity);
-  await pushTables(stack.db, { configValuesTable, tenantMembershipsTable });
+  await unsafeCreateEntityTable(stack.db, userEntity);
+  await unsafeCreateEntityTable(stack.db, tenantEntity);
+  await unsafeCreateEntityTable(stack.db, userSessionEntity);
+  await unsafePushTables(stack.db, { configValuesTable, tenantMembershipsTable });
 });
 
 afterAll(async () => {

package/src/tenant/__tests__/multi-tenant.integration.ts

@@ -9,15 +9,15 @@ import {
 import { createEventsTable } from "@cosmicdrift/kumiko-framework/event-store";
 import { createJobRunner, type JobRunner } from "@cosmicdrift/kumiko-framework/jobs";
 import {
-  createEntityTable,
   createTestDb,
   createTestRedis,
   createTestUser,
-  pushTables,
   type TestDb,
   type TestRedis,
   TestUsers,
   testTenantId,
+  unsafeCreateEntityTable,
+  unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { bridgeStub, sleep } from "@cosmicdrift/kumiko-framework/testing";
 import type { Hono } from "hono";
@@ -60,8 +60,8 @@ beforeAll(async () => {
   testRedis = await createTestRedis();
   db = testDb.db;
 
-  await createEntityTable(db, tenantEntity);
-  await pushTables(db, { tenantMembershipsTable, configValuesTable });
+  await unsafeCreateEntityTable(db, tenantEntity);
+  await unsafePushTables(db, { tenantMembershipsTable, configValuesTable });
   await createEventsTable(db);
 
   const configFeature = createConfigFeature();

package/src/tenant/__tests__/seed-testing.integration.ts

@@ -14,12 +14,12 @@
 import type { TenantId } from "@cosmicdrift/kumiko-framework/engine";
 import { createEventsTable, eventsTable } from "@cosmicdrift/kumiko-framework/event-store";
 import {
-  createEntityTable,
   createTestUser,
-  pushTables,
   setupTestStack,
   type TestStack,
   TestUsers,
+  unsafeCreateEntityTable,
+  unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { and, eq } from "drizzle-orm";
 import { afterAll, beforeAll, beforeEach, describe, expect, test } from "vitest";
@@ -43,8 +43,8 @@ beforeAll(async () => {
     features: [createConfigFeature(), createTenantFeature()],
     extraContext: { configResolver: resolver },
   });
-  await createEntityTable(stack.db, tenantEntity);
-  await pushTables(stack.db, { configValuesTable, tenantMembershipsTable });
+  await unsafeCreateEntityTable(stack.db, tenantEntity);
+  await unsafePushTables(stack.db, { configValuesTable, tenantMembershipsTable });
   await createEventsTable(stack.db);
 });
 

package/src/tenant/__tests__/tenant.integration.ts

@@ -2,12 +2,12 @@ import { randomBytes } from "node:crypto";
 import { createEncryptionProvider, type DbConnection } from "@cosmicdrift/kumiko-framework/db";
 import { createEventsTable } from "@cosmicdrift/kumiko-framework/event-store";
 import {
-  createEntityTable,
   createTestUser,
-  pushTables,
   setupTestStack,
   type TestStack,
   TestUsers,
+  unsafeCreateEntityTable,
+  unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { expectErrorIncludes, rolesOf } from "@cosmicdrift/kumiko-framework/testing";
 import { afterAll, beforeAll, describe, expect, test } from "vitest";
@@ -42,8 +42,8 @@ beforeAll(async () => {
   });
   db = stack.db;
 
-  await createEntityTable(db, tenantEntity);
-  await pushTables(db, { configValuesTable });
+  await unsafeCreateEntityTable(db, tenantEntity);
+  await unsafePushTables(db, { configValuesTable });
   await createEventsTable(db);
 });
 

package/src/tenant/seeding.ts

@@ -38,8 +38,9 @@ import {
   fetchOne,
 } from "@cosmicdrift/kumiko-framework/db";
 import type { SessionUser, TenantId } from "@cosmicdrift/kumiko-framework/engine";
+import { eventsTable } from "@cosmicdrift/kumiko-framework/event-store";
 import { TestUsers } from "@cosmicdrift/kumiko-framework/stack";
-import { eq } from "drizzle-orm";
+import { eq, max as maxFn } from "drizzle-orm";
 import { tenantMembershipEntity, tenantMembershipsTable } from "./membership-table";
 import { tenantEntity, tenantTable } from "./schema/tenant";
 
@@ -94,6 +95,16 @@ export async function seedTenant(db: DbConnection, options: SeedTenantOptions):
   const existing = await fetchOne(db, tenantTable, eq(tenantTable["id"], options.id));
   if (existing) return options.id;
 
+  // Idempotenz: Aggregate kann im Event-Store existieren ohne Projection-Row
+  // (Projection-Drift nach rebuild, manuellem DELETE, oder async-lag). Wenn
+  // Stream-Version > 0 → kein create() — wäre version_conflict. Caller
+  // bekommt die ID, Projection wird beim nächsten Dispatcher-Cycle aufgebaut.
+  const [streamRow] = await db
+    .select({ v: maxFn(eventsTable.version) })
+    .from(eventsTable)
+    .where(eq(eventsTable.aggregateId, options.id));
+  if ((streamRow?.v ?? 0) > 0) return options.id;
+
   const result = await tenantExecutor.create(
     { id: options.id, key: options.key, name: options.name },
     by,

package/src/text-content/README.md

@@ -38,12 +38,16 @@ container exits. No auto-heal in production. See
 In integration tests (vitest) it's enough to do:
 
 ```typescript
-import { createEntityTable } from "@cosmicdrift/kumiko-framework/stack";
+import { unsafeCreateEntityTable } from "@cosmicdrift/kumiko-framework/stack";
 import { textBlockEntity } from "@cosmicdrift/kumiko-bundled-features/text-content";
 
-await createEntityTable(stack.db, textBlockEntity);
+await unsafeCreateEntityTable(stack.db, textBlockEntity);
 ```
 
+The `unsafe` prefix is intentional — it bypasses the projection
+registry and is reserved for test setup and framework-internals. Apps
+declare data via `r.entity(...)` everywhere else.
+
 ## Use cases
 
 text-content is generic — anything that's static Markdown text per

package/src/text-content/__tests__/text-content.integration.ts

@@ -1,11 +1,11 @@
 import type { DbConnection } from "@cosmicdrift/kumiko-framework/db";
 import { createEventsTable } from "@cosmicdrift/kumiko-framework/event-store";
 import {
-  createEntityTable,
   createTestUser,
   setupTestStack,
   type TestStack,
   TestUsers,
+  unsafeCreateEntityTable,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { expectErrorIncludes } from "@cosmicdrift/kumiko-framework/testing";
 import { afterAll, beforeAll, describe, expect, test } from "vitest";
@@ -26,7 +26,7 @@ const feature = createTextContentFeature();
 beforeAll(async () => {
   stack = await setupTestStack({ features: [feature] });
   db = stack.db;
-  await createEntityTable(db, textBlockEntity);
+  await unsafeCreateEntityTable(db, textBlockEntity);
   await createEventsTable(db);
 });