@cosmicdrift/kumiko-bundled-features 0.14.0 → 0.16.0

package/src/files-provider-s3/__tests__/s3-provider.test.ts

@@ -1,4 +1,4 @@
-import { describe, expect, test } from "vitest";
+import { describe, expect, test } from "bun:test";
 import type { S3ProviderConfig } from "../s3-provider";
 import { resolveForcePathStyle } from "../s3-provider";
 

package/src/jobs/__tests__/job-system-user.integration.ts

@@ -1,3 +1,4 @@
+import { afterAll, beforeAll, describe, expect, test } from "bun:test";
 import { randomBytes } from "node:crypto";
 import {
   createEncryptionProvider,
@@ -26,7 +27,6 @@ import {
   unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
 import { bridgeStub, sleep } from "@cosmicdrift/kumiko-framework/testing";
-import { afterAll, beforeAll, describe, expect, test } from "vitest";
 import { ConfigHandlers } from "../../config/constants";
 import { createConfigAccessor, createConfigFeature } from "../../config/feature";
 import { type ConfigResolver, createConfigResolver } from "../../config/resolver";

package/src/jobs/__tests__/jobs-events.integration.ts

@@ -8,6 +8,8 @@
 // projection side (list + detail queries). This file covers the event
 // side — complementary coverage, minimal overlap.
 
+import { afterAll, beforeAll, beforeEach, describe, expect, test } from "bun:test";
+import { selectMany } from "@cosmicdrift/kumiko-framework/bun-db";
 import { createRegistry, SYSTEM_TENANT_ID } from "@cosmicdrift/kumiko-framework/engine";
 import { createEventsTable, eventsTable } from "@cosmicdrift/kumiko-framework/event-store";
 import {
@@ -17,8 +19,7 @@ import {
   type TestRedis,
   unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
-import { eq } from "drizzle-orm";
-import { afterAll, beforeAll, beforeEach, describe, expect, test } from "vitest";
+import { resetTestTables } from "@cosmicdrift/kumiko-framework/testing";
 import { runCompletedSchema, runFailedSchema, runStartedSchema } from "../events";
 import { createJobsFeature } from "../feature";
 import {
@@ -48,9 +49,7 @@ afterAll(async () => {
 });
 
 beforeEach(async () => {
-  await testDb.db.delete(eventsTable);
-  await testDb.db.delete(jobRunsTable);
-  await testDb.db.delete(jobRunLogsTable);
+  await resetTestTables(testDb.db, [eventsTable, jobRunsTable, jobRunLogsTable]);
 });
 
 describe("jobRun event shapes", () => {
@@ -69,10 +68,7 @@ describe("jobRun event shapes", () => {
       attempt: 1,
     });
 
-    const events = await testDb.db
-      .select()
-      .from(eventsTable)
-      .where(eq(eventsTable.type, JOB_RUN_STARTED_EVENT));
+    const events = await selectMany(testDb.db, eventsTable, { type: JOB_RUN_STARTED_EVENT });
 
     expect(events.length).toBe(1);
     const e = events[0];
@@ -95,10 +91,7 @@ describe("jobRun event shapes", () => {
       { level: "info", message: "done", timestamp: Temporal.Now.instant() },
     ]);
 
-    const events = await testDb.db
-      .select()
-      .from(eventsTable)
-      .where(eq(eventsTable.type, JOB_RUN_COMPLETED_EVENT));
+    const events = await selectMany(testDb.db, eventsTable, { type: JOB_RUN_COMPLETED_EVENT });
 
     expect(events.length).toBe(1);
     const p = runCompletedSchema.parse(events[0]?.payload);
@@ -113,10 +106,7 @@ describe("jobRun event shapes", () => {
       { level: "error", message: "kaboom", timestamp: Temporal.Now.instant() },
     ]);
 
-    const events = await testDb.db
-      .select()
-      .from(eventsTable)
-      .where(eq(eventsTable.type, JOB_RUN_FAILED_EVENT));
+    const events = await selectMany(testDb.db, eventsTable, { type: JOB_RUN_FAILED_EVENT });
 
     expect(events.length).toBe(1);
     const p = runFailedSchema.parse(events[0]?.payload);
@@ -131,10 +121,7 @@ describe("jobRun event shapes", () => {
     // Both events should share the same aggregateId — that's what makes
     // the jobRun a single stream and lets ctx.loadAggregate() reduce
     // them into a coherent state.
-    const events = await testDb.db
-      .select()
-      .from(eventsTable)
-      .where(eq(eventsTable.aggregateType, "jobRun"));
+    const events = await selectMany(testDb.db, eventsTable, { aggregateType: "jobRun" });
 
     expect(events.length).toBe(2);
     const ids = new Set(events.map((e) => e.aggregateId));

package/src/jobs/__tests__/jobs-feature.integration.ts

@@ -1,3 +1,4 @@
+import { afterAll, beforeAll, describe, expect, test } from "bun:test";
 import { buildServer, type JwtHelper } from "@cosmicdrift/kumiko-framework/api";
 import type { DbConnection } from "@cosmicdrift/kumiko-framework/db";
 import {
@@ -18,7 +19,6 @@ import {
 } from "@cosmicdrift/kumiko-framework/stack";
 import { sleep } from "@cosmicdrift/kumiko-framework/testing";
 import type { Hono } from "hono";
-import { afterAll, beforeAll, describe, expect, test } from "vitest";
 import { JobHandlers, JobQueries } from "../constants";
 import { createJobsFeature } from "../feature";
 import { createJobRunLogger } from "../job-run-logger";

package/src/jobs/feature.ts

@@ -1,9 +1,9 @@
+import { insertMany, insertOne, updateMany } from "@cosmicdrift/kumiko-framework/bun-db";
 import {
   defineApply,
   defineFeature,
   type FeatureDefinition,
 } from "@cosmicdrift/kumiko-framework/engine";
-import { eq } from "drizzle-orm";
 import type { z } from "zod";
 // Event-payload schemas live in a sibling module so the logger can import
 // them without the cycle jobs-feature ↔ job-run-logger. The logger parses
@@ -19,11 +19,14 @@ import {
   JOB_RUN_FAILED_EVENT,
   JOB_RUN_STARTED_EVENT,
 } from "./job-run-logger";
-import { jobRunLogsTable, jobRunsTable } from "./job-run-table";
+import { jobRunLogsTable, jobRunLogsTableMeta, jobRunsTable } from "./job-run-table";
 
 export function createJobsFeature(): FeatureDefinition {
   return defineFeature("jobs", (r) => {
     r.systemScope();
+    r.unmanagedTable(jobRunLogsTableMeta, {
+      reason: "read_side.job_run_logs",
+    });
     // Events-only aggregate: "jobRun" has no r.entity registration, because
     // the entire lifecycle is driven by BullMQ-callback → r.defineEvent
     // (no executor, no CRUD). The boot-validator accepts the two
@@ -44,7 +47,7 @@ export function createJobsFeature(): FeatureDefinition {
         [JOB_RUN_STARTED_EVENT]: defineApply<z.infer<typeof runStartedSchema>>(
           async (event, tx) => {
             const p = event.payload;
-            await tx.insert(jobRunsTable).values({
+            await insertOne(tx, jobRunsTable, {
               id: event.aggregateId,
               tenantId: event.tenantId,
               version: event.version,
@@ -63,24 +66,27 @@ export function createJobsFeature(): FeatureDefinition {
         [JOB_RUN_COMPLETED_EVENT]: defineApply<z.infer<typeof runCompletedSchema>>(
           async (event, tx) => {
             const p = event.payload;
-            await tx
-              .update(jobRunsTable)
-              .set({
+            await updateMany(
+              tx,
+              jobRunsTable,
+              {
                 status: "completed",
                 duration: p.duration,
                 finishedAt: Temporal.Instant.from(p.finishedAt),
                 version: event.version,
                 modifiedAt: event.createdAt,
                 modifiedById: event.metadata?.userId ?? "system",
-              })
-              .where(eq(jobRunsTable.id, event.aggregateId));
+              },
+              { id: event.aggregateId },
+            );
           },
         ),
         [JOB_RUN_FAILED_EVENT]: defineApply<z.infer<typeof runFailedSchema>>(async (event, tx) => {
           const p = event.payload;
-          await tx
-            .update(jobRunsTable)
-            .set({
+          await updateMany(
+            tx,
+            jobRunsTable,
+            {
               status: "failed",
               error: p.error,
               duration: p.duration,
@@ -88,8 +94,9 @@ export function createJobsFeature(): FeatureDefinition {
               version: event.version,
               modifiedAt: event.createdAt,
               modifiedById: event.metadata?.userId ?? "system",
-            })
-            .where(eq(jobRunsTable.id, event.aggregateId));
+            },
+            { id: event.aggregateId },
+          );
         }),
       },
     });
@@ -109,7 +116,9 @@ export function createJobsFeature(): FeatureDefinition {
             // to insert; the completed-event alone already updated the run's
             // status via the sibling job-runs projection.
             if (p.logs.length === 0) return;
-            await tx.insert(jobRunLogsTable).values(
+            await insertMany(
+              tx,
+              jobRunLogsTable,
               p.logs.map((log) => ({
                 runId: event.aggregateId,
                 level: log.level,
@@ -123,7 +132,9 @@ export function createJobsFeature(): FeatureDefinition {
           const p = event.payload;
           // skip: empty log batch — the worker ran silent (mirror of completed)
           if (p.logs.length === 0) return;
-          await tx.insert(jobRunLogsTable).values(
+          await insertMany(
+            tx,
+            jobRunLogsTable,
             p.logs.map((log) => ({
               runId: event.aggregateId,
               level: log.level,

package/src/jobs/handlers/detail.query.ts

@@ -1,6 +1,5 @@
-import { fetchOne } from "@cosmicdrift/kumiko-framework/db";
+import { fetchOne, selectMany } from "@cosmicdrift/kumiko-framework/bun-db";
 import { defineQueryHandler } from "@cosmicdrift/kumiko-framework/engine";
-import { eq } from "drizzle-orm";
 import { z } from "zod";
 import { jobRunLogsTable, jobRunsTable } from "../job-run-table";
 
@@ -15,15 +14,18 @@ export const detailQuery = defineQueryHandler({
   handler: async (query, ctx) => {
     const db = ctx.db;
 
-    const row = await fetchOne(db, jobRunsTable, eq(jobRunsTable.id, query.payload.runId));
+    const row = await fetchOne(db, jobRunsTable, { id: query.payload.runId });
 
     if (!row) return null;
 
-    const logs = await db
-      .select()
-      .from(jobRunLogsTable)
-      .where(eq(jobRunLogsTable.runId, query.payload.runId))
-      .orderBy(jobRunLogsTable.id);
+    const logs = await selectMany(
+      db,
+      jobRunLogsTable,
+      { runId: query.payload.runId },
+      {
+        orderBy: { col: "id", direction: "asc" },
+      },
+    );
 
     return { ...row, logs };
   },

package/src/jobs/handlers/list.query.ts

@@ -1,7 +1,7 @@
+import { selectMany, type WhereObject } from "@cosmicdrift/kumiko-framework/bun-db";
 import { defineQueryHandler } from "@cosmicdrift/kumiko-framework/engine";
-import { and, desc, eq, type SQL } from "drizzle-orm";
 import { z } from "zod";
-import { type JobRunStatus, jobRunsTable } from "../job-run-table";
+import { jobRunsTable } from "../job-run-table";
 
 export const listQuery = defineQueryHandler({
   name: "list",
@@ -12,25 +12,13 @@ export const listQuery = defineQueryHandler({
   }),
   access: { roles: ["SystemAdmin"] },
   handler: async (query, ctx) => {
-    const db = ctx.db;
-    const conditions: SQL[] = [];
-
-    if (query.payload.jobName) {
-      conditions.push(eq(jobRunsTable.jobName, query.payload.jobName));
-    }
-    if (query.payload.status) {
-      conditions.push(eq(jobRunsTable.status, query.payload.status as JobRunStatus)); // @cast-boundary engine-payload
-    }
-
-    const limit = query.payload.limit ?? 50;
-
-    const rows = await db
-      .select()
-      .from(jobRunsTable)
-      .where(conditions.length > 0 ? and(...conditions) : undefined)
-      .orderBy(desc(jobRunsTable.id))
-      .limit(limit);
-
+    const where: WhereObject = {};
+    if (query.payload.jobName) where["jobName"] = query.payload.jobName;
+    if (query.payload.status) where["status"] = query.payload.status;
+    const rows = await selectMany(ctx.db, jobRunsTable, where, {
+      orderBy: { col: "id", direction: "desc" },
+      limit: query.payload.limit ?? 50,
+    });
     return { rows };
   },
 });

package/src/jobs/handlers/retry.write.ts

@@ -1,4 +1,4 @@
-import { fetchOne } from "@cosmicdrift/kumiko-framework/db";
+import { fetchOne } from "@cosmicdrift/kumiko-framework/bun-db";
 import { defineWriteHandler } from "@cosmicdrift/kumiko-framework/engine";
 import {
   NotFoundError,
@@ -7,7 +7,6 @@ import {
 } from "@cosmicdrift/kumiko-framework/errors";
 import type { JobRunner } from "@cosmicdrift/kumiko-framework/jobs";
 import { parseJsonOrThrow } from "@cosmicdrift/kumiko-framework/utils";
-import { eq } from "drizzle-orm";
 import { z } from "zod";
 import { JobErrors } from "../constants";
 import { jobRunsTable } from "../job-run-table";
@@ -29,11 +28,7 @@ export const retryWrite = defineWriteHandler({
     // @cast-boundary engine-payload — JobRunner attached by app-boot via ctx-extension
     const jobRunner = ctx["jobRunner"] as JobRunner;
 
-    const run = await fetchOne<JobRunRow>(
-      db,
-      jobRunsTable,
-      eq(jobRunsTable.id, event.payload.runId),
-    );
+    const run = await fetchOne<JobRunRow>(db, jobRunsTable, { id: event.payload.runId });
 
     if (!run) {
       return writeFailure(

package/src/jobs/job-run-logger.ts

@@ -1,10 +1,10 @@
+import { fetchOne } from "@cosmicdrift/kumiko-framework/bun-db";
 import type { DbConnection } from "@cosmicdrift/kumiko-framework/db";
 import { type Registry, SYSTEM_TENANT_ID } from "@cosmicdrift/kumiko-framework/engine";
 import { append, getStreamVersion } from "@cosmicdrift/kumiko-framework/event-store";
 import type { JobLogEntry, JobMeta, JobRunnerOptions } from "@cosmicdrift/kumiko-framework/jobs";
 import { runProjectionsForEvent } from "@cosmicdrift/kumiko-framework/pipeline";
 import { generateId } from "@cosmicdrift/kumiko-framework/utils";
-import { eq } from "drizzle-orm";
 import { runCompletedSchema, runFailedSchema, runStartedSchema } from "./events";
 import { jobRunsTable } from "./job-run-table";
 
@@ -86,10 +86,7 @@ export function createJobRunLogger(opts: JobRunLoggerOptions): JobRunLoggerCallb
   async function resolveRunId(bullJobId: string): Promise<string | undefined> {
     const cached = cacheGet(bullJobId);
     if (cached) return cached;
-    const [row] = await db
-      .select({ id: jobRunsTable.id })
-      .from(jobRunsTable)
-      .where(eq(jobRunsTable.bullJobId, bullJobId));
+    const row = await fetchOne<{ id: string | number }>(db, jobRunsTable, { bullJobId });
     // buildBaseColumns's signature types `id` as `string | number` because
     // it returns both branches of the idType union. We know this table
     // was built with idType: "uuid" (see job-run-table.ts), so narrowing
@@ -181,10 +178,7 @@ export function createJobRunLogger(opts: JobRunLoggerOptions): JobRunLoggerCallb
       // symmetrically to onJobComplete (which gets duration from the
       // worker). The projection already has started_at from the
       // run-started inline-apply.
-      const [row] = await db
-        .select({ startedAt: jobRunsTable.startedAt })
-        .from(jobRunsTable)
-        .where(eq(jobRunsTable.id, runId));
+      const row = await fetchOne<{ startedAt: Temporal.Instant }>(db, jobRunsTable, { id: runId });
       const now = Temporal.Now.instant();
       const duration = row ? Number(now.since(row.startedAt).total({ unit: "millisecond" })) : 0;
       const payload = runFailedSchema.parse({

package/src/jobs/job-run-table.ts

@@ -1,11 +1,18 @@
 import {
-  buildBaseColumns,
+  buildEntityTable,
+  defineUnmanagedTable,
+  type EntityTableMeta,
   instant,
-  integer,
   table as pgTable,
   serial,
   text,
 } from "@cosmicdrift/kumiko-framework/db";
+import {
+  createEntity,
+  createNumberField,
+  createTextField,
+  createTimestampField,
+} from "@cosmicdrift/kumiko-framework/engine";
 
 export type JobRunStatus = "queued" | "running" | "completed" | "failed";
 export type JobLogLevel = "info" | "warn" | "error";
@@ -24,23 +31,30 @@ export type JobLogLevel = "info" | "warn" | "error";
 // expands the batch into N rows in jobRunLogsTable, keeping the pre-ES
 // detail-query-shape intact.
 //
-// No r.entity is registered for `jobRun` — the boot-validator accepts
-// events-only projection sources where every apply-key is a registered
-// domain-event (see registry.ts).
-export const jobRunsTable = pgTable("read_job_runs", {
-  ...buildBaseColumns(false, "uuid"),
-  jobName: text("job_name").notNull(),
-  bullJobId: text("bull_job_id").notNull(),
-  status: text("status").notNull().$type<JobRunStatus>(),
-  payload: text("payload"),
-  error: text("error"),
-  attempt: integer("attempt").default(1).notNull(),
-  startedAt: instant("started_at").notNull(),
-  finishedAt: instant("finished_at"),
-  duration: integer("duration"),
-  triggeredById: text("triggered_by_id"),
+// Entity-derived table — Phase 3b of drizzle-replacement. Earlier this was
+// a hand-written pgTable; the entity-form is the single source for both
+// the drizzle-table (query API) and the future EntityTableMeta-based
+// migration generator. status/$type<JobRunStatus> ist nicht im entity-
+// schema modelliert — Drizzle's column-type ist text mit CHECK-Constraint
+// als App-Boundary (gleicher Pattern wie template-resolver kind/scope).
+export const jobRunEntity = createEntity({
+  table: "read_job_runs",
+  fields: {
+    jobName: createTextField({ required: true }),
+    bullJobId: createTextField({ required: true }),
+    status: createTextField({ required: true }),
+    payload: createTextField(),
+    error: createTextField(),
+    attempt: createNumberField({ required: true, default: 1 }),
+    startedAt: createTimestampField({ required: true }),
+    finishedAt: createTimestampField(),
+    duration: createNumberField(),
+    triggeredById: createTextField(),
+  },
 });
 
+export const jobRunsTable = buildEntityTable("job-run", jobRunEntity);
+
 // Child projection keyed by the jobRun aggregate id. Pre-ES used a serial
 // PK + integer runId; post-ES runId is still exposed but now holds the
 // uuid of the parent jobRun. Existing detail-query callers treat it as an
@@ -53,3 +67,21 @@ export const jobRunLogsTable = pgTable("read_job_run_logs", {
   message: text("message").notNull(),
   timestamp: instant("timestamp").notNull(),
 });
+
+// **Unmanaged table** — bewusst KEIN createEntity. Begründung:
+//   - serial PK (kein uuid) — pre-ES legacy, kompatibilität mit existing rows
+//   - KEIN tenant_id — child-Tabelle von jobRun, tenant-context lebt am parent
+//   - keine base-columns (kein version/inserted_at/inserted_by_id) — append-
+//     only log, kein in-place-update, keine Audit-Spalten gewünscht
+// pgTable bleibt source-of-truth für Query-API; Phase 4 leitet das pgTable
+// aus dieser Meta ab.
+export const jobRunLogsTableMeta: EntityTableMeta = defineUnmanagedTable({
+  tableName: "read_job_run_logs",
+  columns: [
+    { name: "id", pgType: "serial", notNull: true, primaryKey: true },
+    { name: "run_id", pgType: "text", notNull: true },
+    { name: "level", pgType: "text", notNull: true },
+    { name: "message", pgType: "text", notNull: true },
+    { name: "timestamp", pgType: "timestamptz", notNull: true },
+  ],
+});

package/src/legal-pages/__tests__/legal-pages.integration.ts

@@ -1,3 +1,4 @@
+import { afterAll, beforeAll, describe, expect, test } from "bun:test";
 import type { TextContentApi } from "@cosmicdrift/kumiko-bundled-features/text-content";
 import {
   createTextContentApi,
@@ -13,7 +14,6 @@ import {
   type TestStack,
   unsafeCreateEntityTable,
 } from "@cosmicdrift/kumiko-framework/stack";
-import { afterAll, beforeAll, describe, expect, test } from "vitest";
 import { createLegalPagesFeature, runLegalPagesBootCheck } from "../feature";
 import { renderMarkdownToHtml, wrapInLayout } from "../markdown";
 

package/src/mail-foundation/__tests__/feature.test.ts

@@ -6,7 +6,7 @@
 // declares an extension-point + a single selector config-key, nothing
 // provider-concrete.
 
-import { describe, expect, test } from "vitest";
+import { describe, expect, test } from "bun:test";
 import { mailFoundationFeature } from "../feature";
 
 describe("mailFoundationFeature — shape", () => {

package/src/mail-foundation/__tests__/mail-foundation.integration.ts

@@ -8,6 +8,7 @@
 // it saw. That's the cheapest way to get a real `HandlerContext` in a
 // test without re-implementing the dispatcher.
 
+import { afterAll, beforeAll, describe, expect, test } from "bun:test";
 import { randomBytes } from "node:crypto";
 import { createEncryptionProvider, type DbConnection } from "@cosmicdrift/kumiko-framework/db";
 import { defineFeature, defineWriteHandler } from "@cosmicdrift/kumiko-framework/engine";
@@ -25,7 +26,6 @@ import {
   createMutableMasterKeyProvider,
   type MutableMasterKeyProvider,
 } from "@cosmicdrift/kumiko-framework/testing";
-import { afterAll, beforeAll, describe, expect, test } from "vitest";
 import { z } from "zod";
 import { createConfigFeature } from "../../config";
 import { ConfigHandlers } from "../../config/constants";

package/src/mail-transport-inmemory/__tests__/feature.test.ts

@@ -1,6 +1,6 @@
 // feature.ts contract tests for mail-transport-inmemory.
 
-import { describe, expect, test } from "vitest";
+import { describe, expect, test } from "bun:test";
 import { clearInbox, getInbox, mailTransportInMemoryFeature } from "../feature";
 
 describe("mailTransportInMemoryFeature — shape", () => {

package/src/mail-transport-smtp/__tests__/feature.test.ts

@@ -3,7 +3,7 @@
 // Plugin-registration shape is also pinned (drift-pin: name "smtp",
 // build-fn presence).
 
-import { describe, expect, test } from "vitest";
+import { describe, expect, test } from "bun:test";
 import { mailTransportSmtpFeature, SMTP_PASSWORD } from "../feature";
 
 describe("mailTransportSmtpFeature — shape", () => {

package/src/rate-limiting/__tests__/rate-limiting.integration.ts

@@ -5,9 +5,9 @@
 // L3 dispatcher hook + resolver wiring are tested in framework-side
 // suites; here we only verify the feature's own surface area.
 
+import { afterAll, beforeAll, beforeEach, describe, expect, test } from "bun:test";
 import { defineFeature } from "@cosmicdrift/kumiko-framework/engine";
 import { setupTestStack, type TestStack, TestUsers } from "@cosmicdrift/kumiko-framework/stack";
-import { afterAll, beforeAll, beforeEach, describe, expect, test } from "vitest";
 import { z } from "zod";
 import { createRateLimitingFeature } from "../feature";
 

package/src/renderer-foundation/__tests__/api.test.ts

@@ -1,5 +1,5 @@
+import { describe, expect, test } from "bun:test";
 import type { TenantId } from "@cosmicdrift/kumiko-framework/engine";
-import { describe, expect, test } from "vitest";
 import { createRendererFoundationApi } from "../api";
 import {
   type RendererContext,
@@ -132,7 +132,7 @@ describe("renderer-foundation :: Plugin-Selection", () => {
     const api = createRendererFoundationApi([]);
     try {
       api.createRendererForTenant({ tenantId: TENANT, kind: "notification" });
-      expect.fail("expected RendererError");
+      throw new Error("expected RendererError");
     } catch (e) {
       expect(e).toBeInstanceOf(RendererError);
       expect((e as RendererError).code).toBe("no_plugin_for_kind");

package/src/renderer-foundation/__tests__/collect-plugins.integration.ts

@@ -1,6 +1,6 @@
+import { afterAll, beforeAll, describe, expect, test } from "bun:test";
 import { defineFeature, type TenantId } from "@cosmicdrift/kumiko-framework/engine";
 import { setupTestStack, type TestStack } from "@cosmicdrift/kumiko-framework/stack";
-import { afterAll, beforeAll, describe, expect, test } from "vitest";
 import { createTemplateResolverFeature } from "../../template-resolver/feature";
 import { createRendererFoundationApi } from "../api";
 import { collectRendererPlugins, createRendererFoundationFeature } from "../feature";

package/src/renderer-simple/__tests__/adapter.test.ts

@@ -1,4 +1,4 @@
-import { describe, expect, test } from "vitest";
+import { describe, expect, test } from "bun:test";
 import { RendererError } from "../../renderer-foundation";
 import { adaptToFoundation } from "../feature";
 
@@ -41,7 +41,7 @@ describe("renderer-simple :: adaptToFoundation", () => {
         kind: "document-pdf",
         payload: { content: "test", contentFormat: "markdown" },
       });
-      expect.fail("expected RendererError");
+      throw new Error("expected RendererError");
     } catch (e) {
       expect(e).toBeInstanceOf(RendererError);
       expect((e as RendererError).code).toBe("invalid_payload");

package/src/renderer-simple/__tests__/simple-renderer.test.ts

@@ -1,4 +1,4 @@
-import { describe, expect, test } from "vitest";
+import { describe, expect, test } from "bun:test";
 import { simpleRenderer } from "../simple-renderer";
 
 describe("simple renderer", () => {

package/src/secrets/__tests__/require-secrets-context.test.ts

@@ -12,16 +12,16 @@
 // + FileProviderContext-shape direkt) und prueft dass beide den happy-path
 // + den fehlt-_userId-throw durchlaufen.
 
+import { describe, expect, mock, test } from "bun:test";
 import { SYSTEM_USER_ID } from "@cosmicdrift/kumiko-framework/engine";
 import type { SecretsContext } from "@cosmicdrift/kumiko-framework/secrets";
-import { describe, expect, test, vi } from "vitest";
 import { requireSecretsContext } from "../feature";
 
 function makeRawSecretsContext(): SecretsContext {
   return {
-    get: vi.fn(),
-    set: vi.fn(),
-    delete: vi.fn(),
+    get: mock(),
+    set: mock(),
+    delete: mock(),
   };
 }
 
@@ -72,7 +72,8 @@ describe("requireSecretsContext :: FileProviderContext surface", () => {
       "any-key" as unknown as Parameters<SecretsContext["get"]>[1],
     );
     // Erste-Aufruf-args: [tenantId, key, audit-Object]
-    const audit = vi.mocked(raw.get).mock.calls[0]?.[2];
+    // biome-ignore lint/suspicious/noExplicitAny: Bun mock API requires any cast
+    const audit = (raw.get as any).mock.calls[0]?.[2];
     expect(audit).toEqual({
       userId: SYSTEM_USER_ID,
       handlerName: "user-data-rights:run-export-jobs",

package/src/secrets/__tests__/rotate.integration.ts

@@ -3,7 +3,9 @@
 // asserts the job bails after maxFailures instead of spraying the log
 // with every row's identical error.
 
+import { afterAll, beforeAll, describe, expect, test } from "bun:test";
 import { randomBytes } from "node:crypto";
+import { deleteMany, insertOne, selectMany } from "@cosmicdrift/kumiko-framework/bun-db";
 import type { AppContext } from "@cosmicdrift/kumiko-framework/engine";
 import {
   createEnvMasterKeyProvider,
@@ -16,8 +18,6 @@ import {
   type TestStack,
   unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
-import { eq, sql } from "drizzle-orm";
-import { afterAll, beforeAll, describe, expect, test } from "vitest";
 import { createSecretsFeature } from "../feature";
 import { rotateJob } from "../handlers/rotate.job";
 import { createSecretsContext } from "../secrets-context";
@@ -83,7 +83,7 @@ beforeAll(async () => {
   // Seed 20 V1 rows directly — too many for any maxFailures default.
   for (let i = 0; i < 20; i++) {
     const envelope = await encryptValue(`secret-${i}`, seedProvider);
-    await stack.db.insert(tenantSecretsTable).values({
+    await insertOne(stack.db, tenantSecretsTable, {
       tenantId: admin.tenantId,
       key: `test:secret:k-${i}`,
       envelope: {
@@ -100,7 +100,7 @@ beforeAll(async () => {
 
 afterAll(async () => {
   // Clean up the seeded fixtures so downstream suites don't see them.
-  await stack.db.delete(tenantSecretsTable).where(eq(tenantSecretsTable.tenantId, admin.tenantId));
+  await deleteMany(stack.db, tenantSecretsTable, { tenantId: admin.tenantId });
   await stack.cleanup();
 });
 
@@ -128,11 +128,8 @@ function jobCtx(provider: MasterKeyProvider): Parameters<typeof rotateJob>[1] {
 }
 
 async function countV1Rows(): Promise<number> {
-  const rows = await stack.db
-    .select({ kekVersion: tenantSecretsTable.kekVersion })
-    .from(tenantSecretsTable)
-    .where(sql`${tenantSecretsTable.tenantId} = ${admin.tenantId}`);
-  return rows.filter((r) => r.kekVersion === 1).length;
+  const rows = await selectMany(stack.db, tenantSecretsTable, { tenantId: admin.tenantId });
+  return rows.filter((r: Record<string, unknown>) => r["kekVersion"] === 1).length;
 }
 
 describe("rotate-job circuit-breaker", () => {