@cosmicdrift/kumiko-dev-server 0.14.0 → 0.15.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-dev-server",
-  "version": "0.14.0",
+  "version": "0.15.0",
   "description": "Development server bootstrap for Kumiko apps. Bundles the client, mints dev-JWTs, injects the resolved AppSchema, and seeds an admin. Not for production.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -30,17 +30,13 @@
       "types": "./src/compose-features.ts",
       "default": "./src/compose-features.ts"
     },
-    "./drizzle-config": {
-      "types": "./src/drizzle-config.ts",
-      "default": "./src/drizzle-config.ts"
+    "./schema-tables-auth-mode": {
+      "types": "./src/schema-tables-auth-mode.ts",
+      "default": "./src/schema-tables-auth-mode.ts"
     },
-    "./drizzle-tables-auth-mode": {
-      "types": "./src/drizzle-tables-auth-mode.ts",
-      "default": "./src/drizzle-tables-auth-mode.ts"
-    },
-    "./drizzle-tables-minimal": {
-      "types": "./src/drizzle-tables-minimal.ts",
-      "default": "./src/drizzle-tables-minimal.ts"
+    "./schema-tables-minimal": {
+      "types": "./src/schema-tables-minimal.ts",
+      "default": "./src/schema-tables-minimal.ts"
     }
   },
   "bin": {
@@ -63,4 +59,4 @@
     "README.md",
     "LICENSE"
   ]
-}
+}

package/src/__tests__/build-prod-bundle.integration.ts

@@ -12,13 +12,13 @@
 //      braucht Bun. Spawnen kumiko-build als subprocess via PATH.
 //      Skipped wenn `bun` nicht erreichbar — selten, aber sauber.
 
+import { afterEach, beforeEach, describe, expect, test } from "bun:test";
 import { execFileSync } from "node:child_process";
 import { existsSync } from "node:fs";
 import { mkdir, mkdtemp, readFile, rm, writeFile } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import { dirname, join, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
-import { afterEach, beforeEach, describe, expect, test } from "vitest";
 import { buildProdBundle } from "../build-prod-bundle";
 
 const __filename = fileURLToPath(import.meta.url);

package/src/__tests__/build-prod-bundle.test.ts

@@ -6,11 +6,11 @@
 // laufen im CI als `yarn build` auf der Showcase-App; das ist der
 // ehrlichere Smoke-Test.
 
+import { afterEach, beforeEach, describe, expect, test } from "bun:test";
 import { existsSync } from "node:fs";
 import { mkdir, mkdtemp, rm, writeFile } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
-import { afterEach, beforeEach, describe, expect, test } from "vitest";
 import {
   type ClientEntry,
   discoverClientEntries,

package/src/__tests__/cache-headers.test.ts

@@ -7,7 +7,7 @@
 //   /manifest.json, /sw.js  → no-cache
 //   alles andere            → kein expliziter Header
 
-import { describe, expect, test } from "vitest";
+import { describe, expect, test } from "bun:test";
 import { cacheHeadersFor } from "../run-prod-app";
 
 describe("cacheHeadersFor", () => {

package/src/__tests__/classify-change.test.ts

@@ -5,7 +5,7 @@
 // Restarts (DX schlecht) oder echte Schema-Änderungen schlagen
 // nicht durch (UX broken). Beide sind teuer — daher pinnen wir.
 
-import { describe, expect, test } from "vitest";
+import { describe, expect, test } from "bun:test";
 import { classifyChange } from "../create-kumiko-server";
 
 describe("classifyChange", () => {

package/src/__tests__/compose-features-wiring.integration.ts

@@ -21,6 +21,7 @@
 // schreibt in ein lokales Array — gewollter Capture-Spy ohne vitest-
 // Mock-API (CLAUDE.md "Kein Mock in *.integration.ts").
 
+import { afterAll, afterEach, beforeAll, beforeEach, describe, expect, test } from "bun:test";
 import { randomBytes } from "node:crypto";
 import {
   AuthErrors,
@@ -34,6 +35,7 @@ import {
 import { tenantEntity, tenantMembershipsTable } from "@cosmicdrift/kumiko-bundled-features/tenant";
 import { seedTenantMembership } from "@cosmicdrift/kumiko-bundled-features/tenant/testing";
 import { UserHandlers, userEntity, userTable } from "@cosmicdrift/kumiko-bundled-features/user";
+import { deleteMany } from "@cosmicdrift/kumiko-framework/bun-db";
 import type { TenantId } from "@cosmicdrift/kumiko-framework/engine";
 import {
   setupTestStack,
@@ -42,7 +44,6 @@ import {
   unsafeCreateEntityTable,
   unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
-import { afterAll, afterEach, beforeAll, beforeEach, describe, expect, test } from "vitest";
 import { composeFeatures } from "../compose-features";
 
 const RESET_HMAC = randomBytes(32).toString("base64");
@@ -151,8 +152,8 @@ describe("composeFeatures wiring — passwordReset", () => {
   });
 
   beforeEach(async () => {
-    await suite.stack.db.delete(userTable);
-    await suite.stack.db.delete(tenantMembershipsTable);
+    await deleteMany(suite.stack.db, userTable, {});
+    await deleteMany(suite.stack.db, tenantMembershipsTable, {});
     suite.resetEmails.length = 0;
     suite.verifyEmails.length = 0;
   });
@@ -225,8 +226,8 @@ describe("composeFeatures wiring — emailVerification", () => {
   });
 
   beforeEach(async () => {
-    await suite.stack.db.delete(userTable);
-    await suite.stack.db.delete(tenantMembershipsTable);
+    await deleteMany(suite.stack.db, userTable, {});
+    await deleteMany(suite.stack.db, tenantMembershipsTable, {});
     suite.resetEmails.length = 0;
     suite.verifyEmails.length = 0;
   });
@@ -271,8 +272,8 @@ describe("composeFeatures wiring — asymmetric activation", () => {
   });
 
   beforeEach(async () => {
-    await suite.stack.db.delete(userTable);
-    await suite.stack.db.delete(tenantMembershipsTable);
+    await deleteMany(suite.stack.db, userTable, {});
+    await deleteMany(suite.stack.db, tenantMembershipsTable, {});
     suite.resetEmails.length = 0;
     suite.verifyEmails.length = 0;
   });
@@ -325,8 +326,8 @@ describe("composeFeatures wiring — fail-closed ohne authOptions", () => {
   });
 
   afterEach(async () => {
-    await suite.stack.db.delete(userTable);
-    await suite.stack.db.delete(tenantMembershipsTable);
+    await deleteMany(suite.stack.db, userTable, {});
+    await deleteMany(suite.stack.db, tenantMembershipsTable, {});
     suite.resetEmails.length = 0;
   });
 

package/src/__tests__/compose-features.test.ts

@@ -7,8 +7,8 @@
 // aber die Handler fehlen → POST /api/auth/request-password-reset
 // dispatched ins Leere → 500.
 
+import { describe, expect, test } from "bun:test";
 import { defineFeature } from "@cosmicdrift/kumiko-framework/engine";
-import { describe, expect, test } from "vitest";
 import { composeFeatures } from "../compose-features";
 
 const noopFeature = defineFeature("noop-app", () => {});

package/src/__tests__/config-seed-boot.integration.ts

@@ -12,12 +12,14 @@
 //   3. an admin set on top of a seed wins the resolver cascade; coexistence
 //      vs. override semantics depend on the admin user's tenantId.
 
+import { afterAll, beforeAll, describe, expect, test } from "bun:test";
 import {
   configValuesTable,
   createConfigAccessorFactory,
   createConfigFeature,
   createConfigResolver,
 } from "@cosmicdrift/kumiko-bundled-features/config";
+import { selectMany } from "@cosmicdrift/kumiko-framework/bun-db";
 import {
   access,
   createSystemConfig,
@@ -32,7 +34,6 @@ import {
   TestUsers,
   unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
-import { afterAll, beforeAll, describe, expect, test } from "vitest";
 import { applyBootSeeds } from "../boot/apply-boot-seeds";
 
 const bootSeedsFeature = defineFeature("boot-seeds-test", (r) => {
@@ -82,7 +83,7 @@ describe("config-seed boot wiring", () => {
   test("first boot: applyBootSeeds writes one row per seed", async () => {
     await applyBootSeeds({ registry: stack.registry, db: stack.db });
 
-    const rows = await stack.db.select().from(configValuesTable);
+    const rows = await selectMany(stack.db, configValuesTable);
     expect(rows.length).toBe(2);
 
     const siteKeyDef = stack.registry.getConfigKey(SITE_KEY);
@@ -111,7 +112,7 @@ describe("config-seed boot wiring", () => {
   test("re-boot: idempotent — every seed already on disk → no extra rows", async () => {
     await applyBootSeeds({ registry: stack.registry, db: stack.db });
 
-    const rows = await stack.db.select().from(configValuesTable);
+    const rows = await selectMany(stack.db, configValuesTable);
     expect(rows.length).toBe(2);
   });
 
@@ -151,7 +152,7 @@ describe("config-seed boot wiring", () => {
     //   - 3 rows = coexistence path (admin tenantId !== SYSTEM_TENANT_ID,
     //     new specific-tenant row sits next to the seed system-row).
     // Either is correct as long as the resolver picks the admin value.
-    const rows = await stack.db.select().from(configValuesTable);
+    const rows = await selectMany(stack.db, configValuesTable);
     expect([2, 3]).toContain(rows.length);
   });
 });

package/src/__tests__/crash-tracker.test.ts

@@ -3,7 +3,7 @@
 // Wrapper aufgibt oder noch eine Runde respawnt; off-by-one am Fenster-
 // Rand würde im Bin-Skript schlecht auffallen.
 
-import { describe, expect, test } from "vitest";
+import { describe, expect, test } from "bun:test";
 import { createCrashTracker } from "../crash-tracker";
 
 describe("createCrashTracker", () => {

package/src/__tests__/create-kumiko-server.integration.ts

@@ -1,14 +1,14 @@
+import { afterEach, describe, expect, test } from "bun:test";
 import { mkdtempSync, rmSync, writeFileSync } from "node:fs";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
+import { asRawClient } from "@cosmicdrift/kumiko-framework/bun-db";
 import {
   createBooleanField,
   createEntity,
   createTextField,
   defineFeature,
 } from "@cosmicdrift/kumiko-framework/engine";
-import { sql } from "drizzle-orm";
-import { afterEach, describe, expect, test } from "vitest";
 import { createKumikoServer, type KumikoServerHandle } from "../create-kumiko-server";
 
 // Integration-Test: bootet createKumikoServer mit echtem Postgres,
@@ -50,10 +50,10 @@ async function boot(): Promise<KumikoServerHandle> {
 describe("createKumikoServer", () => {
   test("bootet den Kumiko-Stack + legt die Feature-Tables an", async () => {
     const h = await boot();
-    const rows = await h.stack.db.execute<{ exists: boolean }>(
-      sql`SELECT to_regclass('public.kumiko_server_probe') IS NOT NULL AS exists`,
+    const rows = await asRawClient(h.stack.db).unsafe(
+      `SELECT to_regclass('public.kumiko_server_probe') IS NOT NULL AS "exists"`,
     );
-    expect(rows[0]?.exists).toBe(true);
+    expect((rows as Array<Record<string, unknown>>)[0]?.["exists"]).toBe(true);
   });
 
   test("GET / → HTML + kumiko_auth/kumiko_csrf Set-Cookie", async () => {

package/src/__tests__/env-schema.integration.ts

@@ -4,9 +4,9 @@
 // throws (via bootErrorReporter override) and KUMIKO_DRY_RUN_ENV
 // returns the dry-run handle without booting.
 
+import { describe, expect, it } from "bun:test";
 import { defineFeature } from "@cosmicdrift/kumiko-framework/engine";
 import { composeEnvSchema, KumikoBootError } from "@cosmicdrift/kumiko-framework/env";
-import { describe, expect, it } from "vitest";
 import { z } from "zod";
 import { frameworkCoreEnvSchema } from "../env-schema";
 import * as devServerPublicApi from "../index";

package/src/__tests__/env-schema.test.ts

@@ -1,5 +1,5 @@
+import { describe, expect, it } from "bun:test";
 import { composeEnvSchema, KumikoBootError, parseEnv } from "@cosmicdrift/kumiko-framework/env";
-import { describe, expect, it } from "vitest";
 import { z } from "zod";
 import { type FrameworkCoreEnv, frameworkCoreEnvSchema } from "../env-schema";
 

package/src/__tests__/few-shot-corpus.test.ts

@@ -13,11 +13,11 @@
 // because the corpus JSON now lives there — framework is public and must
 // not carry the eval baseline.
 
+import { afterEach, beforeEach, describe, expect, test } from "bun:test";
 import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from "node:fs";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
 import { buildFewShotCorpus, pathToId } from "@cosmicdrift/kumiko-dev-server";
-import { afterEach, beforeEach, describe, expect, test } from "vitest";
 
 let workdir: string;
 

package/src/__tests__/inject-schema.test.ts

@@ -4,7 +4,7 @@
 // nicht und mountet leer. Tests pinnen die Idempotenz + die zwei
 // Insertion-Punkte (vor /client.js-Tag oder vor </body>).
 
-import { describe, expect, test } from "vitest";
+import { describe, expect, test } from "bun:test";
 import { injectSchema } from "../inject-schema";
 
 const SCHEMA = '{"features":[]}';

package/src/__tests__/resolve-stylesheet.test.ts

@@ -7,10 +7,10 @@
 // die anderen Tests dort booten ein TestStack (DB + Redis), das brauchen
 // wir für reine Resolver-Logik nicht.
 
+import { describe, expect, test } from "bun:test";
 import { mkdirSync, mkdtempSync, realpathSync, rmSync, writeFileSync } from "node:fs";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
-import { describe, expect, test } from "vitest";
 import { resolveStylesheet } from "../create-kumiko-server";
 
 describe("resolveStylesheet", () => {
@@ -48,16 +48,20 @@ describe("resolveStylesheet", () => {
     expect(out).toBeUndefined();
   });
 
-  test("undefined + clientEntry unter Node (ohne Bun): undefined (silent skip)", () => {
-    // hasBun ist false in vitest-Node — Default-Resolution wird übersprungen,
-    // ohne Throw. Wer im Test eine echte CSS will, übergibt explicit string.
-    // Unter Bun (production) würde Bun.resolveSync den Path liefern; das
-    // testet der bestehende create-kumiko-server.integration.ts.
+  test("undefined + clientEntry: undefined (silent skip)", () => {
+    // Bun resolveSync findet packages/renderer-web/src/styles.css im
+    // Repo. Das ist der prod-Pfad — unter Bun (real oder CI) ist der
+    // Wert ein absoluter path; unter Node (von wo der Test portiert
+    // wurde) wäre es undefined. Wir akzeptieren beides.
     const out = resolveStylesheet({
       features: [],
       clientEntry: "./entry.tsx",
     });
-    expect(out).toBeUndefined();
+    if (typeof Bun === "undefined") {
+      expect(out).toBeUndefined();
+    } else {
+      expect(out).toMatch(/renderer-web\/src\/styles\.css$/);
+    }
   });
 
   test("undefined + clientEntry + src/styles.css existiert → returns App-Theme-Override", () => {

package/src/__tests__/resolve-tailwind-cli.test.ts

@@ -2,7 +2,7 @@
 // genau das, was den dev-server-Crash bei flakigem Netz verhindert:
 // kein Bun → undefined, Package nicht installiert → undefined.
 
-import { describe, expect, test } from "vitest";
+import { describe, expect, test } from "bun:test";
 import { resolveTailwindCli } from "../resolve-tailwind-cli";
 
 describe("resolveTailwindCli", () => {

package/src/__tests__/run-prod-app-spec.test.ts

@@ -4,8 +4,8 @@
 // "looks like a leak"-Reverts oder "bisschen rauf, sollte reichen"-
 // Tweaks.
 
+import { describe, expect, test } from "bun:test";
 import { SSE_HEARTBEAT_INTERVAL_MS } from "@cosmicdrift/kumiko-framework/api";
-import { describe, expect, test } from "vitest";
 import { buildBunServeOptions } from "../run-prod-app";
 
 describe("Bun.serve options for production", () => {

package/src/__tests__/run-prod-app.integration.ts

@@ -9,9 +9,11 @@
 // fetch direkt. Bun.serve-Wiring ist in Production-Coolify selbst
 // getestet wenn der Container hochfährt.
 
+import { afterEach, beforeAll, describe, expect, test } from "bun:test";
 import { mkdir, mkdtemp, rm, writeFile } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import { dirname, join } from "node:path";
+import { asRawClient } from "@cosmicdrift/kumiko-framework/bun-db";
 import { createDbConnection } from "@cosmicdrift/kumiko-framework/db";
 import {
   createBooleanField,
@@ -28,9 +30,7 @@ import {
   createProjectionStateTable,
 } from "@cosmicdrift/kumiko-framework/pipeline";
 import { unsafeEnsureEntityTable } from "@cosmicdrift/kumiko-framework/stack";
-import { sql } from "drizzle-orm";
 import postgres from "postgres";
-import { afterEach, beforeAll, describe, expect, test } from "vitest";
 import { z } from "zod";
 import { type ProdAppHandle, runProdApp } from "../run-prod-app";
 
@@ -448,7 +448,7 @@ describe("runProdApp", () => {
     });
 
     expect(invocations).toBe(1);
-    expect(factoryDeps).toEqual({ db: true, redis: true, registry: true });
+    expect(factoryDeps!).toEqual({ db: true, redis: true, registry: true });
     // Smoke: handle is functional (boot completed without error).
     expect(handle.entrypoint).toBeDefined();
   });
@@ -465,9 +465,9 @@ describe("runProdApp", () => {
       seedInvocations++;
       // Seed-side idempotence: check before inserting. runProdApp doesn't
       // gate seeds — the seed itself is responsible.
-      const existing = await db.execute(sql`SELECT 1 FROM prod_widgets LIMIT 1`);
-      if (existing.length > 0) return;
-      await db.execute(sql`INSERT INTO prod_widgets (id, tenant_id, name) VALUES
+      const existing = await asRawClient(db).unsafe(`SELECT 1 FROM prod_widgets LIMIT 1`);
+      if ((existing as Array<Record<string, unknown>>).length > 0) return;
+      await asRawClient(db).unsafe(`INSERT INTO prod_widgets (id, tenant_id, name) VALUES
         (gen_random_uuid(), '00000000-0000-4000-8000-000000000001', 'seeded')`);
       inserted = true;
     };

package/src/__tests__/scaffold-app-feature.test.ts

@@ -1,9 +1,9 @@
 // scaffoldAppFeature unit-tests (DX-2).
 
+import { afterEach, beforeEach, describe, expect, test } from "bun:test";
 import { existsSync, mkdtempSync, readFileSync, rmSync } from "node:fs";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
-import { afterEach, beforeEach, describe, expect, test } from "vitest";
 import { scaffoldApp } from "../scaffold-app";
 import { scaffoldAppFeature } from "../scaffold-app-feature";
 

package/src/__tests__/scaffold-app.test.ts

@@ -1,9 +1,9 @@
 // scaffoldApp unit-tests (DX-1.0).
 
+import { afterEach, beforeEach, describe, expect, test } from "bun:test";
 import { existsSync, mkdtempSync, readFileSync, rmSync } from "node:fs";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
-import { afterEach, beforeEach, describe, expect, test } from "vitest";
 import { scaffoldApp } from "../scaffold-app";
 
 describe("scaffoldApp", () => {

package/src/__tests__/scaffold-deploy.test.ts

@@ -1,7 +1,7 @@
+import { afterEach, beforeEach, describe, expect, it } from "bun:test";
 import { existsSync, mkdirSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from "node:fs";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
-import { afterEach, beforeEach, describe, expect, it } from "vitest";
 import { scaffoldDeploy } from "../scaffold-deploy";
 
 describe("scaffoldDeploy", () => {

package/src/__tests__/scaffold-feature.test.ts

@@ -8,12 +8,12 @@
 //   4. Validation: bad names fail loudly, existing destination refuses
 //      to overwrite
 
+import { afterEach, beforeEach, describe, expect, test } from "bun:test";
 import { existsSync, mkdtempSync, readFileSync, rmSync } from "node:fs";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
 import { parseSourceFile, VERSION_HEADER } from "@cosmicdrift/kumiko-framework/engine";
 import { Project } from "ts-morph";
-import { afterEach, beforeEach, describe, expect, test } from "vitest";
 import { scaffoldFeature } from "../scaffold-feature";
 
 let workdir: string;

package/src/__tests__/try-hono-first.test.ts

@@ -5,7 +5,7 @@
 // sich ändert (z.B. "matched" auch für 4xx anders als 404), MÜSSEN
 // beide Pfade synchron updaten.
 
-import { describe, expect, test } from "vitest";
+import { describe, expect, test } from "bun:test";
 import { type HonoLikeApp, tryHonoFirst } from "../try-hono-first";
 
 function makeApp(response: Response): HonoLikeApp {

package/src/__tests__/walkthrough.integration.ts

@@ -9,13 +9,13 @@
 //   - composeFeatures(includeBundled:true) yields the exact feature-count
 //     the walkthrough advertises in "Expected output"
 
+import { afterEach, beforeEach, describe, expect, test } from "bun:test";
 import { mkdtempSync, readFileSync, rmSync } from "node:fs";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
 import { createSecretsFeature } from "@cosmicdrift/kumiko-bundled-features/secrets";
 import { createSessionsFeature } from "@cosmicdrift/kumiko-bundled-features/sessions";
 import { createRegistry, defineFeature, validateBoot } from "@cosmicdrift/kumiko-framework/engine";
-import { afterEach, beforeEach, describe, expect, test } from "vitest";
 import { composeFeatures } from "../compose-features";
 import { scaffoldApp } from "../scaffold-app";
 import { scaffoldAppFeature } from "../scaffold-app-feature";

package/src/codegen/__tests__/run-codegen.test.ts

@@ -16,10 +16,10 @@
 //   - skipped-Flag wenn 0 Events UND kein .kumiko/ schon existiert
 //   - schemas.generated.ts wird erzeugt wenn inline-Schemas, sonst nicht
 
+import { describe, expect, test } from "bun:test";
 import { existsSync, mkdirSync, mkdtempSync, readFileSync, writeFileSync } from "node:fs";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
-import { describe, expect, test } from "vitest";
 import { runCodegen } from "../run-codegen";
 
 function makeAppDir(): string {

package/src/codegen/__tests__/strict-mode-diagnostics.test.ts

@@ -1,7 +1,7 @@
+import { afterAll, beforeAll, describe, expect, test } from "bun:test";
 import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from "node:fs";
 import { dirname, join } from "node:path";
 import * as ts from "typescript";
-import { afterAll, beforeAll, describe, expect, test } from "vitest";
 import { runCodegen } from "../run-codegen";
 
 const REPO_ROOT = join(__dirname, "../../../../..");

package/src/codegen/__tests__/watch.test.ts

@@ -8,9 +8,9 @@
 // 'zod' nicht direct nutzen, runCodegen scant feature-files die
 // `import { z } from "zod"` haben.
 
+import { afterAll, describe, expect, test } from "bun:test";
 import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from "node:fs";
 import { dirname, join } from "node:path";
-import { afterAll, describe, expect, test } from "vitest";
 import type { CodegenResult } from "../run-codegen";
 import { watchAndRegenerate } from "../watch";
 

package/src/scaffold-app-feature.ts

@@ -114,7 +114,8 @@ function mountInRunConfig(runConfigPath: string, name: string): boolean {
 
   // 1. Prepend import after the last existing import.
   const imports = sf.getImportDeclarations();
-  const insertIndex = imports.length > 0 ? imports[imports.length - 1]!.getChildIndex() + 1 : 0;
+  const insertIndex =
+    imports.length > 0 ? (imports[imports.length - 1]?.getChildIndex() ?? 0) + 1 : 0;
   sf.insertImportDeclaration(insertIndex, {
     moduleSpecifier: `./features/${name}`,
     namedImports: [`${camel}Feature`],

package/src/{drizzle-tables-auth-mode.ts → schema-tables-auth-mode.ts}

@@ -12,7 +12,7 @@
 //
 // Bundle-Entity-Tables (configValuesTable, tenantTable, userTable,
 // userSessionTable, tenantMembershipsTable etc.) sind bewusst NICHT hier:
-// sie kommen über schema.generated.ts via buildDrizzleTable aus den
+// sie kommen über schema.generated.ts via buildEntityTable aus den
 // r.entity()-Definitionen, das ist seit der entity.indexes-API die
 // Single-Source-of-Truth. Doppelte Re-Exports würden zwei pgTable-
 // Instances mit identischem Index-Namen erzeugen — drizzle-kit warnt.

package/templates/deploy/Dockerfile.template

@@ -13,66 +13,34 @@
 # Size: ~250 MB incl. drizzle-kit for the pre-deploy migrate step.
 # Build context: repository root (monorepo is used in the build stage).
 
-ARG BUN_VERSION=1.2.20
+ARG BUN_VERSION=1.3.14
+{{#hasPrivateGhPackages}}
+# Private GH-Packages: der CI-Workflow injects GITHUB_TOKEN via --build-arg.
+# Docker's multi-stage ARG scoping braucht die Re-declaration in jeder Stage
+# die sie nutzt; das top-level ARG macht sie per `docker build` setzbar.
+ARG GITHUB_TOKEN=
+{{/hasPrivateGhPackages}}
 # Build identity — passed in by the CI workflow via --build-arg. Defaults
 # for local container builds.
 ARG BUILD_VERSION=dev
 ARG BUILD_TIME=unknown
-{{#hasPrivateGhPackages}}
-# Private @cosmicdriftgamestudio/* GH-Packages dep detected — yarn-4
-# reads the token via `npmAuthToken: "${GITHUB_TOKEN:-…}"` in .yarnrc.yml.
-# Without this build-arg, yarn install aborts with YN0041 anonymous-auth.
-ARG GITHUB_TOKEN=
-{{/hasPrivateGhPackages}}
 
 # ----- build: produces dist/ + dist-server/ ---------------------------------
-# Build base is node-alpine (not bun-alpine) because the repo uses yarn 4 as
-# its package manager — `link:./.kumiko` (@app/define codegen output) is
-# yarn-4's symlink protocol, which bun interprets differently. Node ships
-# corepack (yarn 4 via packageManager field); we pull bun via npm for
-# `bun run build`. Runtime stage stays pure bun.
-FROM node:20-alpine AS build
+FROM oven/bun:${BUN_VERSION}-alpine AS build
+WORKDIR /app
 {{#hasPrivateGhPackages}}
-# Multi-stage ARG inheritance: globals declared before FROM need an
-# `ARG <name>` line in every stage that uses them. Without this,
-# ${GITHUB_TOKEN} below resolves to empty and yarn install hits YN0041.
+# GITHUB_TOKEN für @cosmicdriftgamestudio/*-Scope beim bun install.
 ARG GITHUB_TOKEN
+ENV GITHUB_TOKEN=${GITHUB_TOKEN}
+RUN bun config set --scope @cosmicdriftgamestudio token "${GITHUB_TOKEN}"
 {{/hasPrivateGhPackages}}
-WORKDIR /app
-
-RUN corepack enable && npm install -g bun@${BUN_VERSION}
 
 # Standalone-repo layout: @cosmicdrift/* pulled from NPM, no workspace:*
-# refs. Manifests first for Docker layer cache (yarn install only
+# refs. Manifests first for Docker layer cache (bun install only
 # invalidates on dep change).
-COPY package.json yarn.lock .yarnrc.yml ./
+COPY package.json bun.lock ./
 
-# YARN_ENABLE_INLINE_BUILDS=true: postinstall stdout/stderr inline in the
-# install output. Without this, yarn 4 hides logs in /tmp/xfs-*/build.log
-# (invisible in the Docker layer output) and the CI operator guesses why
-# the install failed.
-#
-# `link:./.kumiko` (@app/define in package.json): yarn 4 creates a
-# dangling symlink; install does NOT fail. `bun run build` below calls
-# `runCodegen` from @cosmicdrift/kumiko-dev-server (see
-# bin/kumiko-build.ts), which writes .kumiko/define.ts and turns the
-# symlink real before the bundle is built.
-ENV YARN_ENABLE_INLINE_BUILDS=true
-# Skip postinstall scripts for ALL deps in the build stage. Reason:
-# `bun build` bundles JS source only — no native bindings needed at bundle-
-# time. msgpackr-extract is the most common offender (ARM/CI native-build
-# failures), but the rule applies broadly: any native dep loaded at runtime
-# gets re-installed via `bun install --production` in the runtime stage,
-# which uses bun's own postinstall handling. Apps that needed per-package
-# opt-outs via `dependenciesMeta.<pkg>.built=false` in package.json (e.g.
-# studio, enterprise) can remove those entries after adopting this template.
-ENV YARN_ENABLE_SCRIPTS=false
-{{#hasPrivateGhPackages}}
-# Re-export GITHUB_TOKEN as env so yarn-4's `${GITHUB_TOKEN:-…}` expansion
-# in .yarnrc.yml finds it during the install step.
-ENV GITHUB_TOKEN=${GITHUB_TOKEN}
-{{/hasPrivateGhPackages}}
-RUN yarn install --immutable
+RUN bun install --frozen-lockfile
 
 COPY . .
 RUN bun run build