@cosmicdrift/kumiko-framework 0.349.0 → 0.351.0

package/dist/bun-db/query.js

@@ -19,9 +19,9 @@
 //     drizzle's getTableName + getTableColumns (drizzle kept only as a type
 //     reference, never as a runtime API call)
 import { KUMIKO_META_SYMBOL } from "@cosmicdrift/kumiko-types/schema-table-types";
-// Static polyfill import (not getTemporal()): coercion results stay on one
-// Temporal implementation repo-wide, even when Bun exposes a global (#1480).
-import { Temporal } from "temporal-polyfill";
+// Static import (not getTemporal()): coercion works without an installed
+// global and returns the same Temporal classes as the rest of the repo (#1480).
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import { requestContext } from "../api/request-context.js";
 import { computeBlindIndex, configuredBlindIndexKey } from "../crypto/blind-index.js";
 import { isPiiCiphertext } from "../crypto/pii-ciphertext-format.js";

package/dist/db/dialect.d.ts

@@ -1,5 +1,5 @@
 import { type ColumnHandle, type SchemaTable } from "@cosmicdrift/kumiko-types/schema-table-types";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import type { PgType } from "./entity-table-meta.js";
 export type { ColumnHandle, SchemaTable } from "@cosmicdrift/kumiko-types/schema-table-types";
 export type TableColumns<_T = any> = SchemaTable;

package/dist/db/dialect.js

@@ -13,10 +13,11 @@
 // The framework no longer imports drizzle-orm at runtime — schema-files
 // use only this module.
 //
-// Static import, not the ambient global: Bun doesn't expose Temporal on
-// globalThis, so instantToDriver crashed on timestamptz writes (#1480).
+// Static import of the shared Temporal module, not the ambient global: the
+// global may be absent (Hermes/Safari) or torn down in tests, and instantToDriver
+// crashed on timestamptz writes without it (#1480).
 import { KUMIKO_COLUMNS_SYMBOL, KUMIKO_META_SYMBOL, KUMIKO_NAME_SYMBOL, } from "@cosmicdrift/kumiko-types/schema-table-types";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 function isNumericPgType(t) {
     return t.startsWith("numeric(");
 }

package/dist/db/located-timestamp.js

@@ -11,7 +11,7 @@
 // Static import, not the ambient global: Bun doesn't expose Temporal on
 // globalThis, so this crashed with "Temporal is not defined" outside boot
 // paths that install it (#1480).
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 // Sprint F: <name>Utc-Spalte ist jetzt instant() (siehe dialect.ts) —
 // Drizzle gibt direkt Temporal.Instant zurück. Vor Sprint F kam ein PG-
 // Wire-Format-String "2026-04-15 09:00:00+00" rein der via String-Massage

package/dist/db/table-builder.d.ts

@@ -167,20 +167,20 @@ export declare function buildBaseColumns(softDelete: boolean, idType?: "serial"
     id: ColumnBuilder<string> | ColumnBuilder<number>;
     tenantId: ColumnBuilder<string>;
     version: ColumnBuilder<number>;
-    insertedAt: ColumnBuilder<import("temporal-spec").Temporal.Instant>;
-    modifiedAt: ColumnBuilder<import("temporal-spec").Temporal.Instant>;
+    insertedAt: ColumnBuilder<Temporal.Instant>;
+    modifiedAt: ColumnBuilder<Temporal.Instant>;
     insertedById: ColumnBuilder<string>;
     modifiedById: ColumnBuilder<string>;
 } | {
     id: ColumnBuilder<string> | ColumnBuilder<number>;
     tenantId: ColumnBuilder<string>;
     version: ColumnBuilder<number>;
-    insertedAt: ColumnBuilder<import("temporal-spec").Temporal.Instant>;
-    modifiedAt: ColumnBuilder<import("temporal-spec").Temporal.Instant>;
+    insertedAt: ColumnBuilder<Temporal.Instant>;
+    modifiedAt: ColumnBuilder<Temporal.Instant>;
     insertedById: ColumnBuilder<string>;
     modifiedById: ColumnBuilder<string>;
     isDeleted: ColumnBuilder<boolean>;
-    deletedAt: ColumnBuilder<import("temporal-spec").Temporal.Instant>;
+    deletedAt: ColumnBuilder<Temporal.Instant>;
     deletedById: ColumnBuilder<string>;
 };
 export declare function rowMetaFieldNames(softDelete: boolean): ReadonlySet<string>;

package/dist/engine/boot-validator/query-output-columns.js

@@ -175,6 +175,9 @@ function checkVisibleWhenField(queryHandlers, visibleWhen, owner) {
 }
 function checkDashboardOutputFields(queryHandlers, featureName, screenId, screen) {
     for (const panel of screen.panels) {
+        if (panel.kind !== "custom") {
+            checkVisibleWhenField(queryHandlers, panel.visibleWhen, `[Feature ${featureName}] Screen "${screenId}" (dashboard) ${panel.kind === "screen" ? "screen-panel" : "panel"} "${panel.id}"`);
+        }
         if (panel.kind === "stat") {
             checkDashboardStatPanelFields(queryHandlers, featureName, screenId, panel);
         }
@@ -183,9 +186,6 @@ function checkDashboardOutputFields(queryHandlers, featureName, screenId, screen
                 checkDashboardStatPanelFields(queryHandlers, featureName, screenId, stat);
             }
         }
-        else if (panel.kind === "screen") {
-            checkVisibleWhenField(queryHandlers, panel.visibleWhen, `[Feature ${featureName}] Screen "${screenId}" (dashboard) screen-panel "${panel.id}"`);
-        }
         else if (panel.kind === "list") {
             const rowShape = resolveListRowShape(queryHandlers, panel.query, `[Feature ${featureName}] Screen "${screenId}" (dashboard) panel "${panel.id}"`);
             for (const column of panel.columns) {

package/dist/engine/boot-validator/query-refs.js

@@ -26,12 +26,11 @@ function checkDashboardQueryRefs(queryHandlers, featureName, screenId, screen) {
     for (const panel of screen.panels) {
         if (panel.kind === "custom")
             continue;
-        if (panel.kind === "screen") {
-            if (panel.visibleWhen !== undefined) {
-                checkQueryRef(queryHandlers, panel.visibleWhen.query, () => `[Feature ${featureName}] Screen "${screenId}" (dashboard) screen-panel "${panel.id}" visibleWhen`);
-            }
-            continue;
+        if (panel.visibleWhen !== undefined) {
+            checkQueryRef(queryHandlers, panel.visibleWhen.query, () => `[Feature ${featureName}] Screen "${screenId}" (dashboard) ${panel.kind === "screen" ? "screen-panel" : "panel"} "${panel.id}" visibleWhen`);
         }
+        if (panel.kind === "screen")
+            continue;
         if (panel.kind === "stat-group") {
             for (const stat of panel.stats) {
                 checkQueryRef(queryHandlers, stat.query, () => `[Feature ${featureName}] Screen "${screenId}" (dashboard) stat-group "${panel.id}" child "${stat.id}"`);

package/dist/engine/boot-validator/screens.js

@@ -1729,17 +1729,27 @@ export function validateDashboardScreenPanel(featureName, screenId, panel, featu
             `navigate away from the dashboard on submit or cancel. Embed a screen without redirect and ` +
             `with cancelTarget: false (or omitted).`);
     }
-    const visibleWhen = panel.visibleWhen;
+    validateDashboardPanelVisibleWhen(context, panel.visibleWhen);
+}
+function validateDashboardPanelVisibleWhen(context, visibleWhen) {
     if (visibleWhen !== undefined && (visibleWhen.query === "" || visibleWhen.field === "")) {
         throw new Error(`${context} visibleWhen needs a non-empty query and field.`);
     }
 }
 function validateDashboardStatGroupPanel(featureName, screenId, panel, addPanelId) {
+    const context = `[Feature ${featureName}] Screen "${screenId}" (dashboard) stat-group "${panel.id}"`;
     if (panel.stats.length === 0) {
-        throw new Error(`[Feature ${featureName}] Screen "${screenId}" (dashboard) stat-group "${panel.id}" has an empty stats list.`);
+        throw new Error(`${context} has an empty stats list.`);
+    }
+    if (panel.subtitle !== undefined && panel.label === undefined) {
+        throw new Error(`${context} sets subtitle without label — an unlabeled group renders as a KPI strip without a header.`);
     }
+    validateDashboardPanelVisibleWhen(context, panel.visibleWhen);
     for (const stat of panel.stats) {
         addPanelId(stat.id, "stat-group child");
+        if (stat.visibleWhen !== undefined) {
+            throw new Error(`${context} child "${stat.id}" sets visibleWhen — gate the whole group instead; a hidden cell would leave a gap in the strip.`);
+        }
         if (!stat.query || typeof stat.query !== "string") {
             throw new Error(`[Feature ${featureName}] Screen "${screenId}" (dashboard) stat-group "${panel.id}" child "${stat.id}" has empty or non-string query.`);
         }
@@ -1758,6 +1768,67 @@ function validateDashboardChartDisplay(featureName, screenId, panel) {
     if (panel.scrollable === true && panel.chart !== "stacked-area") {
         throw new Error(`${where} sets scrollable on chart "${panel.chart}" — only "stacked-area" supports it.`);
     }
+    validateStackedAreaOnlyProps(where, panel);
+    if (panel.legendTotals !== undefined && typeof panel.legendTotals !== "boolean") {
+        throw new Error(`${where} has a non-boolean legendTotals.`);
+    }
+    for (const [key, color] of Object.entries(panel.seriesColors ?? {})) {
+        if (typeof color !== "string" || color.trim() === "") {
+            throw new Error(`${where} seriesColors["${key}"] must be a non-empty CSS color.`);
+        }
+    }
+    for (const [kind, look] of Object.entries(panel.markerKinds ?? {})) {
+        validateDashboardChartMarkerKind(`${where} markerKinds["${kind}"]`, look);
+    }
+    if (panel.ranges !== undefined)
+        validateDashboardChartRanges(`${where} ranges`, panel.ranges);
+}
+function validateStackedAreaOnlyProps(where, panel) {
+    // skip: stacked-area is the one chart kind that supports these props
+    if (panel.chart === "stacked-area")
+        return;
+    const stackedAreaOnly = ["markerKinds", "legendTotals", "ranges"].filter((prop) => panel[prop] !== undefined);
+    if (stackedAreaOnly.length > 0) {
+        throw new Error(`${where} sets ${stackedAreaOnly.join(", ")} on chart "${panel.chart}" — only "stacked-area" supports it.`);
+    }
+}
+const DASHBOARD_CHART_TONES = new Set([
+    "positive",
+    "negative",
+    "active",
+    "neutral",
+]);
+function validateDashboardChartMarkerKind(where, look) {
+    if (look.tone === undefined && look.color === undefined) {
+        throw new Error(`${where} needs a tone or a color.`);
+    }
+    if (look.tone !== undefined && !DASHBOARD_CHART_TONES.has(look.tone)) {
+        throw new Error(`${where}.tone "${String(look.tone)}" is not one of ${[...DASHBOARD_CHART_TONES].join(", ")}.`);
+    }
+    if (look.color !== undefined && (typeof look.color !== "string" || look.color.trim() === "")) {
+        throw new Error(`${where}.color must be a non-empty CSS color.`);
+    }
+}
+function validateDashboardChartRanges(where, ranges) {
+    if (ranges.options.length === 0) {
+        throw new Error(`${where}.options is empty — declare at least one option.`);
+    }
+    const values = new Set();
+    for (const option of ranges.options) {
+        if (option.value.length === 0 || option.label.length === 0) {
+            throw new Error(`${where} option needs a non-empty value and label.`);
+        }
+        if (values.has(option.value)) {
+            throw new Error(`${where}.options has duplicate value "${option.value}".`);
+        }
+        if (option.months !== undefined && (!Number.isInteger(option.months) || option.months <= 0)) {
+            throw new Error(`${where} option "${option.value}" months "${String(option.months)}" must be a positive integer.`);
+        }
+        values.add(option.value);
+    }
+    if (!values.has(ranges.default)) {
+        throw new Error(`${where}.default "${ranges.default}" is not among the options (${[...values].join(", ")}).`);
+    }
 }
 const CURRENCY_CODE_RE = /^[A-Z]{3}$/;
 const MAX_VALUE_FORMAT_FRACTION_DIGITS = 4;
@@ -1797,6 +1868,7 @@ function validateDashboardQueryPanel(featureName, screenId, panel, featureMap) {
         }
         validateDashboardValueFormat(featureName, screenId, panel.id, panel.valueFormat);
     }
+    validateDashboardPanelVisibleWhen(`[Feature ${featureName}] Screen "${screenId}" (dashboard) panel "${panel.id}"`, panel.visibleWhen);
     if (panel.kind === "chart")
         validateDashboardChartDisplay(featureName, screenId, panel);
     if (panel.kind === "list") {

package/dist/engine/steps/_duration-utils.js

@@ -1,7 +1,7 @@
 // ISO-8601 duration arithmetic — shared by wait and waitForEvent steps.
 // Accepts "P1D", "PT1H", "P1Y2M3DT4H5M6S" etc.
 // Uses approximate calendar math (365d/year, 30d/month). See #23.
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 export function addDuration(baseIso, duration) {
     const pattern = /^P(?:(\d+)Y)?(?:(\d+)M)?(?:(\d+)D)?(?:T(?:(\d+)H)?(?:(\d+)M)?(?:(\d+)S)?)?$/;
     const match = duration.match(pattern);

package/dist/engine/types/index.d.ts

@@ -17,7 +17,7 @@ export type { ContentCollectionDefinition, NavDefinition, NavIconKey, } from "@c
 export type { FromRule, FromRuleKind, OwnershipClause, OwnershipMap, OwnershipRef, OwnershipRule, SqlFragment, WhereRule, WhereRuleContext, } from "@cosmicdrift/kumiko-types/ownership";
 export type { EntityProjectionExtension, MspErrorMode, MspErrorPolicy, MultiStreamApplyFn, MultiStreamProjectionDefinition, ProjectionDefinition, ProjectionRowIdOf, ProjectionTable, SingleStreamApplyFn, } from "@cosmicdrift/kumiko-types/projection";
 export type { BelongsToRelation, EntityRelations, HasManyRelation, ManyToManyRelation, RelationDefinition, } from "@cosmicdrift/kumiko-types/relations";
-export type { ActionFormScreenDefinition, ConfigEditScreenDefinition, CustomScreenDefinition, CustomScreenRoute, DashboardChartPanel, DashboardCustomPanel, DashboardDateParam, DashboardFeedPanel, DashboardFilterDefinition, DashboardI18nText, DashboardListPanel, DashboardMoneyParam, DashboardPanelDefinition, DashboardPanelVisibility, DashboardProgressListPanel, DashboardScreenDefinition, DashboardScreenPanel, DashboardStatGroupPanel, DashboardStatPanel, DashboardText, DashboardTextParam, DashboardValueFormat, EditExtensionSection, EditFieldSpec, EditFieldsSection, EditLayout, EditRelatedListSection, EditSectionSpec, EditWriteFormSection, EntityEditScreenDefinition, EntityListExpandableRow, EntityListScreenDefinition, FieldCondition, FieldFormatRegistry, FieldRenderer, FormatSpec, FormWidth, ListColumnSpec, ListFacetSpec, ListPaginationMode, ListSortDir, ListSortSpec, MetricNavigate, MetricSpec, PlatformComponent, ProjectionDetailScreenDefinition, ProjectionListScreenDefinition, RecordHeaderSpec, RecordHeaderSubtitlePart, RowAction, RowActionNavigate, RowActionNavigateBase, RowActionWriteHandler, RowFieldExtractor, ScreenDefinition, ScreenFilter, ScreenFilterOp, ScreenNavSugar, ScreenSlots, SecretMintConfirmStep, SecretMintScreenDefinition, SecretReveal, SecretRevealField, SecretsEditScreenDefinition, SecretsEditSection, ToolbarAction, UnitKey, } from "@cosmicdrift/kumiko-types/screen";
+export type { ActionFormScreenDefinition, ConfigEditScreenDefinition, CustomScreenDefinition, CustomScreenRoute, DashboardChartMarkerKind, DashboardChartPanel, DashboardChartRangeOption, DashboardChartRanges, DashboardCustomPanel, DashboardDateParam, DashboardFeedPanel, DashboardFilterDefinition, DashboardI18nText, DashboardListPanel, DashboardMoneyParam, DashboardPanelDefinition, DashboardPanelGate, DashboardPanelVisibility, DashboardProgressListPanel, DashboardScreenDefinition, DashboardScreenPanel, DashboardStatGroupPanel, DashboardStatPanel, DashboardText, DashboardTextParam, DashboardValueFormat, EditExtensionSection, EditFieldSpec, EditFieldsSection, EditLayout, EditRelatedListSection, EditSectionSpec, EditWriteFormSection, EntityEditScreenDefinition, EntityListExpandableRow, EntityListScreenDefinition, FieldCondition, FieldFormatRegistry, FieldRenderer, FormatSpec, FormWidth, ListColumnSpec, ListFacetSpec, ListPaginationMode, ListSortDir, ListSortSpec, MetricNavigate, MetricSpec, PlatformComponent, ProjectionDetailScreenDefinition, ProjectionListScreenDefinition, RecordHeaderSpec, RecordHeaderSubtitlePart, RowAction, RowActionNavigate, RowActionNavigateBase, RowActionWriteHandler, RowFieldExtractor, ScreenDefinition, ScreenFilter, ScreenFilterOp, ScreenNavSugar, ScreenSlots, SecretMintConfirmStep, SecretMintScreenDefinition, SecretReveal, SecretRevealField, SecretsEditScreenDefinition, SecretsEditSection, ToolbarAction, UnitKey, } from "@cosmicdrift/kumiko-types/screen";
 export { metricField, relatedListGroupHeaderLabel, relatedListGroupKey, } from "@cosmicdrift/kumiko-types/screen";
 export type { TargetRef } from "@cosmicdrift/kumiko-types/target-ref";
 export type { Subscribe, TreeAction, TreeActionDef, TreeActionsHandle, TreeChildrenSubscribe, TreeNode, TreeNodeState, } from "@cosmicdrift/kumiko-types/tree-node";

package/dist/event-store/event-store.d.ts

@@ -1,5 +1,6 @@
 /// <reference types="temporal-polyfill/global" preserve="true" />
 import { type EventMetadata, type StoredEvent } from "@cosmicdrift/kumiko-types/event-store-types";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import type { DbRunner } from "../db/index.js";
 import type { TenantId } from "../engine/types/index.js";
 export type { EventMetadata, StoredEvent } from "@cosmicdrift/kumiko-types/event-store-types";

package/dist/event-store/event-store.js

@@ -1,12 +1,6 @@
 /// <reference types="temporal-polyfill/global" preserve="true" />
 import { isPersonalDataGated, UNATTRIBUTED_ORIGIN, } from "@cosmicdrift/kumiko-types/event-store-types";
-// Value-only import, aliased to avoid shadowing the ambient global
-// `Temporal` TYPE this file's other Temporal.Instant annotations resolve
-// against (StoredEvent.createdAt et al. — importing the bare name here
-// conflicts with that ambient type, see #1438). Bun doesn't expose Temporal
-// as a runtime value on globalThis, so the un-aliased call below crashed
-// with "Temporal is not defined" outside boot paths that install it (#1480).
-import { Temporal as TemporalPolyfill } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import { requestContext } from "../api/request-context.js";
 import { encryptEventPayloadPii } from "../crypto/event-pii.js";
 import { constraintOf, isUniqueViolation } from "../db/pg-error.js";
@@ -150,18 +144,11 @@ async function insertSubsequentEvent(db, event, newVersion, eventVersion, seedCr
     if (!row)
         throw new VersionConflictError(event.aggregateId, event.expectedVersion);
     const createdAt = row.created_at instanceof Date
-        ? TemporalPolyfill.Instant.fromEpochMilliseconds(row.created_at.getTime())
-        : TemporalPolyfill.Instant.from(row.created_at);
+        ? Temporal.Instant.fromEpochMilliseconds(row.created_at.getTime())
+        : Temporal.Instant.from(row.created_at);
     return {
         id: typeof row.id === "bigint" ? row.id : BigInt(row.id),
-        // @cast-boundary temporal-polyfill-vs-ambient: same TC39 Temporal.Instant
-        // at runtime, two separate .d.ts sources (temporal-polyfill's bundled
-        // types vs the ambient temporal-spec global) disagree on a couple of
-        // method-overload signatures (until/equals argument types), so TS treats
-        // them as nominally distinct. Safe: this value is only ever consumed as
-        // a Temporal.Instant (comparisons, .toString(), arithmetic), never
-        // narrowed on the specific overload shape that differs.
-        createdAt: createdAt,
+        createdAt,
     };
 }
 function buildStoredEvent(event, newVersion, eventVersion, row) {

package/dist/i18n/required-surface-keys.js

@@ -90,8 +90,10 @@ function pushDashboardPanelKeys(out, panel) {
     if (panel.kind === "custom")
         return;
     pushKey(out, panel.label);
-    if (panel.kind === "chart")
+    if (panel.kind === "chart" || panel.kind === "stat-group")
         pushKey(out, panel.subtitle);
+    if (panel.kind === "chart")
+        pushDashboardChartRangeKeys(out, panel);
     if (panel.kind === "chart" ||
         panel.kind === "list" ||
         panel.kind === "feed" ||
@@ -111,6 +113,10 @@ function pushDashboardPanelKeys(out, panel) {
         }
     }
 }
+function pushDashboardChartRangeKeys(out, panel) {
+    for (const option of panel.ranges?.options ?? [])
+        pushKey(out, option.label);
+}
 function pushDashboardFilterKeys(out, filter) {
     pushKey(out, filter.label);
     if (filter.allLabel !== undefined)

package/dist/pipeline/event-dispatcher-delivery.d.ts

@@ -1,4 +1,5 @@
 /// <reference types="temporal-polyfill/global" preserve="true" />
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import type { DbConnection, DbRunner, DbTx } from "../db/connection.js";
 import { type PendingIdRange } from "../db/queries/event-store.js";
 import type { AppContext } from "../engine/types/index.js";

package/dist/pipeline/event-dispatcher-delivery.js

@@ -1,8 +1,5 @@
 /// <reference types="temporal-polyfill/global" preserve="true" />
-// Value-only import, aliased to avoid shadowing the ambient global
-// `Temporal` TYPE that ConsumerStateRow.updatedAt/StoredEventRow.createdAt
-// resolve against (same #1438 dual-package-hazard pattern as event-store.ts).
-import { Temporal as TemporalPolyfill } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import { requestContext } from "../api/request-context.js";
 import { insertConsumerIfAbsent, markConsumerProcessing, rearmDeadConsumer, selectConsumerForUpdate, selectConsumerForUpdateSkipLocked, selectProvablyIdleConsumerPairs, updateConsumerDeliveryOutcome, } from "../db/queries/event-consumer.js";
 import { selectEventsHeadId, selectPendingAndNewEventRows, } from "../db/queries/event-store.js";
@@ -54,14 +51,10 @@ export async function acquireConsumerState(tx, name, instanceId, rearmCooldownMs
         // a prior re-arm) gates the retry; maxRearmCount stops a poison event
         // from looping forever (re-arm → same event fails → dead → re-arm →
         // ...) — after the cap it stays dead until a human intervenes.
-        const cooldownDeadline = TemporalPolyfill.Now.instant().subtract({
+        const cooldownDeadline = Temporal.Now.instant().subtract({
             milliseconds: rearmCooldownMs,
         });
-        // @cast-boundary temporal-polyfill-vs-ambient: same TC39 Temporal.Instant
-        // at runtime — state.updatedAt is DB-row-typed against the ambient
-        // global, two distinct nominal types across the two .d.ts sources (see
-        // event-store.ts).
-        const cooldownElapsed = TemporalPolyfill.Instant.compare(state.updatedAt, cooldownDeadline) <= 0;
+        const cooldownElapsed = Temporal.Instant.compare(state.updatedAt, cooldownDeadline) <= 0;
         if (cooldownElapsed && state.rearmCount < maxRearmCount) {
             const rearmed = await rearmDeadConsumer(tx, name, instanceId);
             const rearmedState = rearmed &&

package/dist/rate-limit/resolver.js

@@ -1,7 +1,4 @@
-// Value-only import, aliased to avoid shadowing the ambient global
-// `Temporal` TYPE that RateLimitDecision.resetAt resolves against (see
-// event-store.ts for the same #1438 dual-package-hazard pattern).
-import { Temporal as TemporalPolyfill } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import { RateLimitError } from "../errors/index.js";
 import { RedisKeys } from "../pipeline/redis-keys.js";
 import { toPublicBucketName } from "./bucket.js";
@@ -134,7 +131,7 @@ export function createRateLimitResolver(opts) {
         const nowMs = now();
         const [allowedFlag, remaining, retryAfterMs] = await client.kumikoRateLimit(`${prefix}${bucket}`, String(config.limit), String(refillRatePerMs), String(cost), String(nowMs), String(ttlSeconds));
         const retryAfterSeconds = Math.ceil(retryAfterMs / 1000);
-        const resetAt = TemporalPolyfill.Instant.fromEpochMilliseconds(nowMs + retryAfterMs);
+        const resetAt = Temporal.Instant.fromEpochMilliseconds(nowMs + retryAfterMs);
         return {
             allowed: allowedFlag === 1,
             limit: config.limit,
@@ -162,7 +159,7 @@ export function createRateLimitResolver(opts) {
         const nowMs = now();
         const [remaining, retryAfterMs] = await client.kumikoRateLimitPeek(`${prefix}${bucket}`, String(config.limit), String(refillRatePerMs), String(nowMs));
         const retryAfterSeconds = Math.ceil(retryAfterMs / 1000);
-        const resetAt = TemporalPolyfill.Instant.fromEpochMilliseconds(nowMs + retryAfterMs);
+        const resetAt = Temporal.Instant.fromEpochMilliseconds(nowMs + retryAfterMs);
         return {
             // peek doesn't deduct, so a "would-be" allowed flag is meaningful:
             // true iff at least one token is available right now.

package/dist/time/legacy-date.d.ts

@@ -1,4 +1,4 @@
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 export declare function instantToLegacyDate(instant: Temporal.Instant): Date;
 /** Gegenrichtung: Date aus einer Fremd-Lib (imapflow INTERNALDATE,
  *  mailparser Date-Header) → Temporal.Instant. */

package/dist/time/legacy-date.js

@@ -1,4 +1,4 @@
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 // Temporal→Date-Bridge für Lib-APIs die JS-Date verlangen (imapflow
 // search({since}), nodemailer-Header, ...). Gegenstück zur
 // dateToInstant-Richtung der DB-/Event-Store-Boundaries: Feature-Code

package/dist/time/polyfill.d.ts

@@ -1,4 +1,5 @@
 /// <reference types="temporal-polyfill/global" preserve="true" />
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 /**
  * Ensure `globalThis.Temporal` is available. Idempotent.
  */

package/dist/time/polyfill.js

@@ -1,45 +1,26 @@
 /// <reference types="temporal-polyfill/global" preserve="true" />
-// Temporal polyfill bootstrap.
+// Temporal bootstrap.
 //
-// Temporal is native in Chromium 144+ / Firefox 139+, but missing in Safari,
-// iOS, and Hermes. Bun/Node coverage is incomplete. Boot installs
-// `temporal-polyfill` once so server/web/mobile share one API.
+// Temporal is native in Bun >= 1.4 and current Chromium/Firefox, but missing in
+// Safari, iOS and Hermes. `@cosmicdrift/kumiko-types/temporal` resolves one
+// implementation (native first, polyfill otherwise) so framework, consumer and
+// ambient-global code all see the same classes.
 //
 // Idempotent: if `globalThis.Temporal` already exists the call is a no-op.
-// The cache is the live global check — not a sticky module flag — so tests
-// that delete the ambient global (fw#1550) still re-install on the next call.
-// Re-install uses the value export + Object.assign (not `temporal-polyfill/global`
-// side-effect import): ESM caches the side-effect module and would not re-run
-// after a teardown.
-let polyfillPromise = null;
+// The check is the live global — not a sticky module flag — so tests that
+// delete the ambient global (fw#1550) still get it back on the next call.
+// Re-install assigns the already-resolved module value: re-importing
+// `temporal-polyfill` here would put a polyfill instance on the global while
+// the rest of the code uses the native classes (instanceof mismatch).
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 /**
  * Ensure `globalThis.Temporal` is available. Idempotent.
  */
 export async function ensureTemporalPolyfill() {
-    if ("Temporal" in globalThis) {
-        // skip: Temporal already on globalThis (native or prior polyfill)
+    // skip: Temporal global already present (native or installed by an earlier call)
+    if ("Temporal" in globalThis)
         return;
-    }
-    if (polyfillPromise) {
-        await polyfillPromise;
-        if ("Temporal" in globalThis) {
-            // skip: Concurrent boot — peer call finished install
-            return;
-        }
-        // Peer resolved but global still missing (torn down mid-flight).
-        polyfillPromise = null;
-    }
-    polyfillPromise = (async () => {
-        if ("Temporal" in globalThis) {
-            // skip: raced native/peer install
-            return;
-        }
-        // Value export — assign ourselves so teardown + re-call still works
-        // (side-effect `temporal-polyfill/global` is ESM-cached and silent on re-import).
-        const { Temporal } = await import("temporal-polyfill");
-        Object.assign(globalThis, { Temporal });
-    })();
-    await polyfillPromise;
+    Object.assign(globalThis, { Temporal });
 }
 /**
  * Type-safe access to globalThis.Temporal. Throws if the polyfill has not

package/dist/time/tz-context.d.ts

@@ -2,7 +2,7 @@ import type { TzContext, TzContextOptions } from "@cosmicdrift/kumiko-types/tz-c
 export type { LocatedTimestampJson, TzContext, TzContextOptions, } from "@cosmicdrift/kumiko-types/tz-context";
 /**
  * Factory: creates a TzContext for the current request.
- * Uses temporal-polyfill's module export (not globalThis.Temporal) so
+ * Uses the kumiko-types Temporal module export (not globalThis.Temporal) so
  * buildHandlerContext stays ambient-free (fw#1525/#1550).
  */
 export declare function createTzContext(options?: TzContextOptions): TzContext;

package/dist/time/tz-context.js

@@ -17,33 +17,30 @@
 //
 // The pure type contracts (TzContext, TzContextOptions, LocatedTimestampJson)
 // live in @cosmicdrift/kumiko-types/tz-context — only the factories are here.
-import { Temporal as TemporalPolyfill } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import { ensureTemporalPolyfill } from "./polyfill.js";
 /**
  * Factory: creates a TzContext for the current request.
- * Uses temporal-polyfill's module export (not globalThis.Temporal) so
+ * Uses the kumiko-types Temporal module export (not globalThis.Temporal) so
  * buildHandlerContext stays ambient-free (fw#1525/#1550).
  */
 export function createTzContext(options = {}) {
     const tenant = options.tenant ?? "UTC";
     const user = options.user ?? tenant;
     const geoTz = options.geoTz;
-    // @cast-boundary temporal-polyfill-vs-ambient: same TC39 Temporal values at
-    // runtime; TzContext is typed against ambient Temporal from temporal-spec.
-    const T = TemporalPolyfill;
     return {
         tenant,
         user,
-        now: () => T.Now.instant(), // @wrapper-known semantic-alias
-        nowIn: (tz) => T.Now.zonedDateTimeISO(tz), // @wrapper-known semantic-alias
-        today: (tz) => T.Now.plainDateISO(tz), // @wrapper-known semantic-alias
+        now: () => Temporal.Now.instant(), // @wrapper-known semantic-alias
+        nowIn: (tz) => Temporal.Now.zonedDateTimeISO(tz), // @wrapper-known semantic-alias
+        today: (tz) => Temporal.Now.plainDateISO(tz), // @wrapper-known semantic-alias
         todayRange: (tz) => {
-            const today = T.Now.plainDateISO(tz);
+            const today = Temporal.Now.plainDateISO(tz);
             const startZdt = today.toZonedDateTime({ timeZone: tz });
             const endZdt = today.add({ days: 1 }).toZonedDateTime({ timeZone: tz });
             return { start: startZdt.toInstant(), end: endZdt.toInstant() };
         },
-        parse: (wallClock, tz) => T.PlainDateTime.from(wallClock).toZonedDateTime(tz),
+        parse: (wallClock, tz) => Temporal.PlainDateTime.from(wallClock).toZonedDateTime(tz),
         toInstant: (zdt) => zdt.toInstant(),
         toLocatedJson: (zdt) => ({
             // Wall-clock WITHOUT offset (no "Z", no "+01:00") plus the IANA name.
@@ -52,7 +49,7 @@ export function createTzContext(options = {}) {
             at: zdt.toPlainDateTime().toString(),
             tz: zdt.timeZoneId,
         }),
-        fromLocatedJson: (obj) => T.PlainDateTime.from(obj.at).toZonedDateTime(obj.tz),
+        fromLocatedJson: (obj) => Temporal.PlainDateTime.from(obj.at).toZonedDateTime(obj.tz),
         fromCoordinates: async (coords) => {
             if (geoTz === undefined) {
                 throw new Error("ctx.tz.fromCoordinates requires a GeoTzProvider — inject one via the app context (e.g. buildServer({ context: { geoTzProvider } }) or runProdApp({ extraContext: { geoTzProvider } })) or install a provider package.");

package/dist/ui-types/index.d.ts

@@ -9,7 +9,7 @@ export type { BooleanFieldDef, DateFieldDef, EmbeddedDerivedCellDef, EntityDefin
 export type { AccessRule, OpenToAllAccessRule, OpenToAllDeclaration, OpenToAllPersonalData, RoleAccessPersonalData, RoleAccessRule, } from "../engine/types/handlers.js";
 export { isOpenToAllGranted, isUiAccessGranted } from "../engine/types/handlers.js";
 export type { IconKey, NavDefinition, NavIconKey } from "../engine/types/nav.js";
-export type { ActionFormFooterAction, ActionFormRedirect, ActionFormScreenDefinition, ConfigEditScreenDefinition, CustomScreenDefinition, CustomScreenRoute, DashboardChartKind, DashboardChartPanel, DashboardChartTone, DashboardCustomPanel, DashboardDateParam, DashboardFeedPanel, DashboardFilterDefinition, DashboardI18nText, DashboardListPanel, DashboardMoneyParam, DashboardPanelDefinition, DashboardPanelEmptyState, DashboardPanelQueryOptions, DashboardPanelSpan, DashboardPanelVisibility, DashboardProgressListPanel, DashboardScopeDefinition, DashboardScreenDefinition, DashboardScreenPanel, DashboardStatGroupPanel, DashboardStatPanel, DashboardText, DashboardTextParam, DashboardTimeRangeDefinition, DashboardValueFormat, EditExtensionSection, EditFieldSpec, EditFieldsSection, EditLayout, EditRelatedListSection, EditSectionSpec, EditWriteFormSection, EntityEditScreenDefinition, EntityListExpandableRow, EntityListFacetConfig, EntityListFacetExtraOption, EntityListScreenDefinition, FieldCondition, FieldIconKey, FieldRenderer, FormWidth, ListBadgeTone, ListColumnDisplay, ListColumnSpec, ListFacetSpec, ListSortSpec, MetricNavigate, MetricSpec, PlatformComponent, ProjectionDetailScreenDefinition, ProjectionListScreenDefinition, RecordHeaderSubtitlePart, RelatedListGroupBy, RelatedListRowTone, RelatedListToolbarAction, RowAction, RowActionDisplay, RowActionDrawer, RowActionMode, RowActionNavigate, RowActionWriteHandler, RowFieldExtractor, ScreenDefinition, ScreenFilter, ScreenFilterOp, ScreenSlots, SecretMintConfirmStep, SecretMintScreenDefinition, SecretReveal, SecretRevealField, SecretsEditScreenDefinition, SecretsEditSection, ToolbarAction, } from "../engine/types/screen.js";
+export type { ActionFormFooterAction, ActionFormRedirect, ActionFormScreenDefinition, ConfigEditScreenDefinition, CustomScreenDefinition, CustomScreenRoute, DashboardChartKind, DashboardChartMarkerKind, DashboardChartPanel, DashboardChartRangeOption, DashboardChartRanges, DashboardChartTone, DashboardCustomPanel, DashboardDateParam, DashboardFeedPanel, DashboardFilterDefinition, DashboardI18nText, DashboardListPanel, DashboardMoneyParam, DashboardPanelDefinition, DashboardPanelEmptyState, DashboardPanelGate, DashboardPanelQueryOptions, DashboardPanelSpan, DashboardPanelVisibility, DashboardProgressListPanel, DashboardScopeDefinition, DashboardScreenDefinition, DashboardScreenPanel, DashboardStatGroupPanel, DashboardStatPanel, DashboardText, DashboardTextParam, DashboardTimeRangeDefinition, DashboardValueFormat, EditExtensionSection, EditFieldSpec, EditFieldsSection, EditLayout, EditRelatedListSection, EditSectionSpec, EditWriteFormSection, EntityEditScreenDefinition, EntityListExpandableRow, EntityListFacetConfig, EntityListFacetExtraOption, EntityListScreenDefinition, FieldCondition, FieldIconKey, FieldRenderer, FormWidth, ListBadgeTone, ListColumnDisplay, ListColumnSpec, ListFacetSpec, ListSortSpec, MetricNavigate, MetricSpec, PlatformComponent, ProjectionDetailScreenDefinition, ProjectionListScreenDefinition, RecordHeaderSubtitlePart, RelatedListGroupBy, RelatedListRowTone, RelatedListToolbarAction, RowAction, RowActionDisplay, RowActionDrawer, RowActionMode, RowActionNavigate, RowActionWriteHandler, RowFieldExtractor, ScreenDefinition, ScreenFilter, ScreenFilterOp, ScreenSlots, SecretMintConfirmStep, SecretMintScreenDefinition, SecretReveal, SecretRevealField, SecretsEditScreenDefinition, SecretsEditSection, ToolbarAction, } from "../engine/types/screen.js";
 export { metricField, relatedListGroupHeaderLabel, relatedListGroupKey, } from "../engine/types/screen.js";
 export type { TargetRef } from "../engine/types/target-ref.js";
 export type { TreeAction, TreeNode, TreeNodeState } from "../engine/types/tree-node.js";

package/dist/upgrade-cli.js

@@ -6,45 +6,42 @@ import { compareVersions, filterEntriesAfter, parseFeatureChangelog, sortEntries
 import { ensureTemporalPolyfill } from "./time/index.js";
 const SEMVER_RE = /^\d+\.\d+\.\d+$/;
 const CODEMOD_SUBDIR = "scripts/codemod";
-function readPackageVersion(cwd, pkgName, repoLocalPath) {
-    // Walk up from cwd to find node_modules/@cosmicdrift/<pkgName>/package.json
-    // (handles bun workspace hoisting where packages live in parent node_modules)
-    let dir = cwd;
-    for (let i = 0; i < 10; i++) {
-        const nmPath = join(dir, `node_modules/@cosmicdrift/${pkgName}/package.json`);
-        if (existsSync(nmPath)) {
-            try {
-                const pkg = JSON.parse(readFileSync(nmPath, "utf-8"));
-                return pkg.version ?? null;
-            }
-            catch {
-                return null;
-            }
-        }
-        const parent = join(dir, "..");
-        if (parent === dir)
-            break;
-        dir = parent;
-    }
-    // Fallback: repo-local package root
-    const repoPath = join(cwd, repoLocalPath);
-    if (existsSync(repoPath)) {
-        try {
-            const pkg = JSON.parse(readFileSync(repoPath, "utf-8"));
-            return pkg.version ?? null;
-        }
-        catch {
+function readPackageJsonVersion(packageJsonPath) {
+    if (!existsSync(packageJsonPath))
+        return null;
+    try {
+        const pkg = JSON.parse(readFileSync(packageJsonPath, "utf-8"));
+        if (typeof pkg !== "object" || pkg === null || !("version" in pkg))
             return null;
-        }
+        return typeof pkg.version === "string" ? pkg.version : null;
     }
-    return null;
+    catch {
+        return null;
+    }
+}
+// bun.lock pins transitive packages too, so a repo that only depends on
+// kumiko-cli/-guards still records the bundled-features version it resolved.
+function readLockfileVersion(root, pkgName) {
+    const lockPath = join(root, "bun.lock");
+    if (!existsSync(lockPath))
+        return null;
+    const pinned = new RegExp(`"@cosmicdrift/${pkgName}": \\["@cosmicdrift/${pkgName}@(\\d+\\.\\d+\\.\\d+)"`).exec(readFileSync(lockPath, "utf-8"));
+    return pinned?.[1] ?? null;
+}
+// Only the repo's own install, package dir and lockfile count. Walking up
+// from a worktree nested in a parent workspace read that workspace's version,
+// and the isolated linker keeps transitive packages out of node_modules.
+function readPackageVersion(root, pkgName, repoLocalPath) {
+    return (readPackageJsonVersion(join(root, `node_modules/@cosmicdrift/${pkgName}/package.json`)) ??
+        readPackageJsonVersion(join(root, repoLocalPath)) ??
+        readLockfileVersion(root, pkgName));
 }
 // Changelog entries come from @cosmicdrift/kumiko-bundled-features (see
 // findFeaturesDirs); comparing against the framework version instead
 // compares unrelated packages once the two stop being versioned in lockstep.
-function readCurrentVersion(cwd) {
-    return (readPackageVersion(cwd, "kumiko-bundled-features", "packages/bundled-features/package.json") ??
-        readPackageVersion(cwd, "kumiko-framework", "packages/framework/package.json"));
+function readCurrentVersion(root) {
+    return (readPackageVersion(root, "kumiko-bundled-features", "packages/bundled-features/package.json") ??
+        readPackageVersion(root, "kumiko-framework", "packages/framework/package.json"));
 }
 function readChangelogFile(filePath) {
     if (!existsSync(filePath))
@@ -677,11 +674,18 @@ export async function runUpgradeCli(argv, cwd, out, options) {
     for (const changelogFile of packageChangelogFiles) {
         allEntries.push(...readChangelogFile(changelogFile));
     }
-    const pending = sortEntries(filterEntriesAfter(allEntries, currentVersion));
+    // Installed version of the target the marker belongs to (cwd unless --dir).
+    const targetInstalledVersion = dirFlag ? readCurrentVersion(targetDir) : installedVersion;
+    // Changelogs can be found in a parent workspace's newer install. A change
+    // the repo has not installed yet is not pending for it.
+    const installedEntries = targetInstalledVersion === null
+        ? allEntries
+        : allEntries.filter((entry) => compareVersions(entry.version, targetInstalledVersion) <= 0);
+    const pending = sortEntries(filterEntriesAfter(installedEntries, currentVersion));
     if (getFlag(args, "apply")) {
         // Marker must reflect what is actually installed under the target (or
         // cwd), not the filter baseline above — otherwise CI stays green forever.
-        const markerVersion = dirFlag ? readCurrentVersion(targetDir) : installedVersion;
+        const markerVersion = targetInstalledVersion;
         const dryRun = getFlag(args, "dry-run");
         if (markerVersion === null && !dryRun) {
             out.err("");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-framework",
-  "version": "0.349.0",
+  "version": "0.351.0",
   "description": "Framework core — engine, pipeline, API, DB, and every other bit that makes Kumiko go.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -206,8 +206,8 @@
     "./package.json": "./package.json"
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-http": "0.349.0",
-    "@cosmicdrift/kumiko-types": "0.349.0",
+    "@cosmicdrift/kumiko-http": "0.351.0",
+    "@cosmicdrift/kumiko-types": "0.351.0",
     "bullmq": "^5.76.7",
     "bun-types": "^1.3.13",
     "hono": "^4.13.1",
@@ -223,7 +223,7 @@
     "zod": "^4.4.3"
   },
   "devDependencies": {
-    "@cosmicdrift/kumiko-dispatcher-live": "0.349.0",
+    "@cosmicdrift/kumiko-dispatcher-live": "0.351.0",
     "bun-types": "^1.3.13",
     "pino-pretty": "^13.1.3"
   },