@cosmicdrift/kumiko-framework 0.369.0 → 0.370.0

package/dist/secrets/index.d.ts

@@ -1,9 +1,9 @@
-export { createDekCache, type DekCache, type DekCacheOptions, withDekCache } from "./dek-cache.js";
-export { derivePurposeSecret } from "./derive-purpose-secret.js";
-export { createEnvMasterKeyProvider, type EnvMasterKeyProviderOptions, type Keyring, } from "./env-master-key-provider.js";
-export { decryptValue, encryptValue } from "./envelope.js";
-export { createEnvelopeCipher, type EnvelopeCipher, type EnvelopeCipherOptions, } from "./envelope-cipher.js";
-export { assertNoSecretLeak } from "./leak-guard.js";
-export { rewrapDek } from "./rotation.js";
-export { decodeStoredEnvelope, encodeStoredEnvelope, isStoredEnvelope, type StoredEnvelope, } from "./stored-envelope.js";
-export { type ContainsSecret, createSecret, type Envelope, isSecret, type KeyScope, type MasterKeyProvider, type Secret, type SecretAuditContext, type SecretKeyRef, type SecretsContext, } from "./types.js";
+export { createDekCache, type DekCache, type DekCacheOptions, withDekCache } from "./dek-cache.ts";
+export { derivePurposeSecret } from "./derive-purpose-secret.ts";
+export { createEnvMasterKeyProvider, type EnvMasterKeyProviderOptions, type Keyring, } from "./env-master-key-provider.ts";
+export { decryptValue, encryptValue } from "./envelope.ts";
+export { createEnvelopeCipher, type EnvelopeCipher, type EnvelopeCipherOptions, } from "./envelope-cipher.ts";
+export { assertNoSecretLeak } from "./leak-guard.ts";
+export { rewrapDek } from "./rotation.ts";
+export { decodeStoredEnvelope, encodeStoredEnvelope, isStoredEnvelope, type StoredEnvelope, } from "./stored-envelope.ts";
+export { type ContainsSecret, createSecret, type Envelope, isSecret, type KeyScope, type MasterKeyProvider, type Secret, type SecretAuditContext, type SecretKeyRef, type SecretsContext, } from "./types.ts";

package/dist/secrets/rotation.d.ts

@@ -1,2 +1,2 @@
-import type { Envelope, MasterKeyProvider } from "./types.js";
+import type { Envelope, MasterKeyProvider } from "./types.ts";
 export declare function rewrapDek(envelope: Envelope, provider: MasterKeyProvider): Promise<Envelope>;

package/dist/secrets/stored-envelope.d.ts

@@ -1,4 +1,4 @@
-import type { Envelope } from "./types.js";
+import type { Envelope } from "./types.ts";
 export type StoredEnvelope = {
     readonly ciphertext: string;
     readonly iv: string;

package/dist/seeding/entity-seed.d.ts

@@ -1,4 +1,4 @@
-import { type SeedIfExists } from "./types.js";
+import { type SeedIfExists } from "./types.ts";
 export type EventStoreSeedExisting<TId extends string | number = string> = {
     readonly id: TId;
     readonly version: number;

package/dist/seeding/index.d.ts

@@ -1,3 +1,3 @@
-export { type EventStoreSeedExisting, type RunEventStoreSeedOptions, runEventStoreSeed, } from "./entity-seed.js";
-export { createTestUser, TestUsers, testTenantId, testUserId } from "./seed-users.js";
-export { DEFAULT_SEED_IF_EXISTS, type SeedIfExists } from "./types.js";
+export { type EventStoreSeedExisting, type RunEventStoreSeedOptions, runEventStoreSeed, } from "./entity-seed.ts";
+export { createTestUser, TestUsers, testTenantId, testUserId } from "./seed-users.ts";
+export { DEFAULT_SEED_IF_EXISTS, type SeedIfExists } from "./types.ts";

package/dist/seeding/seed-users.d.ts

@@ -1,4 +1,4 @@
-import type { SessionUser, TenantId } from "../engine/types/index.js";
+import type { SessionUser, TenantId } from "../engine/types/index.ts";
 export declare function testTenantId(n: number): TenantId;
 export declare function testUserId(n: number): string;
 export declare const TestUsers: {

package/dist/time/index.d.ts

@@ -1,6 +1,6 @@
-export { warnIfNonUtcServerTimeZone } from "./boot-tz-warning.js";
-export type { GeoAddress, GeoCoordinates, GeoTzProvider } from "./geo-tz.js";
-export { isValidIanaTimeZone } from "./iana.js";
-export { instantToLegacyDate, legacyDateToInstant } from "./legacy-date.js";
-export { ensureTemporalPolyfill, getTemporal } from "./polyfill.js";
-export { type Clock, createTzContext, createTzContextAsync, type LocatedTimestampJson, type TzContext, type TzContextOptions, } from "./tz-context.js";
+export { warnIfNonUtcServerTimeZone } from "./boot-tz-warning.ts";
+export type { GeoAddress, GeoCoordinates, GeoTzProvider } from "./geo-tz.ts";
+export { isValidIanaTimeZone } from "./iana.ts";
+export { instantToLegacyDate, legacyDateToInstant } from "./legacy-date.ts";
+export { ensureTemporalPolyfill, getTemporal } from "./polyfill.ts";
+export { type Clock, createTzContext, createTzContextAsync, type LocatedTimestampJson, type TzContext, type TzContextOptions, } from "./tz-context.ts";

package/dist/ui-types/app-schema.d.ts

@@ -1,8 +1,8 @@
-import type { TranslationKeys } from "../engine/types/config.js";
-import type { EntityDefinition } from "../engine/types/fields.js";
-import type { ContentCollectionDefinition, NavDefinition } from "../engine/types/nav.js";
-import type { ScreenDefinition } from "../engine/types/screen.js";
-import type { WorkspaceDefinition } from "../engine/types/workspace.js";
+import type { TranslationKeys } from "../engine/types/config.ts";
+import type { EntityDefinition } from "../engine/types/fields.ts";
+import type { ContentCollectionDefinition, NavDefinition } from "../engine/types/nav.ts";
+import type { ScreenDefinition } from "../engine/types/screen.ts";
+import type { WorkspaceDefinition } from "../engine/types/workspace.ts";
 export type FeatureSchema = {
     readonly featureName: string;
     readonly entities: Readonly<Record<string, EntityDefinition>>;

package/dist/ui-types/index.d.ts

@@ -1,24 +1,24 @@
 export { NO_WIDGET_FIELD_TYPES } from "@cosmicdrift/kumiko-types/fields";
-export type { DerivedCellRoundingTarget } from "../engine/embedded-derived.js";
-export { computeDerivedCellValue, roundDerivedCellValue } from "../engine/embedded-derived.js";
-export type { ParsedRefTarget } from "../engine/parse-ref-target.js";
-export { parseRefTarget } from "../engine/parse-ref-target.js";
-export type { FieldsOrGroupsSection, UnavailableSelectOption } from "../engine/screen-helpers.js";
-export { availableSelectOptions, evalFieldCondition, explicitListScreenId, findUnavailableSelectOptions, isExtensionEditSection, isFieldsEditSection, isFormatSpec, isRecordLocked, isUnchangedValue, isWriteFormEditSection, normalizeEditField, normalizeListColumn, resolveNavParentScreen, sectionFieldSpecs, } from "../engine/screen-helpers.js";
-export type { BooleanFieldDef, DateFieldDef, EmbeddedDerivedCellDef, EntityDefinition, FieldDefinition, FileFieldDef, FilesFieldDef, ImageFieldDef, ImagesFieldDef, NumberFieldDef, OptionsQueryPayload, OptionsQueryPayloadValue, SelectFieldDef, SelectOptionTone, TextFieldDef, } from "../engine/types/fields.js";
-export type { AccessRule, OpenToAllAccessRule, OpenToAllDeclaration, OpenToAllPersonalData, RoleAccessPersonalData, RoleAccessRule, } from "../engine/types/handlers.js";
-export { isOpenToAllGranted, isUiAccessGranted } from "../engine/types/handlers.js";
-export type { IconKey, NavDefinition, NavIconKey } from "../engine/types/nav.js";
-export type { ActionFormFooterAction, ActionFormRedirect, ActionFormScreenDefinition, ConfigEditScreenDefinition, CustomScreenDefinition, CustomScreenRoute, DashboardChartKind, DashboardChartMarkerKind, DashboardChartPanel, DashboardChartRangeOption, DashboardChartRanges, DashboardChartTone, DashboardCustomPanel, DashboardDateParam, DashboardFeedPanel, DashboardFilterDefinition, DashboardI18nText, DashboardListPanel, DashboardMoneyParam, DashboardPanelDefinition, DashboardPanelEmptyState, DashboardPanelGate, DashboardPanelQueryOptions, DashboardPanelSpan, DashboardPanelVisibility, DashboardProgressListPanel, DashboardScopeDefinition, DashboardScreenDefinition, DashboardScreenPanel, DashboardStatGroupPanel, DashboardStatPanel, DashboardText, DashboardTextParam, DashboardTimeRangeDefinition, DashboardValueFormat, EditExtensionSection, EditFieldPrefill, EditFieldSpec, EditFieldsSection, EditLayout, EditRelatedListSection, EditSectionSpec, EditWriteFormSection, EmbeddedListEditSpec, EntityEditAction, EntityEditActionPlacement, EntityEditScreenDefinition, EntityListExpandableRow, EntityListFacetConfig, EntityListFacetExtraOption, EntityListScreenDefinition, EntityWriteExcludedFields, FieldCondition, FieldIconKey, FieldRenderer, FormWidth, ListBadgeTone, ListColumnDisplay, ListColumnSpec, ListEmptyStateSpec, ListFacetSpec, ListSortSpec, MetricNavigate, MetricSpec, PlatformComponent, ProjectionDetailScreenDefinition, ProjectionListScreenDefinition, RecordHeaderSubtitlePart, RelatedListGroupBy, RelatedListRowTone, RelatedListToolbarAction, RowAction, RowActionDisplay, RowActionDrawer, RowActionMode, RowActionNavigate, RowActionWriteHandler, RowFieldExtractor, ScreenDefinition, ScreenFilter, ScreenFilterOp, ScreenSlots, SecretMintConfirmStep, SecretMintScreenDefinition, SecretReveal, SecretRevealField, SecretsEditScreenDefinition, SecretsEditSection, ToolbarAction, } from "../engine/types/screen.js";
-export { metricField, relatedListGroupHeaderLabel, relatedListGroupKey, } from "../engine/types/screen.js";
-export type { TargetRef } from "../engine/types/target-ref.js";
-export type { TreeAction, TreeNode, TreeNodeState } from "../engine/types/tree-node.js";
-export type { WorkspaceDefinition } from "../engine/types/workspace.js";
-export { ACTION_FORM_ENTITY, handlerFieldLabelKey, handlerTitleKey, PROJECTION_DETAIL_ENTITY, WRITE_FORM_SECTION_ENTITY, } from "../i18n/required-surface-keys.js";
-export type { AppSchema, FeatureSchema, QualifiedContentCollection, WorkspaceSchema, } from "./app-schema.js";
-export type { CardColumnRoles, CardRoleColumn } from "./card-column-roles.js";
-export { CARD_META_MAX, cardColumnRoles, cardFileDisplayKind } from "./card-column-roles.js";
-export { type Formality, formalLocaleTag } from "./formality.js";
-export type { ListRowMetaColumnType, ListRowMetaReference, ReferenceLookupSource, SystemReferenceLabel, } from "./list-row-meta.js";
-export { LIST_ROW_META_COLUMNS, LIST_ROW_META_REFERENCES, REFERENCE_LOOKUP_SOURCES, SYSTEM_REFERENCE_LABELS, } from "./list-row-meta.js";
-export { type PluralForms, resolveTranslationValue, type TranslationValue, translationValueOtherText, } from "./plural.js";
+export type { DerivedCellRoundingTarget } from "../engine/embedded-derived.ts";
+export { computeDerivedCellValue, roundDerivedCellValue } from "../engine/embedded-derived.ts";
+export type { ParsedRefTarget } from "../engine/parse-ref-target.ts";
+export { parseRefTarget } from "../engine/parse-ref-target.ts";
+export type { FieldsOrGroupsSection, UnavailableSelectOption } from "../engine/screen-helpers.ts";
+export { availableSelectOptions, evalFieldCondition, explicitListScreenId, findUnavailableSelectOptions, isExtensionEditSection, isFieldsEditSection, isFormatSpec, isRecordLocked, isUnchangedValue, isWriteFormEditSection, normalizeEditField, normalizeListColumn, resolveNavParentScreen, sectionFieldSpecs, } from "../engine/screen-helpers.ts";
+export type { BooleanFieldDef, DateFieldDef, EmbeddedDerivedCellDef, EntityDefinition, FieldDefinition, FileFieldDef, FilesFieldDef, ImageFieldDef, ImagesFieldDef, NumberFieldDef, OptionsQueryPayload, OptionsQueryPayloadValue, SelectFieldDef, SelectOptionTone, TextFieldDef, } from "../engine/types/fields.ts";
+export type { AccessRule, OpenToAllAccessRule, OpenToAllDeclaration, OpenToAllPersonalData, RoleAccessPersonalData, RoleAccessRule, } from "../engine/types/handlers.ts";
+export { isOpenToAllGranted, isUiAccessGranted } from "../engine/types/handlers.ts";
+export type { IconKey, NavDefinition, NavIconKey } from "../engine/types/nav.ts";
+export type { ActionFormFooterAction, ActionFormRedirect, ActionFormScreenDefinition, ConfigEditScreenDefinition, CustomScreenDefinition, CustomScreenRoute, DashboardChartKind, DashboardChartMarkerKind, DashboardChartPanel, DashboardChartRangeOption, DashboardChartRanges, DashboardChartTone, DashboardCustomPanel, DashboardDateParam, DashboardFeedPanel, DashboardFilterDefinition, DashboardI18nText, DashboardListPanel, DashboardMoneyParam, DashboardPanelDefinition, DashboardPanelEmptyState, DashboardPanelGate, DashboardPanelQueryOptions, DashboardPanelSpan, DashboardPanelVisibility, DashboardProgressListPanel, DashboardScopeDefinition, DashboardScreenDefinition, DashboardScreenPanel, DashboardStatGroupPanel, DashboardStatPanel, DashboardText, DashboardTextParam, DashboardTimeRangeDefinition, DashboardValueFormat, EditExtensionSection, EditFieldPrefill, EditFieldSpec, EditFieldsSection, EditLayout, EditRelatedListSection, EditSectionSpec, EditWriteFormSection, EmbeddedListEditSpec, EntityEditAction, EntityEditActionPlacement, EntityEditScreenDefinition, EntityListExpandableRow, EntityListFacetConfig, EntityListFacetExtraOption, EntityListScreenDefinition, EntityWriteExcludedFields, FieldCondition, FieldIconKey, FieldRenderer, FormWidth, ListBadgeTone, ListColumnDisplay, ListColumnSpec, ListEmptyStateSpec, ListFacetSpec, ListSortSpec, MetricNavigate, MetricSpec, PlatformComponent, ProjectionDetailScreenDefinition, ProjectionListScreenDefinition, RecordHeaderSubtitlePart, RelatedListGroupBy, RelatedListRowTone, RelatedListToolbarAction, RowAction, RowActionDisplay, RowActionDrawer, RowActionMode, RowActionNavigate, RowActionWriteHandler, RowFieldExtractor, ScreenDefinition, ScreenFilter, ScreenFilterOp, ScreenSlots, SecretMintConfirmStep, SecretMintScreenDefinition, SecretReveal, SecretRevealField, SecretsEditScreenDefinition, SecretsEditSection, ToolbarAction, } from "../engine/types/screen.ts";
+export { metricField, relatedListGroupHeaderLabel, relatedListGroupKey, } from "../engine/types/screen.ts";
+export type { TargetRef } from "../engine/types/target-ref.ts";
+export type { TreeAction, TreeNode, TreeNodeState } from "../engine/types/tree-node.ts";
+export type { WorkspaceDefinition } from "../engine/types/workspace.ts";
+export { ACTION_FORM_ENTITY, handlerFieldLabelKey, handlerTitleKey, PROJECTION_DETAIL_ENTITY, WRITE_FORM_SECTION_ENTITY, } from "../i18n/required-surface-keys.ts";
+export type { AppSchema, FeatureSchema, QualifiedContentCollection, WorkspaceSchema, } from "./app-schema.ts";
+export type { CardColumnRoles, CardRoleColumn } from "./card-column-roles.ts";
+export { CARD_META_MAX, cardColumnRoles, cardFileDisplayKind } from "./card-column-roles.ts";
+export { type Formality, formalLocaleTag } from "./formality.ts";
+export type { ListRowMetaColumnType, ListRowMetaReference, ReferenceLookupSource, SystemReferenceLabel, } from "./list-row-meta.ts";
+export { LIST_ROW_META_COLUMNS, LIST_ROW_META_REFERENCES, REFERENCE_LOOKUP_SOURCES, SYSTEM_REFERENCE_LABELS, } from "./list-row-meta.ts";
+export { type PluralForms, resolveTranslationValue, type TranslationValue, translationValueOtherText, } from "./plural.ts";

package/dist/upgrade-cli.js

@@ -284,6 +284,18 @@ async function runCodemodScript(scriptPath, targetDir, repoRoot, dryRun) {
     ]);
     return { ok: exitCode === 0, output: `${stdout}${stderr}`.trim() };
 }
+// One codemod can back the breaking entries of many features in the same release
+// (each feature's changelog names its own removed export); it runs once per version.
+function uniqueCodemodRunsPerVersion(entries) {
+    const seenRuns = new Set();
+    return entries.filter((e) => {
+        const runKey = `${e.version}\0${e.codemod}`;
+        if (seenRuns.has(runKey))
+            return false;
+        seenRuns.add(runKey);
+        return true;
+    });
+}
 function hasCodemod(e) {
     return typeof e.codemod === "string" && e.codemod.length > 0;
 }
@@ -476,9 +488,7 @@ markerVersion, previous) {
     const breaking = pending.filter((e) => e.type === "breaking");
     // A codemod is worth running whatever the entry's type: an improvement that
     // moves a module ships one too, and skipping it leaves the deprecated path in place.
-    const codemodEntries = pending
-        .filter(hasCodemod)
-        .sort((a, b) => compareVersions(a.version, b.version));
+    const codemodEntries = uniqueCodemodRunsPerVersion(pending.filter(hasCodemod).sort((a, b) => compareVersions(a.version, b.version)));
     const manualEntries = breaking.filter(needsManualMigration);
     for (const e of manualEntries) {
         out.log(hasCodemod(e)

package/dist/utils/index.d.ts

@@ -1,9 +1,9 @@
-export { assertUnreachable } from "./assert.js";
-export { toSnakeCase } from "./case.js";
-export { compareByCodepoint } from "./compare.js";
-export { readPositiveIntEnv } from "./env-parse.js";
-export { generateDeterministicId, generateId } from "./ids.js";
-export { isPlainObject } from "./is-plain-object.js";
-export { parseStringArrayJson } from "./parse-string-array-json.js";
-export { parseJsonOrThrow, parseJsonSafe, stringifyJson } from "./safe-json.js";
-export { parseRoles } from "./serialization.js";
+export { assertUnreachable } from "./assert.ts";
+export { toSnakeCase } from "./case.ts";
+export { compareByCodepoint } from "./compare.ts";
+export { readPositiveIntEnv } from "./env-parse.ts";
+export { generateDeterministicId, generateId } from "./ids.ts";
+export { isPlainObject } from "./is-plain-object.ts";
+export { parseStringArrayJson } from "./parse-string-array-json.ts";
+export { parseJsonOrThrow, parseJsonSafe, stringifyJson } from "./safe-json.ts";
+export { parseRoles } from "./serialization.ts";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-framework",
-  "version": "0.369.0",
+  "version": "0.370.0",
   "description": "Framework core — engine, pipeline, API, DB, and every other bit that makes Kumiko go.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -26,11 +26,7 @@
   "kumiko": {
     "runtime": "runtime",
     "bunOnlyExports": [
-      "./engine/codemod",
-      "./stack",
-      "./testing",
-      "./testing/e2e-generator",
-      "./testing/real-providers"
+      "./engine/codemod"
     ]
   },
   "exports": {
@@ -38,6 +34,12 @@
       "types": "./dist/compliance/index.d.ts",
       "default": "./dist/compliance/index.js"
     },
+    "./config": {
+      "types": "./dist/config/index.d.ts",
+      "default": "./dist/config/index.js"
+    },
+    "./biome": "./presets/biome-app.json",
+    "./tsconfig.app.json": "./presets/tsconfig.app.json",
     "./es-ops": {
       "types": "./dist/es-ops/index.d.ts",
       "default": "./dist/es-ops/index.js"
@@ -66,10 +68,6 @@
       "types": "./dist/errors/index.d.ts",
       "default": "./dist/errors/index.js"
     },
-    "./bun-db": {
-      "types": "./dist/db/bun-db-deprecated.d.ts",
-      "default": "./dist/db/bun-db-deprecated.js"
-    },
     "./db": {
       "types": "./dist/db/index.d.ts",
       "default": "./dist/db/index.js"
@@ -174,22 +172,6 @@
       "types": "./dist/arg-parser.d.ts",
       "default": "./dist/arg-parser.js"
     },
-    "./stack": {
-      "types": "./dist/stack/index.d.ts",
-      "default": "./dist/stack/index.js"
-    },
-    "./testing": {
-      "types": "./dist/testing/index.d.ts",
-      "default": "./dist/testing/index.js"
-    },
-    "./testing/handler-context": {
-      "types": "./dist/testing/handler-context.d.ts",
-      "default": "./dist/testing/handler-context.js"
-    },
-    "./testing/real-providers": {
-      "types": "./dist/testing/real-providers.d.ts",
-      "default": "./dist/testing/real-providers.js"
-    },
     "./internal/request-context": {
       "types": "./dist/api/request-context.d.ts",
       "default": "./dist/api/request-context.js"
@@ -202,10 +184,6 @@
       "types": "./dist/internal/testing.d.ts",
       "default": "./dist/internal/testing.js"
     },
-    "./testing/e2e-generator": {
-      "types": "./dist/testing/e2e-generator.d.ts",
-      "default": "./dist/testing/e2e-generator.js"
-    },
     "./time": {
       "types": "./dist/time/index.d.ts",
       "default": "./dist/time/index.js"
@@ -221,8 +199,8 @@
     "./package.json": "./package.json"
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-http": "0.369.0",
-    "@cosmicdrift/kumiko-types": "0.369.0",
+    "@cosmicdrift/kumiko-http": "0.370.0",
+    "@cosmicdrift/kumiko-types": "0.370.0",
     "bullmq": "^5.76.7",
     "bun-types": "^1.3.13",
     "hono": "^4.13.1",
@@ -238,19 +216,11 @@
     "zod": "^4.4.3"
   },
   "devDependencies": {
-    "@cosmicdrift/kumiko-dispatcher-live": "0.369.0",
-    "@cosmicdrift/kumiko-testing": "0.369.0",
+    "@cosmicdrift/kumiko-dispatcher-live": "0.370.0",
+    "@cosmicdrift/kumiko-testing": "0.370.0",
     "bun-types": "^1.3.13",
     "pino-pretty": "^13.1.3"
   },
-  "peerDependencies": {
-    "@cosmicdrift/kumiko-testing": ">=0.366.0 <1.0.0"
-  },
-  "peerDependenciesMeta": {
-    "@cosmicdrift/kumiko-testing": {
-      "optional": true
-    }
-  },
   "publishConfig": {
     "registry": "https://registry.npmjs.org",
     "access": "public",
@@ -259,6 +229,12 @@
         "types": "./dist/compliance/index.d.ts",
         "default": "./dist/compliance/index.js"
       },
+      "./config": {
+        "types": "./dist/config/index.d.ts",
+        "default": "./dist/config/index.js"
+      },
+      "./biome": "./presets/biome-app.json",
+      "./tsconfig.app.json": "./presets/tsconfig.app.json",
       "./es-ops": {
         "types": "./dist/es-ops/index.d.ts",
         "default": "./dist/es-ops/index.js"
@@ -287,10 +263,6 @@
         "types": "./dist/errors/index.d.ts",
         "default": "./dist/errors/index.js"
       },
-      "./bun-db": {
-        "types": "./dist/db/bun-db-deprecated.d.ts",
-        "default": "./dist/db/bun-db-deprecated.js"
-      },
       "./db": {
         "types": "./dist/db/index.d.ts",
         "default": "./dist/db/index.js"
@@ -395,22 +367,6 @@
         "types": "./dist/arg-parser.d.ts",
         "default": "./dist/arg-parser.js"
       },
-      "./stack": {
-        "types": "./dist/stack/index.d.ts",
-        "default": "./dist/stack/index.js"
-      },
-      "./testing": {
-        "types": "./dist/testing/index.d.ts",
-        "default": "./dist/testing/index.js"
-      },
-      "./testing/handler-context": {
-        "types": "./dist/testing/handler-context.d.ts",
-        "default": "./dist/testing/handler-context.js"
-      },
-      "./testing/real-providers": {
-        "types": "./dist/testing/real-providers.d.ts",
-        "default": "./dist/testing/real-providers.js"
-      },
       "./internal/request-context": {
         "types": "./dist/api/request-context.d.ts",
         "default": "./dist/api/request-context.js"
@@ -423,10 +379,6 @@
         "types": "./dist/internal/testing.d.ts",
         "default": "./dist/internal/testing.js"
       },
-      "./testing/e2e-generator": {
-        "types": "./dist/testing/e2e-generator.d.ts",
-        "default": "./dist/testing/e2e-generator.js"
-      },
       "./time": {
         "types": "./dist/time/index.d.ts",
         "default": "./dist/time/index.js"
@@ -444,6 +396,7 @@
   },
   "files": [
     "dist",
+    "presets",
     "src/changes.json",
     "src/scripts/codemod",
     "README.md",

package/presets/biome-app.json

@@ -0,0 +1,80 @@
+{
+  "$schema": "https://biomejs.dev/schemas/2.5.7/schema.json",
+  "vcs": {
+    "enabled": true,
+    "clientKind": "git",
+    "useIgnoreFile": false,
+    "defaultBranch": "main"
+  },
+  "files": {
+    "includes": [
+      "src/**",
+      "bin/**",
+      "kumiko/**",
+      "e2e/**",
+      "scripts/**",
+      "kumiko.config.ts",
+      "playwright.config.ts",
+      "!**/node_modules",
+      "!**/dist",
+      "!**/dist-server",
+      "!kumiko/migrations",
+      "!test-results",
+      "!playwright-report"
+    ]
+  },
+  "formatter": {
+    "enabled": true,
+    "indentStyle": "space",
+    "indentWidth": 2,
+    "lineWidth": 100,
+    "lineEnding": "lf"
+  },
+  "css": {
+    "parser": { "cssModules": false, "tailwindDirectives": true }
+  },
+  "javascript": {
+    "formatter": {
+      "quoteStyle": "double",
+      "jsxQuoteStyle": "double",
+      "semicolons": "always",
+      "trailingCommas": "all",
+      "arrowParentheses": "always"
+    }
+  },
+  "json": { "formatter": { "indentWidth": 2, "lineWidth": 80 } },
+  "linter": {
+    "enabled": true,
+    "rules": {
+      "preset": "recommended",
+      "correctness": {
+        "noUnusedVariables": "error",
+        "noUnusedImports": "error"
+      },
+      "suspicious": {
+        "noExplicitAny": "error",
+        "noDebugger": "error",
+        "noConsole": "warn"
+      },
+      "complexity": { "useLiteralKeys": "off" },
+      "style": { "useConst": "error" },
+      "nursery": { "noFloatingPromises": "error" }
+    }
+  },
+  "overrides": [
+    {
+      "includes": [
+        "**/*.test.ts",
+        "**/*.spec.ts",
+        "**/*.integration.ts",
+        "**/*.e2e.ts"
+      ],
+      "linter": {
+        "rules": {
+          "suspicious": { "noConsole": "off" },
+          "style": { "noNonNullAssertion": "off" }
+        }
+      }
+    }
+  ]
+}

package/presets/tsconfig.app.json

@@ -0,0 +1,19 @@
+{
+  "compilerOptions": {
+    "strict": true,
+    "noUncheckedIndexedAccess": true,
+    "forceConsistentCasingInFileNames": true,
+    "verbatimModuleSyntax": true,
+    "target": "ESNext",
+    "module": "ESNext",
+    "moduleResolution": "bundler",
+    "allowImportingTsExtensions": true,
+    "esModuleInterop": true,
+    "skipLibCheck": true,
+    "resolveJsonModule": true,
+    "lib": ["ESNext", "DOM"],
+    "types": ["bun-types"],
+    "jsx": "react-jsx",
+    "noEmit": true
+  }
+}

package/src/changes.json

@@ -1,4 +1,80 @@
 [
+  {
+    "version": "0.370.0",
+    "type": "improvement",
+    "title": "inspectEnv, renderEnvInspection and the dry-run mode parser",
+    "detail": "inspectEnv(schema, env, { sources }) checks each field on its own and returns its status (set, unset, missing, invalid) without the value; renderEnvInspection renders those rows as the boot table. parseDryRunEnvMode reads KUMIKO_DRY_RUN_ENV (1, true, human, json, pulumi, k8s, boot) and isDryRunEnvActive tells module-level code whether a dry run is running. DRY_RUN_ENV_VAR names the variable."
+  },
+  {
+    "version": "0.370.0",
+    "type": "improvement",
+    "title": "createEnvMasterKeyProvider defers the keyring check in a dry run",
+    "detail": "While KUMIKO_DRY_RUN_ENV is set, createEnvMasterKeyProvider no longer throws at construction on a missing or malformed keyring; the first key operation throws instead. Apps that build the provider at module load can run the boot dry run on an empty env. Outside a dry run the check still runs at construction, and the boot probe for encrypted entity fields forces it in both cases."
+  },
+  {
+    "version": "0.370.0",
+    "type": "improvement",
+    "title": "composeEnvSchema returns a typed schema",
+    "detail": "composeEnvSchema infers the merged shape from core, extend and every feature typed with featureWithEnvSchema(feature, schema), so parseEnv(composed.schema, …) returns typed values instead of a string record. optionalFeatures types those fields optional. A feature list widened to FeatureDefinition[] still compiles and contributes no keys to the type. extend may now repeat a feature's field when it is the same instance, so an app can spread a block such as stripeEnvSchema next to the mounted feature; a different field under that key still throws."
+  },
+  {
+    "version": "0.370.0",
+    "type": "breaking",
+    "title": "import-extensions codemod and tsconfig options for .ts import specifiers",
+    "detail": "The import-extensions codemod rewrites relative import and export specifiers that end in .js or .jsx to the .ts or .tsx file next to the importer (import, export from, import type, import() and mock.module). It leaves a specifier alone and reports it when no such file exists. The framework repo itself now imports with .ts endings; its published dist is unchanged. tsc writes .js into the dist, and the .d.ts files keep .ts specifiers, which TypeScript resolves to the sibling .d.ts. An app tsconfig needs allowImportingTsExtensions: true, because the framework packages now ship sources with .ts specifiers and tsc checks them (the preset @cosmicdrift/kumiko-framework/tsconfig.app.json sets it). A tsconfig that emits JS also needs rewriteRelativeImportExtensions (TypeScript 5.7 or newer); a project that only type-checks code from another project reference needs rewriteRelativeImportExtensions false plus emitDeclarationOnly. Consumer code with .js endings keeps running once the option is set.",
+    "migration": "Add `allowImportingTsExtensions: true` to the app tsconfig (or extend @cosmicdrift/kumiko-framework/tsconfig.app.json), then run the codemod (bun node_modules/@cosmicdrift/kumiko-framework/src/scripts/codemod/import-extensions.ts . --write); the guard import-extensions reports remaining .js specifiers.",
+    "codemod": "scripts/codemod/import-extensions.ts"
+  },
+  {
+    "version": "0.370.0",
+    "type": "improvement",
+    "title": "defineAppConfig in @cosmicdrift/kumiko-framework/config, plus biome and tsconfig presets for apps",
+    "detail": "kumiko.config.ts default-exports defineAppConfig({ features, prodFeatures?, client: { entries }, ports: { dev, e2e, infra? } }). defineAppConfig throws on ports outside 1..65535, a port claimed twice within the app, an empty client.entries list and entries that leave the app. allAppFeatures(config) returns features plus prodFeatures. New exports @cosmicdrift/kumiko-framework/biome (Biome 2.5.7 preset with vcs.useIgnoreFile false) and @cosmicdrift/kumiko-framework/tsconfig.app.json; an app's biome.json and tsconfig.json extend them and keep their own overrides next to extends."
+  },
+  {
+    "version": "0.370.0",
+    "type": "breaking",
+    "title": "createDbConnection takes only the options object, the bun-db subpath is gone",
+    "detail": "The positional createDbConnection(url, options) overload and the deprecated @cosmicdrift/kumiko-framework/bun-db subpath are removed. createDbConnection({ url, ...options }) and the query helpers come from @cosmicdrift/kumiko-framework/db. Removed from /bun-db: DeleteManyBatchedOptions, DeleteManyBatchedResult, IncrementCounterOptions, InnerJoinRow, InnerJoinSpec, InsertOnConflictDoNothingOptions, JoinColumnPair, JsonTextMatch, SelectOptions, TableInfo, UpsertOnConflictOptions, WhereObject, WhereOperator, WhereValue, aggregateWhere, asEntityTableMeta, asRawClient, countWhere, deleteMany, deleteManyBatched, extractTableInfo, fetchOne, incrementCounter, insertMany, insertOnConflictDoNothing, insertOne, instantToTimestamptzParam, isTimestamptzType, requireEntityTableMeta, runInSavepoint, runInSavepointIfSupported, runnerCanBeginTransaction, selectInnerJoin, selectMany, transaction, unsafeReadRetrying, updateMany, upsertByPk, upsertOnConflict.",
+    "migration": "Run bun kumiko-upgrade --apply. It rewrites positional calls to createDbConnection({ url, ... }) and moves bun-db imports to @cosmicdrift/kumiko-framework/db.",
+    "codemod": "scripts/codemod/db-factory.ts"
+  },
+  {
+    "version": "0.370.0",
+    "type": "breaking",
+    "title": "DB_PROVIDER other than postgres fails at boot",
+    "detail": "dbConnectionOptionsFromEnv used to ignore DB_PROVIDER, so DB_PROVIDER=bun booted postgres-js while the deployment still claimed Bun.SQL. Any value other than empty or \"postgres\" now throws with a hint to remove the variable.",
+    "migration": "Remove DB_PROVIDER from the environment, Helm values and Pulumi config. postgres-js is the only driver."
+  },
+  {
+    "version": "0.370.0",
+    "type": "breaking",
+    "title": "createTenantDb takes only the options object",
+    "detail": "The positional createTenantDb(db, tenantId, ...) overload is removed. createTenantDb({ db, tenantId, ... }) is the only form.",
+    "migration": "Run bun kumiko-upgrade --apply. It rewrites positional calls to createTenantDb({ db, tenantId, ... }).",
+    "codemod": "scripts/codemod/tenant-db-options.ts"
+  },
+  {
+    "version": "0.370.0",
+    "type": "breaking",
+    "title": "The test stack is no longer re-exported from the framework",
+    "detail": "The subpaths @cosmicdrift/kumiko-framework/stack, /testing, /testing/handler-context, /testing/real-providers and /testing/e2e-generator are removed, and so is the optional peer dependency on @cosmicdrift/kumiko-testing. The test stack and helpers live only in @cosmicdrift/kumiko-testing. Removed from /stack: CreateTestDbOptions, EventCollector, RequestHelper, TestDb, TestRedis, TestStack, TestStackOptions, TestUsers, createEventCollector, createRequestHelper, createTestDb, createTestRedis, createTestUser, drainEventConsumers, pushEntityProjectionTables, resetEventStore, setupTestStack, testTenantId, testUserId, unsafeCreateEntityTable, unsafeEnsureEntityTable, unsafePushTables. Removed from /testing and its subpaths: ClearableTable, E2EGeneratorOptions, E2ETestSpec, EditFillOp, LateBoundHolder, ManualClock, MutableMasterKeyProvider, ParsedSetCookie, REAL_PROVIDERS_ENV, RecordingProvider, bridgeStub, buildMultipartBody, captureClosedConnectionError, clearTables, createLateBoundHolder, createManualClock, createMutableMasterKeyProvider, createRecordingProvider, createTestEnvelopeCipher, createTestMasterKeyProvider, deleteRows, describeFileProviderContract, expectError, expectErrorIncludes, expectSuccess, generateE2ESpec, generateZodFixture, getSetCookieRaw, getSetCookieValue, getSetCookies, isRealProviderRun, patchFileInstanceofForBunTest, requireRealProviders, resetBlindIndexKeyForTests, resetEntityFieldEncryptionCacheForTests, resetEventPiiCatalogForTests, resetPiiSubjectKmsForTests, resetTestTables, rolesOf, seedRow, seedRows, sharedItemEntity, sharedItemTable, sharedUserEntity, sharedUserTable, sharedWidgetEntity, sharedWidgetTable, sleep, updateRows, waitFor, withBootValidatorFixture, withoutAmbientTemporal, zipWithEntries.",
+    "migration": "Run bun kumiko-upgrade --apply. It moves the imports to the matching @cosmicdrift/kumiko-testing subpaths. Add @cosmicdrift/kumiko-testing to devDependencies if it is not there yet.",
+    "codemod": "scripts/codemod/testing-move.ts"
+  },
+  {
+    "version": "0.370.0",
+    "type": "improvement",
+    "title": "createEventDef builds an EventDef without a registrar",
+    "detail": "createEventDef({ feature, name, schema, version?, piiFields? }) from @cosmicdrift/kumiko-framework/engine returns the same EventDef that r.defineEvent returns, including the PII field validation, so shared event definitions can live outside a defineFeature callback."
+  },
+  {
+    "version": "0.370.0",
+    "type": "breaking",
+    "title": "escapeHatch on a spread entity query handler requires SystemAdmin access",
+    "detail": "A query handler that spreads defineEntityListHandler or defineEntityDetailHandler and adds escapeHatch afterwards skipped the SystemAdmin-only access check that the factory option enforces. Registration now applies the same check and throws for any other access.",
+    "migration": "Pass escapeHatch as an option of defineEntityListHandler or defineEntityDetailHandler with access { roles: access.systemAdmin }, or write a plain r.queryHandler that does not reuse the entity convention handler when a tenant-scoped query needs a raw lookup."
+  },
   {
     "version": "0.369.0",
     "type": "fix",
@@ -52,8 +128,8 @@
     "version": "0.368.0",
     "type": "breaking",
     "title": "HandlerContext and AppContext no longer expose _userId and _handlerType",
-    "detail": "The dispatcher no longer sets _userId and _handlerType on the context of write handlers, query handlers and hooks. The caller identity is ctx.user.id. requireSecretsContext reads ctx._userId first and falls back to ctx.user.id, so passing a handler context to it keeps the same audit identity. Provider contexts (FileProviderContext, MailTransportContext, InboundMailContext) keep their own _userId. JobContext._userId is unchanged.",
-    "migration": "Replace ctx._userId with ctx.user.id in write/query handlers and hooks. Known sites: one file each in money-horse, offlot-app, phronexsis and kumiko-enterprise. _handlerType had no readers."
+    "detail": "The dispatcher no longer sets _userId and _handlerType on the context of write handlers, query handlers and hooks. The caller identity is ctx.user.id in handlers and result.event.createdBy in postSave and postDelete hooks. requireSecretsContext reads ctx._userId first and falls back to ctx.user.id, so passing a handler context to it keeps the same audit identity. Provider contexts (FileProviderContext, MailTransportContext, InboundMailContext) keep their own _userId. JobContext._userId is unchanged.",
+    "migration": "Replace ctx._userId with ctx.user.id in write and query handlers. postSave and postDelete hooks get an AppContext without user; read the caller there from result.event.createdBy. Known sites: one file each in money-horse, offlot-app, phronexsis and kumiko-enterprise. _handlerType had no readers."
   },
   {
     "version": "0.368.0",

package/src/scripts/codemod/README.md

@@ -100,3 +100,21 @@ bun node_modules/@cosmicdrift/kumiko-framework/src/scripts/codemod/tenant-db-opt
 
 Runs automatically via `bun kumiko-upgrade --apply`. Without a mode flag it writes, then formats the
 changed files with Biome. `--check` exits 1 while any rewritable or manual site is left.
+
+## import-extensions
+
+Relative imports name the TypeScript source file: `./foo.js` becomes `./foo.ts`, `./Comp.jsx`
+becomes `./Comp.tsx`. Covers `import`, `export ... from`, `import type`, `import()` and
+`mock.module`. A specifier is rewritten only when the target exists with the new extension next to
+the importer; otherwise it is reported as `manual` and left alone.
+
+The tsconfig that compiles the code needs `allowImportingTsExtensions` and
+`rewriteRelativeImportExtensions` (TypeScript 5.7 or newer) first.
+
+```bash
+bun node_modules/@cosmicdrift/kumiko-framework/src/scripts/codemod/import-extensions.ts <dir> [--check | --dry-run | --write] [--no-format]
+```
+
+Runs via `bun kumiko-upgrade --apply`. Without a mode flag it writes. `--check` exits 1 while any
+rewritable or manual site is left. The `import-extensions` guard (`kumiko check guards`) reports
+sites that are still on `.js`.

package/src/scripts/codemod/codemod-support.ts

@@ -1,7 +1,7 @@
 import { existsSync, readFileSync, writeFileSync } from "node:fs";
 import { dirname, join, relative, resolve } from "node:path";
 import { type ImportDeclaration, type ImportSpecifier, Node, type SourceFile } from "ts-morph";
-import { collectSourceFiles } from "./collect-source-files.js";
+import { collectSourceFiles } from "./collect-source-files.ts";
 
 export interface CodemodSite {
   readonly file: string;

package/src/scripts/codemod/db-factory.ts

@@ -19,7 +19,7 @@ import {
   type SourceFile,
   SyntaxKind,
 } from "ts-morph";
-import { collectSourceFiles } from "./collect-source-files.js";
+import { collectSourceFiles } from "./collect-source-files.ts";
 
 export interface DbFactorySite {
   readonly file: string;

package/src/scripts/codemod/feature-factory.ts

@@ -23,7 +23,7 @@ import {
   runCodemodCli,
   type SiteLists,
   sourceRelativeModule,
-} from "./codemod-support.js";
+} from "./codemod-support.ts";
 
 export interface FeatureFactoryEntry {
   readonly factory: string;