@cosmicdrift/kumiko-framework 0.369.0 → 0.371.0

package/dist/secrets/env-master-key-provider.js

@@ -3,6 +3,7 @@
 // without a maintenance window. See loadKeyring + resolveCurrentVersion at
 // the bottom for the env contract.
 import { createCipheriv, createDecipheriv, randomBytes } from "node:crypto";
+import { isDryRunEnvActive } from "../env/dry-run.js";
 import { InternalError } from "../errors/index.js";
 const ALGORITHM = "aes-256-gcm";
 const KEK_LENGTH = 32; // AES-256
@@ -10,21 +11,22 @@ const IV_LENGTH = 12;
 const TAG_LENGTH = 16;
 export function createEnvMasterKeyProvider(opts = {}) {
     const env = opts.env ?? process.env;
-    const keyring = loadKeyring(env);
-    const current = resolveCurrentVersion(env);
-    // --- Boot validation (after keyring + current are known) -------------
-    if (!keyring.has(current)) {
-        throw new InternalError({
-            message: `[secrets] currentVersion=${current} not present in keyring ` +
-                `(have versions: ${[...keyring.keys()].sort().join(",")}). ` +
-                `Check KUMIKO_SECRETS_MASTER_KEY_V${current} is set.`,
-        });
-    }
+    let loaded;
+    const keyringState = () => {
+        loaded ??= loadValidatedKeyring(env);
+        return loaded;
+    };
+    // Apps build this provider at module load, before runProdApp runs. A dry
+    // run inspects an env that may hold no key yet, so the check moves to the
+    // first key operation there; a real boot still fails here, at construction.
+    if (!isDryRunEnvActive(env) && !isDryRunEnvActive(process.env))
+        keyringState();
     // --- KEK-wrap / unwrap boilerplate (AES-256-GCM) ---------------------
     // The DEK is the plaintext here; we encrypt it with the KEK. Same
     // algorithm as the value encryption, just a different role.
     return {
         async wrapDek(dek) {
+            const { keyring, current } = keyringState();
             const kek = keyring.get(current);
             if (!kek) {
                 // Should never reach here — boot validation above guarantees the
@@ -47,6 +49,7 @@ export function createEnvMasterKeyProvider(opts = {}) {
             };
         },
         async unwrapDek(encryptedDek, kekVersion) {
+            const { keyring } = keyringState();
             const kek = keyring.get(kekVersion);
             if (!kek) {
                 throw new InternalError({
@@ -63,7 +66,7 @@ export function createEnvMasterKeyProvider(opts = {}) {
             return Buffer.concat([decipher.update(ciphertext), decipher.final()]);
         },
         currentVersion() {
-            return current;
+            return keyringState().current;
         },
         async isAvailable() {
             // Env-backed provider is always "available" once boot passed — the
@@ -73,6 +76,18 @@ export function createEnvMasterKeyProvider(opts = {}) {
         },
     };
 }
+function loadValidatedKeyring(env) {
+    const keyring = loadKeyring(env);
+    const current = resolveCurrentVersion(env);
+    if (!keyring.has(current)) {
+        throw new InternalError({
+            message: `[secrets] currentVersion=${current} not present in keyring ` +
+                `(have versions: ${[...keyring.keys()].sort().join(",")}). ` +
+                `Check KUMIKO_SECRETS_MASTER_KEY_V${current} is set.`,
+        });
+    }
+    return { keyring, current };
+}
 // ENV schema (Decision 1 — per-version variables):
 //   KUMIKO_SECRETS_MASTER_KEY_V1=<base64 32 bytes>
 //   KUMIKO_SECRETS_MASTER_KEY_V2=<base64 32 bytes>

package/dist/secrets/envelope-cipher.d.ts

@@ -1,6 +1,6 @@
 import type { EnvelopeCipher } from "@cosmicdrift/kumiko-types/envelope-cipher-types";
-import type { DekCache } from "./dek-cache.js";
-import type { MasterKeyProvider } from "./types.js";
+import type { DekCache } from "./dek-cache.ts";
+import type { MasterKeyProvider } from "./types.ts";
 export type { EnvelopeCipher } from "@cosmicdrift/kumiko-types/envelope-cipher-types";
 export type EnvelopeCipherOptions = {
     readonly dekCache?: DekCache;

package/dist/secrets/envelope.d.ts

@@ -1,3 +1,3 @@
-import type { Envelope, KeyScope, MasterKeyProvider } from "./types.js";
+import type { Envelope, KeyScope, MasterKeyProvider } from "./types.ts";
 export declare function encryptValue(plaintext: string, provider: MasterKeyProvider, scope?: KeyScope): Promise<Envelope>;
 export declare function decryptValue(envelope: Envelope, provider: MasterKeyProvider, scope?: KeyScope): Promise<string>;

package/dist/secrets/index.d.ts

@@ -1,9 +1,9 @@
-export { createDekCache, type DekCache, type DekCacheOptions, withDekCache } from "./dek-cache.js";
-export { derivePurposeSecret } from "./derive-purpose-secret.js";
-export { createEnvMasterKeyProvider, type EnvMasterKeyProviderOptions, type Keyring, } from "./env-master-key-provider.js";
-export { decryptValue, encryptValue } from "./envelope.js";
-export { createEnvelopeCipher, type EnvelopeCipher, type EnvelopeCipherOptions, } from "./envelope-cipher.js";
-export { assertNoSecretLeak } from "./leak-guard.js";
-export { rewrapDek } from "./rotation.js";
-export { decodeStoredEnvelope, encodeStoredEnvelope, isStoredEnvelope, type StoredEnvelope, } from "./stored-envelope.js";
-export { type ContainsSecret, createSecret, type Envelope, isSecret, type KeyScope, type MasterKeyProvider, type Secret, type SecretAuditContext, type SecretKeyRef, type SecretsContext, } from "./types.js";
+export { createDekCache, type DekCache, type DekCacheOptions, withDekCache } from "./dek-cache.ts";
+export { derivePurposeSecret } from "./derive-purpose-secret.ts";
+export { createEnvMasterKeyProvider, type EnvMasterKeyProviderOptions, type Keyring, } from "./env-master-key-provider.ts";
+export { decryptValue, encryptValue } from "./envelope.ts";
+export { createEnvelopeCipher, type EnvelopeCipher, type EnvelopeCipherOptions, } from "./envelope-cipher.ts";
+export { assertNoSecretLeak } from "./leak-guard.ts";
+export { rewrapDek } from "./rotation.ts";
+export { decodeStoredEnvelope, encodeStoredEnvelope, isStoredEnvelope, type StoredEnvelope, } from "./stored-envelope.ts";
+export { type ContainsSecret, createSecret, type Envelope, isSecret, type KeyScope, type MasterKeyProvider, type Secret, type SecretAuditContext, type SecretKeyRef, type SecretsContext, } from "./types.ts";

package/dist/secrets/rotation.d.ts

@@ -1,2 +1,2 @@
-import type { Envelope, MasterKeyProvider } from "./types.js";
+import type { Envelope, MasterKeyProvider } from "./types.ts";
 export declare function rewrapDek(envelope: Envelope, provider: MasterKeyProvider): Promise<Envelope>;

package/dist/secrets/stored-envelope.d.ts

@@ -1,4 +1,4 @@
-import type { Envelope } from "./types.js";
+import type { Envelope } from "./types.ts";
 export type StoredEnvelope = {
     readonly ciphertext: string;
     readonly iv: string;

package/dist/seeding/entity-seed.d.ts

@@ -1,4 +1,4 @@
-import { type SeedIfExists } from "./types.js";
+import { type SeedIfExists } from "./types.ts";
 export type EventStoreSeedExisting<TId extends string | number = string> = {
     readonly id: TId;
     readonly version: number;

package/dist/seeding/index.d.ts

@@ -1,3 +1,3 @@
-export { type EventStoreSeedExisting, type RunEventStoreSeedOptions, runEventStoreSeed, } from "./entity-seed.js";
-export { createTestUser, TestUsers, testTenantId, testUserId } from "./seed-users.js";
-export { DEFAULT_SEED_IF_EXISTS, type SeedIfExists } from "./types.js";
+export { type EventStoreSeedExisting, type RunEventStoreSeedOptions, runEventStoreSeed, } from "./entity-seed.ts";
+export { createTestUser, TestUsers, testTenantId, testUserId } from "./seed-users.ts";
+export { DEFAULT_SEED_IF_EXISTS, type SeedIfExists } from "./types.ts";

package/dist/seeding/seed-users.d.ts

@@ -1,4 +1,4 @@
-import type { SessionUser, TenantId } from "../engine/types/index.js";
+import type { SessionUser, TenantId } from "../engine/types/index.ts";
 export declare function testTenantId(n: number): TenantId;
 export declare function testUserId(n: number): string;
 export declare const TestUsers: {

package/dist/time/index.d.ts

@@ -1,6 +1,6 @@
-export { warnIfNonUtcServerTimeZone } from "./boot-tz-warning.js";
-export type { GeoAddress, GeoCoordinates, GeoTzProvider } from "./geo-tz.js";
-export { isValidIanaTimeZone } from "./iana.js";
-export { instantToLegacyDate, legacyDateToInstant } from "./legacy-date.js";
-export { ensureTemporalPolyfill, getTemporal } from "./polyfill.js";
-export { type Clock, createTzContext, createTzContextAsync, type LocatedTimestampJson, type TzContext, type TzContextOptions, } from "./tz-context.js";
+export { warnIfNonUtcServerTimeZone } from "./boot-tz-warning.ts";
+export type { GeoAddress, GeoCoordinates, GeoTzProvider } from "./geo-tz.ts";
+export { isValidIanaTimeZone } from "./iana.ts";
+export { instantToLegacyDate, legacyDateToInstant } from "./legacy-date.ts";
+export { ensureTemporalPolyfill, getTemporal } from "./polyfill.ts";
+export { type Clock, createTzContext, createTzContextAsync, type LocatedTimestampJson, type TzContext, type TzContextOptions, } from "./tz-context.ts";

package/dist/ui-types/app-schema.d.ts

@@ -1,8 +1,8 @@
-import type { TranslationKeys } from "../engine/types/config.js";
-import type { EntityDefinition } from "../engine/types/fields.js";
-import type { ContentCollectionDefinition, NavDefinition } from "../engine/types/nav.js";
-import type { ScreenDefinition } from "../engine/types/screen.js";
-import type { WorkspaceDefinition } from "../engine/types/workspace.js";
+import type { TranslationKeys } from "../engine/types/config.ts";
+import type { EntityDefinition } from "../engine/types/fields.ts";
+import type { ContentCollectionDefinition, NavDefinition } from "../engine/types/nav.ts";
+import type { ScreenDefinition } from "../engine/types/screen.ts";
+import type { WorkspaceDefinition } from "../engine/types/workspace.ts";
 export type FeatureSchema = {
     readonly featureName: string;
     readonly entities: Readonly<Record<string, EntityDefinition>>;

package/dist/ui-types/index.d.ts

@@ -1,24 +1,24 @@
 export { NO_WIDGET_FIELD_TYPES } from "@cosmicdrift/kumiko-types/fields";
-export type { DerivedCellRoundingTarget } from "../engine/embedded-derived.js";
-export { computeDerivedCellValue, roundDerivedCellValue } from "../engine/embedded-derived.js";
-export type { ParsedRefTarget } from "../engine/parse-ref-target.js";
-export { parseRefTarget } from "../engine/parse-ref-target.js";
-export type { FieldsOrGroupsSection, UnavailableSelectOption } from "../engine/screen-helpers.js";
-export { availableSelectOptions, evalFieldCondition, explicitListScreenId, findUnavailableSelectOptions, isExtensionEditSection, isFieldsEditSection, isFormatSpec, isRecordLocked, isUnchangedValue, isWriteFormEditSection, normalizeEditField, normalizeListColumn, resolveNavParentScreen, sectionFieldSpecs, } from "../engine/screen-helpers.js";
-export type { BooleanFieldDef, DateFieldDef, EmbeddedDerivedCellDef, EntityDefinition, FieldDefinition, FileFieldDef, FilesFieldDef, ImageFieldDef, ImagesFieldDef, NumberFieldDef, OptionsQueryPayload, OptionsQueryPayloadValue, SelectFieldDef, SelectOptionTone, TextFieldDef, } from "../engine/types/fields.js";
-export type { AccessRule, OpenToAllAccessRule, OpenToAllDeclaration, OpenToAllPersonalData, RoleAccessPersonalData, RoleAccessRule, } from "../engine/types/handlers.js";
-export { isOpenToAllGranted, isUiAccessGranted } from "../engine/types/handlers.js";
-export type { IconKey, NavDefinition, NavIconKey } from "../engine/types/nav.js";
-export type { ActionFormFooterAction, ActionFormRedirect, ActionFormScreenDefinition, ConfigEditScreenDefinition, CustomScreenDefinition, CustomScreenRoute, DashboardChartKind, DashboardChartMarkerKind, DashboardChartPanel, DashboardChartRangeOption, DashboardChartRanges, DashboardChartTone, DashboardCustomPanel, DashboardDateParam, DashboardFeedPanel, DashboardFilterDefinition, DashboardI18nText, DashboardListPanel, DashboardMoneyParam, DashboardPanelDefinition, DashboardPanelEmptyState, DashboardPanelGate, DashboardPanelQueryOptions, DashboardPanelSpan, DashboardPanelVisibility, DashboardProgressListPanel, DashboardScopeDefinition, DashboardScreenDefinition, DashboardScreenPanel, DashboardStatGroupPanel, DashboardStatPanel, DashboardText, DashboardTextParam, DashboardTimeRangeDefinition, DashboardValueFormat, EditExtensionSection, EditFieldPrefill, EditFieldSpec, EditFieldsSection, EditLayout, EditRelatedListSection, EditSectionSpec, EditWriteFormSection, EmbeddedListEditSpec, EntityEditAction, EntityEditActionPlacement, EntityEditScreenDefinition, EntityListExpandableRow, EntityListFacetConfig, EntityListFacetExtraOption, EntityListScreenDefinition, EntityWriteExcludedFields, FieldCondition, FieldIconKey, FieldRenderer, FormWidth, ListBadgeTone, ListColumnDisplay, ListColumnSpec, ListEmptyStateSpec, ListFacetSpec, ListSortSpec, MetricNavigate, MetricSpec, PlatformComponent, ProjectionDetailScreenDefinition, ProjectionListScreenDefinition, RecordHeaderSubtitlePart, RelatedListGroupBy, RelatedListRowTone, RelatedListToolbarAction, RowAction, RowActionDisplay, RowActionDrawer, RowActionMode, RowActionNavigate, RowActionWriteHandler, RowFieldExtractor, ScreenDefinition, ScreenFilter, ScreenFilterOp, ScreenSlots, SecretMintConfirmStep, SecretMintScreenDefinition, SecretReveal, SecretRevealField, SecretsEditScreenDefinition, SecretsEditSection, ToolbarAction, } from "../engine/types/screen.js";
-export { metricField, relatedListGroupHeaderLabel, relatedListGroupKey, } from "../engine/types/screen.js";
-export type { TargetRef } from "../engine/types/target-ref.js";
-export type { TreeAction, TreeNode, TreeNodeState } from "../engine/types/tree-node.js";
-export type { WorkspaceDefinition } from "../engine/types/workspace.js";
-export { ACTION_FORM_ENTITY, handlerFieldLabelKey, handlerTitleKey, PROJECTION_DETAIL_ENTITY, WRITE_FORM_SECTION_ENTITY, } from "../i18n/required-surface-keys.js";
-export type { AppSchema, FeatureSchema, QualifiedContentCollection, WorkspaceSchema, } from "./app-schema.js";
-export type { CardColumnRoles, CardRoleColumn } from "./card-column-roles.js";
-export { CARD_META_MAX, cardColumnRoles, cardFileDisplayKind } from "./card-column-roles.js";
-export { type Formality, formalLocaleTag } from "./formality.js";
-export type { ListRowMetaColumnType, ListRowMetaReference, ReferenceLookupSource, SystemReferenceLabel, } from "./list-row-meta.js";
-export { LIST_ROW_META_COLUMNS, LIST_ROW_META_REFERENCES, REFERENCE_LOOKUP_SOURCES, SYSTEM_REFERENCE_LABELS, } from "./list-row-meta.js";
-export { type PluralForms, resolveTranslationValue, type TranslationValue, translationValueOtherText, } from "./plural.js";
+export type { DerivedCellRoundingTarget } from "../engine/embedded-derived.ts";
+export { computeDerivedCellValue, roundDerivedCellValue } from "../engine/embedded-derived.ts";
+export type { ParsedRefTarget } from "../engine/parse-ref-target.ts";
+export { parseRefTarget } from "../engine/parse-ref-target.ts";
+export type { FieldsOrGroupsSection, UnavailableSelectOption } from "../engine/screen-helpers.ts";
+export { availableSelectOptions, evalFieldCondition, explicitListScreenId, findUnavailableSelectOptions, isExtensionEditSection, isFieldsEditSection, isFormatSpec, isRecordLocked, isUnchangedValue, isWriteFormEditSection, normalizeEditField, normalizeListColumn, resolveNavParentScreen, sectionFieldSpecs, } from "../engine/screen-helpers.ts";
+export type { BooleanFieldDef, DateFieldDef, EmbeddedDerivedCellDef, EntityDefinition, FieldDefinition, FileFieldDef, FilesFieldDef, ImageFieldDef, ImagesFieldDef, NumberFieldDef, OptionsQueryPayload, OptionsQueryPayloadValue, SelectFieldDef, SelectOptionTone, TextFieldDef, } from "../engine/types/fields.ts";
+export type { AccessRule, OpenToAllAccessRule, OpenToAllDeclaration, OpenToAllPersonalData, RoleAccessPersonalData, RoleAccessRule, } from "../engine/types/handlers.ts";
+export { isOpenToAllGranted, isUiAccessGranted } from "../engine/types/handlers.ts";
+export type { IconKey, NavDefinition, NavIconKey } from "../engine/types/nav.ts";
+export type { ActionFormFooterAction, ActionFormRedirect, ActionFormScreenDefinition, ConfigEditScreenDefinition, CustomScreenDefinition, CustomScreenRoute, DashboardChartKind, DashboardChartMarkerKind, DashboardChartPanel, DashboardChartRangeOption, DashboardChartRanges, DashboardChartTone, DashboardCustomPanel, DashboardDateParam, DashboardFeedPanel, DashboardFilterDefinition, DashboardI18nText, DashboardListPanel, DashboardMoneyParam, DashboardPanelDefinition, DashboardPanelEmptyState, DashboardPanelGate, DashboardPanelQueryOptions, DashboardPanelSpan, DashboardPanelVisibility, DashboardProgressListPanel, DashboardScopeDefinition, DashboardScreenDefinition, DashboardScreenPanel, DashboardStatGroupPanel, DashboardStatPanel, DashboardText, DashboardTextParam, DashboardTimeRangeDefinition, DashboardValueFormat, EditExtensionSection, EditFieldPrefill, EditFieldSpec, EditFieldsSection, EditLayout, EditRelatedListSection, EditSectionSpec, EditWriteFormSection, EmbeddedListEditSpec, EntityEditAction, EntityEditActionPlacement, EntityEditScreenDefinition, EntityListExpandableRow, EntityListFacetConfig, EntityListFacetExtraOption, EntityListScreenDefinition, EntityWriteExcludedFields, FieldCondition, FieldIconKey, FieldRenderer, FormWidth, ListBadgeTone, ListColumnDisplay, ListColumnSpec, ListEmptyStateSpec, ListFacetSpec, ListSortSpec, MetricNavigate, MetricSpec, PlatformComponent, ProjectionDetailScreenDefinition, ProjectionListScreenDefinition, RecordHeaderSubtitlePart, RelatedListGroupBy, RelatedListRowTone, RelatedListToolbarAction, RowAction, RowActionDisplay, RowActionDrawer, RowActionMode, RowActionNavigate, RowActionWriteHandler, RowFieldExtractor, ScreenDefinition, ScreenFilter, ScreenFilterOp, ScreenSlots, SecretMintConfirmStep, SecretMintScreenDefinition, SecretReveal, SecretRevealField, SecretsEditScreenDefinition, SecretsEditSection, ToolbarAction, } from "../engine/types/screen.ts";
+export { metricField, relatedListGroupHeaderLabel, relatedListGroupKey, } from "../engine/types/screen.ts";
+export type { TargetRef } from "../engine/types/target-ref.ts";
+export type { TreeAction, TreeNode, TreeNodeState } from "../engine/types/tree-node.ts";
+export type { WorkspaceDefinition } from "../engine/types/workspace.ts";
+export { ACTION_FORM_ENTITY, handlerFieldLabelKey, handlerTitleKey, PROJECTION_DETAIL_ENTITY, WRITE_FORM_SECTION_ENTITY, } from "../i18n/required-surface-keys.ts";
+export type { AppSchema, FeatureSchema, QualifiedContentCollection, WorkspaceSchema, } from "./app-schema.ts";
+export type { CardColumnRoles, CardRoleColumn } from "./card-column-roles.ts";
+export { CARD_META_MAX, cardColumnRoles, cardFileDisplayKind } from "./card-column-roles.ts";
+export { type Formality, formalLocaleTag } from "./formality.ts";
+export type { ListRowMetaColumnType, ListRowMetaReference, ReferenceLookupSource, SystemReferenceLabel, } from "./list-row-meta.ts";
+export { LIST_ROW_META_COLUMNS, LIST_ROW_META_REFERENCES, REFERENCE_LOOKUP_SOURCES, SYSTEM_REFERENCE_LABELS, } from "./list-row-meta.ts";
+export { type PluralForms, resolveTranslationValue, type TranslationValue, translationValueOtherText, } from "./plural.ts";

package/dist/upgrade-cli.js

@@ -284,6 +284,18 @@ async function runCodemodScript(scriptPath, targetDir, repoRoot, dryRun) {
     ]);
     return { ok: exitCode === 0, output: `${stdout}${stderr}`.trim() };
 }
+// One codemod can back the breaking entries of many features in the same release
+// (each feature's changelog names its own removed export); it runs once per version.
+function uniqueCodemodRunsPerVersion(entries) {
+    const seenRuns = new Set();
+    return entries.filter((e) => {
+        const runKey = `${e.version}\0${e.codemod}`;
+        if (seenRuns.has(runKey))
+            return false;
+        seenRuns.add(runKey);
+        return true;
+    });
+}
 function hasCodemod(e) {
     return typeof e.codemod === "string" && e.codemod.length > 0;
 }
@@ -476,9 +488,7 @@ markerVersion, previous) {
     const breaking = pending.filter((e) => e.type === "breaking");
     // A codemod is worth running whatever the entry's type: an improvement that
     // moves a module ships one too, and skipping it leaves the deprecated path in place.
-    const codemodEntries = pending
-        .filter(hasCodemod)
-        .sort((a, b) => compareVersions(a.version, b.version));
+    const codemodEntries = uniqueCodemodRunsPerVersion(pending.filter(hasCodemod).sort((a, b) => compareVersions(a.version, b.version)));
     const manualEntries = breaking.filter(needsManualMigration);
     for (const e of manualEntries) {
         out.log(hasCodemod(e)

package/dist/utils/index.d.ts

@@ -1,9 +1,9 @@
-export { assertUnreachable } from "./assert.js";
-export { toSnakeCase } from "./case.js";
-export { compareByCodepoint } from "./compare.js";
-export { readPositiveIntEnv } from "./env-parse.js";
-export { generateDeterministicId, generateId } from "./ids.js";
-export { isPlainObject } from "./is-plain-object.js";
-export { parseStringArrayJson } from "./parse-string-array-json.js";
-export { parseJsonOrThrow, parseJsonSafe, stringifyJson } from "./safe-json.js";
-export { parseRoles } from "./serialization.js";
+export { assertUnreachable } from "./assert.ts";
+export { toSnakeCase } from "./case.ts";
+export { compareByCodepoint } from "./compare.ts";
+export { readPositiveIntEnv } from "./env-parse.ts";
+export { generateDeterministicId, generateId } from "./ids.ts";
+export { isPlainObject } from "./is-plain-object.ts";
+export { parseStringArrayJson } from "./parse-string-array-json.ts";
+export { parseJsonOrThrow, parseJsonSafe, stringifyJson } from "./safe-json.ts";
+export { parseRoles } from "./serialization.ts";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-framework",
-  "version": "0.369.0",
+  "version": "0.371.0",
   "description": "Framework core — engine, pipeline, API, DB, and every other bit that makes Kumiko go.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -26,11 +26,7 @@
   "kumiko": {
     "runtime": "runtime",
     "bunOnlyExports": [
-      "./engine/codemod",
-      "./stack",
-      "./testing",
-      "./testing/e2e-generator",
-      "./testing/real-providers"
+      "./engine/codemod"
     ]
   },
   "exports": {
@@ -38,6 +34,12 @@
       "types": "./dist/compliance/index.d.ts",
       "default": "./dist/compliance/index.js"
     },
+    "./config": {
+      "types": "./dist/config/index.d.ts",
+      "default": "./dist/config/index.js"
+    },
+    "./biome": "./presets/biome-app.json",
+    "./tsconfig.app.json": "./presets/tsconfig.app.json",
     "./es-ops": {
       "types": "./dist/es-ops/index.d.ts",
       "default": "./dist/es-ops/index.js"
@@ -66,10 +68,6 @@
       "types": "./dist/errors/index.d.ts",
       "default": "./dist/errors/index.js"
     },
-    "./bun-db": {
-      "types": "./dist/db/bun-db-deprecated.d.ts",
-      "default": "./dist/db/bun-db-deprecated.js"
-    },
     "./db": {
       "types": "./dist/db/index.d.ts",
       "default": "./dist/db/index.js"
@@ -174,22 +172,6 @@
       "types": "./dist/arg-parser.d.ts",
       "default": "./dist/arg-parser.js"
     },
-    "./stack": {
-      "types": "./dist/stack/index.d.ts",
-      "default": "./dist/stack/index.js"
-    },
-    "./testing": {
-      "types": "./dist/testing/index.d.ts",
-      "default": "./dist/testing/index.js"
-    },
-    "./testing/handler-context": {
-      "types": "./dist/testing/handler-context.d.ts",
-      "default": "./dist/testing/handler-context.js"
-    },
-    "./testing/real-providers": {
-      "types": "./dist/testing/real-providers.d.ts",
-      "default": "./dist/testing/real-providers.js"
-    },
     "./internal/request-context": {
       "types": "./dist/api/request-context.d.ts",
       "default": "./dist/api/request-context.js"
@@ -202,10 +184,6 @@
       "types": "./dist/internal/testing.d.ts",
       "default": "./dist/internal/testing.js"
     },
-    "./testing/e2e-generator": {
-      "types": "./dist/testing/e2e-generator.d.ts",
-      "default": "./dist/testing/e2e-generator.js"
-    },
     "./time": {
       "types": "./dist/time/index.d.ts",
       "default": "./dist/time/index.js"
@@ -221,8 +199,8 @@
     "./package.json": "./package.json"
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-http": "0.369.0",
-    "@cosmicdrift/kumiko-types": "0.369.0",
+    "@cosmicdrift/kumiko-http": "0.371.0",
+    "@cosmicdrift/kumiko-types": "0.371.0",
     "bullmq": "^5.76.7",
     "bun-types": "^1.3.13",
     "hono": "^4.13.1",
@@ -238,19 +216,11 @@
     "zod": "^4.4.3"
   },
   "devDependencies": {
-    "@cosmicdrift/kumiko-dispatcher-live": "0.369.0",
-    "@cosmicdrift/kumiko-testing": "0.369.0",
+    "@cosmicdrift/kumiko-dispatcher-live": "0.371.0",
+    "@cosmicdrift/kumiko-testing": "0.371.0",
     "bun-types": "^1.3.13",
     "pino-pretty": "^13.1.3"
   },
-  "peerDependencies": {
-    "@cosmicdrift/kumiko-testing": ">=0.366.0 <1.0.0"
-  },
-  "peerDependenciesMeta": {
-    "@cosmicdrift/kumiko-testing": {
-      "optional": true
-    }
-  },
   "publishConfig": {
     "registry": "https://registry.npmjs.org",
     "access": "public",
@@ -259,6 +229,12 @@
         "types": "./dist/compliance/index.d.ts",
         "default": "./dist/compliance/index.js"
       },
+      "./config": {
+        "types": "./dist/config/index.d.ts",
+        "default": "./dist/config/index.js"
+      },
+      "./biome": "./presets/biome-app.json",
+      "./tsconfig.app.json": "./presets/tsconfig.app.json",
       "./es-ops": {
         "types": "./dist/es-ops/index.d.ts",
         "default": "./dist/es-ops/index.js"
@@ -287,10 +263,6 @@
         "types": "./dist/errors/index.d.ts",
         "default": "./dist/errors/index.js"
       },
-      "./bun-db": {
-        "types": "./dist/db/bun-db-deprecated.d.ts",
-        "default": "./dist/db/bun-db-deprecated.js"
-      },
       "./db": {
         "types": "./dist/db/index.d.ts",
         "default": "./dist/db/index.js"
@@ -395,22 +367,6 @@
         "types": "./dist/arg-parser.d.ts",
         "default": "./dist/arg-parser.js"
       },
-      "./stack": {
-        "types": "./dist/stack/index.d.ts",
-        "default": "./dist/stack/index.js"
-      },
-      "./testing": {
-        "types": "./dist/testing/index.d.ts",
-        "default": "./dist/testing/index.js"
-      },
-      "./testing/handler-context": {
-        "types": "./dist/testing/handler-context.d.ts",
-        "default": "./dist/testing/handler-context.js"
-      },
-      "./testing/real-providers": {
-        "types": "./dist/testing/real-providers.d.ts",
-        "default": "./dist/testing/real-providers.js"
-      },
       "./internal/request-context": {
         "types": "./dist/api/request-context.d.ts",
         "default": "./dist/api/request-context.js"
@@ -423,10 +379,6 @@
         "types": "./dist/internal/testing.d.ts",
         "default": "./dist/internal/testing.js"
       },
-      "./testing/e2e-generator": {
-        "types": "./dist/testing/e2e-generator.d.ts",
-        "default": "./dist/testing/e2e-generator.js"
-      },
       "./time": {
         "types": "./dist/time/index.d.ts",
         "default": "./dist/time/index.js"
@@ -444,6 +396,7 @@
   },
   "files": [
     "dist",
+    "presets",
     "src/changes.json",
     "src/scripts/codemod",
     "README.md",

package/presets/biome-app.json

@@ -0,0 +1,80 @@
+{
+  "$schema": "https://biomejs.dev/schemas/2.5.7/schema.json",
+  "vcs": {
+    "enabled": true,
+    "clientKind": "git",
+    "useIgnoreFile": false,
+    "defaultBranch": "main"
+  },
+  "files": {
+    "includes": [
+      "src/**",
+      "bin/**",
+      "kumiko/**",
+      "e2e/**",
+      "scripts/**",
+      "kumiko.config.ts",
+      "playwright.config.ts",
+      "!**/node_modules",
+      "!**/dist",
+      "!**/dist-server",
+      "!kumiko/migrations",
+      "!test-results",
+      "!playwright-report"
+    ]
+  },
+  "formatter": {
+    "enabled": true,
+    "indentStyle": "space",
+    "indentWidth": 2,
+    "lineWidth": 100,
+    "lineEnding": "lf"
+  },
+  "css": {
+    "parser": { "cssModules": false, "tailwindDirectives": true }
+  },
+  "javascript": {
+    "formatter": {
+      "quoteStyle": "double",
+      "jsxQuoteStyle": "double",
+      "semicolons": "always",
+      "trailingCommas": "all",
+      "arrowParentheses": "always"
+    }
+  },
+  "json": { "formatter": { "indentWidth": 2, "lineWidth": 80 } },
+  "linter": {
+    "enabled": true,
+    "rules": {
+      "preset": "recommended",
+      "correctness": {
+        "noUnusedVariables": "error",
+        "noUnusedImports": "error"
+      },
+      "suspicious": {
+        "noExplicitAny": "error",
+        "noDebugger": "error",
+        "noConsole": "warn"
+      },
+      "complexity": { "useLiteralKeys": "off" },
+      "style": { "useConst": "error" },
+      "nursery": { "noFloatingPromises": "error" }
+    }
+  },
+  "overrides": [
+    {
+      "includes": [
+        "**/*.test.ts",
+        "**/*.spec.ts",
+        "**/*.integration.ts",
+        "**/*.e2e.ts"
+      ],
+      "linter": {
+        "rules": {
+          "suspicious": { "noConsole": "off" },
+          "style": { "noNonNullAssertion": "off" }
+        }
+      }
+    }
+  ]
+}

package/presets/tsconfig.app.json

@@ -0,0 +1,19 @@
+{
+  "compilerOptions": {
+    "strict": true,
+    "noUncheckedIndexedAccess": true,
+    "forceConsistentCasingInFileNames": true,
+    "verbatimModuleSyntax": true,
+    "target": "ESNext",
+    "module": "ESNext",
+    "moduleResolution": "bundler",
+    "allowImportingTsExtensions": true,
+    "esModuleInterop": true,
+    "skipLibCheck": true,
+    "resolveJsonModule": true,
+    "lib": ["ESNext", "DOM"],
+    "types": ["bun-types"],
+    "jsx": "react-jsx",
+    "noEmit": true
+  }
+}