@cosmicdrift/kumiko-framework 0.386.0 → 0.387.0

package/dist/time/iana.js

@@ -1,13 +1,13 @@
-// IANA-Zonenname-Validierung. Intl.supportedValuesOf("timeZone") liefert nur
-// KANONISCHE Namen — gültige Aliase wie "US/Pacific", "GMT", "Etc/UTC" fehlen
-// darin, obwohl Intl.DateTimeFormat, Temporal und ctx.tz.parse sie alle
-// klaglos akzeptieren. Intl.DateTimeFormat selbst ist aber case-INSENSITIVE
-// ("europe/berlin" resolved klaglos zu "Europe/Berlin") — ein reines
-// try/catch würde also Tippfehler in der Groß-/Kleinschreibung durchlassen.
-// Der exakte Vergleich mit resolvedOptions().timeZone schließt das: ein
-// gültiger kanonischer Name ODER Alias resolved IMMER zu sich selbst
-// (empirisch verifiziert für US/Pacific, GMT, Etc/UTC), ein falsch-gecasteter
-// String resolved zur kanonischen Form und matcht damit nicht mehr exakt.
+// IANA time zone name validation. Intl.supportedValuesOf("timeZone") returns only
+// CANONICAL names — valid aliases such as "US/Pacific", "GMT", and "Etc/UTC" are
+// missing, even though Intl.DateTimeFormat, Temporal, and ctx.tz.parse all
+// accept them without issue. Intl.DateTimeFormat itself is case-INSENSITIVE
+// ("europe/berlin" resolves to "Europe/Berlin") — a simple try/catch would
+// therefore allow capitalization errors through.
+// The exact comparison with resolvedOptions().timeZone prevents this: a valid
+// canonical name OR alias ALWAYS resolves to itself (verified empirically for
+// US/Pacific, GMT, and Etc/UTC), while a incorrectly cased string resolves to
+// the canonical form and no longer matches exactly.
 export function isValidIanaTimeZone(value) {
     try {
         return (new Intl.DateTimeFormat(undefined, { timeZone: value }).resolvedOptions().timeZone === value);

package/dist/time/index.js

@@ -1,13 +1,13 @@
-// Time-Modul: Temporal-Polyfill + ctx.tz Helper.
+// Time module: Temporal polyfill + ctx.tz helper.
 //
-// Aktueller Stand (Iteration 1-4 von Gap-03 in samples/beammycar/MIGRATION.md):
-//   - ensureTemporalPolyfill: installiert Temporal global wenn nötig
-//   - getTemporal: type-safer Zugriff auf globalThis.Temporal
-//   - createTzContext: ctx.tz Factory mit now/today/parse/toLocatedJson/...
-//   - LocatedTimestampJson: API-Boundary-Form { at, tz }
-//   - isValidIanaTimeZone: IANA-Zonennamen-Validierung (type:"tz"-Felder)
-//   - warnIfNonUtcServerTimeZone: Boot-Warnung bei nicht-UTC Prozess-TZ
-//   - GeoTzProvider: optionaler Geo→Zone-Adapter (ctx.tz.fromCoordinates/fromAddress)
+// Provides:
+//   - ensureTemporalPolyfill: installs Temporal globally when needed
+//   - getTemporal: type-safe access to globalThis.Temporal
+//   - createTzContext: ctx.tz factory with now/today/parse/toLocatedJson/...
+//   - LocatedTimestampJson: API-boundary form { at, tz }
+//   - isValidIanaTimeZone: IANA time-zone name validation (type:"tz" fields)
+//   - warnIfNonUtcServerTimeZone: boot warning for a non-UTC process time zone
+//   - GeoTzProvider: optional geo-to-zone adapter (ctx.tz.fromCoordinates/fromAddress)
 export { warnIfNonUtcServerTimeZone } from "./boot-tz-warning.js";
 export { isValidIanaTimeZone } from "./iana.js";
 export { instantToLegacyDate, legacyDateToInstant } from "./legacy-date.js";

package/dist/time/legacy-date.d.ts

@@ -1,5 +1,5 @@
 import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 export declare function instantToLegacyDate(instant: Temporal.Instant): Date;
-/** Gegenrichtung: Date aus einer Fremd-Lib (imapflow INTERNALDATE,
- *  mailparser Date-Header) → Temporal.Instant. */
+/** Converts dates from foreign libraries (imapflow INTERNALDATE,
+ *  mailparser Date headers) to Temporal.Instant. */
 export declare function legacyDateToInstant(date: Date): Temporal.Instant;

package/dist/time/legacy-date.js

@@ -1,15 +1,13 @@
 import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
-// Temporal→Date-Bridge für Lib-APIs die JS-Date verlangen (imapflow
-// search({since}), nodemailer-Header, ...). Gegenstück zur
-// dateToInstant-Richtung der DB-/Event-Store-Boundaries: Feature-Code
-// rechnet in Temporal, konvertiert erst am Aufruf der Fremd-API — der
-// no-date-api-Guard bleibt für Feature-Code scharf, die Konstruktion
-// lebt hier im allowlisteten Time-Layer.
+// Bridge to libraries that require JS `Date` (imapflow
+// search({since}), nodemailer headers, ...). Feature code uses Temporal and
+// converts only at foreign-API boundaries, keeping the no-date-api guard
+// effective outside this allowlisted time layer.
 export function instantToLegacyDate(instant) {
     return new Date(instant.epochMilliseconds);
 }
-/** Gegenrichtung: Date aus einer Fremd-Lib (imapflow INTERNALDATE,
- *  mailparser Date-Header) → Temporal.Instant. */
+/** Converts dates from foreign libraries (imapflow INTERNALDATE,
+ *  mailparser Date headers) to Temporal.Instant. */
 export function legacyDateToInstant(date) {
     return Temporal.Instant.fromEpochMilliseconds(date.getTime());
 }

package/dist/time/polyfill.js

@@ -8,7 +8,7 @@
 //
 // Idempotent: if `globalThis.Temporal` already exists the call is a no-op.
 // The check is the live global — not a sticky module flag — so tests that
-// delete the ambient global (fw#1550) still get it back on the next call.
+// delete the ambient global still get it back on the next call.
 // Re-install assigns the already-resolved module value: re-importing
 // `temporal-polyfill` here would put a polyfill instance on the global while
 // the rest of the code uses the native classes (instanceof mismatch).

package/dist/time/tz-context.d.ts

@@ -3,7 +3,7 @@ export type { Clock, LocatedTimestampJson, TzContext, TzContextOptions, } from "
 /**
  * Factory: creates a TzContext for the current request.
  * Uses the kumiko-types Temporal module export (not globalThis.Temporal) so
- * buildHandlerContext stays ambient-free (fw#1525/#1550).
+ * buildHandlerContext stays ambient-free.
  */
 export declare function createTzContext(options?: TzContextOptions): TzContext;
 /**

package/dist/time/tz-context.js

@@ -25,7 +25,7 @@ const SYSTEM_CLOCK = {
 /**
  * Factory: creates a TzContext for the current request.
  * Uses the kumiko-types Temporal module export (not globalThis.Temporal) so
- * buildHandlerContext stays ambient-free (fw#1525/#1550).
+ * buildHandlerContext stays ambient-free.
  */
 export function createTzContext(options = {}) {
     const tenant = options.tenant ?? "UTC";

package/dist/ui-types/app-schema.js

@@ -1,9 +1,9 @@
-// Client-safe Schema-Types. Wohnen in framework/ui-types statt renderer
-// damit der Server (createKumikoServer / buildAppSchema) sie produzieren
-// kann ohne renderer als Dependency zu ziehen. Renderer + Renderer-Web
-// re-exporten dieselben Symbole — Konsumenten merken den Umzug nicht.
+// Client-safe schema types. Live in framework/ui-types rather than renderer
+// so the server (createKumikoServer / buildAppSchema) can produce them
+// without pulling in renderer as a dependency. Renderer and Renderer-Web
+// re-export the same symbols, so consumers do not notice the move.
 //
-// Pattern: Types fließen "downstream" (framework → renderer → renderer-
-// web), Runtime-Helpers (toAppSchema, isAppSchema) bleiben renderer-side
-// weil das die Layer ist die mit den AppSchemas zur Laufzeit arbeitet.
+// Pattern: types flow "downstream" (framework → renderer → renderer-
+// web); runtime helpers (toAppSchema, isAppSchema) remain renderer-side
+// because that is the layer that works with AppSchemas at runtime.
 export {};

package/dist/ui-types/list-row-meta.js

@@ -39,13 +39,13 @@ export const LIST_ROW_META_REFERENCES = {
 // user:user — the convention QN is a SystemAdmin cross-tenant roster whose
 // `tenants` join must not reach a TenantAdmin, so it stays SystemAdmin-only and
 // the label lookup goes through the member directory instead: own-tenant
-// members for an admin, every user for a SystemAdmin (fw#3107).
+// members for an admin, every user for a SystemAdmin.
 //
 // tenant:tenant — the convention QN, `tenant:query:tenant:list`, is a
 // SystemAdmin-only entity-list handler, so a TenantAdmin got a 403 and every
 // tenant cell fell back to the raw UUID. The label lookup goes through the
 // tenant directory instead: the caller's own tenant for an admin, every
-// tenant for a SystemAdmin (fw#3142).
+// tenant for a SystemAdmin.
 export const REFERENCE_LOOKUP_SOURCES = {
     "user:user": { queryQn: "tenant:query:member-directory", labelKey: "label" },
     "tenant:tenant": { queryQn: "tenant:query:tenant-directory", labelKey: "label" },
@@ -56,10 +56,10 @@ export const REFERENCE_LOOKUP_SOURCES = {
 // otherwise. Keyed by `${refFeature}:${refEntity}` so useReferenceLookup can
 // consult this generically instead of any screen/hook hardcoding an entity
 // name. Central so the label applies to every screen that references this
-// entity, not just delivery-log (fw#2662).
+// entity, not just delivery-log.
 export const SYSTEM_REFERENCE_LABELS = {
     "tenant:tenant": { id: SYSTEM_TENANT_ID, labelKey: "kumiko.reference.system-tenant" },
-    // createdBy on a system write (fw#3103) — SYSTEM_USER_ID is an alias for
+    // createdBy on a system write — SYSTEM_USER_ID is an alias for
     // "no human caller", so read_users never holds a matching row.
     "user:user": {
         id: SYSTEM_USER_ID,

package/dist/upgrade-cli.js

@@ -1,6 +1,7 @@
 import { createHash } from "node:crypto";
 import { existsSync, mkdirSync, readdirSync, readFileSync, realpathSync, statSync, writeFileSync, } from "node:fs";
 import { dirname, isAbsolute, join, relative, resolve } from "node:path";
+import { propertyOf } from "@cosmicdrift/kumiko-types/type-guards";
 import { getFlag, getStringFlag, parseArgs } from "./arg-parser.js";
 import { compareVersions, filterEntriesAfter, parseFeatureChangelog, sortEntries, } from "./engine/index.js";
 import { ensureTemporalPolyfill } from "./time/index.js";
@@ -96,7 +97,7 @@ export function findFeatureChangelogFiles(featuresDir) {
         // Layout is detected per-package, not guessed from a naming convention:
         // enterprise packages keep changes.json under src/, framework's
         // bundled-features keep it flat. A name-prefix heuristic (e.g. "ai-*")
-        // silently drops packages that don't match it (fw#1605).
+        // silently drops packages that don't match it.
         const srcLayout = join(featuresDir, name, "src", "changes.json");
         const flatLayout = join(featuresDir, name, "changes.json");
         const changelogPath = existsSync(srcLayout) ? srcLayout : flatLayout;
@@ -167,7 +168,7 @@ export function findFeaturesDirs(cwd) {
     // Enterprise repo: packages/<name>/src/changes.json or packages/<name>/changes.json.
     // Detected by presence of changes.json, not a package-name prefix — a
     // prefix heuristic silently stops matching once packages are renamed or a
-    // differently-named package is added (fw#1605). Skipped inside the
+    // differently-named package is added. Skipped inside the
     // framework repo itself (packages/framework present): every package's own
     // changes.json is already collected via findPackageChangelogFiles, and
     // would otherwise get double-counted as one here.
@@ -202,7 +203,7 @@ export function findFeaturesDirs(cwd) {
 // Consumer-facing codemod scripts ship inside the published
 // @cosmicdrift/kumiko-framework package (src/scripts/codemod), not at the
 // git repo root — only the installed package path exists in a consumer's
-// node_modules after a plain npm/bun install (fw#2301).
+// node_modules after a plain npm/bun install.
 export function findCodemodScriptsRoot(repoRoot) {
     const local = join(repoRoot, "packages/framework/src");
     if (existsSync(join(local, CODEMOD_SUBDIR))) {
@@ -213,7 +214,7 @@ export function findCodemodScriptsRoot(repoRoot) {
         if (existsSync(pkgPath)) {
             try {
                 const pkg = JSON.parse(readFileSync(pkgPath, "utf8"));
-                if (pkg.name === "@cosmicdrift/kumiko-framework")
+                if (propertyOf(pkg, "name") === "@cosmicdrift/kumiko-framework")
                     return local;
                 // wrong name → fall through
             }
@@ -242,7 +243,7 @@ export function findCodemodScriptsRoot(repoRoot) {
 // absolute paths, symlinks pointing outward) or that isn't a real .ts file.
 // First arg is the consumer repo root (same as findCodemodScriptsRoot) —
 // not the scripts root — so out-of-tree callers keep compiling against the
-// public upgrade-cli subpath without silently resolving to null (fw#2341).
+// public upgrade-cli subpath without silently resolving to null.
 function resolveCodemodScriptAt(codemodScriptsRoot, codemodField) {
     if (!codemodField)
         return null;
@@ -417,7 +418,7 @@ function parseStoredMarker(raw) {
         resolvedManual: dedupeManualById(resolvedManual),
     };
 }
-// A missing marker is a bootstrap app that never ran `--apply` (fw#2299); an
+// A missing marker is a bootstrap app that never ran `--apply`; an
 // existing but unreadable one must not silently fall back to the installed
 // version, or a bare `--apply` would skip every codemod in between.
 function readMarker(targetDir) {
@@ -512,7 +513,7 @@ function writePartialMarker(out, targetDir, pending, manualEntries, failedVersio
 // failure; codemods that already ran are kept in a partial marker. Writes the
 // marker whenever dryRun is false —
 // even with zero pending entries, so an already-current app still gets a
-// bootstrap marker recording its installed version (fw#2299).
+// bootstrap marker recording its installed version.
 // kumiko-lint-ignore complexity-budget sequential codemod runner with zero-pending bootstrap marker
 async function applyCodemods(out, pending, repoRoot, targetDir, dryRun, 
 // Installed version for the zero-pending bootstrap marker — never a
@@ -751,8 +752,8 @@ export async function runUpgradeCli(argv, cwd, out, options) {
     const installedVersion = readCurrentVersion(cwd);
     // Filter baseline: explicit --from wins, otherwise the marker recorded
     // under targetDir (what was last actually applied there), falling back to
-    // the installed version only when no marker exists yet (bootstrap,
-    // fw#2299). Baselining on installedVersion here would silently treat every
+    // the installed version only when no marker exists yet (bootstrap).
+    // Baselining on installedVersion here would silently treat every
     // changelog entry up to the installed version as already handled, even
     // when the marker says otherwise — a bare `--apply` would then always
     // report "Nothing new" and bootstrap the marker onto the installed

package/dist/utils/compare.js

@@ -1,7 +1,7 @@
 // Locale-independent string ordering for sorts that feed byte-exact serialized
 // artifacts (manifest JSON, snapshot.json, generated migration SQL). Unlike
 // String.localeCompare — whose order depends on the runner's ICU locale and so
-// can drift between a macOS dev box and Linux CI (#330) — this compares by
+// can drift between a macOS dev box and Linux CI — this compares by
 // UTF-16 code unit, which is stable across machines and, for the BMP identifier
 // strings we sort here (table / column / feature / qualified names), equals
 // codepoint order.

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@cosmicdrift/kumiko-framework",
-  "version": "0.386.0",
+  "version": "0.387.0",
   "description": "Framework core — engine, pipeline, API, DB, and every other bit that makes Kumiko go.",
-  "license": "BUSL-1.1",
+  "license": "MIT",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
   "repository": {
     "type": "git",
@@ -199,7 +199,7 @@
     "./package.json": "./package.json"
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-types": "0.386.0",
+    "@cosmicdrift/kumiko-types": "0.387.0",
     "bullmq": "^5.76.7",
     "bun-types": "^1.3.13",
     "hono": "^4.13.1",
@@ -215,7 +215,7 @@
     "zod": "^4.4.3"
   },
   "devDependencies": {
-    "@cosmicdrift/kumiko-testing": "0.386.0",
+    "@cosmicdrift/kumiko-testing": "0.387.0",
     "bun-types": "^1.3.13",
     "pino-pretty": "^13.1.3"
   },

package/src/changes.json

@@ -1,4 +1,52 @@
 [
+  {
+    "version": "0.387.0",
+    "type": "improvement",
+    "title": "English source comments without issue references in bundled-features",
+    "detail": "Comments in bundled-features are translated to English, and issue numbers and planning labels are removed while the reason they stood for stays. Pure paraphrases of the code are dropped. No code changes."
+  },
+  {
+    "version": "0.387.0",
+    "type": "improvement",
+    "title": "English source comments without issue references in the framework package",
+    "detail": "Comments in packages/framework are translated to English, and issue numbers and planning labels are removed while the reason they stood for stays. Pure paraphrases of the code are dropped. The ZIP entry path doc now states the UTF-8 flag the writer actually sets. No code changes."
+  },
+  {
+    "version": "0.387.0",
+    "type": "improvement",
+    "title": "English source comments without issue references in the renderer",
+    "detail": "Comments in the renderer are translated to English, and issue numbers and planning labels are removed while the reason they stood for stays. Pure paraphrases of the code are dropped. No code changes; the generated widget reference (agents/widgets.md) follows the translated JSDoc."
+  },
+  {
+    "version": "0.387.0",
+    "type": "improvement",
+    "title": "English source comments without issue references in the smaller packages",
+    "detail": "Comments in types, server-runtime, dev-server, guards, testing, cli, create-kumiko-app and renderer-mail-html are translated to English, and issue numbers and planning labels are removed while the reason they stood for stays. Pure paraphrases of the code are dropped. No code changes; the comment-language baseline is lowered accordingly."
+  },
+  {
+    "version": "0.387.0",
+    "type": "fix",
+    "title": "Runtime log lines go through the process logger",
+    "detail": "Modules that wrote to console now use createFallbackLogger, so once setProcessLogger is wired their lines reach the configured logger with namespace and structured fields; before that they still fall back to console. createFallbackLogger gained an info method. The `[kumiko]` prefix now comes from the logger namespace, errors travel as structured fields, and the non-JSON-safe schema assertion in buildAppSchema logs the offending path instead of the whole schema. In production the boot warnings arrive as pino JSON with a `component` field (set by the process-logger child or by `context.log.child({ component })`) instead of `[kumiko:boot]` plain text. The KEK source, the seed migration and \"idle pre-check recovered\" lines are logged at `info`. An app that sets its own `extraContext.log` receives the boot and event-dispatcher warnings in that logger."
+  },
+  {
+    "version": "0.387.0",
+    "type": "improvement",
+    "title": "MIT License for all public packages",
+    "detail": "Every @cosmicdrift package and create-kumiko-app are published under MIT instead of BUSL-1.1, so hosting and platform use no longer need a commercial agreement. Earlier releases keep their BUSL-1.1 terms."
+  },
+  {
+    "version": "0.387.0",
+    "type": "fix",
+    "title": "Fewer unchecked casts, runtime checks at boundaries",
+    "detail": "bridgeStub needs no casts, the db dialect types drop any (TableColumns is SchemaTable, SelectQuery is unknown). Malformed input now fails at the boundary instead of later, for example a step that returns a non-WriteResult as the pipeline result, a non-numeric Redis counter in the login rate limiter, or r.useExtension, r.referenceData, r.job, r.notification, r.metric, r.secret, r.secretNamespace, r.claimKey and r.relation called without their required argument. Snapshot.generatedAt is optional, so snapshots written without it still load. The cast baseline is rewritten so new suspect casts in a file fail the As-Casts Audit."
+  },
+  {
+    "version": "0.387.0",
+    "type": "fix",
+    "title": "Fail-closed projection allowlist walk, cleaner fallback log lines",
+    "detail": "createFallbackLogger no longer prints a trailing `undefined` when a log call carries no data. The step walker shared by the projection allowlist check and the workflow event-trigger registration now aborts with path and index when a sub-step list holds an entry that is not a step, instead of skipping it. The `unknown` overload of `runInSavepoint` hands its callback a `DbRunner`. Log lines drop doubled namespace prefixes, and the remaining errors in eager-load, the event store and the token request route travel as structured fields."
+  },
   {
     "version": "0.386.0",
     "type": "improvement",

package/src/scripts/codemod/crypto-shredding-testing-move.ts

@@ -1,7 +1,7 @@
 #!/usr/bin/env bun
 // Rewrites `import { resetPiiSubjectKmsForTests, resetBlindIndexKeyForTests }
 // from "@cosmicdrift/kumiko-framework/crypto"` to import both names from
-// "@cosmicdrift/kumiko-framework/testing" instead (fw#1631). Only the
+// "@cosmicdrift/kumiko-framework/testing" instead. Only the
 // package barrel specifier is rewritten — relative deep-imports of the
 // defining module are left untouched, per the changes.json migration note.
 // Idempotent: an already-migrated file has nothing left to move.
@@ -21,7 +21,7 @@ const EXCLUDE_DIRS = new Set(["node_modules", "dist", "build"]);
 function findTargetFiles(rootDir: string): string[] {
   // Walk the tree and skip excluded dirs while descending — filtering the
   // absolute path after a full Glob scan silently no-ops when the repo root
-  // itself contains "/build/" or "/node_modules/" (fw#2289).
+  // itself contains "/build/" or "/node_modules/".
   const files: string[] = [];
   const walk = (dir: string): void => {
     let entries: Dirent[];

package/src/scripts/codemod/migrate-cross-tenant.ts

@@ -1,7 +1,7 @@
 #!/usr/bin/env bun
 // migrate-cross-tenant — rewrites `crossTenant: true` on entity-convention
 // handlers to `escapeHatch: { reason }` where the handler name and verb can
-// be derived from the call, and reports every other site for review (fw#2915).
+// be derived from the call, and reports every other site for review.
 //
 // Usage:
 //   bun scripts/codemod/migrate-cross-tenant.ts [--dry-run] <path...>

package/src/scripts/codemod/migrate-open-to-all.ts

@@ -1,7 +1,7 @@
 #!/usr/bin/env bun
 // migrate-open-to-all — rewrites deprecated `openToAll: true` to the required
 // `{ reason }` form in test files, and reports every remaining non-test site
-// for a human to pick a reason (fw#2858).
+// for a human to pick a reason.
 //
 // Usage:
 //   bun scripts/codemod/migrate-open-to-all.ts [--dry-run] [--test-reason "<text>"] <path...>

package/src/scripts/codemod/pii-personal-migration.ts

@@ -1,9 +1,9 @@
 #!/usr/bin/env bun
 // Migrates create*Field(...) calls from the old flag-based PII API (pii,
 // userOwned, tenantOwned, subjectRef, allowPlaintext, lookupable,
-// searchable, sensitive) to the author-facing personal/find API
-// (kumiko-framework#2250). Idempotent — re-running is a no-op on already
-// migrated fields (skipped once a `personal` property is present).
+// searchable, sensitive) to the author-facing personal/find API.
+// Idempotent — re-running is a no-op on already migrated fields (skipped once
+// a `personal` property is present).
 //
 // Mapping table (exact):
 //   pii: true                           -> personal: "self"
@@ -87,7 +87,16 @@ const OVERRIDES_ARG_INDEX_1 = new Set(["createEmbeddedField", "createEmbeddedLis
 const FIELD_FACTORY_RE = /^create\w*Field$/;
 
 type ReportEntry = { readonly file: string; readonly line: number; readonly note: string };
-type FindBucket = "exact" | "fuzzy" | "none" | "secret" | "ref" | "personal-false" | "no-find";
+const FIND_BUCKETS = [
+  "exact",
+  "fuzzy",
+  "none",
+  "secret",
+  "ref",
+  "personal-false",
+  "no-find",
+] as const;
+type FindBucket = (typeof FIND_BUCKETS)[number];
 
 const reports: ReportEntry[] = [];
 const newLookupableSites: ReportEntry[] = [];
@@ -411,7 +420,9 @@ function applyTransform(
   const removedSet = new Set<PropertyAssignment>(removedProps);
   let insertIndex = 0;
   for (let i = 0; i < anchorIndex; i++) {
-    if (!removedSet.has(properties[i] as PropertyAssignment)) insertIndex++;
+    const property = properties[i];
+    if (!(property && Node.isPropertyAssignment(property) && removedSet.has(property)))
+      insertIndex++;
   }
 
   for (const p of removedProps) p.remove();
@@ -746,9 +757,7 @@ async function main(): Promise<void> {
 
     const countsBefore = { ...counts };
     for (const { name, objArg } of calls) processObjectLiteral(objArg, name);
-    const changed = (Object.keys(counts) as FindBucket[]).some(
-      (k) => counts[k] !== countsBefore[k],
-    );
+    const changed = FIND_BUCKETS.some((k) => counts[k] !== countsBefore[k]);
 
     if (changed) {
       touchedFiles++;

package/src/scripts/codemod/unprocessable-error-details-reason.ts

@@ -1,5 +1,5 @@
 #!/usr/bin/env bun
-// `UnprocessableOpts.details` was tightened (fw#2460) to `& { readonly reason?:
+// `UnprocessableOpts.details` was tightened to `& { readonly reason?:
 // never }` — `reason` is owned exclusively by the ctor's first positional
 // argument, which already folds it into `details` internally
 // (`{ ...opts?.details, reason }`). Any consumer that ALSO puts `reason`
@@ -26,7 +26,7 @@ const KUMIKO_MODULE_RE = /^@cosmicdrift\/kumiko-/;
 function findTargetFiles(rootDir: string): string[] {
   // Walk the tree and skip excluded dirs while descending — filtering the
   // absolute path after a full scan silently no-ops when the repo root
-  // itself contains "/build/" or "/node_modules/" (fw#2289).
+  // itself contains "/build/" or "/node_modules/."
   const files: string[] = [];
   const walk = (dir: string): void => {
     let entries: Dirent[];