@cosmicdrift/kumiko-samples 0.367.0 → 0.368.0

package/packages/bundled-features/src/jobs/tenant-job-run-table.ts

@@ -1,9 +1,9 @@
-import { requireEntityTableMeta } from "@cosmicdrift/kumiko-framework/bun-db";
 import {
   type EntityTableMeta,
   index,
   instant,
   table as pgTable,
+  requireEntityTableMeta,
   serial,
   sql,
   text,

package/packages/bundled-features/src/ledger/feature.ts

@@ -151,7 +151,7 @@ function registerLedger(
   r.queryHandler(createBalanceSheetHandler(access));
 }
 
-export const ledgerFeature = defineFeature(LEDGER_FEATURE_NAME, (r) =>
+const defaultLedgerFeature = defineFeature(LEDGER_FEATURE_NAME, (r) =>
   registerLedger(r, DEFAULT_LEDGER_ACCESS, undefined),
 );
 
@@ -174,10 +174,13 @@ function resolveAccess(opts: LedgerFeatureOptions): AccessRule {
 
 // Options wrapper. Without options returns the module-level singleton (no
 // rebuild). access/roles/toggleable build a fresh feature-definition.
-export function createLedgerFeature(opts: LedgerFeatureOptions = {}): typeof ledgerFeature {
+export function createLedgerFeature(opts: LedgerFeatureOptions = {}): typeof defaultLedgerFeature {
   if (opts.access === undefined && opts.roles === undefined && opts.toggleable === undefined) {
-    return ledgerFeature;
+    return defaultLedgerFeature;
   }
   const access = resolveAccess(opts);
   return defineFeature(LEDGER_FEATURE_NAME, (r) => registerLedger(r, access, opts.toggleable));
 }
+
+/** @deprecated Use createLedgerFeature(). Run `bun kumiko-upgrade --apply`. Removed in the first release after 2026-10-29. */
+export const ledgerFeature = createLedgerFeature();

package/packages/bundled-features/src/mail-foundation/feature.ts

@@ -120,56 +120,67 @@ declare module "@cosmicdrift/kumiko-framework/engine" {
 // =============================================================================
 // Feature-definition
 // =============================================================================
+export function createMailFoundationFeature() {
+  return defineFeature(
+    FEATURE_NAME,
+    (r) => {
+      r.describe(
+        "Defines the `mailTransport` extension point and a per-tenant `provider` config key that selects which registered transport plugin to use at runtime. Call `createTransportForTenant(ctx, tenantId)` to get an `EmailTransport` ready for sending \u2014 use this feature together with at least one `mail-transport-*` feature; use `delivery` + `channel-email` instead when you need the full notification pipeline with delivery attempts and user preferences. Pass `tenantMailTransport` as `tenantTransport` to `createChannelEmailFeature` so a tenant with a provider configured sends delivery mails through its own transport and other tenants through the app transport.",
+      );
+      r.uiHints({
+        displayLabel: "Mail Transport Foundation",
+        category: "notifications",
+        recommended: false,
+      });
+      r.requires({ features: ["config"] });
 
-export const mailFoundationFeature = defineFeature(FEATURE_NAME, (r) => {
-  r.describe(
-    "Defines the `mailTransport` extension point and a per-tenant `provider` config key that selects which registered transport plugin to use at runtime. Call `createTransportForTenant(ctx, tenantId)` to get an `EmailTransport` ready for sending \u2014 use this feature together with at least one `mail-transport-*` feature; use `delivery` + `channel-email` instead when you need the full notification pipeline with delivery attempts and user preferences. Pass `tenantMailTransport` as `tenantTransport` to `createChannelEmailFeature` so a tenant with a provider configured sends delivery mails through its own transport and other tenants through the app transport.",
-  );
-  r.uiHints({
-    displayLabel: "Mail Transport Foundation",
-    category: "notifications",
-    recommended: false,
-  });
-  r.requires({ features: ["config"] });
+      // Plugin extension-point. Provider-features register here. The
+      // entityName at registration time becomes the value tenants pick in
+      // `provider` config-key (e.g. "smtp", "brevo-api").
+      r.extendsRegistrar(MAIL_TRANSPORT_EXTENSION, {
+        onRegister: () => {
+          // No side-effects at register-time — the registry stores the
+          // usage, factory looks it up at request-time. Same shape as
+          // delivery's extendsRegistrar.
+        },
+      });
 
-  // Plugin extension-point. Provider-features register here. The
-  // entityName at registration time becomes the value tenants pick in
-  // `provider` config-key (e.g. "smtp", "brevo-api").
-  r.extendsRegistrar(MAIL_TRANSPORT_EXTENSION, {
-    onRegister: () => {
-      // No side-effects at register-time — the registry stores the
-      // usage, factory looks it up at request-time. Same shape as
-      // delivery's extendsRegistrar.
-    },
-  });
+      // Provider-selector. Default empty so the boot-validator throws if a
+      // tenant tries to send mail without first picking + setting up a
+      // provider — better than a silent fallback. The actual list of valid
+      // values lives in the registered plugins, not here — Designer-UI can
+      // render `getExtensionUsages("mailTransport").map(u => u.entityName)`
+      // as the option-list.
+      const providerConfigKey = r.config(
+        "provider",
+        createTenantConfig("text", {
+          default: "",
+          // required: without a chosen provider createTransportForTenant throws —
+          // readiness used to report ready:true and the first mail send
+          // surfaced the UnconfiguredError (280/1).
+          required: true,
+          write: access.roles("TenantAdmin", "SystemAdmin"),
+          read: access.roles("TenantAdmin", "SystemAdmin", "User"),
+        }),
+      );
+      // Readiness gating: transport-plugins' required keys/secrets count only
+      // while their plugin is the one this key selects.
+      r.extensionSelector(MAIL_TRANSPORT_EXTENSION, providerConfigKey);
 
-  // Provider-selector. Default empty so the boot-validator throws if a
-  // tenant tries to send mail without first picking + setting up a
-  // provider — better than a silent fallback. The actual list of valid
-  // values lives in the registered plugins, not here — Designer-UI can
-  // render `getExtensionUsages("mailTransport").map(u => u.entityName)`
-  // as the option-list.
-  const providerConfigKey = r.config(
-    "provider",
-    createTenantConfig("text", {
-      default: "",
-      // required: ohne gewählten Provider wirft createTransportForTenant —
-      // readiness meldete vorher ready:true und der erste Mail-Send
-      // lieferte den UnconfiguredError (280/1).
-      required: true,
-      write: access.roles("TenantAdmin", "SystemAdmin"),
-      read: access.roles("TenantAdmin", "SystemAdmin", "User"),
-    }),
+      return {
+        /** Config-key-handle for the provider-selector. */
+        providerConfigKey,
+      };
+    },
+    { dedupeOptions: {} },
   );
-  // Readiness gating: transport-plugins' required keys/secrets count only
-  // while their plugin is the one this key selects.
-  r.extensionSelector(MAIL_TRANSPORT_EXTENSION, providerConfigKey);
+}
+
+// The typed handles below come from one shared instance; each factory call builds its own handle objects.
+const sharedMailFoundationFeature = createMailFoundationFeature();
 
-  return {
-    /** Config-key-handle for the provider-selector. */
-    providerConfigKey,
-  };
-});
+/** @deprecated Use createMailFoundationFeature(). Run `bun kumiko-upgrade --apply`. Removed in the first release after 2026-10-29. */
+export const mailFoundationFeature = sharedMailFoundationFeature;
 
 // =============================================================================
 // Transport-factory — looks up the registered plugin + delegates
@@ -224,7 +235,7 @@ export async function createTransportForTenantIfConfigured(
   }
 
   const provider = requireDefined(
-    await ctxConfig(mailFoundationFeature.exports.providerConfigKey),
+    await ctxConfig(sharedMailFoundationFeature.exports.providerConfigKey),
     FEATURE_NAME,
     "provider",
   ) as string; // @cast-boundary engine-payload

package/packages/bundled-features/src/mail-foundation/index.ts

@@ -8,6 +8,7 @@
 //     when registering via `r.useExtension("mailTransport", ...)`
 
 export {
+  createMailFoundationFeature,
   createTransportForTenant,
   createTransportForTenantIfConfigured,
   isMailTransportPlugin,

package/packages/bundled-features/src/mail-transport-inmemory/feature.ts

@@ -75,23 +75,31 @@ export function clearInbox(tenantId: string): void {
 // =============================================================================
 // Feature-definition
 // =============================================================================
+export function createMailTransportInMemoryFeature() {
+  return defineFeature(
+    FEATURE_NAME,
+    (r) => {
+      r.describe(
+        'Registers an in-process `"inmemory"` provider for `mail-foundation` that buffers sent mails per tenant instead of contacting an SMTP server. Use `getInbox(tenantId)` and `clearInbox(tenantId)` in demo apps and tests; not for production (buffer is process-memory, lost on restart).',
+      );
+      // Kein requires auf "config" oder "secrets" — der
+      // In-Memory-Transport hat keine Config (nichts zu konfigurieren) und
+      // kein Secret. Der einzige hard-require ist mail-foundation, das den
+      // extension-point "mailTransport" definiert.
+      r.requires({ features: ["mail-foundation"] });
 
-export const mailTransportInMemoryFeature = defineFeature(FEATURE_NAME, (r) => {
-  r.describe(
-    'Registers an in-process `"inmemory"` provider for `mail-foundation` that buffers sent mails per tenant instead of contacting an SMTP server. Use `getInbox(tenantId)` and `clearInbox(tenantId)` in demo apps and tests; not for production (buffer is process-memory, lost on restart).',
+      const plugin: MailTransportPlugin = {
+        build: async (_ctx: MailTransportContext, tenantId: string): Promise<EmailTransport> => {
+          // Returns the per-tenant buffer. Identity-stable across calls so the
+          // demo inbox keeps accumulating.
+          return getOrCreateTransportForTenant(tenantId);
+        }, // @wrapper-known semantic-alias
+      };
+      r.useExtension(MAIL_TRANSPORT_EXTENSION, "inmemory", plugin);
+    },
+    { dedupeOptions: {} },
   );
-  // Kein requires auf "config" oder "secrets" — der
-  // In-Memory-Transport hat keine Config (nichts zu konfigurieren) und
-  // kein Secret. Der einzige hard-require ist mail-foundation, das den
-  // extension-point "mailTransport" definiert.
-  r.requires({ features: ["mail-foundation"] });
+}
 
-  const plugin: MailTransportPlugin = {
-    build: async (_ctx: MailTransportContext, tenantId: string): Promise<EmailTransport> => {
-      // Returnt den per-tenant Buffer. Identitätsstabil zwischen calls
-      // damit die Demo-Inbox accumulated bleibt.
-      return getOrCreateTransportForTenant(tenantId);
-    }, // @wrapper-known semantic-alias
-  };
-  r.useExtension(MAIL_TRANSPORT_EXTENSION, "inmemory", plugin);
-});
+/** @deprecated Use createMailTransportInMemoryFeature(). Run `bun kumiko-upgrade --apply`. Removed in the first release after 2026-10-29. */
+export const mailTransportInMemoryFeature = createMailTransportInMemoryFeature();

package/packages/bundled-features/src/mail-transport-inmemory/index.ts

@@ -1,3 +1,8 @@
 // Public API of the mail-transport-inmemory bundled-feature.
 
-export { clearInbox, getInbox, mailTransportInMemoryFeature } from "./feature.js";
+export {
+  clearInbox,
+  createMailTransportInMemoryFeature,
+  getInbox,
+  mailTransportInMemoryFeature,
+} from "./feature.js";

package/packages/bundled-features/src/mail-transport-smtp/feature.ts

@@ -75,89 +75,101 @@ export function setSmtpMailHostLookup(fn: typeof lookup | undefined): void {
 // =============================================================================
 // Feature-definition
 // =============================================================================
+export function createMailTransportSmtpFeature() {
+  return defineFeature(
+    FEATURE_NAME,
+    (r) => {
+      r.describe(
+        'Registers itself as the `"smtp"` provider for `mail-foundation` and owns the per-tenant config keys (`host`, `port`, `secure`, `from`, `authUser`) and the encrypted `smtp.password` secret. Tenants set `mail-foundation`\'s `provider` config key to `"smtp"` to activate it; set the SMTP credentials via the admin UI or a seed handler before sending the first mail.',
+      );
+      r.uiHints({
+        displayLabel: "Mail Transport · SMTP",
+        category: "notifications",
+        recommended: false,
+      });
+      r.requires({ features: ["config"] });
+      r.requires({ features: ["secrets"] });
+      r.requires({ features: ["mail-foundation"] });
+      r.envSchema(mailTransportSmtpEnvSchema);
 
-export const mailTransportSmtpFeature = defineFeature(FEATURE_NAME, (r) => {
-  r.describe(
-    'Registers itself as the `"smtp"` provider for `mail-foundation` and owns the per-tenant config keys (`host`, `port`, `secure`, `from`, `authUser`) and the encrypted `smtp.password` secret. Tenants set `mail-foundation`\'s `provider` config key to `"smtp"` to activate it; set the SMTP credentials via the admin UI or a seed handler before sending the first mail.',
-  );
-  r.uiHints({
-    displayLabel: "Mail Transport · SMTP",
-    category: "notifications",
-    recommended: false,
-  });
-  r.requires({ features: ["config"] });
-  r.requires({ features: ["secrets"] });
-  r.requires({ features: ["mail-foundation"] });
-  r.envSchema(mailTransportSmtpEnvSchema);
+      // Provider-secret. Sensitive: redact-helper for admin-UI display.
+      const password = r.secret("smtp.password", {
+        label: { en: "SMTP password" },
+        hint: {
+          en: "Login password at the SMTP server. Brevo/Postmark/SES call it 'API key' or 'SMTP credentials'.",
+        },
+        redact: (plaintext) => {
+          if (plaintext.length < 8) return "•".repeat(plaintext.length);
+          return `${plaintext.slice(0, 3)}...${plaintext.slice(-2)}`;
+        },
+        scope: "tenant",
+        // required: true ↔ the missing-secret throw in readPassword — keep in sync.
+        required: true,
+      });
 
-  // Provider-secret. Sensitive: redact-helper for admin-UI display.
-  const password = r.secret("smtp.password", {
-    label: { en: "SMTP password" },
-    hint: {
-      en: "Login password at the SMTP server. Brevo/Postmark/SES call it 'API key' or 'SMTP credentials'.",
-    },
-    redact: (plaintext) => {
-      if (plaintext.length < 8) return "•".repeat(plaintext.length);
-      return `${plaintext.slice(0, 3)}...${plaintext.slice(-2)}`;
-    },
-    scope: "tenant",
-    // required: true ↔ the missing-secret throw in readPassword — keep in sync.
-    required: true,
-  });
+      // required: true ↔ the requireNonEmpty calls in buildSmtpTransport — keep in sync.
+      const configKeys = r.config({
+        keys: {
+          host: createTenantConfig("text", {
+            required: true,
+            default: "",
+            write: access.roles("TenantAdmin", "SystemAdmin"),
+            read: access.roles("TenantAdmin", "SystemAdmin"),
+          }),
+          port: createTenantConfig("number", {
+            default: 587,
+            bounds: { min: 1, max: 65535 },
+            write: access.roles("TenantAdmin", "SystemAdmin"),
+          }),
+          secure: createTenantConfig("boolean", {
+            default: false,
+            write: access.roles("TenantAdmin", "SystemAdmin"),
+          }),
+          from: createTenantConfig("text", {
+            required: true,
+            default: "",
+            write: access.roles("TenantAdmin", "SystemAdmin"),
+            read: access.roles("TenantAdmin", "SystemAdmin"),
+          }),
+          authUser: createTenantConfig("text", {
+            required: true,
+            default: "",
+            write: access.roles("TenantAdmin", "SystemAdmin"),
+            read: access.roles("TenantAdmin", "SystemAdmin"),
+          }),
+        },
+      });
 
-  // required: true ↔ the requireNonEmpty calls in buildSmtpTransport — keep in sync.
-  const configKeys = r.config({
-    keys: {
-      host: createTenantConfig("text", {
-        required: true,
-        default: "",
-        write: access.roles("TenantAdmin", "SystemAdmin"),
-        read: access.roles("TenantAdmin", "SystemAdmin"),
-      }),
-      port: createTenantConfig("number", {
-        default: 587,
-        bounds: { min: 1, max: 65535 },
-        write: access.roles("TenantAdmin", "SystemAdmin"),
-      }),
-      secure: createTenantConfig("boolean", {
-        default: false,
-        write: access.roles("TenantAdmin", "SystemAdmin"),
-      }),
-      from: createTenantConfig("text", {
-        required: true,
-        default: "",
-        write: access.roles("TenantAdmin", "SystemAdmin"),
-        read: access.roles("TenantAdmin", "SystemAdmin"),
-      }),
-      authUser: createTenantConfig("text", {
-        required: true,
-        default: "",
-        write: access.roles("TenantAdmin", "SystemAdmin"),
-        read: access.roles("TenantAdmin", "SystemAdmin"),
-      }),
+      // Plugin: register against mail-foundation's "mailTransport" extension.
+      // `entityName` "smtp" is what tenants set in mail-foundation's
+      // `provider` config-key to pick this transport.
+      const plugin: MailTransportPlugin = {
+        build: async (ctx: MailTransportContext, tenantId: string) =>
+          buildSmtpTransport(ctx, tenantId), // @wrapper-known semantic-alias
+      };
+      r.useExtension(MAIL_TRANSPORT_EXTENSION, "smtp", plugin);
+
+      return {
+        /** Config-key-handles — typed reads via `ctx.config(...)` in
+         *  consumer handlers. */
+        configKeys,
+        /** Secret-handle for the SMTP password. */
+        password,
+      };
     },
-  });
+    { dedupeOptions: {} },
+  );
+}
 
-  // Plugin: register against mail-foundation's "mailTransport" extension.
-  // `entityName` "smtp" is what tenants set in mail-foundation's
-  // `provider` config-key to pick this transport.
-  const plugin: MailTransportPlugin = {
-    build: async (ctx: MailTransportContext, tenantId: string) => buildSmtpTransport(ctx, tenantId), // @wrapper-known semantic-alias
-  };
-  r.useExtension(MAIL_TRANSPORT_EXTENSION, "smtp", plugin);
+// The typed handles below come from one shared instance; each factory call builds its own handle objects.
+const sharedMailTransportSmtpFeature = createMailTransportSmtpFeature();
 
-  return {
-    /** Config-key-handles — typed reads via `ctx.config(...)` in
-     *  consumer handlers. */
-    configKeys,
-    /** Secret-handle for the SMTP password. */
-    password,
-  };
-});
+/** @deprecated Use createMailTransportSmtpFeature(). Run `bun kumiko-upgrade --apply`. Removed in the first release after 2026-10-29. */
+export const mailTransportSmtpFeature = sharedMailTransportSmtpFeature;
 
 /** Typed handle for the SMTP password — exported so seeds + tests can
  *  set it via `secrets:write:set` with the full qualified-name. */
-export const SMTP_PASSWORD = mailTransportSmtpFeature.exports.password;
+export const SMTP_PASSWORD = sharedMailTransportSmtpFeature.exports.password;
 
 // =============================================================================
 // Internal: build the EmailTransport from tenant config + secret
@@ -188,29 +200,29 @@ async function buildSmtpTransport(
 
   const SMTP_HINT = "Set via tenant-admin UI or seed-handler before sending mail.";
   const host = requireNonEmpty(
-    await ctxConfig(mailTransportSmtpFeature.exports.configKeys.host),
+    await ctxConfig(sharedMailTransportSmtpFeature.exports.configKeys.host),
     FEATURE_NAME,
     "host",
     SMTP_HINT,
   );
   const port = requireDefined(
-    await ctxConfig(mailTransportSmtpFeature.exports.configKeys.port),
+    await ctxConfig(sharedMailTransportSmtpFeature.exports.configKeys.port),
     FEATURE_NAME,
     "port",
   ) as number; // @cast-boundary engine-payload
   const secure = requireDefined(
-    await ctxConfig(mailTransportSmtpFeature.exports.configKeys.secure),
+    await ctxConfig(sharedMailTransportSmtpFeature.exports.configKeys.secure),
     FEATURE_NAME,
     "secure",
   ) as boolean; // @cast-boundary engine-payload
   const from = requireNonEmpty(
-    await ctxConfig(mailTransportSmtpFeature.exports.configKeys.from),
+    await ctxConfig(sharedMailTransportSmtpFeature.exports.configKeys.from),
     FEATURE_NAME,
     "from",
     SMTP_HINT,
   );
   const authUser = requireNonEmpty(
-    await ctxConfig(mailTransportSmtpFeature.exports.configKeys.authUser),
+    await ctxConfig(sharedMailTransportSmtpFeature.exports.configKeys.authUser),
     FEATURE_NAME,
     "authUser",
     SMTP_HINT,

package/packages/bundled-features/src/mail-transport-smtp/index.ts

@@ -1,6 +1,7 @@
 // Public API of the mail-transport-smtp bundled-feature.
 
 export {
+  createMailTransportSmtpFeature,
   mailTransportSmtpEnvSchema,
   mailTransportSmtpFeature,
   SMTP_PASSWORD,

package/packages/bundled-features/src/managed-pages/handlers/by-slug.query.ts

@@ -1,4 +1,4 @@
-import { fetchOne } from "@cosmicdrift/kumiko-framework/bun-db";
+import { fetchOne } from "@cosmicdrift/kumiko-framework/db";
 import { defineQueryHandler } from "@cosmicdrift/kumiko-framework/engine";
 import * as z from "zod";
 import { type PageRow, pagesTable } from "../table.js";

package/packages/bundled-features/src/managed-pages/handlers/by-tenant-published.query.ts

@@ -1,5 +1,4 @@
-import { selectMany } from "@cosmicdrift/kumiko-framework/bun-db";
-import { castTenantRows } from "@cosmicdrift/kumiko-framework/db";
+import { castTenantRows, selectMany } from "@cosmicdrift/kumiko-framework/db";
 import { defineQueryHandler } from "@cosmicdrift/kumiko-framework/engine";
 import * as z from "zod";
 import { type PageRow, pagesTable } from "../table.js";

package/packages/bundled-features/src/managed-pages/handlers/set.write.ts

@@ -1,5 +1,4 @@
-import { fetchOne } from "@cosmicdrift/kumiko-framework/bun-db";
-import { createEventStoreExecutor } from "@cosmicdrift/kumiko-framework/db";
+import { createEventStoreExecutor, fetchOne } from "@cosmicdrift/kumiko-framework/db";
 import { defineWriteHandler, type TenantId } from "@cosmicdrift/kumiko-framework/engine";
 import * as z from "zod";
 import { requireForTenant } from "../../shared/index.js";

package/packages/bundled-features/src/managed-pages/seeding.ts

@@ -2,15 +2,19 @@
 // Event-Store-Executor an — gleicher Pfad wie der echte set-Handler, aber
 // ohne Access-Check. Default ifExists="skip".
 
-import { fetchOne } from "@cosmicdrift/kumiko-framework/bun-db";
 import {
   createEventStoreExecutor,
   createTenantDb,
   type DbConnection,
+  fetchOne,
 } from "@cosmicdrift/kumiko-framework/db";
 import type { SessionUser, TenantId } from "@cosmicdrift/kumiko-framework/engine";
-import { runEventStoreSeed, type SeedIfExists } from "@cosmicdrift/kumiko-framework/seeding";
-import { TestUsers } from "@cosmicdrift/kumiko-framework/stack";
+import {
+  runEventStoreSeed,
+  type SeedIfExists,
+  TestUsers,
+} from "@cosmicdrift/kumiko-framework/seeding";
+
 import { type PageRow, pageEntity, pagesTable } from "./table.js";
 
 const executor = createEventStoreExecutor(pagesTable, pageEntity, { entityName: "page" });
@@ -33,7 +37,7 @@ export async function seedPage(db: DbConnection, opts: SeedPageOptions): Promise
   // der event-store-stream im falschen tenant-bucket → version_conflict
   // bei späteren echten writes). TestUsers.systemAdmin ist testTenantId(1).
   const by = opts.by ?? { ...TestUsers.systemAdmin, tenantId: opts.tenantId };
-  const tdb = createTenantDb(db, opts.tenantId, "system");
+  const tdb = createTenantDb({ db, tenantId: opts.tenantId, mode: "system" });
 
   const existing = await fetchOne<PageRow>(db, pagesTable, {
     tenantId: opts.tenantId,

package/packages/bundled-features/src/metrics/compute.ts

@@ -1,4 +1,4 @@
-import type { WhereObject } from "@cosmicdrift/kumiko-framework/bun-db";
+import type { WhereObject } from "@cosmicdrift/kumiko-framework/db";
 import type {
   AggregateDimension,
   AggregateKey,

package/packages/bundled-features/src/metrics/filters.ts

@@ -1,4 +1,4 @@
-import { extractTableInfo, type WhereObject } from "@cosmicdrift/kumiko-framework/bun-db";
+import { extractTableInfo, type WhereObject } from "@cosmicdrift/kumiko-framework/db";
 import type { HandlerContext } from "@cosmicdrift/kumiko-framework/engine";
 import * as z from "zod";
 import type { MetricDefinition, MetricFilterResolver } from "./types.js";

package/packages/bundled-features/src/metrics/validate.ts

@@ -1,4 +1,4 @@
-import { extractTableInfo, isTimestamptzType } from "@cosmicdrift/kumiko-framework/bun-db";
+import { extractTableInfo, isTimestamptzType } from "@cosmicdrift/kumiko-framework/db";
 import { METRIC_RANGES } from "./constants.js";
 import { filterValueKindOf, metricFilterEntries, RESERVED_PAYLOAD_KEYS } from "./filters.js";
 import type { MetricDefinition } from "./types.js";

package/packages/bundled-features/src/notes-history/feature.ts

@@ -63,7 +63,7 @@ function registerNotesHistory(
   r.translations({ keys: NOTES_HISTORY_FEATURE_I18N });
 }
 
-export const notesHistoryFeature = defineFeature(NOTES_HISTORY_FEATURE_NAME, (r) =>
+const defaultNotesHistoryFeature = defineFeature(NOTES_HISTORY_FEATURE_NAME, (r) =>
   registerNotesHistory(r, DEFAULT_NOTES_HISTORY_ACCESS, undefined, undefined),
 );
 
@@ -114,14 +114,14 @@ function resolveAccess(opts: NotesHistoryFeatureOptions): AccessRule {
 // rebuild). access/roles/ownership build a fresh feature-definition.
 export function createNotesHistoryFeature(
   opts: NotesHistoryFeatureOptions = {},
-): typeof notesHistoryFeature {
+): typeof defaultNotesHistoryFeature {
   if (
     opts.access === undefined &&
     opts.roles === undefined &&
     opts.ownership === undefined &&
     opts.parents === undefined
   ) {
-    return notesHistoryFeature;
+    return defaultNotesHistoryFeature;
   }
   assertNoWhereRuleInOwnershipWrite("createNotesHistoryFeature", opts.ownership?.write);
   // A mount that accepts no parents at all can never take a note write —
@@ -138,3 +138,6 @@ export function createNotesHistoryFeature(
     registerNotesHistory(r, resolveAccess(opts), opts.ownership, opts.parents),
   );
 }
+
+/** @deprecated Use createNotesHistoryFeature(). Run `bun kumiko-upgrade --apply`. Removed in the first release after 2026-10-29. */
+export const notesHistoryFeature = createNotesHistoryFeature();

package/packages/bundled-features/src/notes-history/handlers/add-note.write.ts

@@ -1,4 +1,4 @@
-import { fetchOne, runInSavepointIfSupported } from "@cosmicdrift/kumiko-framework/bun-db";
+import { fetchOne, runInSavepointIfSupported } from "@cosmicdrift/kumiko-framework/db";
 import type { AccessRule, WriteHandlerDef } from "@cosmicdrift/kumiko-framework/engine";
 import { ValidationError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
 import { decryptStoredPii, denyUnlessJoinRowParentVisible } from "../../shared/index.js";

package/packages/bundled-features/src/notes-history-user-data/hooks.ts

@@ -4,9 +4,9 @@
 // dependency. Mirrors job-run/delivery-attempt (user-data-rights-defaults):
 // export-only, erasure via crypto-shredding.
 
-import { selectMany } from "@cosmicdrift/kumiko-framework/bun-db";
 import { configuredPiiSubjectKms, type SubjectId } from "@cosmicdrift/kumiko-framework/crypto";
 import type { DbRunner, TenantDb } from "@cosmicdrift/kumiko-framework/db";
+import { selectMany } from "@cosmicdrift/kumiko-framework/db";
 import type {
   TenantId,
   UserDataDeleteHook,