@cosmicdrift/kumiko-testing 0.386.0 → 0.387.0

package/LICENSE

@@ -1,57 +1,21 @@
-Business Source License 1.1
-
-Parameters
-
-Licensor:             Marc Frost
-
-Licensed Work:        @cosmicdrift/kumiko-testing
-                      The Licensed Work is © 2026 Marc Frost.
-
-Additional Use Grant: 
-You may use the Licensed Work in production for any purpose, including 
-commercially, EXCEPT for the Restricted Use. 
-
-"Restricted Use" is defined as using the Licensed Work to provide a platform 
-or service to third parties that allows them to host, deploy, or run their 
-own applications built with the Licensed Work. This includes, but is not 
-limited to: managed hosting services, software-as-a-service (SaaS) platforms, 
-platform-as-a-service (PaaS), developer platforms, or any multi-tenant 
-managed offering of the Licensed Work.
-
-This restriction does not apply to the Licensor, any entity controlled by, 
-controlling, or under common control with the Licensor ("Affiliates"), or 
-contractors acting on their behalf. The Licensor remains free to use the 
-Licensed Work for any purpose, including for the operation of kumiko.rocks.
-
-Change Date:          2030-05-05
-Change License:       Apache License, Version 2.0
-
-
-Terms
-
-The Licensor hereby grants you the right to copy, modify, create derivative works, 
-redistribute, and make non-production use of the Licensed Work. The Licensor may 
-make an Additional Use Grant, above, permitting limited production use.
-
-Effective on the Change Date, or the fourth anniversary of the first publicly 
-available distribution of the Licensed Work under this License, whichever comes 
-first, this License will convert to the Change License.
-
-This Business Source License governs use of the Licensed Work in all cases, except 
-as to any use that is explicitly granted in the Additional Use Grant above or 
-under the Change License after the Change Date.
-
-If your use of the Licensed Work does not comply with the requirements of this 
-License, you must cease use of the Licensed Work immediately.
-
-All copies of the Licensed Work, and all derivative works thereof, must include 
-this License.
-
-This License does not grant you any right, title, or interest in any trademark, 
-logo, or branding of the Licensor, except as required to comply with this License.
-
-TO THE EXTENT PERMITTED BY APPLICABLE LAW, THE LICENSED WORK IS PROVIDED ON AN 
-“AS IS” BASIS. LICENSOR DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING 
-WITHOUT LIMITATION WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, 
-TITLE, AND NON-INFRINGEMENT. IN NO EVENT WILL LICENSOR BE LIABLE FOR ANY DAMAGES 
-ARISING OUT OF OR RELATED TO THIS LICENSE OR THE USE OF THE LICENSED WORK.
+MIT License
+
+Copyright (c) 2026 Marc Frost
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@cosmicdrift/kumiko-testing",
-  "version": "0.386.0",
+  "version": "0.387.0",
   "description": "Test template for Kumiko apps: per-flow seedTenant, app test stack, canonical test preloads, bunfig generator and integration runner.",
-  "license": "BUSL-1.1",
+  "license": "MIT",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
   "repository": {
     "type": "git",
@@ -99,9 +99,9 @@
     "kumiko-testing": "./bin/kumiko-testing.ts"
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-framework": "0.386.0",
-    "@cosmicdrift/kumiko-guards": "0.386.0",
-    "@cosmicdrift/kumiko-types": "0.386.0",
+    "@cosmicdrift/kumiko-framework": "0.387.0",
+    "@cosmicdrift/kumiko-guards": "0.387.0",
+    "@cosmicdrift/kumiko-types": "0.387.0",
     "zod": "^4.4.3"
   },
   "peerDependencies": {
@@ -125,8 +125,8 @@
     }
   },
   "devDependencies": {
-    "@cosmicdrift/kumiko-bundled-features": "0.386.0",
-    "@cosmicdrift/kumiko-dev-server": "0.386.0",
+    "@cosmicdrift/kumiko-bundled-features": "0.387.0",
+    "@cosmicdrift/kumiko-dev-server": "0.387.0",
     "@happy-dom/global-registrator": "^20.11.2",
     "@playwright/test": "^1.62.1",
     "@testing-library/dom": "^10.4.1",

package/src/bunfig.ts

@@ -102,7 +102,7 @@ type BunfigBlock = { readonly header: string; readonly lines: readonly string[]
 // contain "[" are never alone on their own line. Anything before the first
 // header (top-level keys like `preload`/`telemetry`/`smol`/`logLevel`, plus
 // the header comments) is its own block under the synthetic header "" —
-// dropping it silently lost those keys (kumiko-framework#3120).
+// dropping it silently lost those keys.
 function splitBunfigBlocks(content: string): readonly BunfigBlock[] {
   const blocks: { header: string; lines: string[] }[] = [];
   let current: { header: string; lines: string[] } = { header: "", lines: [] };
@@ -224,7 +224,7 @@ function appendArrayExtras(
  * verbatim, appended after the generated content — so a section the
  * template doesn't own this run is never silently dropped. A key inside a
  * section the template DOES emit that isn't in this run's own version of
- * that section (e.g. `concurrency`, `timeout`, kumiko-framework#3120) fails
+ * that section (e.g. `concurrency`, `timeout`) fails
  * the merge instead of silently disappearing. Within an array key the
  * template does emit on both sides (`preload`, `pathIgnorePatterns`,
  * `coveragePathIgnorePatterns`), entries the app appended on top of the

package/src/e2e/screenshots.ts

@@ -324,7 +324,7 @@ export function runScreenshots(scenarios: readonly Scenario[], opts: FlatOptions
     // Browser-context locale for JS-side Intl/navigator.language (e.g. money-input's
     // resolvedLocale) — pinEnglishLocale() only seeds the app's own kumiko:locale.
     // ponytail: native <input type="number"> still formats per the host OS region,
-    // unreachable from Playwright (context.locale and --lang both no-op there). #1851
+    // unreachable from Playwright (context.locale and --lang both no-op there).
     if (opts.pinLocale) test.use({ locale: "en-US" });
     for (const s of scenarios) {
       test(
@@ -556,7 +556,7 @@ export function runMatrix<T extends string>(
     test.describe(locale, () => {
       // Browser-context locale for JS-side Intl/navigator.language — the
       // kumiko:locale seed below only drives the app's own i18n strings.
-      // ponytail: see the runScreenshots() locale comment above / #1851
+      // ponytail: see the runScreenshots() locale comment above.
       const tag = resolveLocaleTag(locale, opts.localeTags);
       test.use({ locale: tag });
 

package/src/e2e/seed-route.ts

@@ -51,7 +51,7 @@ function parseJsonBody<S extends z.ZodType>(schema: S, raw: string): ParsedBody<
 }
 
 // Shared by every verify() below — a failed parse becomes a 400 the same way
-// the pre-#3050 handler-level parseJsonBody/parseWith checks did.
+// the handler-level parseJsonBody/parseWith checks did.
 function parseOrReject<T>(value: ParsedBody<T>): T {
   if (value.success) return value.data;
   throw new ExtraRouteRejection(400, { error: value.error });
@@ -153,9 +153,9 @@ function toCapturedMail(message: InboxMessage): CapturedMail {
 // still throw in every environment) — the *mounting* decision is the
 // caller's: use isE2eSeedingEnabled() to keep prod from ever registering
 // these route objects at all, e.g. `...(isE2eSeedingEnabled() ?
-// createE2eSeedRoutes() : [])` in a server entry that also runs in prod
-// (kumiko-framework#3120). Each route's own assertGateOpen() 404s outside
-// the seed condition regardless — this is belt-and-suspenders, not the only gate.
+// createE2eSeedRoutes() : [])` in a server entry that also runs in prod.
+// Each route's own assertGateOpen() 404s outside the seed condition regardless
+// — this is belt-and-suspenders, not the only gate.
 export function createE2eSeedRoutes(
   options: E2eSeedRoutesOptions,
   bundled: SeedRouteBundledApi,

package/src/helpers/boot-validator-fixture.ts

@@ -68,7 +68,7 @@ function ensureEntityListRowNavigation(
       // No `params` here: this same-entity target always resolves to
       // UPDATE mode (the renderer auto-fills entityId from row["id"]),
       // and entityEdit-update never reads search-params as initial
-      // values — the boot-validator now rejects that combination (#1680).
+      // values — the boot-validator now rejects that combination.
       {
         kind: "navigate",
         id: "edit",

package/src/helpers/e2e-generator.ts

@@ -309,7 +309,7 @@ function buildEditFillOps(
           ops.push({ kind: "fill", field, value: String(v) });
           break;
         // embedded/money/timestamp/locatedTimestamp/file/image/files/images:
-        // no generic interaction. Since #369 timestamp renders two inputs
+        // no generic interaction. Since timestamp renders two inputs
         // (date + time) that a single .fill() cannot drive; the test author
         // supplies a hand override or skips it.
         default:
@@ -489,7 +489,7 @@ function fieldToFixture(name: string, field: FieldDefinition): unknown {
     case "images":
       // File-upload fixtures are not generic yet: Playwright would have to supply
       // file contents, and the write API already expects uploaded fileRef UUIDs.
-      // Can be added once a sample settles the paths (M4).
+      // Can be added once a sample settles the paths.
       return undefined;
     default:
       return undefined;

package/src/helpers/index.ts

@@ -4,9 +4,9 @@
 
 // The four cache/injection resets stay in their own modules (they close over
 // module-private state) and are only re-exported here — they are out of /crypto
-// and /db as of #1631. A production call to resetPiiSubjectKmsForTests() silently
-// switches the PII layer off, and subject-annotated fields are written in
-// plaintext from then on: no error, no log.
+// and /db. A production call to resetPiiSubjectKmsForTests() silently switches
+// the PII layer off, and subject-annotated fields are written in plaintext from
+// then on: no error, no log.
 export {
   resetBlindIndexKeyForTests,
   resetEntityFieldEncryptionCacheForTests,

package/src/helpers/without-ambient-temporal.ts

@@ -1,6 +1,6 @@
 /**
  * Run `fn` with `globalThis.Temporal` deleted, then restore.
- * Used by ambient-independence regression tests (kumiko-framework#1525/#1550).
+ * Used by ambient-independence regression tests.
  */
 export async function withoutAmbientTemporal<T>(fn: () => T | Promise<T>): Promise<T> {
   const savedGlobal: unknown = Reflect.get(globalThis, "Temporal");

package/src/seed-types.ts

@@ -28,7 +28,7 @@ export type SeededUser = SeededCredentials & {
 export type SeedPart = (ctx: { readonly tenant: SeededTenant }) => Promise<void>;
 
 // email may contain the literal "{tenantId}" placeholder, substituted with the
-// seeded tenant's id — user:create's email uniqueness is global (fw#2134/#2593),
+// seeded tenant's id — user:create's email uniqueness is global,
 // so a fixed literal email collides across per-scenario tenants.
 export type SeedAdminIdentity = {
   readonly displayName?: string;

package/src/stack/redis.ts

@@ -7,9 +7,8 @@ export type TestRedis = {
   // The exact REDIS_URL used to build `redis` above — for a second, unrelated
   // connection (e.g. the test-stack's JobRunner) that needs its own client
   // rather than sharing this one's keyPrefix. Reconstructing a URL from
-  // `redis.options` loses password/username/tls/path (pr-review
-  // kumiko-framework #1036/2) — callers needing a fresh connection should use
-  // this raw string, not rebuild one from parsed options.
+  // `redis.options` loses password/username/tls/path — callers needing a fresh
+  // connection should use this raw string, not rebuild one from parsed options.
   redisUrl: string;
   /** The per-test `keyPrefix` on `redis`, e.g. `kt:1a2b3c4d:`. */
   keyPrefix: string;

package/src/stack/request-helper.ts

@@ -109,7 +109,7 @@ export type RequestHelper = {
 export type RequestHelperOptions = {
   // When sessionChecker is wired (sessions feature), JWTs without jti are
   // rejected as no_sid. Seed/test helpers that only jwt.sign(user) need a
-  // live sid — create one via the same sessionCreator login uses (#1372).
+  // live sid — create one via the same sessionCreator login uses.
   readonly sessionCreator?: SessionCreator;
 };
 

package/src/stack/test-stack.ts

@@ -90,7 +90,7 @@ export type TestStack = {
   // The AppContext buildServer handed the request path, incl. the fields it
   // wires itself (_fileProviderResolver). A dev-server that starts its own
   // lane job-runners beside this stack must hand them THIS, not a
-  // `{ db, registry }` literal — that's the #1232 drift, and it makes an
+  // `{ db, registry }` literal — that's the drift, and it makes an
   // event-triggered job reaching for ctx.files die where the request path works.
   context: AppContext;
   // Present whenever a system consumer (SSE, Search) or
@@ -253,11 +253,11 @@ export type TestStackOptions = {
   /** Override the event dispatcher's polling-timer interval. Default 50ms.
    *  Tests that assert LISTEN/NOTIFY wake-up latency need this pushed far
    *  out (e.g. 60_000) so the polling timer can't land inside the
-   *  assertion window and mask a dead subscription — see E.4 (#2042). */
+   *  assertion window and mask a dead subscription. */
   eventDispatcherPollIntervalMs?: number;
   /** Opt out of auto-created r.entity() tables for callers that create/migrate
    *  them themselves. Default true — false pushes only projection/MSP/
-   *  storeTable sources, same as before fw#3102. */
+   *  storeTable sources, same as before. */
   entityTables?: boolean;
   /** Time source of the stack's rate-limit resolver, so tests can freeze the
    *  clock instead of racing the window. Default: system time. */
@@ -312,7 +312,7 @@ function bindMfaTokenSecrets(features: readonly FeatureDefinition[], jwtSecret:
 }
 
 // Same table list as `kumiko schema generate` (collectTableMetas) — divergence
-// was the #255 prod-crash and the #3102 missing r.entity() tables.
+// caused a production crash and left r.entity() tables missing.
 async function collectStackTableMetas(
   options: TestStackOptions,
 ): Promise<readonly EntityTableMeta[]> {
@@ -401,9 +401,9 @@ export async function setupTestStack(options: TestStackOptions): Promise<TestSta
   const { ensureTemporalPolyfill } = await import("@cosmicdrift/kumiko-framework/time");
   await ensureTemporalPolyfill();
 
-  // Ownership boot-guards (fw#2639 unqualified where-fragments, fw#2626
-  // where-rules on the write path) otherwise run only in the prod boot via
-  // validateBoot, leaving every test stack blind to a broken access map.
+  // Ownership boot-guards (unqualified where-fragments, where-rules on the
+  // write path) otherwise run only in the prod boot via validateBoot, leaving
+  // every test stack blind to a broken access map.
   // Runs after the polyfill (buildEntityTable needs it to derive the probe
   // columns) and before the ephemeral DB/Redis exist, so a throw can't leak
   // a database that nothing will clean up.
@@ -504,16 +504,16 @@ export async function setupTestStack(options: TestStackOptions): Promise<TestSta
 
   // Same AppContext buildServer() gets below (db/redis/searchAdapter/
   // entityCache/masterKeyProvider/fileProviderResolver/extraContext) —
-  // shared so the job context can't drift from the request-path context
-  // (kumiko-framework#1232: a reduced `{ db, registry }` literal let jobs
-  // pass in tests while reaching for fields only prod's context has).
+  // shared so the job context can't drift from the request-path context:
+  // a reduced `{ db, registry }` literal let jobs pass in tests while
+  // reaching for fields only prod's context has.
   //
   // effectiveFeatures deliberately stays OUT of appContext — prod never puts
   // it there either (only dispatcherOptions.effectiveFeatures, consumed by
   // the command-dispatcher — see buildJobRunnerWithHook in entrypoint/
   // index.ts). Putting it here would reintroduce the exact test-vs-prod
-  // drift #1232 fixed: a job/handler reading `ctx.effectiveFeatures` would
-  // pass in tests and break in prod (kumiko-framework#1255).
+  // drift fixed: a job/handler reading `ctx.effectiveFeatures` would pass in
+  // tests and break in prod.
   const appContext = {
     db: testDb.db,
     redis: testRedis.redis,
@@ -547,8 +547,8 @@ export async function setupTestStack(options: TestStackOptions): Promise<TestSta
     jobRunner = createJobRunner({
       registry,
       context: { ...appContext, tracer: observability.tracer, meter: observability.meter },
-      // The real REDIS_URL, not one rebuilt from `.options` — that lost
-      // password/username/tls/path (pr-review kumiko-framework #1036/2).
+      // The real REDIS_URL, not one rebuilt from `.options` — rebuilding it lost
+      // password/username/tls/path.
       redisUrl: testRedis.redisUrl,
       ...(options.jobs.consumerLane !== undefined && { consumerLane: options.jobs.consumerLane }),
       queueNamePrefix:
@@ -582,7 +582,7 @@ export async function setupTestStack(options: TestStackOptions): Promise<TestSta
   // above (createJobRunner() itself opens live BullMQ Queue/lock Redis
   // connections, .start() adds a live worker) — otherwise a failing
   // buildServer()/search-config/etc. leaks that connection and the test
-  // process hangs on exit (pr-review kumiko-framework #1036/1).
+  // process hangs on exit.
   try {
     if (jobRunner) await jobRunner.start();