@cosmicdrift/kumiko-bundled-features 0.306.0 → 0.308.0

package/src/rate-limiting/handlers/status.query.ts

@@ -1,6 +1,6 @@
 import { defineQueryHandler } from "@cosmicdrift/kumiko-framework/engine";
 import { UnprocessableError } from "@cosmicdrift/kumiko-framework/errors";
-import { z } from "zod";
+import * as z from "zod";
 import { RateLimitErrors } from "../constants";
 import { bucketAccessDenied } from "./bucket-access";
 

package/src/readiness/handlers/status.query.ts

@@ -4,7 +4,7 @@ import {
 } from "@cosmicdrift/kumiko-bundled-features/config";
 import { requireSecretsContext } from "@cosmicdrift/kumiko-bundled-features/secrets";
 import { defineQueryHandler } from "@cosmicdrift/kumiko-framework/engine";
-import { z } from "zod";
+import * as z from "zod";
 import { ReadinessQueries } from "../constants";
 
 export type ReadinessMissingSecret = { readonly key: string };

package/src/secrets/feature.ts

@@ -7,7 +7,7 @@ import {
 import { InternalError } from "@cosmicdrift/kumiko-framework/errors";
 import { SETTINGS_HUB_I18N } from "@cosmicdrift/kumiko-framework/i18n";
 import type { SecretsContext } from "@cosmicdrift/kumiko-framework/secrets";
-import { z } from "zod";
+import * as z from "zod";
 import { DEFAULT_SECRETS_ACCESS } from "./constants";
 import { createDeleteHandler } from "./handlers/delete.write";
 import { createListHandler } from "./handlers/list.query";

package/src/secrets/handlers/delete.write.ts

@@ -1,6 +1,6 @@
 import { type AccessRule, defineWriteHandler } from "@cosmicdrift/kumiko-framework/engine";
 import { failNotFound } from "@cosmicdrift/kumiko-framework/errors";
-import { z } from "zod";
+import * as z from "zod";
 import { DEFAULT_SECRETS_ACCESS } from "../constants";
 import { requireSecretsContext } from "../feature";
 

package/src/secrets/handlers/list.query.ts

@@ -1,5 +1,5 @@
 import { type AccessRule, defineQueryHandler } from "@cosmicdrift/kumiko-framework/engine";
-import { z } from "zod";
+import * as z from "zod";
 import { DEFAULT_SECRETS_ACCESS } from "../constants";
 import { tenantSecretsTable } from "../table";
 

package/src/secrets/handlers/set.write.ts

@@ -1,5 +1,5 @@
 import { type AccessRule, defineWriteHandler } from "@cosmicdrift/kumiko-framework/engine";
-import { z } from "zod";
+import * as z from "zod";
 import { DEFAULT_SECRETS_ACCESS } from "../constants";
 import { requireSecretsContext } from "../feature";
 

package/src/secrets/secrets-context.ts

@@ -34,7 +34,7 @@ import {
   withDekCache,
 } from "@cosmicdrift/kumiko-framework/secrets";
 import { generateId } from "@cosmicdrift/kumiko-framework/utils";
-import { z } from "zod";
+import * as z from "zod";
 import { selectTenantSecretEnvelope } from "./db/queries/read";
 import {
   type StoredEnvelope,

package/src/seo/handlers/seo-config.query.ts

@@ -1,5 +1,5 @@
 import { defineQueryHandler } from "@cosmicdrift/kumiko-framework/engine";
-import { z } from "zod";
+import * as z from "zod";
 import { SEO_CONFIG_QN } from "../constants";
 
 // Public read of the seo feature's own tenant-config values, for the

package/src/sessions/handlers/detail.query.ts

@@ -1,6 +1,6 @@
 import { fetchOne } from "@cosmicdrift/kumiko-framework/bun-db";
 import { access, defineQueryHandler } from "@cosmicdrift/kumiko-framework/engine";
-import { z } from "zod";
+import * as z from "zod";
 import { decryptStoredPii } from "../../shared";
 import { userSessionTable } from "../schema/user-session";
 

package/src/sessions/handlers/list.query.ts

@@ -4,7 +4,7 @@ import {
   definePagedQueryHandler,
   MAX_LIST_LIMIT,
 } from "@cosmicdrift/kumiko-framework/engine";
-import { z } from "zod";
+import * as z from "zod";
 import { decryptStoredPii } from "../../shared";
 import { userSessionTable } from "../schema/user-session";
 

package/src/sessions/handlers/mine.query.ts

@@ -1,6 +1,6 @@
 import { selectMany } from "@cosmicdrift/kumiko-framework/bun-db";
 import { definePagedQueryHandler } from "@cosmicdrift/kumiko-framework/engine";
-import { z } from "zod";
+import * as z from "zod";
 import { decryptStoredPii } from "../../shared";
 import { userSessionTable } from "../schema/user-session";
 

package/src/sessions/handlers/revoke-all-for-user.write.ts

@@ -5,7 +5,7 @@ import { UnprocessableError, writeFailure } from "@cosmicdrift/kumiko-framework/
 import { append } from "@cosmicdrift/kumiko-framework/event-store";
 import { generateId } from "@cosmicdrift/kumiko-framework/utils";
 import { Temporal } from "temporal-polyfill";
-import { z } from "zod";
+import * as z from "zod";
 import { userSessionTable } from "../schema/user-session";
 import {
   SESSION_REVOKED_AGGREGATE_TYPE,

package/src/sessions/handlers/revoke-all-others.write.ts

@@ -3,7 +3,7 @@ import { defineWriteHandler } from "@cosmicdrift/kumiko-framework/engine";
 import { UnprocessableError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
 import { generateId } from "@cosmicdrift/kumiko-framework/utils";
 import { Temporal } from "temporal-polyfill";
-import { z } from "zod";
+import * as z from "zod";
 import { SessionErrors } from "../constants";
 import { userSessionTable } from "../schema/user-session";
 import { SESSION_REVOKED_AGGREGATE_TYPE, SESSION_REVOKED_EVENT_QN } from "../session-revoked-event";
@@ -55,6 +55,7 @@ export const revokeAllOthersWrite = defineWriteHandler({
         payload: {
           userId: event.user.id,
           sessionIds: updated.map((row) => row.id),
+          keptSessionId: keepSid,
         },
       });
     }

package/src/sessions/handlers/revoke.write.ts

@@ -3,7 +3,7 @@ import { defineWriteHandler } from "@cosmicdrift/kumiko-framework/engine";
 import { UnprocessableError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
 import { generateId } from "@cosmicdrift/kumiko-framework/utils";
 import { Temporal } from "temporal-polyfill";
-import { z } from "zod";
+import * as z from "zod";
 import { SessionErrors } from "../constants";
 import { userSessionTable } from "../schema/user-session";
 import { SESSION_REVOKED_AGGREGATE_TYPE, SESSION_REVOKED_EVENT_QN } from "../session-revoked-event";

package/src/sessions/session-callbacks.ts

@@ -97,12 +97,36 @@ export function createSessionCallbacks(opts: SessionCallbacksOptions): SessionCa
       // original timestamp. Double-revoke races land here via logout +
       // switch-tenant on the same sid. (Password-change uses a different
       // callback — sessionMassRevoker — and isn't in scope for this guard.)
-      await updateMany(
+      const result = await updateMany<{ userId: string }>(
         db,
         userSessionTable,
         { revokedAt: Temporal.Now.instant() },
         { id: sid, revokedAt: null },
       );
+
+      // This is the ONLY caller of sessionRevoker — logout and tenant-switch
+      // — so it's also the only source of streamScope: "revoked-sessions".
+      // Without this append, a live SSE stream on this exact sid outlives its
+      // own logout because the access-invalidation consumer never hears
+      // about it — same gap sessionMassRevoker closed for
+      // password-change.
+      const revoked = result[0];
+      if (revoked) {
+        const payload = sessionRevokedSchema.parse({
+          userId: revoked.userId,
+          sessionIds: [sid],
+          streamScope: "revoked-sessions",
+        });
+        await append(db, {
+          aggregateId: generateId(),
+          aggregateType: SESSION_REVOKED_AGGREGATE_TYPE,
+          tenantId: SYSTEM_TENANT_ID,
+          expectedVersion: 0,
+          type: SESSION_REVOKED_EVENT_QN,
+          payload,
+          metadata: { userId: revoked.userId },
+        });
+      }
     },
 
     // kumiko-lint-ignore complexity-budget session check + lastSeen refresh on hot path
@@ -244,6 +268,7 @@ export function createSessionCallbacks(opts: SessionCallbacksOptions): SessionCa
         const payload = sessionRevokedSchema.parse({
           userId,
           sessionIds: result.map((row: { id: string }) => row.id),
+          keptSessionId: currentSid,
         });
         await append(db, {
           aggregateId: generateId(),

package/src/sessions/session-revoked-event.ts

@@ -1,4 +1,4 @@
-import { z } from "zod";
+import * as z from "zod";
 
 // Lightweight custom event appended alongside the direct-write
 // updateMany() in revoke.write.ts / revoke-all-others.write.ts /
@@ -24,6 +24,14 @@ export const SESSION_REVOKED_AGGREGATE_TYPE = "user-session-revocation" as const
 export const sessionRevokedSchema = z.object({
   userId: z.string().min(1),
   sessionIds: z.array(z.uuid()).min(1),
+  // The caller's own session a "revoke all others" write spared. Optional so
+  // events appended before it existed still replay.
+  keptSessionId: z.uuid().optional(),
+  // Set only by the raw sessionRevoker callback (logout / tenant-switch) —
+  // tells the access-invalidation consumer to close exactly `sessionIds`
+  // instead of the userwide default every other source keeps using.
+  // Optional so events appended before it existed still replay unscoped.
+  streamScope: z.literal("revoked-sessions").optional(),
 });
 
 export type SessionRevokedPayload = z.infer<typeof sessionRevokedSchema>;

package/src/shared/__tests__/row-bound-grant.integration.test.ts

@@ -10,7 +10,7 @@ import { executeRawQuery } from "@cosmicdrift/kumiko-framework/db";
 import { defineFeature } from "@cosmicdrift/kumiko-framework/engine";
 import { UnprocessableError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
 import { setupTestStack, type TestStack, testTenantId } from "@cosmicdrift/kumiko-framework/stack";
-import { z } from "zod";
+import * as z from "zod";
 import { redeemRowBoundGrant, signRowBoundGrant } from "../row-bound-grant";
 
 const TABLE = "row_bound_grant_demo";

package/src/step-dispatcher/mail-runner.ts

@@ -2,7 +2,7 @@
 // Production wiring (mail-foundation transport) is a follow-up; the
 // default impl throws so a missing setMailRunner is loud, not silent.
 
-import { z } from "zod";
+import * as z from "zod";
 
 export const mailSpecSchema = z.object({
   to: z.union([z.string(), z.array(z.string())]),

package/src/step-dispatcher/webhook-runner.ts

@@ -1,7 +1,7 @@
 // Webhook execution logic — separated from feature.ts so tests can stub
 // the fetch without touching the MSP wiring.
 
-import { z } from "zod";
+import * as z from "zod";
 
 export const webhookSpecSchema = z.object({
   url: z.string(),

package/src/subscription-mollie/feature.ts

@@ -42,7 +42,7 @@
 import type { SubscriptionProviderPlugin } from "@cosmicdrift/kumiko-bundled-features/billing-foundation";
 import { defineFeature, type FeatureDefinition } from "@cosmicdrift/kumiko-framework/engine";
 import { createMollieClient } from "@mollie/api-client";
-import { z } from "zod";
+import * as z from "zod";
 import { MOLLIE_PROVIDER_NAME, SUBSCRIPTION_MOLLIE_FEATURE } from "./constants";
 import { createMollieCheckoutSession, type MolliePriceConfig } from "./plugin-methods";
 import { type MollieClientShape, verifyAndParseMollieWebhook } from "./verify-webhook";

package/src/subscription-stripe/feature.ts

@@ -38,7 +38,7 @@ import {
   defineFeature,
   type FeatureDefinition,
 } from "@cosmicdrift/kumiko-framework/engine";
-import { z } from "zod";
+import * as z from "zod";
 import {
   STRIPE_API_KEY_CONFIG,
   STRIPE_BILLING_LIVE_CONFIG,

package/src/tags/schemas.ts

@@ -1,4 +1,4 @@
-import { z } from "zod";
+import * as z from "zod";
 
 export const createTagPayloadSchema = z.object({
   name: z.string().trim().min(1).max(64),

package/src/template-resolver/handlers/by-slug.query.ts

@@ -3,7 +3,7 @@ import {
   crossTenantOverrideDenied,
   defineQueryHandler,
 } from "@cosmicdrift/kumiko-framework/engine";
-import { z } from "zod";
+import * as z from "zod";
 import { TEXT_BLOCK_KIND } from "../constants";
 import { type TemplateResourceRow, templateResourcesTable } from "../table";
 

package/src/template-resolver/handlers/by-tenant.query.ts

@@ -4,7 +4,7 @@ import {
   crossTenantOverrideDenied,
   defineQueryHandler,
 } from "@cosmicdrift/kumiko-framework/engine";
-import { z } from "zod";
+import * as z from "zod";
 import { TEXT_BLOCK_KIND } from "../constants";
 import { type TemplateResourceRow, templateResourcesTable } from "../table";
 

package/src/template-resolver/handlers/collection-item.query.ts

@@ -4,7 +4,7 @@ import {
   crossTenantOverrideDenied,
   defineQueryHandler,
 } from "@cosmicdrift/kumiko-framework/engine";
-import { z } from "zod";
+import * as z from "zod";
 import {
   type CollectionEntryRow,
   collectionStore,

package/src/template-resolver/handlers/collection-list.query.ts

@@ -5,7 +5,7 @@ import {
   crossTenantOverrideDenied,
   defineQueryHandler,
 } from "@cosmicdrift/kumiko-framework/engine";
-import { z } from "zod";
+import * as z from "zod";
 import {
   type CollectionEntryRow,
   collectionStore,

package/src/template-resolver/handlers/collection-set.write.ts

@@ -6,7 +6,7 @@ import {
   type TenantId,
 } from "@cosmicdrift/kumiko-framework/engine";
 import { writeFailure } from "@cosmicdrift/kumiko-framework/errors";
-import { z } from "zod";
+import * as z from "zod";
 import {
   type CollectionEntryRow,
   collectionStore,

package/src/template-resolver/handlers/find-by-id.query.ts

@@ -1,6 +1,6 @@
 import { fetchOne } from "@cosmicdrift/kumiko-framework/bun-db";
 import { defineQueryHandler } from "@cosmicdrift/kumiko-framework/engine";
-import { z } from "zod";
+import * as z from "zod";
 import { type TemplateResourceRow, templateResourcesTable } from "../table";
 
 // Admin-Lookup für UI-Edit-Flow. Returnt das raw Template inkl. draft/

package/src/template-resolver/handlers/list.query.ts

@@ -1,6 +1,6 @@
 import { selectMany } from "@cosmicdrift/kumiko-framework/bun-db";
 import { defineQueryHandler } from "@cosmicdrift/kumiko-framework/engine";
-import { z } from "zod";
+import * as z from "zod";
 import { RENDER_KINDS, TEMPLATE_STATUSES } from "../constants";
 import { type TemplateResourceRow, templateResourcesTable } from "../table";
 

package/src/template-resolver/handlers/set.write.ts

@@ -6,7 +6,7 @@ import {
   type TenantId,
 } from "@cosmicdrift/kumiko-framework/engine";
 import { writeFailure } from "@cosmicdrift/kumiko-framework/errors";
-import { z } from "zod";
+import * as z from "zod";
 import { TEMPLATE_KINDS, TEXT_BLOCK_KIND } from "../constants";
 import { type TemplateResourceRow, templateResourcesTable } from "../table";
 import { contentFormatSchema, executor, folderSchema, localeSchema, slugSchema } from "./shared";

package/src/template-resolver/handlers/shared.ts

@@ -1,5 +1,5 @@
 import { createEventStoreExecutor } from "@cosmicdrift/kumiko-framework/db";
-import { z } from "zod";
+import * as z from "zod";
 import { CONTENT_FORMATS, TEMPLATE_STATUSES, UPSERT_KINDS } from "../constants";
 import { templateResourceEntity, templateResourcesTable } from "../table";
 

package/src/template-resolver/handlers/toggle-status.write.ts

@@ -1,7 +1,7 @@
 import { fetchOne } from "@cosmicdrift/kumiko-framework/bun-db";
 import { defineWriteHandler } from "@cosmicdrift/kumiko-framework/engine";
 import { NotFoundError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
-import { z } from "zod";
+import * as z from "zod";
 import type { TemplateResourceRow } from "../table";
 import { templateResourcesTable } from "../table";
 import { executor } from "./shared";

package/src/template-resolver/handlers/upsert-tenant.write.ts

@@ -6,7 +6,7 @@ import {
   type TenantId,
 } from "@cosmicdrift/kumiko-framework/engine";
 import { AccessDeniedError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
-import { z } from "zod";
+import * as z from "zod";
 import type { TemplateResourceRow } from "../table";
 import { templateResourcesTable } from "../table";
 import { executor, upsertPayloadSchema } from "./shared";

package/src/tenant/__tests__/tenant-timezone-boot.integration.test.ts

@@ -13,7 +13,7 @@ import {
   testTenantId,
   unsafePushTables,
 } from "@cosmicdrift/kumiko-framework/stack";
-import { z } from "zod";
+import * as z from "zod";
 import { createConfigAccessorFactory, createConfigFeature } from "../../config/feature";
 import { createConfigResolver } from "../../config/resolver";
 import { configValuesTable } from "../../config/table";

package/src/tenant/handlers/active-tenant-ids.query.ts

@@ -5,7 +5,7 @@ import {
   type TenantId,
 } from "@cosmicdrift/kumiko-framework/engine";
 import { InternalError } from "@cosmicdrift/kumiko-framework/errors";
-import { z } from "zod";
+import * as z from "zod";
 import { tenantTable } from "../schema/tenant";
 
 export const activeTenantIdsQuery = defineQueryHandler({

package/src/tenant/handlers/add-member.write.ts

@@ -2,7 +2,7 @@ import { fetchOne } from "@cosmicdrift/kumiko-framework/bun-db";
 import { createEventStoreExecutor } from "@cosmicdrift/kumiko-framework/db";
 import { defineWriteHandler } from "@cosmicdrift/kumiko-framework/engine";
 import { ConflictError, InternalError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
-import { z } from "zod";
+import * as z from "zod";
 import { TenantErrors } from "../constants";
 import { findForbiddenMembershipRole, reservedMembershipRoleError } from "../membership-roles";
 import { tenantMembershipEntity, tenantMembershipsTable } from "../membership-table";

package/src/tenant/handlers/cancel-invitation.write.ts

@@ -14,7 +14,7 @@ import { fetchOne } from "@cosmicdrift/kumiko-framework/bun-db";
 import { createEventStoreExecutor } from "@cosmicdrift/kumiko-framework/db";
 import { access, defineWriteHandler } from "@cosmicdrift/kumiko-framework/engine";
 import { InternalError, NotFoundError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
-import { z } from "zod";
+import * as z from "zod";
 // kumiko-lint-ignore cross-feature-import cancel needs invite-token-store for Redis cleanup
 import { invalidateExistingInviteToken } from "../../auth-email-password/invite-token-store";
 import {

package/src/tenant/handlers/create.write.ts

@@ -1,7 +1,7 @@
 import { createEventStoreExecutor } from "@cosmicdrift/kumiko-framework/db";
 import { defineWriteHandler } from "@cosmicdrift/kumiko-framework/engine";
 import { InternalError } from "@cosmicdrift/kumiko-framework/errors";
-import { z } from "zod";
+import * as z from "zod";
 import { tenantEntity, tenantTable } from "../schema/tenant";
 
 const crud = createEventStoreExecutor(tenantTable, tenantEntity, { entityName: "tenant" });

package/src/tenant/handlers/invitations.query.ts

@@ -1,7 +1,7 @@
 import { selectMany } from "@cosmicdrift/kumiko-framework/bun-db";
 import { access, defineQueryHandler } from "@cosmicdrift/kumiko-framework/engine";
 import { InternalError } from "@cosmicdrift/kumiko-framework/errors";
-import { z } from "zod";
+import * as z from "zod";
 import { decryptStoredPii, mapWithConcurrency } from "../../shared";
 import { INVITATION_STATUS, tenantInvitationsTable } from "../invitation-table";
 

package/src/tenant/handlers/list.query.ts

@@ -1,7 +1,7 @@
 import { createEventStoreExecutor } from "@cosmicdrift/kumiko-framework/db";
 import { defineQueryHandler } from "@cosmicdrift/kumiko-framework/engine";
 import { InternalError } from "@cosmicdrift/kumiko-framework/errors";
-import { z } from "zod";
+import * as z from "zod";
 import { tenantEntity, tenantTable } from "../schema/tenant";
 
 const crud = createEventStoreExecutor(tenantTable, tenantEntity, { entityName: "tenant" });

package/src/tenant/handlers/me.query.ts

@@ -1,7 +1,7 @@
 import { fetchOne } from "@cosmicdrift/kumiko-framework/bun-db";
 import { defineQueryHandler } from "@cosmicdrift/kumiko-framework/engine";
 import { InternalError } from "@cosmicdrift/kumiko-framework/errors";
-import { z } from "zod";
+import * as z from "zod";
 import { tenantTable } from "../schema/tenant";
 
 // Direct query — query handlers don't have a tenant-crud handle. A direct

package/src/tenant/handlers/member-directory.query.ts

@@ -6,7 +6,7 @@ import {
   MAX_LIST_LIMIT,
 } from "@cosmicdrift/kumiko-framework/engine";
 import { InternalError } from "@cosmicdrift/kumiko-framework/errors";
-import { z } from "zod";
+import * as z from "zod";
 import { decryptStoredPii, mapWithConcurrency } from "../../shared";
 import { userTable } from "../../user";
 import { tenantMembershipsTable } from "../membership-table";

package/src/tenant/handlers/members.query.ts

@@ -2,7 +2,7 @@ import { selectMany } from "@cosmicdrift/kumiko-framework/bun-db";
 import { access, defineQueryHandler } from "@cosmicdrift/kumiko-framework/engine";
 import { InternalError } from "@cosmicdrift/kumiko-framework/errors";
 import { parseRoles } from "@cosmicdrift/kumiko-framework/utils";
-import { z } from "zod";
+import * as z from "zod";
 import { decryptStoredPii, mapWithConcurrency } from "../../shared";
 import { userTable } from "../../user";
 import { tenantMembershipsTable } from "../membership-table";

package/src/tenant/handlers/memberships.query.ts

@@ -2,7 +2,7 @@ import { selectMany } from "@cosmicdrift/kumiko-framework/bun-db";
 import { defineQueryHandler, SYSTEM_ROLE } from "@cosmicdrift/kumiko-framework/engine";
 import { InternalError } from "@cosmicdrift/kumiko-framework/errors";
 import { parseRoles } from "@cosmicdrift/kumiko-framework/utils";
-import { z } from "zod";
+import * as z from "zod";
 import { tenantMembershipsTable } from "../membership-table";
 import { tenantTable } from "../schema/tenant";
 

package/src/tenant/handlers/remove-member.write.ts

@@ -7,7 +7,7 @@ import {
 } from "@cosmicdrift/kumiko-framework/engine";
 import { InternalError, NotFoundError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
 import { parseRoles } from "@cosmicdrift/kumiko-framework/utils";
-import { z } from "zod";
+import * as z from "zod";
 import { assertNotLastTenantAdmin } from "../last-tenant-admin";
 import { tenantMembershipEntity, tenantMembershipsTable } from "../membership-table";
 

package/src/tenant/handlers/resolve-user-ids.query.ts

@@ -1,7 +1,7 @@
 import { selectMany } from "@cosmicdrift/kumiko-framework/bun-db";
 import { defineQueryHandler, SYSTEM_ROLE } from "@cosmicdrift/kumiko-framework/engine";
 import { InternalError } from "@cosmicdrift/kumiko-framework/errors";
-import { z } from "zod";
+import * as z from "zod";
 import { tenantMembershipsTable } from "../membership-table";
 
 // Cross-feature query: resolve user IDs by tenantId or userId.

package/src/tenant/handlers/team-list.query.ts

@@ -7,7 +7,7 @@ import {
 import { InternalError } from "@cosmicdrift/kumiko-framework/errors";
 import { parseRoles } from "@cosmicdrift/kumiko-framework/utils";
 import { Temporal } from "temporal-polyfill";
-import { z } from "zod";
+import * as z from "zod";
 import { userSessionTable } from "../../sessions";
 import { decryptStoredPii, mapWithConcurrency } from "../../shared";
 import { userTable } from "../../user";

package/src/tenant/handlers/tenant-directory.query.ts

@@ -5,7 +5,7 @@ import {
   MAX_LIST_LIMIT,
 } from "@cosmicdrift/kumiko-framework/engine";
 import { InternalError } from "@cosmicdrift/kumiko-framework/errors";
-import { z } from "zod";
+import * as z from "zod";
 import { tenantTable } from "../schema/tenant";
 import { isSystemAdmin } from "./is-system-admin";
 

package/src/tenant/handlers/toggle-enabled.write.ts

@@ -1,7 +1,7 @@
 import { createEventStoreExecutor } from "@cosmicdrift/kumiko-framework/db";
 import { defineWriteHandler } from "@cosmicdrift/kumiko-framework/engine";
 import { InternalError } from "@cosmicdrift/kumiko-framework/errors";
-import { z } from "zod";
+import * as z from "zod";
 import { tenantEntity, tenantTable } from "../schema/tenant";
 
 const crud = createEventStoreExecutor(tenantTable, tenantEntity, { entityName: "tenant" });

package/src/tenant/handlers/update-member-roles.write.ts

@@ -14,7 +14,7 @@ import {
   writeFailure,
 } from "@cosmicdrift/kumiko-framework/errors";
 import { parseRoles } from "@cosmicdrift/kumiko-framework/utils";
-import { z } from "zod";
+import * as z from "zod";
 import { assertNotLastTenantAdmin } from "../last-tenant-admin";
 import {
   findForbiddenMembershipRole,

package/src/tenant/handlers/update.write.ts

@@ -6,7 +6,7 @@ import {
   NotFoundError,
   writeFailure,
 } from "@cosmicdrift/kumiko-framework/errors";
-import { z } from "zod";
+import * as z from "zod";
 import { tenantEntity, tenantTable } from "../schema/tenant";
 
 const crud = createEventStoreExecutor(tenantTable, tenantEntity, { entityName: "tenant" });

package/src/tenant-handover/events.ts

@@ -1,4 +1,4 @@
-import { z } from "zod";
+import * as z from "zod";
 
 // Audit trail for a completed claim (kumiko-framework#3035's audit-entry
 // requirement: names the source tenant, destination tenant, entities and

package/src/tenant-handover/handlers/claim.write.ts

@@ -7,7 +7,7 @@ import {
 import { defineWriteHandler } from "@cosmicdrift/kumiko-framework/engine";
 import { UnprocessableError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
 import { generateId } from "@cosmicdrift/kumiko-framework/utils";
-import { z } from "zod";
+import * as z from "zod";
 import { redeemRowBoundGrant } from "../../shared";
 import { TENANT_HANDOVER_CLAIM_AGGREGATE_TYPE, TENANT_HANDOVER_CLAIMED_EVENT_QN } from "../events";
 import { tenantHandoverPurpose } from "../grant";

package/src/tenant-lifecycle/events.ts

@@ -1,4 +1,4 @@
-import { z } from "zod";
+import * as z from "zod";
 
 export const destructionRequestedSchema = z.object({
   requestedBy: z.uuid(),

package/src/tenant-lifecycle/handlers/cancel-destruction.write.ts

@@ -2,7 +2,7 @@ import { fetchOne } from "@cosmicdrift/kumiko-framework/bun-db";
 import { createEventStoreExecutor } from "@cosmicdrift/kumiko-framework/db";
 import { defineWriteHandler } from "@cosmicdrift/kumiko-framework/engine";
 import { UnprocessableError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
-import { z } from "zod";
+import * as z from "zod";
 import { isWithinGracePeriod } from "../../shared";
 import { type TenantLifecycleStatus, tenantEntity, tenantTable } from "../../tenant";
 import { DESTRUCTION_CANCELLED_EVENT_QN } from "../constants";

package/src/tenant-lifecycle/handlers/request-destruction.write.ts

@@ -4,7 +4,7 @@ import { createEventStoreExecutor } from "@cosmicdrift/kumiko-framework/db";
 import { defineWriteHandler } from "@cosmicdrift/kumiko-framework/engine";
 import { UnprocessableError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
 import { getTemporal } from "@cosmicdrift/kumiko-framework/time";
-import { z } from "zod";
+import * as z from "zod";
 import { resolveProfileForTenant } from "../../compliance-profiles";
 import { type TenantLifecycleStatus, tenantEntity, tenantTable } from "../../tenant";
 import { DESTRUCTION_REQUESTED_EVENT_QN } from "../constants";