@cosmicdrift/kumiko-bundled-features 0.367.0 → 0.368.0

package/dist/ledger/feature.d.ts

@@ -2,7 +2,7 @@ import { type AccessRule } from "@cosmicdrift/kumiko-framework/engine";
 type LedgerToggleable = {
     readonly default: boolean;
 };
-export declare const ledgerFeature: import("@cosmicdrift/kumiko-types/feature").FeatureDefinition & {
+declare const defaultLedgerFeature: import("@cosmicdrift/kumiko-types/feature").FeatureDefinition & {
     readonly exports: void;
 };
 export type LedgerFeatureOptions = {
@@ -15,5 +15,9 @@ export type LedgerFeatureOptions = {
      *  for fail-closed gating. Omit to keep the ledger always-on (default). */
     readonly toggleable?: LedgerToggleable;
 };
-export declare function createLedgerFeature(opts?: LedgerFeatureOptions): typeof ledgerFeature;
+export declare function createLedgerFeature(opts?: LedgerFeatureOptions): typeof defaultLedgerFeature;
+/** @deprecated Use createLedgerFeature(). Run `bun kumiko-upgrade --apply`. Removed in the first release after 2026-10-29. */
+export declare const ledgerFeature: import("@cosmicdrift/kumiko-types/feature").FeatureDefinition & {
+    readonly exports: void;
+};
 export {};

package/dist/ledger/feature.js

@@ -90,7 +90,7 @@ function registerLedger(r, access, toggleable) {
     r.queryHandler(createIncomeStatementHandler(access));
     r.queryHandler(createBalanceSheetHandler(access));
 }
-export const ledgerFeature = defineFeature(LEDGER_FEATURE_NAME, (r) => registerLedger(r, DEFAULT_LEDGER_ACCESS, undefined));
+const defaultLedgerFeature = defineFeature(LEDGER_FEATURE_NAME, (r) => registerLedger(r, DEFAULT_LEDGER_ACCESS, undefined));
 function resolveAccess(opts) {
     if (opts.access !== undefined)
         return opts.access;
@@ -102,8 +102,10 @@ function resolveAccess(opts) {
 // rebuild). access/roles/toggleable build a fresh feature-definition.
 export function createLedgerFeature(opts = {}) {
     if (opts.access === undefined && opts.roles === undefined && opts.toggleable === undefined) {
-        return ledgerFeature;
+        return defaultLedgerFeature;
     }
     const access = resolveAccess(opts);
     return defineFeature(LEDGER_FEATURE_NAME, (r) => registerLedger(r, access, opts.toggleable));
 }
+/** @deprecated Use createLedgerFeature(). Run `bun kumiko-upgrade --apply`. Removed in the first release after 2026-10-29. */
+export const ledgerFeature = createLedgerFeature();

package/dist/mail-foundation/feature.d.ts

@@ -53,6 +53,13 @@ declare module "@cosmicdrift/kumiko-framework/engine" {
         [MAIL_TRANSPORT_EXTENSION]: MailTransportPlugin;
     }
 }
+export declare function createMailFoundationFeature(): import("@cosmicdrift/kumiko-types/feature").FeatureDefinition & {
+    readonly exports: {
+        /** Config-key-handle for the provider-selector. */
+        providerConfigKey: import("@cosmicdrift/kumiko-types/config").ConfigKeyHandle<"text">;
+    };
+};
+/** @deprecated Use createMailFoundationFeature(). Run `bun kumiko-upgrade --apply`. Removed in the first release after 2026-10-29. */
 export declare const mailFoundationFeature: import("@cosmicdrift/kumiko-types/feature").FeatureDefinition & {
     readonly exports: {
         /** Config-key-handle for the provider-selector. */

package/dist/mail-foundation/feature.js

@@ -45,47 +45,53 @@ export function isMailTransportPlugin(o) {
 // =============================================================================
 // Feature-definition
 // =============================================================================
-export const mailFoundationFeature = defineFeature(FEATURE_NAME, (r) => {
-    r.describe("Defines the `mailTransport` extension point and a per-tenant `provider` config key that selects which registered transport plugin to use at runtime. Call `createTransportForTenant(ctx, tenantId)` to get an `EmailTransport` ready for sending \u2014 use this feature together with at least one `mail-transport-*` feature; use `delivery` + `channel-email` instead when you need the full notification pipeline with delivery attempts and user preferences. Pass `tenantMailTransport` as `tenantTransport` to `createChannelEmailFeature` so a tenant with a provider configured sends delivery mails through its own transport and other tenants through the app transport.");
-    r.uiHints({
-        displayLabel: "Mail Transport Foundation",
-        category: "notifications",
-        recommended: false,
-    });
-    r.requires({ features: ["config"] });
-    // Plugin extension-point. Provider-features register here. The
-    // entityName at registration time becomes the value tenants pick in
-    // `provider` config-key (e.g. "smtp", "brevo-api").
-    r.extendsRegistrar(MAIL_TRANSPORT_EXTENSION, {
-        onRegister: () => {
-            // No side-effects at register-time — the registry stores the
-            // usage, factory looks it up at request-time. Same shape as
-            // delivery's extendsRegistrar.
-        },
-    });
-    // Provider-selector. Default empty so the boot-validator throws if a
-    // tenant tries to send mail without first picking + setting up a
-    // provider — better than a silent fallback. The actual list of valid
-    // values lives in the registered plugins, not here — Designer-UI can
-    // render `getExtensionUsages("mailTransport").map(u => u.entityName)`
-    // as the option-list.
-    const providerConfigKey = r.config("provider", createTenantConfig("text", {
-        default: "",
-        // required: ohne gewählten Provider wirft createTransportForTenant —
-        // readiness meldete vorher ready:true und der erste Mail-Send
-        // lieferte den UnconfiguredError (280/1).
-        required: true,
-        write: access.roles("TenantAdmin", "SystemAdmin"),
-        read: access.roles("TenantAdmin", "SystemAdmin", "User"),
-    }));
-    // Readiness gating: transport-plugins' required keys/secrets count only
-    // while their plugin is the one this key selects.
-    r.extensionSelector(MAIL_TRANSPORT_EXTENSION, providerConfigKey);
-    return {
-        /** Config-key-handle for the provider-selector. */
-        providerConfigKey,
-    };
-});
+export function createMailFoundationFeature() {
+    return defineFeature(FEATURE_NAME, (r) => {
+        r.describe("Defines the `mailTransport` extension point and a per-tenant `provider` config key that selects which registered transport plugin to use at runtime. Call `createTransportForTenant(ctx, tenantId)` to get an `EmailTransport` ready for sending \u2014 use this feature together with at least one `mail-transport-*` feature; use `delivery` + `channel-email` instead when you need the full notification pipeline with delivery attempts and user preferences. Pass `tenantMailTransport` as `tenantTransport` to `createChannelEmailFeature` so a tenant with a provider configured sends delivery mails through its own transport and other tenants through the app transport.");
+        r.uiHints({
+            displayLabel: "Mail Transport Foundation",
+            category: "notifications",
+            recommended: false,
+        });
+        r.requires({ features: ["config"] });
+        // Plugin extension-point. Provider-features register here. The
+        // entityName at registration time becomes the value tenants pick in
+        // `provider` config-key (e.g. "smtp", "brevo-api").
+        r.extendsRegistrar(MAIL_TRANSPORT_EXTENSION, {
+            onRegister: () => {
+                // No side-effects at register-time — the registry stores the
+                // usage, factory looks it up at request-time. Same shape as
+                // delivery's extendsRegistrar.
+            },
+        });
+        // Provider-selector. Default empty so the boot-validator throws if a
+        // tenant tries to send mail without first picking + setting up a
+        // provider — better than a silent fallback. The actual list of valid
+        // values lives in the registered plugins, not here — Designer-UI can
+        // render `getExtensionUsages("mailTransport").map(u => u.entityName)`
+        // as the option-list.
+        const providerConfigKey = r.config("provider", createTenantConfig("text", {
+            default: "",
+            // required: without a chosen provider createTransportForTenant throws —
+            // readiness used to report ready:true and the first mail send
+            // surfaced the UnconfiguredError (280/1).
+            required: true,
+            write: access.roles("TenantAdmin", "SystemAdmin"),
+            read: access.roles("TenantAdmin", "SystemAdmin", "User"),
+        }));
+        // Readiness gating: transport-plugins' required keys/secrets count only
+        // while their plugin is the one this key selects.
+        r.extensionSelector(MAIL_TRANSPORT_EXTENSION, providerConfigKey);
+        return {
+            /** Config-key-handle for the provider-selector. */
+            providerConfigKey,
+        };
+    }, { dedupeOptions: {} });
+}
+// The typed handles below come from one shared instance; each factory call builds its own handle objects.
+const sharedMailFoundationFeature = createMailFoundationFeature();
+/** @deprecated Use createMailFoundationFeature(). Run `bun kumiko-upgrade --apply`. Removed in the first release after 2026-10-29. */
+export const mailFoundationFeature = sharedMailFoundationFeature;
 // =============================================================================
 // Transport-factory — looks up the registered plugin + delegates
 // =============================================================================
@@ -121,7 +127,7 @@ export async function createTransportForTenantIfConfigured(ctx, tenantId, handle
     if (!ctx.registry) {
         throw new Error(`${handlerName}: ctx.registry is missing — required to look up registered mail-transport plugins`);
     }
-    const provider = requireDefined(await ctxConfig(mailFoundationFeature.exports.providerConfigKey), FEATURE_NAME, "provider"); // @cast-boundary engine-payload
+    const provider = requireDefined(await ctxConfig(sharedMailFoundationFeature.exports.providerConfigKey), FEATURE_NAME, "provider"); // @cast-boundary engine-payload
     if (provider.length === 0)
         return null;
     const usages = ctx.registry.getExtensionUsages(MAIL_TRANSPORT_EXTENSION);

package/dist/mail-foundation/index.d.ts

@@ -1 +1 @@
-export { createTransportForTenant, createTransportForTenantIfConfigured, isMailTransportPlugin, MAIL_TRANSPORT_EXTENSION, type MailTransportContext, type MailTransportPlugin, mailFoundationFeature, type TenantMailTransportScope, tenantMailTransport, } from "./feature.js";
+export { createMailFoundationFeature, createTransportForTenant, createTransportForTenantIfConfigured, isMailTransportPlugin, MAIL_TRANSPORT_EXTENSION, type MailTransportContext, type MailTransportPlugin, mailFoundationFeature, type TenantMailTransportScope, tenantMailTransport, } from "./feature.js";

package/dist/mail-foundation/index.js

@@ -6,4 +6,4 @@
 //     up the registered transport-plugin, returns its EmailTransport
 //   - `MailTransportPlugin` — type that provider-features implement
 //     when registering via `r.useExtension("mailTransport", ...)`
-export { createTransportForTenant, createTransportForTenantIfConfigured, isMailTransportPlugin, MAIL_TRANSPORT_EXTENSION, mailFoundationFeature, tenantMailTransport, } from "./feature.js";
+export { createMailFoundationFeature, createTransportForTenant, createTransportForTenantIfConfigured, isMailTransportPlugin, MAIL_TRANSPORT_EXTENSION, mailFoundationFeature, tenantMailTransport, } from "./feature.js";

package/dist/mail-transport-inmemory/feature.d.ts

@@ -9,6 +9,10 @@ export declare function getInbox(tenantId: string): readonly EmailMessage[];
  * Szenarien).
  */
 export declare function clearInbox(tenantId: string): void;
+export declare function createMailTransportInMemoryFeature(): import("@cosmicdrift/kumiko-types/feature").FeatureDefinition & {
+    readonly exports: void;
+};
+/** @deprecated Use createMailTransportInMemoryFeature(). Run `bun kumiko-upgrade --apply`. Removed in the first release after 2026-10-29. */
 export declare const mailTransportInMemoryFeature: import("@cosmicdrift/kumiko-types/feature").FeatureDefinition & {
     readonly exports: void;
 };

package/dist/mail-transport-inmemory/feature.js

@@ -60,19 +60,23 @@ export function clearInbox(tenantId) {
 // =============================================================================
 // Feature-definition
 // =============================================================================
-export const mailTransportInMemoryFeature = defineFeature(FEATURE_NAME, (r) => {
-    r.describe('Registers an in-process `"inmemory"` provider for `mail-foundation` that buffers sent mails per tenant instead of contacting an SMTP server. Use `getInbox(tenantId)` and `clearInbox(tenantId)` in demo apps and tests; not for production (buffer is process-memory, lost on restart).');
-    // Kein requires auf "config" oder "secrets" — der
-    // In-Memory-Transport hat keine Config (nichts zu konfigurieren) und
-    // kein Secret. Der einzige hard-require ist mail-foundation, das den
-    // extension-point "mailTransport" definiert.
-    r.requires({ features: ["mail-foundation"] });
-    const plugin = {
-        build: async (_ctx, tenantId) => {
-            // Returnt den per-tenant Buffer. Identitätsstabil zwischen calls
-            // damit die Demo-Inbox accumulated bleibt.
-            return getOrCreateTransportForTenant(tenantId);
-        }, // @wrapper-known semantic-alias
-    };
-    r.useExtension(MAIL_TRANSPORT_EXTENSION, "inmemory", plugin);
-});
+export function createMailTransportInMemoryFeature() {
+    return defineFeature(FEATURE_NAME, (r) => {
+        r.describe('Registers an in-process `"inmemory"` provider for `mail-foundation` that buffers sent mails per tenant instead of contacting an SMTP server. Use `getInbox(tenantId)` and `clearInbox(tenantId)` in demo apps and tests; not for production (buffer is process-memory, lost on restart).');
+        // Kein requires auf "config" oder "secrets" — der
+        // In-Memory-Transport hat keine Config (nichts zu konfigurieren) und
+        // kein Secret. Der einzige hard-require ist mail-foundation, das den
+        // extension-point "mailTransport" definiert.
+        r.requires({ features: ["mail-foundation"] });
+        const plugin = {
+            build: async (_ctx, tenantId) => {
+                // Returns the per-tenant buffer. Identity-stable across calls so the
+                // demo inbox keeps accumulating.
+                return getOrCreateTransportForTenant(tenantId);
+            }, // @wrapper-known semantic-alias
+        };
+        r.useExtension(MAIL_TRANSPORT_EXTENSION, "inmemory", plugin);
+    }, { dedupeOptions: {} });
+}
+/** @deprecated Use createMailTransportInMemoryFeature(). Run `bun kumiko-upgrade --apply`. Removed in the first release after 2026-10-29. */
+export const mailTransportInMemoryFeature = createMailTransportInMemoryFeature();

package/dist/mail-transport-inmemory/index.d.ts

@@ -1 +1 @@
-export { clearInbox, getInbox, mailTransportInMemoryFeature } from "./feature.js";
+export { clearInbox, createMailTransportInMemoryFeature, getInbox, mailTransportInMemoryFeature, } from "./feature.js";

package/dist/mail-transport-inmemory/index.js

@@ -1,2 +1,2 @@
 // Public API of the mail-transport-inmemory bundled-feature.
-export { clearInbox, getInbox, mailTransportInMemoryFeature } from "./feature.js";
+export { clearInbox, createMailTransportInMemoryFeature, getInbox, mailTransportInMemoryFeature, } from "./feature.js";

package/dist/mail-transport-smtp/feature.d.ts

@@ -3,6 +3,22 @@ export declare const mailTransportSmtpEnvSchema: import("zod").ZodObject<{
     KUMIKO_MAIL_ALLOWED_PRIVATE_HOSTS: import("zod").ZodOptional<import("zod").ZodString>;
 }, import("zod/v4/core").$strip>;
 export declare function setSmtpMailHostLookup(fn: typeof lookup | undefined): void;
+export declare function createMailTransportSmtpFeature(): import("@cosmicdrift/kumiko-types/feature").FeatureDefinition & {
+    readonly exports: {
+        /** Config-key-handles — typed reads via `ctx.config(...)` in
+         *  consumer handlers. */
+        configKeys: {
+            readonly host: import("@cosmicdrift/kumiko-types/config").ConfigKeyHandle<"text">;
+            readonly port: import("@cosmicdrift/kumiko-types/config").ConfigKeyHandle<"number">;
+            readonly secure: import("@cosmicdrift/kumiko-types/config").ConfigKeyHandle<"boolean">;
+            readonly from: import("@cosmicdrift/kumiko-types/config").ConfigKeyHandle<"text">;
+            readonly authUser: import("@cosmicdrift/kumiko-types/config").ConfigKeyHandle<"text">;
+        };
+        /** Secret-handle for the SMTP password. */
+        password: import("@cosmicdrift/kumiko-types/feature").SecretKeyHandle;
+    };
+};
+/** @deprecated Use createMailTransportSmtpFeature(). Run `bun kumiko-upgrade --apply`. Removed in the first release after 2026-10-29. */
 export declare const mailTransportSmtpFeature: import("@cosmicdrift/kumiko-types/feature").FeatureDefinition & {
     readonly exports: {
         /** Config-key-handles — typed reads via `ctx.config(...)` in

package/dist/mail-transport-smtp/feature.js

@@ -50,82 +50,88 @@ export function setSmtpMailHostLookup(fn) {
 // =============================================================================
 // Feature-definition
 // =============================================================================
-export const mailTransportSmtpFeature = defineFeature(FEATURE_NAME, (r) => {
-    r.describe('Registers itself as the `"smtp"` provider for `mail-foundation` and owns the per-tenant config keys (`host`, `port`, `secure`, `from`, `authUser`) and the encrypted `smtp.password` secret. Tenants set `mail-foundation`\'s `provider` config key to `"smtp"` to activate it; set the SMTP credentials via the admin UI or a seed handler before sending the first mail.');
-    r.uiHints({
-        displayLabel: "Mail Transport · SMTP",
-        category: "notifications",
-        recommended: false,
-    });
-    r.requires({ features: ["config"] });
-    r.requires({ features: ["secrets"] });
-    r.requires({ features: ["mail-foundation"] });
-    r.envSchema(mailTransportSmtpEnvSchema);
-    // Provider-secret. Sensitive: redact-helper for admin-UI display.
-    const password = r.secret("smtp.password", {
-        label: { en: "SMTP password" },
-        hint: {
-            en: "Login password at the SMTP server. Brevo/Postmark/SES call it 'API key' or 'SMTP credentials'.",
-        },
-        redact: (plaintext) => {
-            if (plaintext.length < 8)
-                return "•".repeat(plaintext.length);
-            return `${plaintext.slice(0, 3)}...${plaintext.slice(-2)}`;
-        },
-        scope: "tenant",
-        // required: true ↔ the missing-secret throw in readPassword — keep in sync.
-        required: true,
-    });
-    // required: true ↔ the requireNonEmpty calls in buildSmtpTransport — keep in sync.
-    const configKeys = r.config({
-        keys: {
-            host: createTenantConfig("text", {
-                required: true,
-                default: "",
-                write: access.roles("TenantAdmin", "SystemAdmin"),
-                read: access.roles("TenantAdmin", "SystemAdmin"),
-            }),
-            port: createTenantConfig("number", {
-                default: 587,
-                bounds: { min: 1, max: 65535 },
-                write: access.roles("TenantAdmin", "SystemAdmin"),
-            }),
-            secure: createTenantConfig("boolean", {
-                default: false,
-                write: access.roles("TenantAdmin", "SystemAdmin"),
-            }),
-            from: createTenantConfig("text", {
-                required: true,
-                default: "",
-                write: access.roles("TenantAdmin", "SystemAdmin"),
-                read: access.roles("TenantAdmin", "SystemAdmin"),
-            }),
-            authUser: createTenantConfig("text", {
-                required: true,
-                default: "",
-                write: access.roles("TenantAdmin", "SystemAdmin"),
-                read: access.roles("TenantAdmin", "SystemAdmin"),
-            }),
-        },
-    });
-    // Plugin: register against mail-foundation's "mailTransport" extension.
-    // `entityName` "smtp" is what tenants set in mail-foundation's
-    // `provider` config-key to pick this transport.
-    const plugin = {
-        build: async (ctx, tenantId) => buildSmtpTransport(ctx, tenantId), // @wrapper-known semantic-alias
-    };
-    r.useExtension(MAIL_TRANSPORT_EXTENSION, "smtp", plugin);
-    return {
-        /** Config-key-handles — typed reads via `ctx.config(...)` in
-         *  consumer handlers. */
-        configKeys,
-        /** Secret-handle for the SMTP password. */
-        password,
-    };
-});
+export function createMailTransportSmtpFeature() {
+    return defineFeature(FEATURE_NAME, (r) => {
+        r.describe('Registers itself as the `"smtp"` provider for `mail-foundation` and owns the per-tenant config keys (`host`, `port`, `secure`, `from`, `authUser`) and the encrypted `smtp.password` secret. Tenants set `mail-foundation`\'s `provider` config key to `"smtp"` to activate it; set the SMTP credentials via the admin UI or a seed handler before sending the first mail.');
+        r.uiHints({
+            displayLabel: "Mail Transport · SMTP",
+            category: "notifications",
+            recommended: false,
+        });
+        r.requires({ features: ["config"] });
+        r.requires({ features: ["secrets"] });
+        r.requires({ features: ["mail-foundation"] });
+        r.envSchema(mailTransportSmtpEnvSchema);
+        // Provider-secret. Sensitive: redact-helper for admin-UI display.
+        const password = r.secret("smtp.password", {
+            label: { en: "SMTP password" },
+            hint: {
+                en: "Login password at the SMTP server. Brevo/Postmark/SES call it 'API key' or 'SMTP credentials'.",
+            },
+            redact: (plaintext) => {
+                if (plaintext.length < 8)
+                    return "•".repeat(plaintext.length);
+                return `${plaintext.slice(0, 3)}...${plaintext.slice(-2)}`;
+            },
+            scope: "tenant",
+            // required: true ↔ the missing-secret throw in readPassword — keep in sync.
+            required: true,
+        });
+        // required: true ↔ the requireNonEmpty calls in buildSmtpTransport — keep in sync.
+        const configKeys = r.config({
+            keys: {
+                host: createTenantConfig("text", {
+                    required: true,
+                    default: "",
+                    write: access.roles("TenantAdmin", "SystemAdmin"),
+                    read: access.roles("TenantAdmin", "SystemAdmin"),
+                }),
+                port: createTenantConfig("number", {
+                    default: 587,
+                    bounds: { min: 1, max: 65535 },
+                    write: access.roles("TenantAdmin", "SystemAdmin"),
+                }),
+                secure: createTenantConfig("boolean", {
+                    default: false,
+                    write: access.roles("TenantAdmin", "SystemAdmin"),
+                }),
+                from: createTenantConfig("text", {
+                    required: true,
+                    default: "",
+                    write: access.roles("TenantAdmin", "SystemAdmin"),
+                    read: access.roles("TenantAdmin", "SystemAdmin"),
+                }),
+                authUser: createTenantConfig("text", {
+                    required: true,
+                    default: "",
+                    write: access.roles("TenantAdmin", "SystemAdmin"),
+                    read: access.roles("TenantAdmin", "SystemAdmin"),
+                }),
+            },
+        });
+        // Plugin: register against mail-foundation's "mailTransport" extension.
+        // `entityName` "smtp" is what tenants set in mail-foundation's
+        // `provider` config-key to pick this transport.
+        const plugin = {
+            build: async (ctx, tenantId) => buildSmtpTransport(ctx, tenantId), // @wrapper-known semantic-alias
+        };
+        r.useExtension(MAIL_TRANSPORT_EXTENSION, "smtp", plugin);
+        return {
+            /** Config-key-handles — typed reads via `ctx.config(...)` in
+             *  consumer handlers. */
+            configKeys,
+            /** Secret-handle for the SMTP password. */
+            password,
+        };
+    }, { dedupeOptions: {} });
+}
+// The typed handles below come from one shared instance; each factory call builds its own handle objects.
+const sharedMailTransportSmtpFeature = createMailTransportSmtpFeature();
+/** @deprecated Use createMailTransportSmtpFeature(). Run `bun kumiko-upgrade --apply`. Removed in the first release after 2026-10-29. */
+export const mailTransportSmtpFeature = sharedMailTransportSmtpFeature;
 /** Typed handle for the SMTP password — exported so seeds + tests can
  *  set it via `secrets:write:set` with the full qualified-name. */
-export const SMTP_PASSWORD = mailTransportSmtpFeature.exports.password;
+export const SMTP_PASSWORD = sharedMailTransportSmtpFeature.exports.password;
 // =============================================================================
 // Internal: build the EmailTransport from tenant config + secret
 // =============================================================================
@@ -146,11 +152,11 @@ async function buildSmtpTransport(ctx, tenantId) {
         throw new Error(`${FEATURE_NAME}: ctx.config is missing — feature requires the config-feature mounted in the registry`);
     }
     const SMTP_HINT = "Set via tenant-admin UI or seed-handler before sending mail.";
-    const host = requireNonEmpty(await ctxConfig(mailTransportSmtpFeature.exports.configKeys.host), FEATURE_NAME, "host", SMTP_HINT);
-    const port = requireDefined(await ctxConfig(mailTransportSmtpFeature.exports.configKeys.port), FEATURE_NAME, "port"); // @cast-boundary engine-payload
-    const secure = requireDefined(await ctxConfig(mailTransportSmtpFeature.exports.configKeys.secure), FEATURE_NAME, "secure"); // @cast-boundary engine-payload
-    const from = requireNonEmpty(await ctxConfig(mailTransportSmtpFeature.exports.configKeys.from), FEATURE_NAME, "from", SMTP_HINT);
-    const authUser = requireNonEmpty(await ctxConfig(mailTransportSmtpFeature.exports.configKeys.authUser), FEATURE_NAME, "authUser", SMTP_HINT);
+    const host = requireNonEmpty(await ctxConfig(sharedMailTransportSmtpFeature.exports.configKeys.host), FEATURE_NAME, "host", SMTP_HINT);
+    const port = requireDefined(await ctxConfig(sharedMailTransportSmtpFeature.exports.configKeys.port), FEATURE_NAME, "port"); // @cast-boundary engine-payload
+    const secure = requireDefined(await ctxConfig(sharedMailTransportSmtpFeature.exports.configKeys.secure), FEATURE_NAME, "secure"); // @cast-boundary engine-payload
+    const from = requireNonEmpty(await ctxConfig(sharedMailTransportSmtpFeature.exports.configKeys.from), FEATURE_NAME, "from", SMTP_HINT);
+    const authUser = requireNonEmpty(await ctxConfig(sharedMailTransportSmtpFeature.exports.configKeys.authUser), FEATURE_NAME, "authUser", SMTP_HINT);
     const password = await readPassword(ctx, tenantId);
     let target;
     try {

package/dist/mail-transport-smtp/index.d.ts

@@ -1 +1 @@
-export { mailTransportSmtpEnvSchema, mailTransportSmtpFeature, SMTP_PASSWORD, setSmtpMailHostLookup, } from "./feature.js";
+export { createMailTransportSmtpFeature, mailTransportSmtpEnvSchema, mailTransportSmtpFeature, SMTP_PASSWORD, setSmtpMailHostLookup, } from "./feature.js";

package/dist/mail-transport-smtp/index.js

@@ -1,2 +1,2 @@
 // Public API of the mail-transport-smtp bundled-feature.
-export { mailTransportSmtpEnvSchema, mailTransportSmtpFeature, SMTP_PASSWORD, setSmtpMailHostLookup, } from "./feature.js";
+export { createMailTransportSmtpFeature, mailTransportSmtpEnvSchema, mailTransportSmtpFeature, SMTP_PASSWORD, setSmtpMailHostLookup, } from "./feature.js";

package/dist/managed-pages/handlers/by-slug.query.js

@@ -1,4 +1,4 @@
-import { fetchOne } from "@cosmicdrift/kumiko-framework/bun-db";
+import { fetchOne } from "@cosmicdrift/kumiko-framework/db";
 import { defineQueryHandler } from "@cosmicdrift/kumiko-framework/engine";
 import * as z from "zod";
 import { pagesTable } from "../table.js";

package/dist/managed-pages/handlers/by-tenant-published.query.js

@@ -1,5 +1,4 @@
-import { selectMany } from "@cosmicdrift/kumiko-framework/bun-db";
-import { castTenantRows } from "@cosmicdrift/kumiko-framework/db";
+import { castTenantRows, selectMany } from "@cosmicdrift/kumiko-framework/db";
 import { defineQueryHandler } from "@cosmicdrift/kumiko-framework/engine";
 import * as z from "zod";
 import { pagesTable } from "../table.js";

package/dist/managed-pages/handlers/set.write.js

@@ -1,5 +1,4 @@
-import { fetchOne } from "@cosmicdrift/kumiko-framework/bun-db";
-import { createEventStoreExecutor } from "@cosmicdrift/kumiko-framework/db";
+import { createEventStoreExecutor, fetchOne } from "@cosmicdrift/kumiko-framework/db";
 import { defineWriteHandler } from "@cosmicdrift/kumiko-framework/engine";
 import * as z from "zod";
 import { requireForTenant } from "../../shared/index.js";

package/dist/managed-pages/seeding.js

@@ -1,10 +1,8 @@
 // Test-/Seed-Helper für managed-pages. Legt eine Page direkt über den
 // Event-Store-Executor an — gleicher Pfad wie der echte set-Handler, aber
 // ohne Access-Check. Default ifExists="skip".
-import { fetchOne } from "@cosmicdrift/kumiko-framework/bun-db";
-import { createEventStoreExecutor, createTenantDb, } from "@cosmicdrift/kumiko-framework/db";
-import { runEventStoreSeed } from "@cosmicdrift/kumiko-framework/seeding";
-import { TestUsers } from "@cosmicdrift/kumiko-framework/stack";
+import { createEventStoreExecutor, createTenantDb, fetchOne, } from "@cosmicdrift/kumiko-framework/db";
+import { runEventStoreSeed, TestUsers, } from "@cosmicdrift/kumiko-framework/seeding";
 import { pageEntity, pagesTable } from "./table.js";
 const executor = createEventStoreExecutor(pagesTable, pageEntity, { entityName: "page" });
 export async function seedPage(db, opts) {
@@ -12,7 +10,7 @@ export async function seedPage(db, opts) {
     // der event-store-stream im falschen tenant-bucket → version_conflict
     // bei späteren echten writes). TestUsers.systemAdmin ist testTenantId(1).
     const by = opts.by ?? { ...TestUsers.systemAdmin, tenantId: opts.tenantId };
-    const tdb = createTenantDb(db, opts.tenantId, "system");
+    const tdb = createTenantDb({ db, tenantId: opts.tenantId, mode: "system" });
     const existing = await fetchOne(db, pagesTable, {
         tenantId: opts.tenantId,
         slug: opts.slug,

package/dist/metrics/compute.d.ts

@@ -1,4 +1,4 @@
-import type { WhereObject } from "@cosmicdrift/kumiko-framework/bun-db";
+import type { WhereObject } from "@cosmicdrift/kumiko-framework/db";
 import type { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import type { TenantDb } from "@cosmicdrift/kumiko-types/tenant-db-types";
 import { type MetricRange } from "./constants.js";

package/dist/metrics/filters.d.ts

@@ -1,4 +1,4 @@
-import { type WhereObject } from "@cosmicdrift/kumiko-framework/bun-db";
+import { type WhereObject } from "@cosmicdrift/kumiko-framework/db";
 import type { HandlerContext } from "@cosmicdrift/kumiko-framework/engine";
 import * as z from "zod";
 import type { MetricDefinition, MetricFilterResolver } from "./types.js";

package/dist/metrics/filters.js

@@ -1,4 +1,4 @@
-import { extractTableInfo } from "@cosmicdrift/kumiko-framework/bun-db";
+import { extractTableInfo } from "@cosmicdrift/kumiko-framework/db";
 import * as z from "zod";
 export const RESERVED_PAYLOAD_KEYS = ["range", "timeZone", "tenantId"];
 // Dashboard select options always send strings.

package/dist/metrics/validate.js

@@ -1,4 +1,4 @@
-import { extractTableInfo, isTimestamptzType } from "@cosmicdrift/kumiko-framework/bun-db";
+import { extractTableInfo, isTimestamptzType } from "@cosmicdrift/kumiko-framework/db";
 import { METRIC_RANGES } from "./constants.js";
 import { filterValueKindOf, metricFilterEntries, RESERVED_PAYLOAD_KEYS } from "./filters.js";
 const KEBAB_ID = /^[a-z][a-z0-9]*(-[a-z0-9]+)*$/;

package/dist/notes-history/feature.d.ts

@@ -1,5 +1,5 @@
 import { type AccessRule, type EntityDefinition } from "@cosmicdrift/kumiko-framework/engine";
-export declare const notesHistoryFeature: import("@cosmicdrift/kumiko-types/feature").FeatureDefinition & {
+declare const defaultNotesHistoryFeature: import("@cosmicdrift/kumiko-types/feature").FeatureDefinition & {
     readonly exports: void;
 };
 export type NotesHistoryFeatureOptions = {
@@ -38,4 +38,9 @@ export type NotesHistoryFeatureOptions = {
      *  consider every registered entity as a candidate host. */
     readonly parents?: readonly string[];
 };
-export declare function createNotesHistoryFeature(opts?: NotesHistoryFeatureOptions): typeof notesHistoryFeature;
+export declare function createNotesHistoryFeature(opts?: NotesHistoryFeatureOptions): typeof defaultNotesHistoryFeature;
+/** @deprecated Use createNotesHistoryFeature(). Run `bun kumiko-upgrade --apply`. Removed in the first release after 2026-10-29. */
+export declare const notesHistoryFeature: import("@cosmicdrift/kumiko-types/feature").FeatureDefinition & {
+    readonly exports: void;
+};
+export {};

package/dist/notes-history/feature.js

@@ -41,7 +41,7 @@ function registerNotesHistory(r, access, ownership, parents) {
     }));
     r.translations({ keys: NOTES_HISTORY_FEATURE_I18N });
 }
-export const notesHistoryFeature = defineFeature(NOTES_HISTORY_FEATURE_NAME, (r) => registerNotesHistory(r, DEFAULT_NOTES_HISTORY_ACCESS, undefined, undefined));
+const defaultNotesHistoryFeature = defineFeature(NOTES_HISTORY_FEATURE_NAME, (r) => registerNotesHistory(r, DEFAULT_NOTES_HISTORY_ACCESS, undefined, undefined));
 function resolveAccess(opts) {
     if (opts.access !== undefined)
         return opts.access;
@@ -56,7 +56,7 @@ export function createNotesHistoryFeature(opts = {}) {
         opts.roles === undefined &&
         opts.ownership === undefined &&
         opts.parents === undefined) {
-        return notesHistoryFeature;
+        return defaultNotesHistoryFeature;
     }
     assertNoWhereRuleInOwnershipWrite("createNotesHistoryFeature", opts.ownership?.write);
     // A mount that accepts no parents at all can never take a note write —
@@ -69,3 +69,5 @@ export function createNotesHistoryFeature(opts = {}) {
     }
     return defineFeature(NOTES_HISTORY_FEATURE_NAME, (r) => registerNotesHistory(r, resolveAccess(opts), opts.ownership, opts.parents));
 }
+/** @deprecated Use createNotesHistoryFeature(). Run `bun kumiko-upgrade --apply`. Removed in the first release after 2026-10-29. */
+export const notesHistoryFeature = createNotesHistoryFeature();

package/dist/notes-history/handlers/add-note.write.js

@@ -1,4 +1,4 @@
-import { fetchOne, runInSavepointIfSupported } from "@cosmicdrift/kumiko-framework/bun-db";
+import { fetchOne, runInSavepointIfSupported } from "@cosmicdrift/kumiko-framework/db";
 import { ValidationError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
 import { decryptStoredPii, denyUnlessJoinRowParentVisible } from "../../shared/index.js";
 import { tenantMembershipsTable } from "../../tenant/index.js";

package/dist/notes-history-user-data/hooks.js

@@ -3,8 +3,8 @@
 // notes consumers without the user-data-rights pipeline don't pull a hard
 // dependency. Mirrors job-run/delivery-attempt (user-data-rights-defaults):
 // export-only, erasure via crypto-shredding.
-import { selectMany } from "@cosmicdrift/kumiko-framework/bun-db";
 import { configuredPiiSubjectKms } from "@cosmicdrift/kumiko-framework/crypto";
+import { selectMany } from "@cosmicdrift/kumiko-framework/db";
 import { noteEntryTable, noteMentionTable } from "../notes-history/index.js";
 // note-entry has no per-tenant scope quirk (unlike folders) — it's genuinely
 // per-user content, so the export filters by authorId directly.