@cosmicdrift/kumiko-bundled-features 0.367.0 → 0.369.0

package/dist/file-derivatives/handlers/public-variant.query.js

@@ -22,7 +22,7 @@
 // publicVariantByFileRefQuery — tenantId there comes from the FileRef row,
 // but this handler's own isPublic gate runs exactly the same either way.
 import { computeRevisionEtag } from "@cosmicdrift/kumiko-framework/api";
-import { fetchOne } from "@cosmicdrift/kumiko-framework/bun-db";
+import { fetchOne } from "@cosmicdrift/kumiko-framework/db";
 import { resolveFieldVariant } from "@cosmicdrift/kumiko-framework/derivatives";
 import { defineQueryHandler, EXT_DERIVATIVE_PUBLIC_PREDICATE, isUuid, } from "@cosmicdrift/kumiko-framework/engine";
 import { fileRefsTable } from "@cosmicdrift/kumiko-framework/files";

package/dist/file-foundation/feature.d.ts

@@ -1,5 +1,11 @@
 export type { FileProviderContext, FileProviderPlugin, } from "@cosmicdrift/kumiko-framework/files";
 export { createFileProviderForTenant, isFileProviderPlugin, } from "@cosmicdrift/kumiko-framework/files";
+export declare function createFileFoundationFeature(): import("@cosmicdrift/kumiko-types/feature").FeatureDefinition & {
+    readonly exports: {
+        providerConfigKey: import("@cosmicdrift/kumiko-types/config").ConfigKeyHandle<"text">;
+    };
+};
+/** @deprecated Use createFileFoundationFeature(). Run `bun kumiko-upgrade --apply`. Removed in the first release after 2026-10-29. */
 export declare const fileFoundationFeature: import("@cosmicdrift/kumiko-types/feature").FeatureDefinition & {
     readonly exports: {
         providerConfigKey: import("@cosmicdrift/kumiko-types/config").ConfigKeyHandle<"text">;

package/dist/file-foundation/feature.js

@@ -20,28 +20,32 @@ import { access, createTenantConfig, defineFeature, EXT_FILE_PROVIDER, FILE_STOR
 // features/file-foundation` consumers (user-data-rights, app code) keep working.
 export { createFileProviderForTenant, isFileProviderPlugin, } from "@cosmicdrift/kumiko-framework/files";
 const FEATURE_NAME = "file-foundation";
-export const fileFoundationFeature = defineFeature(FEATURE_NAME, (r) => {
-    r.describe("Defines the `fileProvider` extension point and a per-tenant `provider` config key that selects which registered storage plugin to use at runtime. Call `createFileProviderForTenant(ctx, tenantId)` to get a `FileStorageProvider` — use this feature together with at least one `file-provider-*` feature; the `files` feature builds on top of it for tracked `FileRef` entities with GDPR hooks.");
-    r.uiHints({
-        displayLabel: "File Provider Foundation",
-        category: "storage",
-        recommended: false,
-    });
-    r.requires({ features: ["config"] });
-    r.extendsRegistrar(EXT_FILE_PROVIDER, {
-        onRegister: () => {
-            // No side-effects at register-time — registry stores the usage,
-            // factory looks it up at request-time.
-        },
-    });
-    const providerConfigKey = r.config("provider", createTenantConfig("text", {
-        default: "",
-        env: FILE_STORAGE_PROVIDER_ENV,
-        write: access.roles("TenantAdmin", "SystemAdmin"),
-        read: access.roles("TenantAdmin", "SystemAdmin", "User"),
-    }));
-    // Readiness gating: provider-plugins' required keys/secrets count only
-    // while their plugin is the one this key selects.
-    r.extensionSelector(EXT_FILE_PROVIDER, providerConfigKey);
-    return { providerConfigKey };
-});
+export function createFileFoundationFeature() {
+    return defineFeature(FEATURE_NAME, (r) => {
+        r.describe("Defines the `fileProvider` extension point and a per-tenant `provider` config key that selects which registered storage plugin to use at runtime. Call `createFileProviderForTenant(ctx, tenantId)` to get a `FileStorageProvider` — use this feature together with at least one `file-provider-*` feature; the `files` feature builds on top of it for tracked `FileRef` entities with GDPR hooks.");
+        r.uiHints({
+            displayLabel: "File Provider Foundation",
+            category: "storage",
+            recommended: false,
+        });
+        r.requires({ features: ["config"] });
+        r.extendsRegistrar(EXT_FILE_PROVIDER, {
+            onRegister: () => {
+                // No side-effects at register-time — registry stores the usage,
+                // factory looks it up at request-time.
+            },
+        });
+        const providerConfigKey = r.config("provider", createTenantConfig("text", {
+            default: "",
+            env: FILE_STORAGE_PROVIDER_ENV,
+            write: access.roles("TenantAdmin", "SystemAdmin"),
+            read: access.roles("TenantAdmin", "SystemAdmin", "User"),
+        }));
+        // Readiness gating: provider-plugins' required keys/secrets count only
+        // while their plugin is the one this key selects.
+        r.extensionSelector(EXT_FILE_PROVIDER, providerConfigKey);
+        return { providerConfigKey };
+    }, { dedupeOptions: {} });
+}
+/** @deprecated Use createFileFoundationFeature(). Run `bun kumiko-upgrade --apply`. Removed in the first release after 2026-10-29. */
+export const fileFoundationFeature = createFileFoundationFeature();

package/dist/file-foundation/index.d.ts

@@ -1,2 +1,2 @@
-export { createFileProviderForTenant, type FileProviderContext, type FileProviderPlugin, fileFoundationFeature, isFileProviderPlugin, } from "./feature.js";
+export { createFileFoundationFeature, createFileProviderForTenant, type FileProviderContext, type FileProviderPlugin, fileFoundationFeature, isFileProviderPlugin, } from "./feature.js";
 export { type FileRefContent, FileRefTooLargeError, fileContextForTenant, fileContextFromResolver, readFileRefContent, } from "./read-file-ref-content.js";

package/dist/file-foundation/index.js

@@ -1,3 +1,3 @@
 // Public API of the file-foundation bundled-feature.
-export { createFileProviderForTenant, fileFoundationFeature, isFileProviderPlugin, } from "./feature.js";
+export { createFileFoundationFeature, createFileProviderForTenant, fileFoundationFeature, isFileProviderPlugin, } from "./feature.js";
 export { FileRefTooLargeError, fileContextForTenant, fileContextFromResolver, readFileRefContent, } from "./read-file-ref-content.js";

package/dist/file-foundation/read-file-ref-content.js

@@ -1,4 +1,4 @@
-import { selectMany } from "@cosmicdrift/kumiko-framework/bun-db";
+import { selectMany } from "@cosmicdrift/kumiko-framework/db";
 import { isUuid } from "@cosmicdrift/kumiko-framework/engine";
 import { createFileContext, fileRefsTable, } from "@cosmicdrift/kumiko-framework/files";
 // Tenant-bound on purpose: without a resolver `ctx.files` only reaches the storage of the

package/dist/file-provider-inmemory/feature.d.ts

@@ -2,6 +2,10 @@
 export declare function listKeys(tenantId: string): readonly string[];
 /** Demo/Test-Helper: leere den Tenant-Storage. */
 export declare function clearStorage(tenantId: string): void;
+export declare function createFileProviderInMemoryFeature(): import("@cosmicdrift/kumiko-types/feature").FeatureDefinition & {
+    readonly exports: void;
+};
+/** @deprecated Use createFileProviderInMemoryFeature(). Run `bun kumiko-upgrade --apply`. Removed in the first release after 2026-10-29. */
 export declare const fileProviderInMemoryFeature: import("@cosmicdrift/kumiko-types/feature").FeatureDefinition & {
     readonly exports: void;
 };

package/dist/file-provider-inmemory/feature.js

@@ -42,23 +42,27 @@ export function clearStorage(tenantId) {
 // =============================================================================
 // Feature-definition
 // =============================================================================
-export const fileProviderInMemoryFeature = defineFeature(FEATURE_NAME, (r) => {
-    r.describe('Registers an in-process `"inmemory"` provider for `file-foundation` that stores file bytes per tenant in a module-level Map. Use `listKeys(tenantId)` and `clearStorage(tenantId)` in demo apps and tests; not for production (data is lost on restart and grows without bound).');
-    r.uiHints({
-        displayLabel: "File Provider · In-Memory",
-        category: "storage",
-        recommended: false,
-    });
-    // Kein requires auf "config" oder "secrets" — der
-    // In-Memory-Provider hat keine Config + kein Secret. Nur die
-    // file-foundation muss da sein (Plugin-extension-point).
-    r.requires({ features: ["file-foundation"] });
-    const plugin = {
-        build: async (_ctx, tenantId) => {
-            // Returnt den per-tenant Storage. Identitätsstabil zwischen calls
-            // damit accumulated state erhalten bleibt.
-            return getOrCreateProviderForTenant(tenantId);
-        }, // @wrapper-known semantic-alias
-    };
-    r.useExtension("fileProvider", "inmemory", plugin);
-});
+export function createFileProviderInMemoryFeature() {
+    return defineFeature(FEATURE_NAME, (r) => {
+        r.describe('Registers an in-process `"inmemory"` provider for `file-foundation` that stores file bytes per tenant in a module-level Map. Use `listKeys(tenantId)` and `clearStorage(tenantId)` in demo apps and tests; not for production (data is lost on restart and grows without bound).');
+        r.uiHints({
+            displayLabel: "File Provider · In-Memory",
+            category: "storage",
+            recommended: false,
+        });
+        // Kein requires auf "config" oder "secrets" — der
+        // In-Memory-Provider hat keine Config + kein Secret. Nur die
+        // file-foundation muss da sein (Plugin-extension-point).
+        r.requires({ features: ["file-foundation"] });
+        const plugin = {
+            build: async (_ctx, tenantId) => {
+                // Returns the per-tenant storage. Identity-stable across calls so
+                // accumulated state is kept.
+                return getOrCreateProviderForTenant(tenantId);
+            }, // @wrapper-known semantic-alias
+        };
+        r.useExtension("fileProvider", "inmemory", plugin);
+    }, { dedupeOptions: {} });
+}
+/** @deprecated Use createFileProviderInMemoryFeature(). Run `bun kumiko-upgrade --apply`. Removed in the first release after 2026-10-29. */
+export const fileProviderInMemoryFeature = createFileProviderInMemoryFeature();

package/dist/file-provider-inmemory/index.d.ts

@@ -1 +1 @@
-export { clearStorage, fileProviderInMemoryFeature, listKeys } from "./feature.js";
+export { clearStorage, createFileProviderInMemoryFeature, fileProviderInMemoryFeature, listKeys, } from "./feature.js";

package/dist/file-provider-inmemory/index.js

@@ -1,2 +1,2 @@
 // Public API of the file-provider-inmemory bundled-feature.
-export { clearStorage, fileProviderInMemoryFeature, listKeys } from "./feature.js";
+export { clearStorage, createFileProviderInMemoryFeature, fileProviderInMemoryFeature, listKeys, } from "./feature.js";

package/dist/file-provider-s3/env-feature.d.ts

@@ -0,0 +1,3 @@
+export declare function createFileProviderS3EnvFeature(): import("@cosmicdrift/kumiko-types/feature").FeatureDefinition & {
+    readonly exports: void;
+};

package/dist/file-provider-s3/env-feature.js

@@ -0,0 +1,46 @@
+// file-provider-s3-env — S3 file provider configured entirely from
+// process.env. ONE shared bucket for ALL tenants: wire it by setting the
+// `S3_*` env vars + mounting — no per-tenant admin seeding and no
+// `secrets`-feature dependency.
+//
+// **vs the default file-provider-s3:** the config-based `"s3"` provider owns per-tenant
+// config keys + an encrypted `s3.secretAccessKey` secret (per-tenant
+// buckets, admin-seeded). This `"s3-env"` provider reads one credential set
+// from env and serves every tenant from one bucket — the
+// Hetzner-Object-Storage / single-bucket deploy case. Tenant isolation
+// still holds: file keys carry the tenant (export ZIPs:
+// `exports/<tenantId>/<jobId>.zip`) or are globally-unique UUIDs (fileRefs).
+//
+// **Pattern-Vorbild:** mirrors file-provider-inmemory (zero admin seeding,
+// only the file-foundation plugin-point required).
+//
+// **Env vars** (read by createS3ProviderFromEnv, prefix `S3_`):
+//   required — S3_BUCKET, S3_REGION, S3_ACCESS_KEY, S3_SECRET_KEY
+//   optional — S3_ENDPOINT (S3-compat stores incl. Hetzner Object Storage),
+//              S3_FORCE_PATH_STYLE
+// Missing required vars throw on the FIRST file op (inside the export cron).
+// The user-data-rights boot guard surfaces that at boot instead.
+import { defineFeature } from "@cosmicdrift/kumiko-framework/engine";
+import { createS3ProviderFromEnv } from "./lib/env-helper.js";
+const FEATURE_NAME = "file-provider-s3-env";
+export function createFileProviderS3EnvFeature() {
+    return defineFeature(FEATURE_NAME, (r) => {
+        r.describe('Registers an `"s3-env"` provider for `file-foundation` that reads one S3 credential set from `process.env` (`S3_BUCKET`/`S3_REGION`/`S3_ACCESS_KEY`/`S3_SECRET_KEY`, optional `S3_ENDPOINT`/`S3_FORCE_PATH_STYLE`) and serves every tenant from one shared bucket — no per-tenant config or secret seeding. Use this for single-bucket S3-compatible deploys (e.g. Hetzner Object Storage); use `file-provider-s3` instead when each tenant needs its own bucket/credentials.');
+        r.uiHints({
+            displayLabel: "File Provider · S3 (env)",
+            category: "storage",
+            recommended: false,
+        });
+        // No requires on "config" or "secrets" — credentials come from
+        // env, not the per-tenant config + secrets store. Only the file-foundation
+        // plugin-extension-point must be mounted.
+        r.requires({ features: ["file-foundation"] });
+        const plugin = {
+            // tenantId ignored: one shared bucket serves all tenants (isolation via
+            // tenant-prefixed / UUID keys). Built fresh per call like file-provider-s3;
+            // the S3 client opens no connection at construction.
+            build: async (_ctx, _tenantId) => createS3ProviderFromEnv(), // @wrapper-known semantic-alias
+        };
+        r.useExtension("fileProvider", "s3-env", plugin);
+    }, { dedupeOptions: {} });
+}

package/dist/file-provider-s3/feature.d.ts

@@ -1,3 +1,28 @@
+import { createFileProviderS3EnvFeature } from "./env-feature.js";
+declare function createTenantConfigFileProviderS3Feature(): import("@cosmicdrift/kumiko-types/feature").FeatureDefinition & {
+    readonly exports: {
+        configKeys: {
+            readonly bucket: import("@cosmicdrift/kumiko-types/config").ConfigKeyHandle<"text">;
+            readonly region: import("@cosmicdrift/kumiko-types/config").ConfigKeyHandle<"text">;
+            readonly endpoint: import("@cosmicdrift/kumiko-types/config").ConfigKeyHandle<"text">;
+            readonly forcePathStyle: import("@cosmicdrift/kumiko-types/config").ConfigKeyHandle<"boolean">;
+            readonly accessKeyId: import("@cosmicdrift/kumiko-types/config").ConfigKeyHandle<"text">;
+        };
+        secretAccessKey: import("@cosmicdrift/kumiko-types/feature").SecretKeyHandle;
+    };
+};
+export type FileProviderS3FeatureOptions = {
+    /** Read one shared credential set from the `S3_*` env vars (provider key "s3-env", feature name "file-provider-s3-env") instead of per-tenant config and secret. */
+    readonly fromEnv?: boolean;
+};
+export declare function createFileProviderS3Feature(options: {
+    readonly fromEnv: true;
+}): ReturnType<typeof createFileProviderS3EnvFeature>;
+export declare function createFileProviderS3Feature(options?: {
+    readonly fromEnv?: false;
+}): ReturnType<typeof createTenantConfigFileProviderS3Feature>;
+export declare function createFileProviderS3Feature(options: FileProviderS3FeatureOptions): ReturnType<typeof createFileProviderS3EnvFeature> | ReturnType<typeof createTenantConfigFileProviderS3Feature>;
+/** @deprecated Use createFileProviderS3Feature(). Run `bun kumiko-upgrade --apply`. Removed in the first release after 2026-10-29. */
 export declare const fileProviderS3Feature: import("@cosmicdrift/kumiko-types/feature").FeatureDefinition & {
     readonly exports: {
         configKeys: {
@@ -12,3 +37,4 @@ export declare const fileProviderS3Feature: import("@cosmicdrift/kumiko-types/fe
 };
 /** Typed handle for the S3 secret-access-key. */
 export declare const S3_SECRET_ACCESS_KEY: import("@cosmicdrift/kumiko-types/feature").SecretKeyHandle;
+export {};

package/dist/file-provider-s3/feature.js

@@ -11,86 +11,98 @@
 //      { build })`. file-foundation's Factory findet den Plugin via
 //      registry.
 //   3. build(ctx, tenantId) liest config + secret, ruft `createS3Provider`
-//      aus files-provider-s3 auf. Der EINZIGE Cross-Feature-Import
+//      aus ./lib auf. Der EINZIGE Cross-Feature-Import
 //      des Plugins — bewusst lokal gehalten.
 //
 // **Pattern-Vorbild:** mirrors mail-transport-smtp.
 //
 // **Boot-Dependencies:** config + secrets + file-foundation.
-import { createS3Provider } from "@cosmicdrift/kumiko-bundled-features/files-provider-s3";
 import { requireDefined, requireNonEmpty, requireSecretSet, } from "@cosmicdrift/kumiko-bundled-features/foundation-shared";
 import { requireSecretsContext } from "@cosmicdrift/kumiko-bundled-features/secrets";
 import { access, createTenantConfig, defineFeature } from "@cosmicdrift/kumiko-framework/engine";
+import { createFileProviderS3EnvFeature } from "./env-feature.js";
+import { createS3Provider } from "./lib/s3-provider.js";
 const FEATURE_NAME = "file-provider-s3";
 // =============================================================================
 // Feature-definition
 // =============================================================================
-export const fileProviderS3Feature = defineFeature(FEATURE_NAME, (r) => {
-    r.describe('Registers itself as the `"s3"` provider for `file-foundation` and owns the per-tenant config keys (`bucket`, `region`, `endpoint`, `forcePathStyle`, `accessKeyId`) and the encrypted `s3.secretAccessKey` secret. Compatible with any S3-compatible object store (AWS S3, Hetzner Object Storage); set credentials via the admin UI or a seed handler before the first file operation.');
-    r.uiHints({
-        displayLabel: "File Provider · S3",
-        category: "storage",
-        recommended: false,
-    });
-    r.requires({ features: ["config"] });
-    r.requires({ features: ["secrets"] });
-    r.requires({ features: ["file-foundation"] });
-    const secretAccessKey = r.secret("s3.secretAccessKey", {
-        label: { en: "S3 secret access key" },
-        hint: {
-            en: "Private half of the S3 key pair. Hetzner calls it 'Secret Key', AWS calls it 'Secret Access Key'.",
-        },
-        redact: (plaintext) => {
-            if (plaintext.length < 8)
-                return "•".repeat(plaintext.length);
-            return `${plaintext.slice(0, 4)}...${plaintext.slice(-4)}`;
-        },
-        scope: "tenant",
-        // required: true ↔ the missing-secret throw in readSecretAccessKey — keep in sync.
-        required: true,
-    });
-    // required: true ↔ the requireNonEmpty calls in buildS3Provider — keep in sync.
-    const configKeys = r.config({
-        keys: {
-            bucket: createTenantConfig("text", {
-                required: true,
-                default: "",
-                write: access.roles("TenantAdmin", "SystemAdmin"),
-                read: access.roles("TenantAdmin", "SystemAdmin"),
-            }),
-            region: createTenantConfig("text", {
-                required: true,
-                default: "",
-                write: access.roles("TenantAdmin", "SystemAdmin"),
-                read: access.roles("TenantAdmin", "SystemAdmin"),
-            }),
-            endpoint: createTenantConfig("text", {
-                default: "",
-                write: access.roles("TenantAdmin", "SystemAdmin"),
-                read: access.roles("TenantAdmin", "SystemAdmin"),
-            }),
-            forcePathStyle: createTenantConfig("boolean", {
-                default: false,
-                write: access.roles("TenantAdmin", "SystemAdmin"),
-            }),
-            accessKeyId: createTenantConfig("text", {
-                required: true,
-                default: "",
-                write: access.roles("TenantAdmin", "SystemAdmin"),
-                read: access.roles("TenantAdmin", "SystemAdmin"),
-            }),
-        },
-    });
-    // Plugin-Registration. entityName "s3" ist was tenants in
-    // file-foundation's `provider` config-key setzen.
-    const plugin = {
-        build: async (ctx, tenantId) => buildS3Provider(ctx, tenantId), // @wrapper-known semantic-alias
-    };
-    r.useExtension("fileProvider", "s3", plugin);
-    return { configKeys, secretAccessKey };
-});
+function createTenantConfigFileProviderS3Feature() {
+    return defineFeature(FEATURE_NAME, (r) => {
+        r.describe('Registers itself as the `"s3"` provider for `file-foundation` and owns the per-tenant config keys (`bucket`, `region`, `endpoint`, `forcePathStyle`, `accessKeyId`) and the encrypted `s3.secretAccessKey` secret. Compatible with any S3-compatible object store (AWS S3, Hetzner Object Storage); set credentials via the admin UI or a seed handler before the first file operation.');
+        r.uiHints({
+            displayLabel: "File Provider · S3",
+            category: "storage",
+            recommended: false,
+        });
+        r.requires({ features: ["config"] });
+        r.requires({ features: ["secrets"] });
+        r.requires({ features: ["file-foundation"] });
+        const secretAccessKey = r.secret("s3.secretAccessKey", {
+            label: { en: "S3 secret access key" },
+            hint: {
+                en: "Private half of the S3 key pair. Hetzner calls it 'Secret Key', AWS calls it 'Secret Access Key'.",
+            },
+            redact: (plaintext) => {
+                if (plaintext.length < 8)
+                    return "•".repeat(plaintext.length);
+                return `${plaintext.slice(0, 4)}...${plaintext.slice(-4)}`;
+            },
+            scope: "tenant",
+            // required: true ↔ the missing-secret throw in readSecretAccessKey — keep in sync.
+            required: true,
+        });
+        // required: true ↔ the requireNonEmpty calls in buildS3Provider — keep in sync.
+        const configKeys = r.config({
+            keys: {
+                bucket: createTenantConfig("text", {
+                    required: true,
+                    default: "",
+                    write: access.roles("TenantAdmin", "SystemAdmin"),
+                    read: access.roles("TenantAdmin", "SystemAdmin"),
+                }),
+                region: createTenantConfig("text", {
+                    required: true,
+                    default: "",
+                    write: access.roles("TenantAdmin", "SystemAdmin"),
+                    read: access.roles("TenantAdmin", "SystemAdmin"),
+                }),
+                endpoint: createTenantConfig("text", {
+                    default: "",
+                    write: access.roles("TenantAdmin", "SystemAdmin"),
+                    read: access.roles("TenantAdmin", "SystemAdmin"),
+                }),
+                forcePathStyle: createTenantConfig("boolean", {
+                    default: false,
+                    write: access.roles("TenantAdmin", "SystemAdmin"),
+                }),
+                accessKeyId: createTenantConfig("text", {
+                    required: true,
+                    default: "",
+                    write: access.roles("TenantAdmin", "SystemAdmin"),
+                    read: access.roles("TenantAdmin", "SystemAdmin"),
+                }),
+            },
+        });
+        // Plugin-Registration. entityName "s3" ist was tenants in
+        // file-foundation's `provider` config-key setzen.
+        const plugin = {
+            build: async (ctx, tenantId) => buildS3Provider(ctx, tenantId), // @wrapper-known semantic-alias
+        };
+        r.useExtension("fileProvider", "s3", plugin);
+        return { configKeys, secretAccessKey };
+    }, { dedupeOptions: {} });
+}
+export function createFileProviderS3Feature(options = {}) {
+    return options.fromEnv === true
+        ? createFileProviderS3EnvFeature()
+        : createTenantConfigFileProviderS3Feature();
+}
+/** @deprecated Use createFileProviderS3Feature(). Run `bun kumiko-upgrade --apply`. Removed in the first release after 2026-10-29. */
+export const fileProviderS3Feature = createFileProviderS3Feature();
+// Typed config/secret handles are identical across instances, so one module-level instance serves them.
+const tenantConfigFeature = createTenantConfigFileProviderS3Feature();
 /** Typed handle for the S3 secret-access-key. */
-export const S3_SECRET_ACCESS_KEY = fileProviderS3Feature.exports.secretAccessKey;
+export const S3_SECRET_ACCESS_KEY = tenantConfigFeature.exports.secretAccessKey;
 // =============================================================================
 // Internal: build the FileStorageProvider from tenant config + secret
 // =============================================================================
@@ -100,12 +112,12 @@ async function buildS3Provider(ctx, tenantId) {
         throw new Error(`${FEATURE_NAME}: ctx.config is missing — feature requires the config-feature mounted in the registry`);
     }
     const FILE_HINT = "Set via tenant-admin UI or seed-handler before reading or writing files.";
-    const bucket = requireNonEmpty(await ctxConfig(fileProviderS3Feature.exports.configKeys.bucket), FEATURE_NAME, "bucket", FILE_HINT);
-    const region = requireNonEmpty(await ctxConfig(fileProviderS3Feature.exports.configKeys.region), FEATURE_NAME, "region", FILE_HINT);
-    const endpointRaw = requireDefined(await ctxConfig(fileProviderS3Feature.exports.configKeys.endpoint), FEATURE_NAME, "endpoint"); // @cast-boundary engine-payload
+    const bucket = requireNonEmpty(await ctxConfig(tenantConfigFeature.exports.configKeys.bucket), FEATURE_NAME, "bucket", FILE_HINT);
+    const region = requireNonEmpty(await ctxConfig(tenantConfigFeature.exports.configKeys.region), FEATURE_NAME, "region", FILE_HINT);
+    const endpointRaw = requireDefined(await ctxConfig(tenantConfigFeature.exports.configKeys.endpoint), FEATURE_NAME, "endpoint"); // @cast-boundary engine-payload
     const endpoint = endpointRaw.length > 0 ? endpointRaw : undefined;
-    const forcePathStyle = requireDefined(await ctxConfig(fileProviderS3Feature.exports.configKeys.forcePathStyle), FEATURE_NAME, "forcePathStyle"); // @cast-boundary engine-payload
-    const accessKeyId = requireNonEmpty(await ctxConfig(fileProviderS3Feature.exports.configKeys.accessKeyId), FEATURE_NAME, "accessKeyId", FILE_HINT);
+    const forcePathStyle = requireDefined(await ctxConfig(tenantConfigFeature.exports.configKeys.forcePathStyle), FEATURE_NAME, "forcePathStyle"); // @cast-boundary engine-payload
+    const accessKeyId = requireNonEmpty(await ctxConfig(tenantConfigFeature.exports.configKeys.accessKeyId), FEATURE_NAME, "accessKeyId", FILE_HINT);
     const secretAccessKey = await readSecretAccessKey(ctx, tenantId);
     return createS3Provider({
         bucket,

package/dist/file-provider-s3/index.d.ts

@@ -1 +1 @@
-export { fileProviderS3Feature, S3_SECRET_ACCESS_KEY } from "./feature.js";
+export { createFileProviderS3Feature, type FileProviderS3FeatureOptions, fileProviderS3Feature, S3_SECRET_ACCESS_KEY, } from "./feature.js";

package/dist/file-provider-s3/index.js

@@ -1,2 +1,2 @@
 // Public API of the file-provider-s3 bundled-feature.
-export { fileProviderS3Feature, S3_SECRET_ACCESS_KEY } from "./feature.js";
+export { createFileProviderS3Feature, fileProviderS3Feature, S3_SECRET_ACCESS_KEY, } from "./feature.js";

package/dist/file-provider-s3/lib/index.d.ts

@@ -0,0 +1,3 @@
+export { createS3ProviderFromEnv, parseS3EnvConfig } from "./env-helper.js";
+export type { S3ProviderConfig } from "./s3-provider.js";
+export { createS3Provider, resolveForcePathStyle } from "./s3-provider.js";

package/dist/file-provider-s3/lib/index.js

@@ -0,0 +1,2 @@
+export { createS3ProviderFromEnv, parseS3EnvConfig } from "./env-helper.js";
+export { createS3Provider, resolveForcePathStyle } from "./s3-provider.js";

package/dist/{files-provider-s3 → file-provider-s3/lib}/s3-provider.js

@@ -3,12 +3,12 @@ import { assertSafeStorageKey, } from "@cosmicdrift/kumiko-framework/files";
 // Operator-Pflicht-Setup (Multipart-Upload-Cleanup)
 // =============================================================================
 //
-// `writeStream` nutzt Bun's S3-Writer fuer echtes multipart-streaming. S3
-// created dabei eine Multipart-Upload-Session mit einer Upload-ID; bei
-// normaler Completion wird sie geschlossen. Wird der Export-Worker mid-write
-// gecancelt (Pod-Restart, K8s-OOM-Kill, Process-Signal), bleibt die Session
-// in S3 OFFEN und berechnet Storage-Kosten fuer die bereits hochgeladenen
-// Parts — bis sie via Lifecycle-Rule abgebrochen werden.
+// `writeStream` uses Bun's S3 writer for real multipart streaming. S3
+// creates a multipart-upload session with an upload ID for it; on normal
+// completion the session is closed. If the export worker is cancelled
+// mid-write (pod restart, K8s OOM kill, process signal), the session stays
+// OPEN in S3 and bills storage for the parts already uploaded — until a
+// lifecycle rule aborts it.
 //
 // **Pflicht-Operator-Setup auf jedem Bucket:**
 //
@@ -21,9 +21,9 @@ import { assertSafeStorageKey, } from "@cosmicdrift/kumiko-framework/files";
 //     }]
 //   }
 //
-// AWS-CLI: `aws s3api put-bucket-lifecycle-configuration --bucket <name>
-// --lifecycle-configuration file://lifecycle.json`. Hetzner Object Storage
-// + R2 + Minio supporten dieselbe Syntax.
+// AWS CLI: `aws s3api put-bucket-lifecycle-configuration --bucket <name>
+// --lifecycle-configuration file://lifecycle.json`. Hetzner Object Storage,
+// R2 and Minio support the same syntax.
 //
 // =============================================================================
 // Operator-Pflicht-Setup (IAM: list permission)
@@ -82,11 +82,11 @@ export function createS3Provider(config) {
         },
         async writeStream(key, source, options) {
             assertSafeStorageKey(key);
-            // Echtes multipart-streaming via Bun's S3-Writer — partSize steuert die
-            // Part-Boundary intern (AWS/R2 verlangen non-final Parts >= 5 MiB,
-            // sonst EntityTooSmall beim CompleteMultipartUpload). Manuelles flush()
-            // hier wuerde genau diese Garantie brechen, sobald die Source-Chunks
-            // nicht auf partSize aufgehen.
+            // Real multipart streaming via Bun's S3 writer — partSize controls the
+            // part boundary internally (AWS/R2 require non-final parts >= 5 MiB,
+            // otherwise EntityTooSmall on CompleteMultipartUpload). A manual flush()
+            // here would break exactly that guarantee as soon as the source chunks
+            // do not line up with partSize.
             const writer = client.file(key).writer({
                 ...(options?.mimeType !== undefined && { type: options.mimeType }),
                 retry: 3,
@@ -94,8 +94,8 @@ export function createS3Provider(config) {
                 partSize: STREAM_PART_SIZE,
             });
             for await (const chunk of source) {
-                // Await applies Backpressure und bounded die in-flight Queue auf
-                // queueSize, statt unbegrenzt zu puffern.
+                // Await applies backpressure and bounds the in-flight queue to
+                // queueSize instead of buffering without limit.
                 await writer.write(chunk);
             }
             await writer.end();
@@ -106,9 +106,9 @@ export function createS3Provider(config) {
         },
         readStream(key) {
             assertSafeStorageKey(key);
-            // Lazy: erst beim ersten chunk-pull wird der GET-Request abgesetzt.
-            // Existiert der Key nicht, faellt der Error genau dort (nicht beim
-            // readStream-Aufruf) — gleiches Lazy-Verhalten wie inmemory + local.
+            // Lazy: the GET request is only sent on the first chunk pull. If the key
+            // does not exist, the error surfaces right there (not on the readStream
+            // call) — same lazy behavior as inmemory + local.
             return {
                 async *[Symbol.asyncIterator]() {
                     for await (const chunk of client.file(key).stream()) {

package/dist/file-provider-s3-env/index.d.ts

@@ -1 +1,8 @@
-export { fileProviderS3EnvFeature } from "./feature.js";
+/**
+ * @deprecated Use createFileProviderS3Feature({ fromEnv: true }) from
+ * `@cosmicdrift/kumiko-bundled-features/file-provider-s3`. Run `bun kumiko-upgrade --apply`.
+ * Removed in the first release after 2026-10-29.
+ */
+export declare const fileProviderS3EnvFeature: import("@cosmicdrift/kumiko-types/feature").FeatureDefinition & {
+    readonly exports: void;
+};

package/dist/file-provider-s3-env/index.js

@@ -1,2 +1,7 @@
-// Public API of the file-provider-s3-env bundled-feature.
-export { fileProviderS3EnvFeature } from "./feature.js";
+import { createFileProviderS3Feature } from "../file-provider-s3/index.js";
+/**
+ * @deprecated Use createFileProviderS3Feature({ fromEnv: true }) from
+ * `@cosmicdrift/kumiko-bundled-features/file-provider-s3`. Run `bun kumiko-upgrade --apply`.
+ * Removed in the first release after 2026-10-29.
+ */
+export const fileProviderS3EnvFeature = createFileProviderS3Feature({ fromEnv: true });

package/dist/files-provider-s3/index.d.ts

@@ -1,3 +1,5 @@
-export { createS3ProviderFromEnv, parseS3EnvConfig } from "./env-helper.js";
-export type { S3ProviderConfig } from "./s3-provider.js";
-export { createS3Provider, resolveForcePathStyle } from "./s3-provider.js";
+/**
+ * @deprecated Moved to `@cosmicdrift/kumiko-bundled-features/file-provider-s3/lib`. Run `bun kumiko-upgrade --apply`
+ * to rewrite imports. Removed in the first release after 2026-10-29.
+ */
+export { createS3Provider, createS3ProviderFromEnv, parseS3EnvConfig, resolveForcePathStyle, type S3ProviderConfig, } from "../file-provider-s3/lib/index.js";

package/dist/files-provider-s3/index.js

@@ -1,2 +1,5 @@
-export { createS3ProviderFromEnv, parseS3EnvConfig } from "./env-helper.js";
-export { createS3Provider, resolveForcePathStyle } from "./s3-provider.js";
+/**
+ * @deprecated Moved to `@cosmicdrift/kumiko-bundled-features/file-provider-s3/lib`. Run `bun kumiko-upgrade --apply`
+ * to rewrite imports. Removed in the first release after 2026-10-29.
+ */
+export { createS3Provider, createS3ProviderFromEnv, parseS3EnvConfig, resolveForcePathStyle, } from "../file-provider-s3/lib/index.js";

package/dist/files-tenant-data/handlers/sweep-orphaned-derivatives.job.js

@@ -17,7 +17,7 @@
 // were a tenant. nextBatch pages tenants internally and buffers their
 // candidates into a flat queue so the shared deadline/circuit-breaker/signal
 // handling still applies per-key.
-import { selectMany } from "@cosmicdrift/kumiko-framework/bun-db";
+import { selectMany } from "@cosmicdrift/kumiko-framework/db";
 import { parseDerivativeKey } from "@cosmicdrift/kumiko-framework/derivatives";
 import { assertSafeStorageKey, fileRefsTable, } from "@cosmicdrift/kumiko-framework/files";
 import * as z from "zod";