@cosmicdrift/kumiko-bundled-features 0.369.0 → 0.370.0

package/dist/file-provider-s3/env-schema.d.ts

@@ -0,0 +1,38 @@
+import * as z from "zod";
+/** S3-compatible endpoint URL: https, or http on a loopback host. */
+export declare const s3EndpointSchema: z.ZodURL;
+/** Builds the env block `createS3ProviderFromEnv(prefix)` reads, e.g.
+ *  `createS3EnvSchema({ prefix: "RELEASES_S3_" })` for a second bucket.
+ *  Every field is optional: an app that mounts the env provider next to
+ *  another one picks the provider at runtime, and the provider reports
+ *  missing credentials on its first file operation. */
+export declare function createS3EnvSchema<const TPrefix extends string>(options: {
+    readonly prefix: TPrefix;
+}): z.ZodObject<S3EnvShape<TPrefix> extends infer T ? { -readonly [P in keyof T]: T[P]; } : never, z.core.$strip>;
+type OptionalString = z.ZodOptional<z.ZodString>;
+type S3EnvShape<TPrefix extends string> = {
+    [Key in `${TPrefix}${"BUCKET" | "REGION" | "ACCESS_KEY" | "SECRET_KEY"}`]: OptionalString;
+} & {
+    [Key in `${TPrefix}ENDPOINT`]: z.ZodOptional<z.ZodUnion<[
+        z.ZodPipe<z.ZodLiteral<"">, z.ZodTransform<undefined, "">>,
+        typeof s3EndpointSchema
+    ]>>;
+} & {
+    [Key in `${TPrefix}FORCE_PATH_STYLE`]: z.ZodOptional<z.ZodEnum<{
+        true: "true";
+        false: "false";
+    }>>;
+};
+/** The `S3_*` block of the `"s3-env"` provider. */
+export declare const s3EnvSchema: z.ZodObject<{
+    S3_ACCESS_KEY: OptionalString;
+    S3_BUCKET: OptionalString;
+    S3_ENDPOINT: z.ZodOptional<z.ZodUnion<[z.ZodPipe<z.ZodLiteral<"">, z.ZodTransform<undefined, "">>, z.ZodURL]>>;
+    S3_FORCE_PATH_STYLE: z.ZodOptional<z.ZodEnum<{
+        true: "true";
+        false: "false";
+    }>>;
+    S3_REGION: OptionalString;
+    S3_SECRET_KEY: OptionalString;
+}, z.core.$strip>;
+export {};

package/dist/file-provider-s3/env-schema.js

@@ -0,0 +1,51 @@
+import * as z from "zod";
+const LOOPBACK_HOSTNAMES = new Set(["localhost", "127.0.0.1", "[::1]"]);
+// The bucket holds tenant files, so a remote endpoint must be https; plain
+// http stays allowed for a loopback MinIO in dev and CI.
+function isHttpsOrLoopbackHttp(value) {
+    if (!URL.canParse(value))
+        return false;
+    const url = new URL(value);
+    return url.protocol === "https:" || LOOPBACK_HOSTNAMES.has(url.hostname);
+}
+/** S3-compatible endpoint URL: https, or http on a loopback host. */
+export const s3EndpointSchema = z
+    .url({ protocol: /^https?$/ })
+    .refine(isHttpsOrLoopbackHttp, "must use https unless the host is loopback");
+/** Builds the env block `createS3ProviderFromEnv(prefix)` reads, e.g.
+ *  `createS3EnvSchema({ prefix: "RELEASES_S3_" })` for a second bucket.
+ *  Every field is optional: an app that mounts the env provider next to
+ *  another one picks the provider at runtime, and the provider reports
+ *  missing credentials on its first file operation. */
+export function createS3EnvSchema(options) {
+    const { prefix } = options;
+    // @cast-boundary schema-walk — computed template keys widen to an index signature; the literal keys below are exactly the ones S3EnvShape names.
+    const shape = {
+        [`${prefix}BUCKET`]: z.string().min(1).optional().describe("S3 bucket."),
+        [`${prefix}REGION`]: z.string().min(1).optional().describe("S3 region."),
+        [`${prefix}ACCESS_KEY`]: z
+            .string()
+            .min(1)
+            .optional()
+            .describe("S3 access key id.")
+            .meta({ kumiko: { pulumi: { secret: true } } }),
+        [`${prefix}SECRET_KEY`]: z
+            .string()
+            .min(1)
+            .optional()
+            .describe("S3 secret access key.")
+            .meta({ kumiko: { pulumi: { secret: true } } }),
+        // An empty value (blank .env line) means "unset", same as the reader.
+        [`${prefix}ENDPOINT`]: z
+            .union([z.literal("").transform(() => undefined), s3EndpointSchema])
+            .optional()
+            .describe("S3-compatible endpoint (Hetzner, R2, MinIO). Default: AWS."),
+        [`${prefix}FORCE_PATH_STYLE`]: z
+            .enum(["true", "false"])
+            .optional()
+            .describe('Path-style bucket addressing ("true"), needed by MinIO and some S3 clones.'),
+    };
+    return z.object(shape);
+}
+/** The `S3_*` block of the `"s3-env"` provider. */
+export const s3EnvSchema = createS3EnvSchema({ prefix: "S3_" });

package/dist/file-provider-s3/feature.d.ts

@@ -1,4 +1,4 @@
-import { createFileProviderS3EnvFeature } from "./env-feature.js";
+import { createFileProviderS3EnvFeature } from "./env-feature.ts";
 declare function createTenantConfigFileProviderS3Feature(): import("@cosmicdrift/kumiko-types/feature").FeatureDefinition & {
     readonly exports: {
         configKeys: {
@@ -22,19 +22,6 @@ export declare function createFileProviderS3Feature(options?: {
     readonly fromEnv?: false;
 }): ReturnType<typeof createTenantConfigFileProviderS3Feature>;
 export declare function createFileProviderS3Feature(options: FileProviderS3FeatureOptions): ReturnType<typeof createFileProviderS3EnvFeature> | ReturnType<typeof createTenantConfigFileProviderS3Feature>;
-/** @deprecated Use createFileProviderS3Feature(). Run `bun kumiko-upgrade --apply`. Removed in the first release after 2026-10-29. */
-export declare const fileProviderS3Feature: import("@cosmicdrift/kumiko-types/feature").FeatureDefinition & {
-    readonly exports: {
-        configKeys: {
-            readonly bucket: import("@cosmicdrift/kumiko-types/config").ConfigKeyHandle<"text">;
-            readonly region: import("@cosmicdrift/kumiko-types/config").ConfigKeyHandle<"text">;
-            readonly endpoint: import("@cosmicdrift/kumiko-types/config").ConfigKeyHandle<"text">;
-            readonly forcePathStyle: import("@cosmicdrift/kumiko-types/config").ConfigKeyHandle<"boolean">;
-            readonly accessKeyId: import("@cosmicdrift/kumiko-types/config").ConfigKeyHandle<"text">;
-        };
-        secretAccessKey: import("@cosmicdrift/kumiko-types/feature").SecretKeyHandle;
-    };
-};
 /** Typed handle for the S3 secret-access-key. */
 export declare const S3_SECRET_ACCESS_KEY: import("@cosmicdrift/kumiko-types/feature").SecretKeyHandle;
 export {};

package/dist/file-provider-s3/feature.js

@@ -97,8 +97,6 @@ export function createFileProviderS3Feature(options = {}) {
         ? createFileProviderS3EnvFeature()
         : createTenantConfigFileProviderS3Feature();
 }
-/** @deprecated Use createFileProviderS3Feature(). Run `bun kumiko-upgrade --apply`. Removed in the first release after 2026-10-29. */
-export const fileProviderS3Feature = createFileProviderS3Feature();
 // Typed config/secret handles are identical across instances, so one module-level instance serves them.
 const tenantConfigFeature = createTenantConfigFileProviderS3Feature();
 /** Typed handle for the S3 secret-access-key. */

package/dist/file-provider-s3/index.d.ts

@@ -1 +1,2 @@
-export { createFileProviderS3Feature, type FileProviderS3FeatureOptions, fileProviderS3Feature, S3_SECRET_ACCESS_KEY, } from "./feature.js";
+export { createS3EnvSchema, s3EndpointSchema, s3EnvSchema } from "./env-schema.ts";
+export { createFileProviderS3Feature, type FileProviderS3FeatureOptions, S3_SECRET_ACCESS_KEY, } from "./feature.ts";

package/dist/file-provider-s3/index.js

@@ -1,2 +1,3 @@
 // Public API of the file-provider-s3 bundled-feature.
-export { createFileProviderS3Feature, fileProviderS3Feature, S3_SECRET_ACCESS_KEY, } from "./feature.js";
+export { createS3EnvSchema, s3EndpointSchema, s3EnvSchema } from "./env-schema.js";
+export { createFileProviderS3Feature, S3_SECRET_ACCESS_KEY, } from "./feature.js";

package/dist/file-provider-s3/lib/env-helper.d.ts

@@ -1,4 +1,4 @@
 import type { FileStorageProvider } from "@cosmicdrift/kumiko-framework/files";
-import { type S3ProviderConfig } from "./s3-provider.js";
+import { type S3ProviderConfig } from "./s3-provider.ts";
 export declare function createS3ProviderFromEnv(prefix?: string): FileStorageProvider;
 export declare function parseS3EnvConfig(prefix: string): S3ProviderConfig;

package/dist/file-provider-s3/lib/index.d.ts

@@ -1,3 +1,3 @@
-export { createS3ProviderFromEnv, parseS3EnvConfig } from "./env-helper.js";
-export type { S3ProviderConfig } from "./s3-provider.js";
-export { createS3Provider, resolveForcePathStyle } from "./s3-provider.js";
+export { createS3ProviderFromEnv, parseS3EnvConfig } from "./env-helper.ts";
+export type { S3ProviderConfig } from "./s3-provider.ts";
+export { createS3Provider, resolveForcePathStyle } from "./s3-provider.ts";

package/dist/files/index.d.ts

@@ -1 +1 @@
-export { createFilesFeature, fileRefEntity } from "./feature.js";
+export { createFilesFeature, fileRefEntity } from "./feature.ts";

package/dist/files-tenant-data/index.d.ts

@@ -1,5 +1,5 @@
 import { type FeatureDefinition } from "@cosmicdrift/kumiko-framework/engine";
 export declare const FILES_TENANT_DATA_FEATURE: "files-tenant-data";
 export declare function createFilesTenantDataFeature(): FeatureDefinition;
-export { sweepOrphanedDerivativesJob, sweepOrphanedDerivativesPayloadSchema, } from "./handlers/sweep-orphaned-derivatives.job.js";
-export { fileRefStorageDestroyHook, fileRefTenantDestroyHook } from "./hooks.js";
+export { sweepOrphanedDerivativesJob, sweepOrphanedDerivativesPayloadSchema, } from "./handlers/sweep-orphaned-derivatives.job.ts";
+export { fileRefStorageDestroyHook, fileRefTenantDestroyHook } from "./hooks.ts";

package/dist/folders/feature.d.ts

@@ -42,8 +42,4 @@ export type FoldersFeatureOptions = {
     readonly parents?: readonly string[];
 };
 export declare function createFoldersFeature(opts?: FoldersFeatureOptions): typeof defaultFoldersFeature;
-/** @deprecated Use createFoldersFeature(). Run `bun kumiko-upgrade --apply`. Removed in the first release after 2026-10-29. */
-export declare const foldersFeature: import("@cosmicdrift/kumiko-types/feature").FeatureDefinition & {
-    readonly exports: void;
-};
 export {};

package/dist/folders/feature.js

@@ -90,5 +90,3 @@ export function createFoldersFeature(opts = {}) {
     const access = resolveAccess(opts);
     return defineFeature(FOLDERS_FEATURE_NAME, (r) => registerFolders(r, access, opts.toggleable, opts.ownership, opts.parents));
 }
-/** @deprecated Use createFoldersFeature(). Run `bun kumiko-upgrade --apply`. Removed in the first release after 2026-10-29. */
-export const foldersFeature = createFoldersFeature();

package/dist/folders/index.d.ts

@@ -1,7 +1,7 @@
-export { folderAssignmentAggregateId } from "./aggregate-id.js";
-export { DEFAULT_FOLDER_ACCESS, DEFAULT_FOLDER_ROLES, FOLDER_SECTION_EXTENSION_NAME, FOLDERS_FEATURE_NAME, FoldersHandlers, FoldersQueries, } from "./constants.js";
-export { folderAssignmentEntity, folderEntity } from "./entity.js";
-export { createFoldersFeature, type FoldersFeatureOptions, foldersFeature, } from "./feature.js";
-export { clearFolderHandler, createClearFolderHandler } from "./handlers/clear-folder.write.js";
-export { createSetFolderHandler, setFolderHandler } from "./handlers/set-folder.write.js";
-export { type ClearFolderPayload, clearFolderPayloadSchema, type SetFolderPayload, setFolderPayloadSchema, } from "./schemas.js";
+export { folderAssignmentAggregateId } from "./aggregate-id.ts";
+export { DEFAULT_FOLDER_ACCESS, DEFAULT_FOLDER_ROLES, FOLDER_SECTION_EXTENSION_NAME, FOLDERS_FEATURE_NAME, FoldersHandlers, FoldersQueries, } from "./constants.ts";
+export { folderAssignmentEntity, folderEntity } from "./entity.ts";
+export { createFoldersFeature, type FoldersFeatureOptions, } from "./feature.ts";
+export { clearFolderHandler, createClearFolderHandler } from "./handlers/clear-folder.write.ts";
+export { createSetFolderHandler, setFolderHandler } from "./handlers/set-folder.write.ts";
+export { type ClearFolderPayload, clearFolderPayloadSchema, type SetFolderPayload, setFolderPayloadSchema, } from "./schemas.ts";

package/dist/folders/index.js

@@ -1,7 +1,7 @@
 export { folderAssignmentAggregateId } from "./aggregate-id.js";
 export { DEFAULT_FOLDER_ACCESS, DEFAULT_FOLDER_ROLES, FOLDER_SECTION_EXTENSION_NAME, FOLDERS_FEATURE_NAME, FoldersHandlers, FoldersQueries, } from "./constants.js";
 export { folderAssignmentEntity, folderEntity } from "./entity.js";
-export { createFoldersFeature, foldersFeature, } from "./feature.js";
+export { createFoldersFeature, } from "./feature.js";
 export { clearFolderHandler, createClearFolderHandler } from "./handlers/clear-folder.write.js";
 export { createSetFolderHandler, setFolderHandler } from "./handlers/set-folder.write.js";
 export { clearFolderPayloadSchema, setFolderPayloadSchema, } from "./schemas.js";

package/dist/folders/web/folder-manager.d.ts

@@ -1,6 +1,6 @@
 import { type LucideIcon } from "lucide-react";
 import { type ReactNode } from "react";
-import { type FolderRow } from "./tree.js";
+import { type FolderRow } from "./tree.ts";
 export type FolderLeaf = {
     readonly id: string;
     readonly label: string;

package/dist/folders/web/index.d.ts

@@ -1,5 +1,5 @@
-export { FOLDER_SECTION_EXTENSION_NAME, FoldersHandlers, FoldersQueries } from "../constants.js";
-export { foldersClient } from "./client-plugin.js";
-export { type FolderFiling, type FolderLeaf, FolderManager } from "./folder-manager.js";
-export { FolderSection } from "./folder-section.js";
-export { buildFolderTree, type FolderNode, type FolderRow, folderPath } from "./tree.js";
+export { FOLDER_SECTION_EXTENSION_NAME, FoldersHandlers, FoldersQueries } from "../constants.ts";
+export { foldersClient } from "./client-plugin.tsx";
+export { type FolderFiling, type FolderLeaf, FolderManager } from "./folder-manager.tsx";
+export { FolderSection } from "./folder-section.tsx";
+export { buildFolderTree, type FolderNode, type FolderRow, folderPath } from "./tree.ts";

package/dist/folders-user-data/index.d.ts

@@ -1,7 +1,3 @@
 export declare function createFoldersUserDataFeature(): import("@cosmicdrift/kumiko-types/feature").FeatureDefinition & {
     readonly exports: void;
 };
-/** @deprecated Use createFoldersUserDataFeature(). Run `bun kumiko-upgrade --apply`. Removed in the first release after 2026-10-29. */
-export declare const foldersUserDataFeature: import("@cosmicdrift/kumiko-types/feature").FeatureDefinition & {
-    readonly exports: void;
-};

package/dist/folders-user-data/index.js

@@ -24,5 +24,3 @@ export function createFoldersUserDataFeature() {
         });
     }, { dedupeOptions: {} });
 }
-/** @deprecated Use createFoldersUserDataFeature(). Run `bun kumiko-upgrade --apply`. Removed in the first release after 2026-10-29. */
-export const foldersUserDataFeature = createFoldersUserDataFeature();

package/dist/form-draft/db/queries/cleanup.d.ts

@@ -1,7 +1,7 @@
 import type { DbConnection } from "@cosmicdrift/kumiko-framework/db";
 import type { TenantId } from "@cosmicdrift/kumiko-framework/engine";
 import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
-import type { FormDraftBlob } from "../../schemas.js";
+import type { FormDraftBlob } from "../../schemas.ts";
 export type StaleDraftRow = {
     readonly id: string;
     readonly tenantId: TenantId;

package/dist/form-draft/feature.d.ts

@@ -1,7 +1,3 @@
 export declare function createFormDraftFeature(): import("@cosmicdrift/kumiko-types/feature").FeatureDefinition & {
     readonly exports: void;
 };
-/** @deprecated Use createFormDraftFeature(). Run `bun kumiko-upgrade --apply`. Removed in the first release after 2026-10-29. */
-export declare const formDraftFeature: import("@cosmicdrift/kumiko-types/feature").FeatureDefinition & {
-    readonly exports: void;
-};

package/dist/form-draft/feature.js

@@ -44,5 +44,3 @@ function registerFormDraft(r) {
 export function createFormDraftFeature() {
     return defineFeature(FORM_DRAFT_FEATURE_NAME, registerFormDraft, { dedupeOptions: {} });
 }
-/** @deprecated Use createFormDraftFeature(). Run `bun kumiko-upgrade --apply`. Removed in the first release after 2026-10-29. */
-export const formDraftFeature = createFormDraftFeature();

package/dist/form-draft/handlers/cleanup.job.d.ts

@@ -1,6 +1,6 @@
 import { type DbConnection } from "@cosmicdrift/kumiko-framework/db";
 import { type AppContext, type ConfigKeyDefinition, type JobContext, type TenantId } from "@cosmicdrift/kumiko-framework/engine";
-import { type StaleDraftRow } from "../db/queries/cleanup.js";
+import { type StaleDraftRow } from "../db/queries/cleanup.ts";
 export declare const FORM_DRAFT_RETENTION_DAYS_CONFIG_KEY = "form-draft:config:retention-days";
 export declare const FORM_DRAFT_DEFAULT_RETENTION_DAYS = 30;
 export declare const formDraftRetentionDaysConfig: ConfigKeyDefinition<"number">;

package/dist/form-draft/handlers/get.query.d.ts

@@ -1,4 +1,4 @@
-import type { FormDraftBlob } from "../schemas.js";
+import type { FormDraftBlob } from "../schemas.ts";
 export type GetDraftResult = {
     readonly draft: FormDraftBlob | null;
 };

package/dist/form-draft/index.d.ts

@@ -1,10 +1,10 @@
-export { FORM_DRAFT_ACCESS, FORM_DRAFT_FEATURE_NAME, FORM_DRAFT_KEY_MAX_LENGTH, FORM_DRAFT_UNIQUE_KEY_CONSTRAINT, FormDraftHandlers, FormDraftQueries, } from "./constants.js";
-export { formDraftEntity } from "./entity.js";
-export { formDraftExecutor, formDraftTable } from "./executor.js";
-export { createFormDraftFeature, formDraftFeature } from "./feature.js";
-export { discardDraftWrite } from "./handlers/discard.write.js";
-export { type GetDraftResult, getDraftQuery } from "./handlers/get.query.js";
-export { type ListDraftsResult, listDraftsQuery } from "./handlers/list.query.js";
-export { saveDraftWrite } from "./handlers/save.write.js";
-export { type FormDraftRow, lookupDraft } from "./lookup.js";
-export { type DiscardDraftPayload, discardDraftPayloadSchema, type FormDraftBlob, formDraftBlobSchema, type GetDraftPayload, getDraftPayloadSchema, type ListDraftsPayload, listDraftsPayloadSchema, type SaveDraftPayload, saveDraftPayloadSchema, } from "./schemas.js";
+export { FORM_DRAFT_ACCESS, FORM_DRAFT_FEATURE_NAME, FORM_DRAFT_KEY_MAX_LENGTH, FORM_DRAFT_UNIQUE_KEY_CONSTRAINT, FormDraftHandlers, FormDraftQueries, } from "./constants.ts";
+export { formDraftEntity } from "./entity.ts";
+export { formDraftExecutor, formDraftTable } from "./executor.ts";
+export { createFormDraftFeature } from "./feature.ts";
+export { discardDraftWrite } from "./handlers/discard.write.ts";
+export { type GetDraftResult, getDraftQuery } from "./handlers/get.query.ts";
+export { type ListDraftsResult, listDraftsQuery } from "./handlers/list.query.ts";
+export { saveDraftWrite } from "./handlers/save.write.ts";
+export { type FormDraftRow, lookupDraft } from "./lookup.ts";
+export { type DiscardDraftPayload, discardDraftPayloadSchema, type FormDraftBlob, formDraftBlobSchema, type GetDraftPayload, getDraftPayloadSchema, type ListDraftsPayload, listDraftsPayloadSchema, type SaveDraftPayload, saveDraftPayloadSchema, } from "./schemas.ts";

package/dist/form-draft/index.js

@@ -1,7 +1,7 @@
 export { FORM_DRAFT_ACCESS, FORM_DRAFT_FEATURE_NAME, FORM_DRAFT_KEY_MAX_LENGTH, FORM_DRAFT_UNIQUE_KEY_CONSTRAINT, FormDraftHandlers, FormDraftQueries, } from "./constants.js";
 export { formDraftEntity } from "./entity.js";
 export { formDraftExecutor, formDraftTable } from "./executor.js";
-export { createFormDraftFeature, formDraftFeature } from "./feature.js";
+export { createFormDraftFeature } from "./feature.js";
 export { discardDraftWrite } from "./handlers/discard.write.js";
 export { getDraftQuery } from "./handlers/get.query.js";
 export { listDraftsQuery } from "./handlers/list.query.js";

package/dist/form-draft/lookup.d.ts

@@ -1,7 +1,7 @@
 import type { TenantDb } from "@cosmicdrift/kumiko-framework/db";
 import type { TenantId } from "@cosmicdrift/kumiko-framework/engine";
 import type { Temporal } from "@cosmicdrift/kumiko-types/temporal";
-import type { FormDraftBlob } from "./schemas.js";
+import type { FormDraftBlob } from "./schemas.ts";
 export type FormDraftRow = {
     readonly id: string;
     readonly version: number;

package/dist/form-draft/release-file-refs.d.ts

@@ -1,4 +1,4 @@
-import type { FormDraftBlob } from "./schemas.js";
+import type { FormDraftBlob } from "./schemas.ts";
 export declare function collectDraftFileRefKeys(draft: FormDraftBlob | null | undefined): readonly string[];
 export declare function releaseDraftFileRefs(keys: readonly string[], deleteBinary: (storageKey: string) => Promise<void>, log?: {
     warn(msg: string, data?: Record<string, unknown>): void;

package/dist/form-draft-user-data/index.d.ts

@@ -1,7 +1,3 @@
 export declare function createFormDraftUserDataFeature(): import("@cosmicdrift/kumiko-types/feature").FeatureDefinition & {
     readonly exports: void;
 };
-/** @deprecated Use createFormDraftUserDataFeature(). Run `bun kumiko-upgrade --apply`. Removed in the first release after 2026-10-29. */
-export declare const formDraftUserDataFeature: import("@cosmicdrift/kumiko-types/feature").FeatureDefinition & {
-    readonly exports: void;
-};

package/dist/form-draft-user-data/index.js

@@ -17,5 +17,3 @@ export function createFormDraftUserDataFeature() {
         });
     }, { dedupeOptions: {} });
 }
-/** @deprecated Use createFormDraftUserDataFeature(). Run `bun kumiko-upgrade --apply`. Removed in the first release after 2026-10-29. */
-export const formDraftUserDataFeature = createFormDraftUserDataFeature();

package/dist/foundation-shared/build-info-env.d.ts

@@ -0,0 +1,7 @@
+import * as z from "zod";
+/** `BUILD_VERSION`/`BUILD_TIME`, passed from the Dockerfile build args and
+ *  served by the health and version routes ("dev"/"unknown" when unset). */
+export declare const buildInfoEnvSchema: z.ZodObject<{
+    BUILD_VERSION: z.ZodOptional<z.ZodString>;
+    BUILD_TIME: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;

package/dist/foundation-shared/build-info-env.js

@@ -0,0 +1,15 @@
+import * as z from "zod";
+/** `BUILD_VERSION`/`BUILD_TIME`, passed from the Dockerfile build args and
+ *  served by the health and version routes ("dev"/"unknown" when unset). */
+export const buildInfoEnvSchema = z.object({
+    BUILD_VERSION: z
+        .string()
+        .min(1)
+        .optional()
+        .describe("Release version baked into the image (git tag or sha). Default: dev."),
+    BUILD_TIME: z
+        .string()
+        .min(1)
+        .optional()
+        .describe("Image build timestamp (ISO 8601). Default: unknown."),
+});

package/dist/foundation-shared/demo-admin-env.d.ts

@@ -0,0 +1,12 @@
+import * as z from "zod";
+/** Logins seeded on first boot: the demo tenant admin and the SystemAdmin.
+ *  The emails are required so a deploy never seeds an account nobody can
+ *  reach; a missing password skips that seed. An app with other rules
+ *  overrides single keys by spreading `.shape` before its own fields. */
+export declare const demoAdminEnvSchema: z.ZodObject<{
+    DEMO_ADMIN_EMAIL: z.ZodEmail;
+    DEMO_ADMIN_PASSWORD: z.ZodOptional<z.ZodString>;
+    DEMO_SYSADMIN_EMAIL: z.ZodEmail;
+    DEMO_SYSADMIN_PASSWORD: z.ZodOptional<z.ZodString>;
+    DEMO_TENANT_ID: z.ZodOptional<z.ZodUUID>;
+}, z.core.$strip>;

package/dist/foundation-shared/demo-admin-env.js

@@ -0,0 +1,21 @@
+import * as z from "zod";
+const SEED_PASSWORD_MIN_LENGTH = 16;
+function seedPassword(description) {
+    return z
+        .string()
+        .min(SEED_PASSWORD_MIN_LENGTH)
+        .optional()
+        .describe(`${description} Generate with: openssl rand -hex 24`)
+        .meta({ kumiko: { pulumi: { generator: "openssl rand -hex 24", secret: true } } });
+}
+/** Logins seeded on first boot: the demo tenant admin and the SystemAdmin.
+ *  The emails are required so a deploy never seeds an account nobody can
+ *  reach; a missing password skips that seed. An app with other rules
+ *  overrides single keys by spreading `.shape` before its own fields. */
+export const demoAdminEnvSchema = z.object({
+    DEMO_ADMIN_EMAIL: z.email().describe("Login of the demo tenant admin seeded on first boot."),
+    DEMO_ADMIN_PASSWORD: seedPassword("Password of the seeded demo tenant admin."),
+    DEMO_SYSADMIN_EMAIL: z.email().describe("Login of the SystemAdmin seeded on first boot."),
+    DEMO_SYSADMIN_PASSWORD: seedPassword("Password of the seeded SystemAdmin."),
+    DEMO_TENANT_ID: z.uuid().optional().describe("Id of the seeded demo tenant. Default: generated."),
+});

package/dist/foundation-shared/index.d.ts

@@ -1,3 +1,5 @@
-export { requireDefined, requireNonEmpty, requireSecretSet } from "./config-helpers.js";
-export { isHostAllowlisted, readHostAllowlistFromEnv } from "./host-allowlist.js";
-export { BlockedHostError, HostResolutionError, MAIL_ALLOWED_PRIVATE_HOSTS_ENV_VAR, type MailConnectTarget, type MailHostGuardOptions, mailAllowedPrivateHostsEnvSchema, readAllowedPrivateMailHostsFromEnv, resolveMailConnectTarget, } from "./mail-host-policy.js";
+export { buildInfoEnvSchema } from "./build-info-env.ts";
+export { requireDefined, requireNonEmpty, requireSecretSet } from "./config-helpers.ts";
+export { demoAdminEnvSchema } from "./demo-admin-env.ts";
+export { isHostAllowlisted, readHostAllowlistFromEnv } from "./host-allowlist.ts";
+export { BlockedHostError, HostResolutionError, MAIL_ALLOWED_PRIVATE_HOSTS_ENV_VAR, type MailConnectTarget, type MailHostGuardOptions, mailAllowedPrivateHostsEnvSchema, readAllowedPrivateMailHostsFromEnv, resolveMailConnectTarget, } from "./mail-host-policy.ts";

package/dist/foundation-shared/index.js

@@ -1,5 +1,7 @@
 // Public API of foundation-shared — utilities consumed by the per-tenant
 // Foundation packages (ai-foundation, mail-foundation, file-foundation).
+export { buildInfoEnvSchema } from "./build-info-env.js";
 export { requireDefined, requireNonEmpty, requireSecretSet } from "./config-helpers.js";
+export { demoAdminEnvSchema } from "./demo-admin-env.js";
 export { isHostAllowlisted, readHostAllowlistFromEnv } from "./host-allowlist.js";
 export { BlockedHostError, HostResolutionError, MAIL_ALLOWED_PRIVATE_HOSTS_ENV_VAR, mailAllowedPrivateHostsEnvSchema, readAllowedPrivateMailHostsFromEnv, resolveMailConnectTarget, } from "./mail-host-policy.js";

package/dist/host-routing/constants.d.ts

@@ -0,0 +1,8 @@
+export declare const HOST_ROUTING_FEATURE = "host-routing";
+export declare const HostRoutingQueries: {
+    readonly tenantKeyExists: "host-routing:query:tenant-key-exists";
+};
+export declare const TENANT_KEY_MAX_LENGTH = 50;
+export declare const TENANT_KEY_PATTERN: RegExp;
+export declare function isTenantKeyCandidate(value: string): boolean;
+export declare function isPathTenantKeyCandidate(value: string): boolean;

package/dist/host-routing/constants.js

@@ -0,0 +1,19 @@
+export const HOST_ROUTING_FEATURE = "host-routing";
+export const HostRoutingQueries = {
+    tenantKeyExists: `${HOST_ROUTING_FEATURE}:query:tenant-key-exists`,
+};
+// Matches tenant:write:create's key limit; keeps lookups for absurd keys out
+// of the database.
+export const TENANT_KEY_MAX_LENGTH = 50;
+// A subdomain is one lowercase DNS label, so tenant keys outside this shape
+// are only reachable in path mode.
+export const TENANT_KEY_PATTERN = /^[a-z0-9](?:[a-z0-9-]{0,48}[a-z0-9])?$/;
+export function isTenantKeyCandidate(value) {
+    return value.length <= TENANT_KEY_MAX_LENGTH && TENANT_KEY_PATTERN.test(value);
+}
+// Path mode takes any key made of unreserved URL characters, since the tenant
+// feature itself only limits the length.
+const PATH_TENANT_KEY_PATTERN = /^[A-Za-z0-9._~-]+$/;
+export function isPathTenantKeyCandidate(value) {
+    return value.length <= TENANT_KEY_MAX_LENGTH && PATH_TENANT_KEY_PATTERN.test(value);
+}

package/dist/host-routing/dispatch.d.ts

@@ -0,0 +1,24 @@
+import type { PageHeadSystemQuery } from "@cosmicdrift/kumiko-headless/apex";
+import type { HostRoutingOptions } from "./options.ts";
+export type HostRoutingDispatchResult = {
+    readonly kind: "html";
+    readonly file: string;
+    readonly csp?: string;
+} | {
+    readonly kind: "redirect";
+    readonly to: string;
+    readonly status?: 301 | 302;
+} | {
+    readonly kind: "not-found";
+    readonly file?: string;
+    readonly csp?: string;
+};
+export type HostRoutingRequest = {
+    readonly host: string;
+    readonly path: string;
+    readonly search: string;
+};
+export type HostRoutingDispatchFn = (req: HostRoutingRequest, deps: {
+    readonly systemQuery: PageHeadSystemQuery;
+}) => Promise<HostRoutingDispatchResult>;
+export declare function createHostDispatch(options: HostRoutingOptions): HostRoutingDispatchFn;

package/dist/host-routing/dispatch.js

@@ -0,0 +1,102 @@
+import { SYSTEM_TENANT_ID } from "@cosmicdrift/kumiko-framework/engine";
+import { RateLimitError, ValidationError } from "@cosmicdrift/kumiko-framework/errors";
+import * as z from "zod";
+import { HostRoutingQueries, isPathTenantKeyCandidate, isTenantKeyCandidate } from "./constants.js";
+import { classifyHost } from "./host.js";
+import { validateHostRoutingOptions } from "./validate-options.js";
+const tenantKeyExistsResultSchema = z.object({ exists: z.boolean() });
+async function isTenantKeyKnown(systemQuery, key) {
+    let result;
+    try {
+        result = await systemQuery(HostRoutingQueries.tenantKeyExists, { key }, SYSTEM_TENANT_ID);
+    }
+    catch (error) {
+        if (error instanceof ValidationError)
+            return false;
+        // Over the rate limit every key looks the same: serve the tenant shell,
+        // which leaks nothing; the API behind it still resolves the tenant itself.
+        if (error instanceof RateLimitError)
+            return true;
+        throw error;
+    }
+    return tenantKeyExistsResultSchema.parse(result).exists;
+}
+function serve(surface, file = surface.file) {
+    return surface.csp === undefined
+        ? { kind: "html", file }
+        : { kind: "html", file, csp: surface.csp };
+}
+function notFound(surface) {
+    if (surface === undefined)
+        return { kind: "not-found" };
+    return surface.csp === undefined
+        ? { kind: "not-found", file: surface.file }
+        : { kind: "not-found", file: surface.file, csp: surface.csp };
+}
+// Redirect targets are always same-origin paths. Collapsing leading slashes
+// and backslashes keeps "/de//evil.example" from turning into the
+// protocol-relative "//evil.example".
+function sameOriginPath(path) {
+    return `/${path.replace(/^[/\\]+/, "")}`;
+}
+function splitFirstSegment(path) {
+    const withoutLeading = path.replace(/^\/+/, "");
+    const slash = withoutLeading.indexOf("/");
+    if (slash === -1)
+        return { segment: withoutLeading, rest: "/" };
+    return { segment: withoutLeading.slice(0, slash), rest: withoutLeading.slice(slash) };
+}
+function apexPage(options, req) {
+    const { apex, locales } = options;
+    if (locales === undefined)
+        return serve(apex);
+    const { segment, rest } = splitFirstSegment(req.path);
+    if (segment === locales.default) {
+        return { kind: "redirect", to: `${sameOriginPath(rest)}${req.search}`, status: 301 };
+    }
+    const locale = locales.prefixed.includes(segment) ? segment : locales.default;
+    return serve(apex, apex.localeFiles?.[locale] ?? apex.file);
+}
+async function tenantPage(options, key, systemQuery) {
+    // No key (bare tenant prefix): the shell handles login and tenant choice.
+    if (key === null)
+        return serve(options.tenant);
+    const isCandidate = options.tenantBy === "path" ? isPathTenantKeyCandidate : isTenantKeyCandidate;
+    if (!isCandidate(key))
+        return notFound(options.unknownTenant);
+    return (await isTenantKeyKnown(systemQuery, key))
+        ? serve(options.tenant)
+        : notFound(options.unknownTenant);
+}
+function tenantKeyFromPath(prefix, path) {
+    if (path !== prefix && !path.startsWith(`${prefix}/`))
+        return undefined;
+    const { segment } = splitFirstSegment(path.slice(prefix.length));
+    return segment === "" ? null : segment;
+}
+// The routing decision for runProdApp's `hostDispatch` (and, via
+// toDevHostDispatch, the dev server). Unknown hosts fail closed with 404.
+export function createHostDispatch(options) {
+    validateHostRoutingOptions(options);
+    return async (req, { systemQuery }) => {
+        const host = classifyHost(req.host, options);
+        switch (host.kind) {
+            case "fixed":
+                return serve(host.surface);
+            case "unknown":
+                return notFound(undefined);
+            case "subdomain":
+                if (options.tenantBy !== "host")
+                    return notFound(undefined);
+                return tenantPage(options, host.key, systemQuery);
+            case "apex": {
+                if (options.tenantBy === "path") {
+                    const key = tenantKeyFromPath(options.tenantPathPrefix, req.path);
+                    if (key !== undefined)
+                        return tenantPage(options, key, systemQuery);
+                }
+                return apexPage(options, req);
+            }
+        }
+    };
+}

package/dist/host-routing/feature.d.ts

@@ -0,0 +1,3 @@
+import { type FeatureDefinition } from "@cosmicdrift/kumiko-framework/engine";
+import type { HostRoutingOptions } from "./options.ts";
+export declare function createHostRoutingFeature(options: HostRoutingOptions): FeatureDefinition;