@cosmicdrift/kumiko-bundled-features 0.369.0 → 0.370.0

package/dist/host-routing/feature.js

@@ -0,0 +1,102 @@
+import { fetchOne } from "@cosmicdrift/kumiko-framework/db";
+import { defineFeature, defineQueryHandler, isSystemTenant, } from "@cosmicdrift/kumiko-framework/engine";
+import { InternalError } from "@cosmicdrift/kumiko-framework/errors";
+import * as z from "zod";
+import { EXT_TENANT_EXISTENCE, EXT_TENANT_RESOLVER, } from "../auth-foundation/index.js";
+import { isTenantServingPublicContent, tenantTable, } from "../tenant/index.js";
+import { HOST_ROUTING_FEATURE, TENANT_KEY_MAX_LENGTH } from "./constants.js";
+import { classifyHost } from "./host.js";
+import { validateHostRoutingOptions } from "./validate-options.js";
+// Disabled tenants and tenants in any destroy phase are not routable, the same
+// rule public files and pages follow.
+async function servingTenantIdByKey(db, key) {
+    const row = await fetchOne(db, tenantTable, { key });
+    return row !== undefined && isTenantServingPublicContent(row) ? row.id : null;
+}
+async function isTenantServing(db, id) {
+    const row = await fetchOne(db, tenantTable, { id });
+    return row !== undefined && isTenantServingPublicContent(row);
+}
+// auth-foundation types the Hono context as unknown to stay free of a hono dep.
+function isHostHeaderReader(c) {
+    return (typeof c === "object" &&
+        c !== null &&
+        "req" in c &&
+        typeof c.req === "object" &&
+        c.req !== null &&
+        "header" in c.req &&
+        typeof c.req.header === "function");
+}
+// Returns only { exists }: the same fact the tenant 404 page already makes
+// public, never other tenant fields. Rate-limited so it is no cheap oracle.
+const tenantKeyExistsQuery = defineQueryHandler({
+    name: "tenant-key-exists",
+    schema: z.object({ key: z.string().min(1).max(TENANT_KEY_MAX_LENGTH) }),
+    access: { roles: ["anonymous"] },
+    rateLimit: { per: "ip+handler", limit: 120, windowSeconds: 60 },
+    // Page-routing plumbing, not a task an agent performs.
+    agent: { expose: false },
+    description: "Anonymous existence check for a tenant key, backing the unknown-tenant 404 of the host-routing hostDispatch. Returns only { exists }.",
+    handler: async (query, ctx) => {
+        if (!ctx.systemDb) {
+            throw new InternalError({
+                message: "host-routing:query:tenant-key-exists requires ctx.systemDb (r.systemScope())",
+            });
+        }
+        const db = ctx.systemDb.acknowledgeCrossTenant("tenant-key existence check for the host-routing 404 — publicly observable via the 404 itself");
+        return { exists: (await servingTenantIdByKey(db, query.payload.key)) !== null };
+    },
+});
+function tenantResolverFor(options) {
+    const apexTenantId = options.apexAnonymousTenantId ?? null;
+    if (options.tenantBy === "host") {
+        return {
+            trust: "authoritative",
+            build: ({ db }) => async (c) => {
+                if (!isHostHeaderReader(c))
+                    return null;
+                const host = classifyHost(c.req.header("Host") ?? "", options);
+                if (host.kind === "subdomain")
+                    return servingTenantIdByKey(db, host.key);
+                // Fixed and unknown hosts have no anonymous tenant: an authoritative
+                // null answers tenant_required, whatever X-Tenant says.
+                return host.kind === "apex" ? apexTenantId : null;
+            },
+        };
+    }
+    if (apexTenantId === null)
+        return undefined;
+    // Path mode: the client names its tenant; the apex default only fills in
+    // when it does not.
+    return {
+        trust: "fallback-only",
+        build: () => async (c) => {
+            if (!isHostHeaderReader(c))
+                return null;
+            return classifyHost(c.req.header("Host") ?? "", options).kind === "apex"
+                ? apexTenantId
+                : null;
+        },
+    };
+}
+// Server half of host routing: the tenant for anonymous API requests comes
+// from the Host header only (never from X-Tenant), and a client-named tenant
+// must exist, be enabled and be active. The page half is createHostDispatch.
+export function createHostRoutingFeature(options) {
+    validateHostRoutingOptions(options);
+    return defineFeature(HOST_ROUTING_FEATURE, (r) => {
+        r.describe("Host- and path-based tenant routing: an authoritative tenant resolver from the subdomain (tenantBy host), a tenant existence check against enabled, active tenants, and the tenant-key query behind createHostDispatch, which picks the HTML file, CSP, locale redirect or 404 per host for runProdApp's hostDispatch.");
+        r.requires({ features: ["auth-foundation", "tenant"] });
+        r.systemScope();
+        r.queryHandler(tenantKeyExistsQuery);
+        const resolver = tenantResolverFor(options);
+        if (resolver !== undefined) {
+            // biome-ignore lint/correctness/useHookAtTopLevel: r.useExtension is a registrar method, not a React hook; path mode without an apex tenant must leave the resolver slot free.
+            r.useExtension(EXT_TENANT_RESOLVER, "host", resolver);
+        }
+        const existence = {
+            build: ({ db }) => (tenantId) => isSystemTenant(tenantId) ? true : isTenantServing(db, tenantId),
+        };
+        r.useExtension(EXT_TENANT_EXISTENCE, "active-tenant", existence);
+    });
+}

package/dist/host-routing/host.d.ts

@@ -0,0 +1,14 @@
+import type { HostRoutingOptions, HostRoutingSurface } from "./options.ts";
+export declare function normalizeHostname(host: string): string | null;
+export type HostClass = {
+    readonly kind: "fixed";
+    readonly surface: HostRoutingSurface;
+} | {
+    readonly kind: "apex";
+} | {
+    readonly kind: "subdomain";
+    readonly key: string;
+} | {
+    readonly kind: "unknown";
+};
+export declare function classifyHost(host: string, options: HostRoutingOptions): HostClass;

package/dist/host-routing/host.js

@@ -0,0 +1,37 @@
+import { isTenantKeyCandidate } from "./constants.js";
+// Only plain DNS names (plus an optional port) are routable. Anything else,
+// e.g. userinfo ("a@b"), IPv6 literals or stray characters, never matches a
+// configured domain and must not reach URL parsing or a DB lookup.
+const HOST_HEADER_PATTERN = /^[a-z0-9.-]+(?::[0-9]{1,5})?$/;
+export function normalizeHostname(host) {
+    const lower = host.trim().toLowerCase();
+    if (!HOST_HEADER_PATTERN.test(lower))
+        return null;
+    const colon = lower.indexOf(":");
+    const hostname = colon === -1 ? lower : lower.slice(0, colon);
+    const withoutTrailingDot = hostname.endsWith(".") ? hostname.slice(0, -1) : hostname;
+    return withoutTrailingDot === "" ? null : withoutTrailingDot;
+}
+export function classifyHost(host, options) {
+    const hostname = normalizeHostname(host);
+    if (hostname === null)
+        return { kind: "unknown" };
+    // Own-property check: the Host header is attacker-controlled, and a plain
+    // "constructor" would otherwise resolve through Object.prototype.
+    const fixed = options.hosts !== undefined && Object.hasOwn(options.hosts, hostname)
+        ? options.hosts[hostname]
+        : undefined;
+    if (fixed !== undefined)
+        return { kind: "fixed", surface: fixed };
+    const baseDomain = options.baseDomain.toLowerCase();
+    if (hostname === baseDomain || hostname === `www.${baseDomain}`)
+        return { kind: "apex" };
+    const suffix = `.${baseDomain}`;
+    if (!hostname.endsWith(suffix))
+        return { kind: "unknown" };
+    const label = hostname.slice(0, -suffix.length);
+    // Exactly one label: "a.b.<baseDomain>" is not a tenant host.
+    if (!isTenantKeyCandidate(label))
+        return { kind: "unknown" };
+    return { kind: "subdomain", key: label };
+}

package/dist/host-routing/index.d.ts

@@ -0,0 +1,5 @@
+export { HOST_ROUTING_FEATURE, HostRoutingQueries, isTenantKeyCandidate, TENANT_KEY_MAX_LENGTH, } from "./constants.ts";
+export { createHostDispatch, type HostRoutingDispatchFn, type HostRoutingDispatchResult, type HostRoutingRequest, } from "./dispatch.ts";
+export { createHostRoutingFeature } from "./feature.ts";
+export { normalizeHostname } from "./host.ts";
+export type { HostRoutingApexSurface, HostRoutingLocales, HostRoutingOptions, HostRoutingSurface, HostRoutingTenantMode, } from "./options.ts";

package/dist/host-routing/index.js

@@ -0,0 +1,4 @@
+export { HOST_ROUTING_FEATURE, HostRoutingQueries, isTenantKeyCandidate, TENANT_KEY_MAX_LENGTH, } from "./constants.js";
+export { createHostDispatch, } from "./dispatch.js";
+export { createHostRoutingFeature } from "./feature.js";
+export { normalizeHostname } from "./host.js";

package/dist/host-routing/options.d.ts

@@ -0,0 +1,27 @@
+import type { TenantId } from "@cosmicdrift/kumiko-framework/engine";
+export type HostRoutingSurface = {
+    readonly file: string;
+    readonly csp?: string;
+};
+export type HostRoutingApexSurface = HostRoutingSurface & {
+    readonly localeFiles?: Readonly<Record<string, string>>;
+};
+export type HostRoutingLocales = {
+    readonly default: string;
+    readonly prefixed: readonly string[];
+};
+export type HostRoutingTenantMode = {
+    readonly tenantBy: "host";
+} | {
+    readonly tenantBy: "path";
+    readonly tenantPathPrefix: string;
+};
+export type HostRoutingOptions = HostRoutingTenantMode & {
+    readonly baseDomain: string;
+    readonly apex: HostRoutingApexSurface;
+    readonly tenant: HostRoutingSurface;
+    readonly unknownTenant?: HostRoutingSurface;
+    readonly hosts?: Readonly<Record<string, HostRoutingSurface>>;
+    readonly locales?: HostRoutingLocales;
+    readonly apexAnonymousTenantId?: TenantId;
+};

package/dist/host-routing/options.js

@@ -0,0 +1 @@
+export {};

package/dist/host-routing/validate-options.d.ts

@@ -0,0 +1,2 @@
+import type { HostRoutingOptions } from "./options.ts";
+export declare function validateHostRoutingOptions(options: HostRoutingOptions): void;

package/dist/host-routing/validate-options.js

@@ -0,0 +1,29 @@
+const DOMAIN_PATTERN = /^[a-z0-9](?:[a-z0-9.-]*[a-z0-9])?$/;
+const PATH_PREFIX_PATTERN = /^\/[a-z0-9-]+(?:\/[a-z0-9-]+)*$/;
+const LOCALE_PATTERN = /^[a-z]{2}(?:-[a-z]{2})?$/;
+// Checked once when the app composes its features, so a config typo fails
+// the boot instead of routing every request to a 404.
+export function validateHostRoutingOptions(options) {
+    if (!DOMAIN_PATTERN.test(options.baseDomain)) {
+        throw new Error(`host-routing: baseDomain must be a lowercase hostname without port, got "${options.baseDomain}"`);
+    }
+    for (const host of Object.keys(options.hosts ?? {})) {
+        if (!DOMAIN_PATTERN.test(host)) {
+            throw new Error(`host-routing: hosts key must be a lowercase hostname, got "${host}"`);
+        }
+    }
+    if (options.tenantBy === "path" && !PATH_PREFIX_PATTERN.test(options.tenantPathPrefix)) {
+        throw new Error(`host-routing: tenantPathPrefix must look like "/app" (leading slash, no trailing slash), got "${options.tenantPathPrefix}"`);
+    }
+    const { locales } = options;
+    if (locales !== undefined) {
+        for (const locale of [locales.default, ...locales.prefixed]) {
+            if (!LOCALE_PATTERN.test(locale)) {
+                throw new Error(`host-routing: locale must look like "de" or "de-at", got "${locale}"`);
+            }
+        }
+        if (locales.prefixed.includes(locales.default)) {
+            throw new Error(`host-routing: default locale "${locales.default}" is served unprefixed and must not be in prefixed`);
+        }
+    }
+}

package/dist/inbound-mail-foundation/connect-routes.d.ts

@@ -1,6 +1,6 @@
 import type { ExtraRouteDefinition } from "@cosmicdrift/kumiko-framework/api";
-import { type OAuthAccessTokenManager } from "./oauth-access-token.js";
-import type { InboundMailContext } from "./types.js";
+import { type OAuthAccessTokenManager } from "./oauth-access-token.ts";
+import type { InboundMailContext } from "./types.ts";
 export type InboundMailConnectRoutesOptions = {
     /** HMAC-secret for the state param (deploy-time env — `scope:"system"`
      *  secrets don't exist in secrets-v1). */

package/dist/inbound-mail-foundation/feature.d.ts

@@ -1,7 +1,3 @@
 export declare function createInboundMailFoundationFeature(): import("@cosmicdrift/kumiko-types/feature").FeatureDefinition & {
     readonly exports: void;
 };
-/** @deprecated Use createInboundMailFoundationFeature(). Run `bun kumiko-upgrade --apply`. Removed in the first release after 2026-10-29. */
-export declare const inboundMailFoundationFeature: import("@cosmicdrift/kumiko-types/feature").FeatureDefinition & {
-    readonly exports: void;
-};

package/dist/inbound-mail-foundation/feature.js

@@ -204,5 +204,3 @@ export function createInboundMailFoundationFeature() {
         });
     }, { dedupeOptions: {} });
 }
-/** @deprecated Use createInboundMailFoundationFeature(). Run `bun kumiko-upgrade --apply`. Removed in the first release after 2026-10-29. */
-export const inboundMailFoundationFeature = createInboundMailFoundationFeature();

package/dist/inbound-mail-foundation/handlers/account-state.d.ts

@@ -1,3 +1,3 @@
 import type { HandlerContext } from "@cosmicdrift/kumiko-framework/engine";
-import type { MailAccountEventPayload } from "../events.js";
+import type { MailAccountEventPayload } from "../events.ts";
 export declare function loadCurrentMailAccountPayload(ctx: Pick<HandlerContext, "loadAggregate">, accountId: string): Promise<MailAccountEventPayload | undefined>;

package/dist/inbound-mail-foundation/index.d.ts

@@ -1,12 +1,12 @@
-export { inboundMessageAggregateId, mailThreadAggregateId, } from "./aggregate-id.js";
-export { createInboundMailConnectRoutes, type InboundMailConnectRoutesOptions, } from "./connect-routes.js";
-export { INBOUND_MAIL_FOUNDATION_FEATURE, INBOUND_MAIL_PROVIDER_EXTENSION, type InboundMailAccountStatus, InboundMailAccountStatuses, type InboundMailAuthMethod, InboundMailAuthMethods, InboundMailFoundationHandlers, InboundMailFoundationQueries, inboundCredentialSecretKey, } from "./constants.js";
-export { INBOUND_MESSAGE_PII_FIELDS, inboundMessageEntity, MAIL_ACCOUNT_PII_FIELDS, MAIL_THREAD_PII_FIELDS, mailAccountEntity, mailThreadEntity, seenMessageEntity, seenMessageTable, syncCursorEntity, syncCursorTable, } from "./entities.js";
-export { INBOUND_MESSAGE_AGGREGATE_TYPE, INBOUND_MESSAGE_RECEIVED_EVENT_QN, INBOUND_MESSAGE_RECEIVED_EVENT_SHORT, type InboundMessageEventHeaders, type InboundMessageEventPayload, inboundMessageEventPayloadSchema, MAIL_ACCOUNT_AGGREGATE_TYPE, MAIL_ACCOUNT_CONNECTED_EVENT_QN, MAIL_ACCOUNT_CONNECTED_EVENT_SHORT, MAIL_ACCOUNT_DISCONNECTED_EVENT_QN, MAIL_ACCOUNT_DISCONNECTED_EVENT_SHORT, MAIL_ACCOUNT_UPDATED_EVENT_QN, MAIL_ACCOUNT_UPDATED_EVENT_SHORT, MAIL_THREAD_AGGREGATE_TYPE, MAIL_THREAD_UPDATED_EVENT_QN, MAIL_THREAD_UPDATED_EVENT_SHORT, type MailAccountEventHeaders, type MailAccountEventPayload, type MailThreadEventPayload, mailAccountEventPayloadSchema, mailThreadEventPayloadSchema, } from "./events.js";
-export { createInboundMailFoundationFeature, inboundMailFoundationFeature } from "./feature.js";
-export { createOAuthAccessTokenManager, inboundRefreshTokenSecretOptions, type OAuthAccessTokenManager, type OAuthAccessTokenManagerDeps, usesFoundationManagedOAuth, } from "./oauth-access-token.js";
-export { type OAuthStatePayload, signOAuthState, type VerifyOAuthStateResult, verifyOAuthState, } from "./oauth-state.js";
-export { inboundMessagesProjectionTable, mailAccountsProjectionTable, mailThreadsProjectionTable, } from "./projection.js";
-export { resolveInboundProviderForAccount, resolveInboundProviderForKey, } from "./provider-factory.js";
-export { InboundAuthError, InboundCursorInvalidError, type InboundFetchResult, type InboundMailContext, type InboundMailProviderPlugin, type InboundOAuthFlow, InboundRateLimitError, InboundTransientError, isInboundAuthError, isInboundCursorInvalidError, isInboundMailProviderPlugin, isInboundRateLimitError, isInboundTransientError, type MailAccountRecord, type OAuthTokenSet, type RawInboundMessage, type SyncCursorPayload, } from "./types.js";
-export { createInboundMailSupervisor, type InboundMailSupervisor, type InboundMailSupervisorDeps, } from "./watch-supervisor.js";
+export { inboundMessageAggregateId, mailThreadAggregateId, } from "./aggregate-id.ts";
+export { createInboundMailConnectRoutes, type InboundMailConnectRoutesOptions, } from "./connect-routes.ts";
+export { INBOUND_MAIL_FOUNDATION_FEATURE, INBOUND_MAIL_PROVIDER_EXTENSION, type InboundMailAccountStatus, InboundMailAccountStatuses, type InboundMailAuthMethod, InboundMailAuthMethods, InboundMailFoundationHandlers, InboundMailFoundationQueries, inboundCredentialSecretKey, } from "./constants.ts";
+export { INBOUND_MESSAGE_PII_FIELDS, inboundMessageEntity, MAIL_ACCOUNT_PII_FIELDS, MAIL_THREAD_PII_FIELDS, mailAccountEntity, mailThreadEntity, seenMessageEntity, seenMessageTable, syncCursorEntity, syncCursorTable, } from "./entities.ts";
+export { INBOUND_MESSAGE_AGGREGATE_TYPE, INBOUND_MESSAGE_RECEIVED_EVENT_QN, INBOUND_MESSAGE_RECEIVED_EVENT_SHORT, type InboundMessageEventHeaders, type InboundMessageEventPayload, inboundMessageEventPayloadSchema, MAIL_ACCOUNT_AGGREGATE_TYPE, MAIL_ACCOUNT_CONNECTED_EVENT_QN, MAIL_ACCOUNT_CONNECTED_EVENT_SHORT, MAIL_ACCOUNT_DISCONNECTED_EVENT_QN, MAIL_ACCOUNT_DISCONNECTED_EVENT_SHORT, MAIL_ACCOUNT_UPDATED_EVENT_QN, MAIL_ACCOUNT_UPDATED_EVENT_SHORT, MAIL_THREAD_AGGREGATE_TYPE, MAIL_THREAD_UPDATED_EVENT_QN, MAIL_THREAD_UPDATED_EVENT_SHORT, type MailAccountEventHeaders, type MailAccountEventPayload, type MailThreadEventPayload, mailAccountEventPayloadSchema, mailThreadEventPayloadSchema, } from "./events.ts";
+export { createInboundMailFoundationFeature } from "./feature.ts";
+export { createOAuthAccessTokenManager, inboundRefreshTokenSecretOptions, type OAuthAccessTokenManager, type OAuthAccessTokenManagerDeps, usesFoundationManagedOAuth, } from "./oauth-access-token.ts";
+export { type OAuthStatePayload, signOAuthState, type VerifyOAuthStateResult, verifyOAuthState, } from "./oauth-state.ts";
+export { inboundMessagesProjectionTable, mailAccountsProjectionTable, mailThreadsProjectionTable, } from "./projection.ts";
+export { resolveInboundProviderForAccount, resolveInboundProviderForKey, } from "./provider-factory.ts";
+export { InboundAuthError, InboundCursorInvalidError, type InboundFetchResult, type InboundMailContext, type InboundMailProviderPlugin, type InboundOAuthFlow, InboundRateLimitError, InboundTransientError, isInboundAuthError, isInboundCursorInvalidError, isInboundMailProviderPlugin, isInboundRateLimitError, isInboundTransientError, type MailAccountRecord, type OAuthTokenSet, type RawInboundMessage, type SyncCursorPayload, } from "./types.ts";
+export { createInboundMailSupervisor, type InboundMailSupervisor, type InboundMailSupervisorDeps, } from "./watch-supervisor.ts";

package/dist/inbound-mail-foundation/index.js

@@ -4,7 +4,7 @@ export { createInboundMailConnectRoutes, } from "./connect-routes.js";
 export { INBOUND_MAIL_FOUNDATION_FEATURE, INBOUND_MAIL_PROVIDER_EXTENSION, InboundMailAccountStatuses, InboundMailAuthMethods, InboundMailFoundationHandlers, InboundMailFoundationQueries, inboundCredentialSecretKey, } from "./constants.js";
 export { INBOUND_MESSAGE_PII_FIELDS, inboundMessageEntity, MAIL_ACCOUNT_PII_FIELDS, MAIL_THREAD_PII_FIELDS, mailAccountEntity, mailThreadEntity, seenMessageEntity, seenMessageTable, syncCursorEntity, syncCursorTable, } from "./entities.js";
 export { INBOUND_MESSAGE_AGGREGATE_TYPE, INBOUND_MESSAGE_RECEIVED_EVENT_QN, INBOUND_MESSAGE_RECEIVED_EVENT_SHORT, inboundMessageEventPayloadSchema, MAIL_ACCOUNT_AGGREGATE_TYPE, MAIL_ACCOUNT_CONNECTED_EVENT_QN, MAIL_ACCOUNT_CONNECTED_EVENT_SHORT, MAIL_ACCOUNT_DISCONNECTED_EVENT_QN, MAIL_ACCOUNT_DISCONNECTED_EVENT_SHORT, MAIL_ACCOUNT_UPDATED_EVENT_QN, MAIL_ACCOUNT_UPDATED_EVENT_SHORT, MAIL_THREAD_AGGREGATE_TYPE, MAIL_THREAD_UPDATED_EVENT_QN, MAIL_THREAD_UPDATED_EVENT_SHORT, mailAccountEventPayloadSchema, mailThreadEventPayloadSchema, } from "./events.js";
-export { createInboundMailFoundationFeature, inboundMailFoundationFeature } from "./feature.js";
+export { createInboundMailFoundationFeature } from "./feature.js";
 export { createOAuthAccessTokenManager, inboundRefreshTokenSecretOptions, usesFoundationManagedOAuth, } from "./oauth-access-token.js";
 export { signOAuthState, verifyOAuthState, } from "./oauth-state.js";
 export { inboundMessagesProjectionTable, mailAccountsProjectionTable, mailThreadsProjectionTable, } from "./projection.js";

package/dist/inbound-mail-foundation/oauth-access-token.d.ts

@@ -1,7 +1,7 @@
 import { type DbConnection } from "@cosmicdrift/kumiko-framework/db";
 import type { SecretsContext } from "@cosmicdrift/kumiko-framework/secrets";
 import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
-import { type InboundMailContext, type InboundMailProviderPlugin, type MailAccountRecord, type OAuthTokenSet } from "./types.js";
+import { type InboundMailContext, type InboundMailProviderPlugin, type MailAccountRecord, type OAuthTokenSet } from "./types.ts";
 /** Shared by the OAuth callback and the refresh path so both write the slot identically. */
 export declare function inboundRefreshTokenSecretOptions(accountId: string): {
     redact: (plaintext: string) => string;

package/dist/inbound-mail-foundation/provider-factory.d.ts

@@ -1,4 +1,4 @@
-import { type InboundMailContext, type InboundMailProviderPlugin, type MailAccountRecord } from "./types.js";
+import { type InboundMailContext, type InboundMailProviderPlugin, type MailAccountRecord } from "./types.ts";
 /** Lookup per Provider-Key ("imap", "m365-graph", ...) — genutzt von den
  *  OAuth-Connect-Routen, wo noch kein Account existiert. */
 export declare function resolveInboundProviderForKey(ctx: InboundMailContext, providerKey: string, handlerName?: string): InboundMailProviderPlugin;

package/dist/inbound-mail-foundation/types.d.ts

@@ -1,6 +1,6 @@
 import type { ConfigAccessor, Registry } from "@cosmicdrift/kumiko-framework/engine";
 import type { MetricsHandle } from "@cosmicdrift/kumiko-framework/observability";
-import { INBOUND_MAIL_PROVIDER_EXTENSION, type InboundMailAccountStatus } from "./constants.js";
+import { INBOUND_MAIL_PROVIDER_EXTENSION, type InboundMailAccountStatus } from "./constants.ts";
 /**
  * Slim context for provider plugins.
  *

package/dist/inbound-mail-foundation/watch-supervisor.d.ts

@@ -1,7 +1,7 @@
 import type { DbConnection } from "@cosmicdrift/kumiko-framework/db";
 import type { DistributedLock } from "@cosmicdrift/kumiko-framework/pipeline";
-import { type OAuthAccessTokenManager } from "./oauth-access-token.js";
-import { type InboundMailContext, type MailAccountRecord, type RawInboundMessage } from "./types.js";
+import { type OAuthAccessTokenManager } from "./oauth-access-token.ts";
+import { type InboundMailContext, type MailAccountRecord, type RawInboundMessage } from "./types.ts";
 export type InboundMailSupervisorDeps = {
     /** Slim-Context für Provider-Calls (registry Pflicht, secrets für
      *  Credential-Reads der Provider). */

package/dist/inbound-provider-imap/feature.d.ts

@@ -1,13 +1,9 @@
 import { type InboundMailProviderPlugin } from "@cosmicdrift/kumiko-bundled-features/inbound-mail-foundation";
 export declare const IMAP_PROVIDER_KEY = "imap";
-export { setImapMailHostLookup } from "./imap-client.js";
+export { setImapMailHostLookup } from "./imap-client.ts";
 /** Exportiert für den Live-Test (imap-live.integration.test.ts) —
  *  Apps nutzen das Feature, nie das Plugin direkt. */
 export declare const imapInboundMailPlugin: InboundMailProviderPlugin;
 export declare function createInboundProviderImapFeature(): import("@cosmicdrift/kumiko-types/feature").FeatureDefinition & {
     readonly exports: void;
 };
-/** @deprecated Use createInboundProviderImapFeature(). Run `bun kumiko-upgrade --apply`. Removed in the first release after 2026-10-29. */
-export declare const inboundProviderImapFeature: import("@cosmicdrift/kumiko-types/feature").FeatureDefinition & {
-    readonly exports: void;
-};

package/dist/inbound-provider-imap/feature.js

@@ -231,5 +231,3 @@ export function createInboundProviderImapFeature() {
         r.useExtension(INBOUND_MAIL_PROVIDER_EXTENSION, IMAP_PROVIDER_KEY, imapInboundMailPlugin);
     }, { dedupeOptions: {} });
 }
-/** @deprecated Use createInboundProviderImapFeature(). Run `bun kumiko-upgrade --apply`. Removed in the first release after 2026-10-29. */
-export const inboundProviderImapFeature = createInboundProviderImapFeature();

package/dist/inbound-provider-imap/imap-client.d.ts

@@ -1,7 +1,7 @@
 import { type MailHostGuardOptions } from "@cosmicdrift/kumiko-bundled-features/foundation-shared";
 import { type RawInboundMessage, type SyncCursorPayload } from "@cosmicdrift/kumiko-bundled-features/inbound-mail-foundation";
 import { ImapFlow } from "imapflow";
-import type { ImapCredentialDocument } from "./credential-document.js";
+import type { ImapCredentialDocument } from "./credential-document.ts";
 export declare const IMAP_MAILBOX = "INBOX";
 export declare function setImapMailHostLookup(fn: MailHostGuardOptions["lookupFn"]): void;
 export declare function imapMailHostGuard(): MailHostGuardOptions;

package/dist/inbound-provider-imap/index.d.ts

@@ -1,3 +1,3 @@
-export { type ImapCredentialDocument, imapCredentialDocumentSchema, type ParseCredentialResult, parseImapCredentialDocument, } from "./credential-document.js";
-export { createInboundProviderImapFeature, IMAP_PROVIDER_KEY, inboundProviderImapFeature, setImapMailHostLookup, } from "./feature.js";
-export { assertUidValidity, buildProviderMessageId, type ImapCursor, mapImapError, normalizeReferences, parseImapCursor, } from "./imap-client.js";
+export { type ImapCredentialDocument, imapCredentialDocumentSchema, type ParseCredentialResult, parseImapCredentialDocument, } from "./credential-document.ts";
+export { createInboundProviderImapFeature, IMAP_PROVIDER_KEY, setImapMailHostLookup, } from "./feature.ts";
+export { assertUidValidity, buildProviderMessageId, type ImapCursor, mapImapError, normalizeReferences, parseImapCursor, } from "./imap-client.ts";

package/dist/inbound-provider-imap/index.js

@@ -1,4 +1,4 @@
 // Public API of the inbound-provider-imap bundled-feature.
 export { imapCredentialDocumentSchema, parseImapCredentialDocument, } from "./credential-document.js";
-export { createInboundProviderImapFeature, IMAP_PROVIDER_KEY, inboundProviderImapFeature, setImapMailHostLookup, } from "./feature.js";
+export { createInboundProviderImapFeature, IMAP_PROVIDER_KEY, setImapMailHostLookup, } from "./feature.js";
 export { assertUidValidity, buildProviderMessageId, mapImapError, normalizeReferences, parseImapCursor, } from "./imap-client.js";

package/dist/inbound-provider-inmemory/feature.d.ts

@@ -21,7 +21,3 @@ export declare const inMemoryInboundMailPlugin: InboundMailProviderPlugin;
 export declare function createInboundProviderInMemoryFeature(): import("@cosmicdrift/kumiko-types/feature").FeatureDefinition & {
     readonly exports: void;
 };
-/** @deprecated Use createInboundProviderInMemoryFeature(). Run `bun kumiko-upgrade --apply`. Removed in the first release after 2026-10-29. */
-export declare const inboundProviderInMemoryFeature: import("@cosmicdrift/kumiko-types/feature").FeatureDefinition & {
-    readonly exports: void;
-};

package/dist/inbound-provider-inmemory/feature.js

@@ -115,5 +115,3 @@ export function createInboundProviderInMemoryFeature() {
         r.useExtension("inboundMailProvider", INMEMORY_PROVIDER_KEY, inMemoryInboundMailPlugin);
     }, { dedupeOptions: {} });
 }
-/** @deprecated Use createInboundProviderInMemoryFeature(). Run `bun kumiko-upgrade --apply`. Removed in the first release after 2026-10-29. */
-export const inboundProviderInMemoryFeature = createInboundProviderInMemoryFeature();

package/dist/inbound-provider-inmemory/index.d.ts

@@ -1 +1 @@
-export { createInboundProviderInMemoryFeature, emitWatchError, failNextFetchWith, failNextVerifyWith, INMEMORY_PROVIDER_KEY, inboundProviderInMemoryFeature, isWatching, resetInboundInMemory, seedInboundMessage, } from "./feature.js";
+export { createInboundProviderInMemoryFeature, emitWatchError, failNextFetchWith, failNextVerifyWith, INMEMORY_PROVIDER_KEY, isWatching, resetInboundInMemory, seedInboundMessage, } from "./feature.ts";

package/dist/inbound-provider-inmemory/index.js

@@ -1,2 +1,2 @@
 // Public API of the inbound-provider-inmemory bundled-feature.
-export { createInboundProviderInMemoryFeature, emitWatchError, failNextFetchWith, failNextVerifyWith, INMEMORY_PROVIDER_KEY, inboundProviderInMemoryFeature, isWatching, resetInboundInMemory, seedInboundMessage, } from "./feature.js";
+export { createInboundProviderInMemoryFeature, emitWatchError, failNextFetchWith, failNextVerifyWith, INMEMORY_PROVIDER_KEY, isWatching, resetInboundInMemory, seedInboundMessage, } from "./feature.js";

package/dist/jobs/handlers/tenant-runs.query.d.ts

@@ -1,5 +1,5 @@
 import * as z from "zod";
-import { type TenantJobRunStatus } from "../tenant-job-run-table.js";
+import { type TenantJobRunStatus } from "../tenant-job-run-table.ts";
 export declare const tenantRunsQuery: import("@cosmicdrift/kumiko-types/define-handler").QueryHandlerDefinition<"tenant-runs", z.ZodObject<{
     jobName: z.ZodOptional<z.ZodString>;
     subject: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>>;

package/dist/jobs/index.d.ts

@@ -1,9 +1,9 @@
-export { JOBS_FEATURE, JobErrors, JobHandlers, JobQueries } from "./constants.js";
-export { createJobsFeature, type JobsFeatureOptions } from "./feature.js";
-export type { JobRunLoggerCallbacks } from "./job-run-logger.js";
-export { createJobRunLogger } from "./job-run-logger.js";
-export type { JobLogLevel, JobRunStatus } from "./job-run-table.js";
-export { jobRunLogsTable, jobRunsTable } from "./job-run-table.js";
-export { tenantJobFailuresTable } from "./tenant-job-failure-table.js";
-export type { TenantJobRunStatus } from "./tenant-job-run-table.js";
-export { tenantJobRunsTable } from "./tenant-job-run-table.js";
+export { JOBS_FEATURE, JobErrors, JobHandlers, JobQueries } from "./constants.ts";
+export { createJobsFeature, type JobsFeatureOptions } from "./feature.ts";
+export type { JobRunLoggerCallbacks } from "./job-run-logger.ts";
+export { createJobRunLogger } from "./job-run-logger.ts";
+export type { JobLogLevel, JobRunStatus } from "./job-run-table.ts";
+export { jobRunLogsTable, jobRunsTable } from "./job-run-table.ts";
+export { tenantJobFailuresTable } from "./tenant-job-failure-table.ts";
+export type { TenantJobRunStatus } from "./tenant-job-run-table.ts";
+export { tenantJobRunsTable } from "./tenant-job-run-table.ts";

package/dist/jobs/web/index.d.ts

@@ -1 +1 @@
-export { type JobsClientOptions, jobsClient } from "./client-plugin.js";
+export { type JobsClientOptions, jobsClient } from "./client-plugin.tsx";

package/dist/ledger/feature.d.ts

@@ -16,8 +16,4 @@ export type LedgerFeatureOptions = {
     readonly toggleable?: LedgerToggleable;
 };
 export declare function createLedgerFeature(opts?: LedgerFeatureOptions): typeof defaultLedgerFeature;
-/** @deprecated Use createLedgerFeature(). Run `bun kumiko-upgrade --apply`. Removed in the first release after 2026-10-29. */
-export declare const ledgerFeature: import("@cosmicdrift/kumiko-types/feature").FeatureDefinition & {
-    readonly exports: void;
-};
 export {};

package/dist/ledger/feature.js

@@ -107,5 +107,3 @@ export function createLedgerFeature(opts = {}) {
     const access = resolveAccess(opts);
     return defineFeature(LEDGER_FEATURE_NAME, (r) => registerLedger(r, access, opts.toggleable));
 }
-/** @deprecated Use createLedgerFeature(). Run `bun kumiko-upgrade --apply`. Removed in the first release after 2026-10-29. */
-export const ledgerFeature = createLedgerFeature();

package/dist/ledger/index.d.ts

@@ -1,10 +1,10 @@
-export { ACCOUNT_TYPES, type AccountType, DEFAULT_LEDGER_ACCESS, DEFAULT_LEDGER_ROLES, LEDGER_FEATURE_NAME, LedgerHandlers, LedgerQueries, SCHEDULE_INTERVALS, type ScheduleInterval, TRANSACTION_STATUS, type TransactionStatus, } from "./constants.js";
-export { accountEntity, scheduleEntity, transactionEntity } from "./entity.js";
-export { createLedgerFeature, type LedgerFeatureOptions, ledgerFeature, } from "./feature.js";
-export { confirmSchedulePeriodHandler, createConfirmSchedulePeriodHandler, } from "./handlers/confirm-schedule-period.write.js";
-export { createCreateTransactionHandler, createTransactionHandler, } from "./handlers/create-transaction.write.js";
-export { createBalanceSheetHandler, createBalancesReportHandler, createIncomeStatementHandler, } from "./handlers/reports.query.js";
-export { createReverseTransactionHandler, reverseTransactionHandler, } from "./handlers/reverse-transaction.write.js";
-export { findReversedIds, type LedgerTxRow, mergeScheduleActuals, type ProjectedPeriod, projectSchedule, type ScheduleDef, type ScheduleMonth, type ScheduleMonthStatus, scheduleReference, } from "./recurring.js";
-export { type AccountBalance, accountBalances, type BalanceSheet, type BalancesReport, balanceSheet, type IncomeStatement, incomeStatement, type LedgerAccount, type LedgerEntry, type Period, rawBalances, } from "./reports.js";
-export { accountTypeSchema, type ConfirmSchedulePeriodPayload, type CreateTransactionPayload, confirmSchedulePeriodPayloadSchema, createTransactionPayloadSchema, type Posting, postingSchema, type ReverseTransactionPayload, reverseTransactionPayloadSchema, } from "./schemas.js";
+export { ACCOUNT_TYPES, type AccountType, DEFAULT_LEDGER_ACCESS, DEFAULT_LEDGER_ROLES, LEDGER_FEATURE_NAME, LedgerHandlers, LedgerQueries, SCHEDULE_INTERVALS, type ScheduleInterval, TRANSACTION_STATUS, type TransactionStatus, } from "./constants.ts";
+export { accountEntity, scheduleEntity, transactionEntity } from "./entity.ts";
+export { createLedgerFeature, type LedgerFeatureOptions, } from "./feature.ts";
+export { confirmSchedulePeriodHandler, createConfirmSchedulePeriodHandler, } from "./handlers/confirm-schedule-period.write.ts";
+export { createCreateTransactionHandler, createTransactionHandler, } from "./handlers/create-transaction.write.ts";
+export { createBalanceSheetHandler, createBalancesReportHandler, createIncomeStatementHandler, } from "./handlers/reports.query.ts";
+export { createReverseTransactionHandler, reverseTransactionHandler, } from "./handlers/reverse-transaction.write.ts";
+export { findReversedIds, type LedgerTxRow, mergeScheduleActuals, type ProjectedPeriod, projectSchedule, type ScheduleDef, type ScheduleMonth, type ScheduleMonthStatus, scheduleReference, } from "./recurring.ts";
+export { type AccountBalance, accountBalances, type BalanceSheet, type BalancesReport, balanceSheet, type IncomeStatement, incomeStatement, type LedgerAccount, type LedgerEntry, type Period, rawBalances, } from "./reports.ts";
+export { accountTypeSchema, type ConfirmSchedulePeriodPayload, type CreateTransactionPayload, confirmSchedulePeriodPayloadSchema, createTransactionPayloadSchema, type Posting, postingSchema, type ReverseTransactionPayload, reverseTransactionPayloadSchema, } from "./schemas.ts";

package/dist/ledger/index.js

@@ -1,6 +1,6 @@
 export { ACCOUNT_TYPES, DEFAULT_LEDGER_ACCESS, DEFAULT_LEDGER_ROLES, LEDGER_FEATURE_NAME, LedgerHandlers, LedgerQueries, SCHEDULE_INTERVALS, TRANSACTION_STATUS, } from "./constants.js";
 export { accountEntity, scheduleEntity, transactionEntity } from "./entity.js";
-export { createLedgerFeature, ledgerFeature, } from "./feature.js";
+export { createLedgerFeature, } from "./feature.js";
 export { confirmSchedulePeriodHandler, createConfirmSchedulePeriodHandler, } from "./handlers/confirm-schedule-period.write.js";
 export { createCreateTransactionHandler, createTransactionHandler, } from "./handlers/create-transaction.write.js";
 export { createBalanceSheetHandler, createBalancesReportHandler, createIncomeStatementHandler, } from "./handlers/reports.query.js";

package/dist/ledger/recurring.d.ts

@@ -1,5 +1,5 @@
-import type { ScheduleInterval } from "./constants.js";
-import type { Posting } from "./schemas.js";
+import type { ScheduleInterval } from "./constants.ts";
+import type { Posting } from "./schemas.ts";
 export type ScheduleDef = {
     readonly startDate: string;
     readonly endDate?: string | null;

package/dist/ledger/reports.d.ts

@@ -1,5 +1,5 @@
-import type { AccountType } from "./constants.js";
-import type { Posting } from "./schemas.js";
+import type { AccountType } from "./constants.ts";
+import type { Posting } from "./schemas.ts";
 export type LedgerAccount = {
     readonly id: string;
     readonly name: string;

package/dist/ledger/web/index.d.ts

@@ -1,3 +1,3 @@
-export { ACCOUNT_TYPES, type AccountType, LEDGER_FEATURE_NAME, LedgerHandlers, LedgerQueries, SCHEDULE_INTERVALS, type ScheduleInterval, TRANSACTION_STATUS, type TransactionStatus, } from "../constants.js";
-export { type LedgerTxRow, mergeScheduleActuals, type ProjectedPeriod, projectSchedule, type ScheduleDef, type ScheduleMonth, type ScheduleMonthStatus, scheduleReference, } from "../recurring.js";
-export { type ConfirmSchedulePeriodPayload, confirmSchedulePeriodPayloadSchema, type Posting, postingSchema, } from "../schemas.js";
+export { ACCOUNT_TYPES, type AccountType, LEDGER_FEATURE_NAME, LedgerHandlers, LedgerQueries, SCHEDULE_INTERVALS, type ScheduleInterval, TRANSACTION_STATUS, type TransactionStatus, } from "../constants.ts";
+export { type LedgerTxRow, mergeScheduleActuals, type ProjectedPeriod, projectSchedule, type ScheduleDef, type ScheduleMonth, type ScheduleMonthStatus, scheduleReference, } from "../recurring.ts";
+export { type ConfirmSchedulePeriodPayload, confirmSchedulePeriodPayloadSchema, type Posting, postingSchema, } from "../schemas.ts";

package/dist/legal-pages/constants.d.ts

@@ -46,6 +46,18 @@ export declare const LEGAL_ROUTES: readonly [{
     readonly lang: "en";
     readonly titleFallback: "Privacy Policy";
 }];
+export declare const LEGAL_TERMS_ROUTES: readonly [{
+    readonly path: "/legal/nutzungsbedingungen";
+    readonly slug: "terms";
+    readonly lang: "de";
+    readonly titleFallback: "Nutzungsbedingungen";
+}, {
+    readonly path: "/legal/terms";
+    readonly slug: "terms";
+    readonly lang: "en";
+    readonly titleFallback: "Terms of Service";
+}];
+export declare function legalPagePath(routes: readonly LegalPageRoute[], slug: string, lang: string): string | undefined;
 export declare const LegalPagesErrors: {
     readonly bootMissingBlock: "legal_pages_boot_missing_block";
 };

package/dist/legal-pages/constants.js

@@ -28,6 +28,22 @@ export const LEGAL_ROUTES = [
     { path: "/legal/imprint", slug: "imprint", lang: "en", titleFallback: "Imprint" },
     { path: "/legal/privacy", slug: "privacy", lang: "en", titleFallback: "Privacy Policy" },
 ];
+// Terms of service are opt-in (`terms: true`) and never boot-required: not every
+// app needs them, and DACH law does not mandate them the way it does imprint.
+export const LEGAL_TERMS_ROUTES = [
+    {
+        path: "/legal/nutzungsbedingungen",
+        slug: "terms",
+        lang: "de",
+        titleFallback: "Nutzungsbedingungen",
+    },
+    { path: "/legal/terms", slug: "terms", lang: "en", titleFallback: "Terms of Service" },
+];
+// Client-safe path lookup so apps that render their own legal pages (e.g. a
+// static marketing site) link to the same paths the feature serves.
+export function legalPagePath(routes, slug, lang) {
+    return routes.find((route) => route.slug === slug && route.lang === lang)?.path;
+}
 export const LegalPagesErrors = {
     bootMissingBlock: "legal_pages_boot_missing_block",
 };

package/dist/legal-pages/feature.d.ts

@@ -1,7 +1,7 @@
 import { type FeatureDefinition } from "@cosmicdrift/kumiko-framework/engine";
-import { type PublicPageWrapLayout } from "../page-render/index.js";
-import { type LegalPageRoute, type LegalRequiredBlock } from "./constants.js";
-export { type LegalPagesBootCheckCtx, runLegalPagesBootCheck } from "./lib/boot-check.js";
+import { type PublicPageWrapLayout } from "../page-render/index.ts";
+import { type LegalPageRoute, type LegalRequiredBlock } from "./constants.ts";
+export { type LegalPagesBootCheckCtx, runLegalPagesBootCheck } from "./lib/boot-check.ts";
 export type LegalPagesWrapLayout = PublicPageWrapLayout;
 export type LegalPagesOptions = {
     /** Custom Layout-Wrapper für die /legal/*-Routes. Default: minimaler
@@ -21,5 +21,8 @@ export type LegalPagesOptions = {
      *  `privacy/de`). Apps whose routes use a different slug/lang set
      *  (e.g. Spanish-default) pass their own list here. */
     readonly requiredBlocks?: readonly LegalRequiredBlock[];
+    /** Also serve LEGAL_TERMS_ROUTES (`/legal/nutzungsbedingungen`,
+     *  `/legal/terms`, slug `terms`). Appended to `routes`; never boot-required. */
+    readonly terms?: boolean;
 };
 export declare function createLegalPagesFeature(opts?: LegalPagesOptions): FeatureDefinition;