@cosmicdrift/kumiko-bundled-features 0.371.1 → 0.372.0

package/dist/user/schema/user.d.ts

@@ -28,7 +28,7 @@ export declare const USER_DELETED_EMAIL_PREFIX = "deleted";
 export declare const USER_ANONYMIZED_EMAIL_PREFIX = "anonymized";
 export declare const USER_ANONYMIZED_EMAIL_DOMAIN = "anonymized.invalid";
 export declare const userEntity: import("@cosmicdrift/kumiko-types/fields").EntityDefinition<{
-    email: {
+    readonly email: {
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
@@ -51,7 +51,7 @@ export declare const userEntity: import("@cosmicdrift/kumiko-types/fields").Enti
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: true;
     };
-    passwordHash: {
+    readonly passwordHash: {
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
@@ -74,7 +74,7 @@ export declare const userEntity: import("@cosmicdrift/kumiko-types/fields").Enti
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: false;
     };
-    displayName: {
+    readonly displayName: {
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
@@ -97,7 +97,7 @@ export declare const userEntity: import("@cosmicdrift/kumiko-types/fields").Enti
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: true;
     };
-    locale: {
+    readonly locale: {
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
@@ -120,7 +120,7 @@ export declare const userEntity: import("@cosmicdrift/kumiko-types/fields").Enti
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: false;
     };
-    timezone: {
+    readonly timezone: {
         readonly type: "tz";
         readonly description?: string;
         readonly required?: boolean;
@@ -129,7 +129,7 @@ export declare const userEntity: import("@cosmicdrift/kumiko-types/fields").Enti
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: false;
     };
-    lastActiveTenantId: {
+    readonly lastActiveTenantId: {
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
@@ -152,11 +152,12 @@ export declare const userEntity: import("@cosmicdrift/kumiko-types/fields").Enti
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: false;
     };
-    emailVerified: import("@cosmicdrift/kumiko-types/fields").BooleanFieldDef & {
+    readonly emailVerified: import("@cosmicdrift/kumiko-types/fields").BooleanFieldDef & {
         required: false;
+        default: boolean;
     };
-    roles: import("@cosmicdrift/kumiko-types/fields").MultiSelectFieldDef<readonly ["SystemAdmin"]>;
-    status: {
+    readonly roles: import("@cosmicdrift/kumiko-types/fields").MultiSelectFieldDef<readonly ["SystemAdmin"]>;
+    readonly status: {
         readonly type: "select";
         readonly description?: string;
         readonly options: readonly ["active", "restricted", "deletionRequested", "deleted"];
@@ -180,7 +181,7 @@ export declare const userEntity: import("@cosmicdrift/kumiko-types/fields").Enti
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: true;
     };
-    gracePeriodEnd: {
+    readonly gracePeriodEnd: {
         readonly type: "timestamp";
         readonly description?: string;
         readonly required?: boolean;
@@ -195,7 +196,7 @@ export declare const userEntity: import("@cosmicdrift/kumiko-types/fields").Enti
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: false;
     };
-    pendingDeletionRequestId: {
+    readonly pendingDeletionRequestId: {
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
@@ -220,7 +221,7 @@ export declare const userEntity: import("@cosmicdrift/kumiko-types/fields").Enti
     };
 }, "global">;
 export declare const userTable: import("@cosmicdrift/kumiko-framework/db").EntityTable<import("@cosmicdrift/kumiko-types/fields").EntityDefinition<{
-    email: {
+    readonly email: {
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
@@ -243,7 +244,7 @@ export declare const userTable: import("@cosmicdrift/kumiko-framework/db").Entit
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: true;
     };
-    passwordHash: {
+    readonly passwordHash: {
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
@@ -266,7 +267,7 @@ export declare const userTable: import("@cosmicdrift/kumiko-framework/db").Entit
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: false;
     };
-    displayName: {
+    readonly displayName: {
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
@@ -289,7 +290,7 @@ export declare const userTable: import("@cosmicdrift/kumiko-framework/db").Entit
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: true;
     };
-    locale: {
+    readonly locale: {
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
@@ -312,7 +313,7 @@ export declare const userTable: import("@cosmicdrift/kumiko-framework/db").Entit
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: false;
     };
-    timezone: {
+    readonly timezone: {
         readonly type: "tz";
         readonly description?: string;
         readonly required?: boolean;
@@ -321,7 +322,7 @@ export declare const userTable: import("@cosmicdrift/kumiko-framework/db").Entit
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: false;
     };
-    lastActiveTenantId: {
+    readonly lastActiveTenantId: {
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
@@ -344,11 +345,12 @@ export declare const userTable: import("@cosmicdrift/kumiko-framework/db").Entit
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: false;
     };
-    emailVerified: import("@cosmicdrift/kumiko-types/fields").BooleanFieldDef & {
+    readonly emailVerified: import("@cosmicdrift/kumiko-types/fields").BooleanFieldDef & {
         required: false;
+        default: boolean;
     };
-    roles: import("@cosmicdrift/kumiko-types/fields").MultiSelectFieldDef<readonly ["SystemAdmin"]>;
-    status: {
+    readonly roles: import("@cosmicdrift/kumiko-types/fields").MultiSelectFieldDef<readonly ["SystemAdmin"]>;
+    readonly status: {
         readonly type: "select";
         readonly description?: string;
         readonly options: readonly ["active", "restricted", "deletionRequested", "deleted"];
@@ -372,7 +374,7 @@ export declare const userTable: import("@cosmicdrift/kumiko-framework/db").Entit
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: true;
     };
-    gracePeriodEnd: {
+    readonly gracePeriodEnd: {
         readonly type: "timestamp";
         readonly description?: string;
         readonly required?: boolean;
@@ -387,7 +389,7 @@ export declare const userTable: import("@cosmicdrift/kumiko-framework/db").Entit
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: false;
     };
-    pendingDeletionRequestId: {
+    readonly pendingDeletionRequestId: {
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;

package/dist/user-data-rights/run-export-jobs.d.ts

@@ -7,7 +7,26 @@ import type { getTemporal } from "@cosmicdrift/kumiko-framework/time";
 type Instant = InstanceType<ReturnType<typeof getTemporal>["Instant"]>;
 export declare const EXPORT_CLEANUP_BACKLOG_AGE_METRIC = "export_cleanup_backlog_age";
 export declare const EXPORT_CLEANUP_LAST_RUN_TIMESTAMP_METRIC = "export_cleanup_last_run_timestamp";
-export declare const tokenCrud: import("@cosmicdrift/kumiko-types/event-store-executor-types").EventStoreExecutor;
+export declare const tokenCrud: import("@cosmicdrift/kumiko-types/event-store-executor-types").EventStoreExecutor<{
+    readonly id: string;
+    readonly tenantId: string;
+    readonly version: number;
+    readonly insertedAt: Temporal.Instant;
+    readonly modifiedAt: Temporal.Instant | null;
+    readonly insertedById: string | null;
+    readonly modifiedById: string | null;
+    readonly isDeleted?: boolean | undefined;
+    readonly deletedAt?: Temporal.Instant | null | undefined;
+    readonly deletedById?: string | null | undefined;
+    readonly expiresAt: Temporal.Instant;
+    readonly issuedAt: Temporal.Instant;
+    readonly jobId: string;
+    readonly lastUsedAt: Temporal.Instant | null;
+    readonly lastUsedFromIp: string | null;
+    readonly lastUsedUserAgent: string | null;
+    readonly tokenHash: string;
+    readonly useCount: unknown;
+}>;
 /**
  * Notification-Callback fuer den done-Pfad. Pattern matched
  * auth-routes.PasswordResetConfig.sendResetEmail. Plain-Token bleibt

package/dist/user-data-rights/run-forget-cleanup.js

@@ -36,11 +36,12 @@ import { createFallbackLogger } from "@cosmicdrift/kumiko-framework/logging";
 // retried automatisch).
 import { configuredPiiSubjectKms, subjectIdToKey, } from "@cosmicdrift/kumiko-framework/crypto";
 import { createTenantDb, entityEventName, executeRawQuery, fetchOne, nullBlindIndexesForSubject, selectMany, WritePurposes, } from "@cosmicdrift/kumiko-framework/db";
+import { deleteStoredFileAndDerivatives } from "@cosmicdrift/kumiko-framework/derivatives";
 import { EXT_USER_DATA, EXT_USER_DATA_ORDER, extensionUsageEscapeHatchReason, } from "@cosmicdrift/kumiko-framework/engine";
 import { createEscapeHatchReporter, UNATTRIBUTED_ACTOR, } from "@cosmicdrift/kumiko-framework/pipeline";
 import { purgeSearchDocumentsForSubject, } from "@cosmicdrift/kumiko-framework/search";
 import { resolveRetentionPolicyForTenant, resolveTenantRetentionPreset, } from "../data-retention/index.js";
-import { decryptStoredPii, runInSubTransaction } from "../shared/index.js";
+import { decryptStoredPii, purgeFilesReachingSubject, runInSubTransaction, } from "../shared/index.js";
 import { tenantMembershipsTable } from "../tenant/index.js";
 import { USER_STATUS, userTable } from "../user/index.js";
 import { selectUsersDueForForgetCleanup } from "./db/queries/forget-cleanup.js";
@@ -218,6 +219,22 @@ async function processUser(args) {
                 const subject = { kind: "user", userId };
                 await purgeSearchDocumentsForSubject(tx, registry.features, args.searchAdapter, subjectIdToKey(subject), subject);
             }
+            // Same ordering rationale: the files are found through the entity rows a
+            // hook may hard-delete, and a file whose uploader differs from the owner
+            // is never reached by the fileRef hook (it keys on insertedById).
+            await purgeFilesReachingSubject({
+                registry,
+                db: tx,
+                subject: { kind: "user", userId },
+                subjectKey: subjectIdToKey({ kind: "user", userId }),
+                resolveDeleteBytes: resolveForgetFileBytesDeleter(buildStorageProvider),
+                missingStorage: {
+                    mode: "skip",
+                    warn: (tenantId) => 
+                    // biome-ignore lint/suspicious/noConsole: misconfiguration visibility, same as the fileRef delete hook
+                    console.warn(`[user-data-rights:run-forget-cleanup] no file provider resolvable for tenantId=${tenantId} - file binaries of userId=${userId} are NOT deleted (rows kept). Mount file-foundation + a file-provider-* feature so erasure can reach the binaries.`),
+                },
+            });
             for (const tenantId of tenantList) {
                 currentTenantId = tenantId;
                 // Refine the app-level model to THIS tenant: "single-user" only if the
@@ -323,6 +340,23 @@ async function processUser(args) {
         tenantIdsBeforeDelete,
     };
 }
+// A resolution failure collapses to "no storage" like in the fileRef delete hook; a failing
+// byte delete throws through the sweep so the per-user sub-tx rolls back and the next run retries.
+function resolveForgetFileBytesDeleter(buildStorageProvider) {
+    return async (tenantId) => {
+        if (!buildStorageProvider)
+            return undefined;
+        try {
+            const provider = await buildStorageProvider(tenantId);
+            return (provider &&
+                ((key) => deleteStoredFileAndDerivatives(key, provider, "user-data-rights:forget-cleanup")));
+        }
+        catch {
+            // skip: provider unresolvable (not configured) -> files skipped with a warn, like the hook
+            return undefined;
+        }
+    };
+}
 // Pseudo-Tenant fuer User ohne aktive Memberships. RFC4122-konforme
 // Null-UUID. Tenant-scoped Hooks finden hier nichts (no-op),
 // tenant-agnostische Hooks (z.B. user) operieren auf der globalen

package/dist/user-data-rights/schema/download-attempt.d.ts

@@ -1,5 +1,5 @@
 export declare const downloadAttemptEntity: import("@cosmicdrift/kumiko-types/fields").EntityDefinition<{
-    result: {
+    readonly result: {
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
@@ -22,7 +22,7 @@ export declare const downloadAttemptEntity: import("@cosmicdrift/kumiko-types/fi
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: true;
     };
-    via: {
+    readonly via: {
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
@@ -45,7 +45,7 @@ export declare const downloadAttemptEntity: import("@cosmicdrift/kumiko-types/fi
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: true;
     };
-    tokenHash: {
+    readonly tokenHash: {
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
@@ -68,7 +68,7 @@ export declare const downloadAttemptEntity: import("@cosmicdrift/kumiko-types/fi
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: false;
     };
-    jobId: {
+    readonly jobId: {
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
@@ -91,7 +91,7 @@ export declare const downloadAttemptEntity: import("@cosmicdrift/kumiko-types/fi
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: false;
     };
-    attemptedByUserId: {
+    readonly attemptedByUserId: {
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
@@ -114,7 +114,7 @@ export declare const downloadAttemptEntity: import("@cosmicdrift/kumiko-types/fi
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: false;
     };
-    ip: {
+    readonly ip: {
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
@@ -137,7 +137,7 @@ export declare const downloadAttemptEntity: import("@cosmicdrift/kumiko-types/fi
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: false;
     };
-    userAgent: {
+    readonly userAgent: {
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
@@ -160,7 +160,7 @@ export declare const downloadAttemptEntity: import("@cosmicdrift/kumiko-types/fi
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: false;
     };
-    attemptedAt: {
+    readonly attemptedAt: {
         readonly type: "timestamp";
         readonly description?: string;
         readonly required?: boolean;
@@ -177,7 +177,7 @@ export declare const downloadAttemptEntity: import("@cosmicdrift/kumiko-types/fi
     };
 }, "tenant">;
 export declare const downloadAttemptsTable: import("@cosmicdrift/kumiko-framework/db").EntityTable<import("@cosmicdrift/kumiko-types/fields").EntityDefinition<{
-    result: {
+    readonly result: {
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
@@ -200,7 +200,7 @@ export declare const downloadAttemptsTable: import("@cosmicdrift/kumiko-framewor
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: true;
     };
-    via: {
+    readonly via: {
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
@@ -223,7 +223,7 @@ export declare const downloadAttemptsTable: import("@cosmicdrift/kumiko-framewor
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: true;
     };
-    tokenHash: {
+    readonly tokenHash: {
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
@@ -246,7 +246,7 @@ export declare const downloadAttemptsTable: import("@cosmicdrift/kumiko-framewor
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: false;
     };
-    jobId: {
+    readonly jobId: {
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
@@ -269,7 +269,7 @@ export declare const downloadAttemptsTable: import("@cosmicdrift/kumiko-framewor
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: false;
     };
-    attemptedByUserId: {
+    readonly attemptedByUserId: {
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
@@ -292,7 +292,7 @@ export declare const downloadAttemptsTable: import("@cosmicdrift/kumiko-framewor
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: false;
     };
-    ip: {
+    readonly ip: {
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
@@ -315,7 +315,7 @@ export declare const downloadAttemptsTable: import("@cosmicdrift/kumiko-framewor
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: false;
     };
-    userAgent: {
+    readonly userAgent: {
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
@@ -338,7 +338,7 @@ export declare const downloadAttemptsTable: import("@cosmicdrift/kumiko-framewor
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: false;
     };
-    attemptedAt: {
+    readonly attemptedAt: {
         readonly type: "timestamp";
         readonly description?: string;
         readonly required?: boolean;

package/dist/user-data-rights/schema/download-token.d.ts

@@ -1,5 +1,5 @@
 export declare const exportDownloadTokenEntity: import("@cosmicdrift/kumiko-types/fields").EntityDefinition<{
-    jobId: {
+    readonly jobId: {
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
@@ -22,7 +22,7 @@ export declare const exportDownloadTokenEntity: import("@cosmicdrift/kumiko-type
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: true;
     };
-    tokenHash: {
+    readonly tokenHash: {
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
@@ -45,7 +45,7 @@ export declare const exportDownloadTokenEntity: import("@cosmicdrift/kumiko-type
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: true;
     };
-    issuedAt: {
+    readonly issuedAt: {
         readonly type: "timestamp";
         readonly description?: string;
         readonly required?: boolean;
@@ -60,7 +60,7 @@ export declare const exportDownloadTokenEntity: import("@cosmicdrift/kumiko-type
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: true;
     };
-    expiresAt: {
+    readonly expiresAt: {
         readonly type: "timestamp";
         readonly description?: string;
         readonly required?: boolean;
@@ -75,7 +75,7 @@ export declare const exportDownloadTokenEntity: import("@cosmicdrift/kumiko-type
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: true;
     };
-    lastUsedAt: {
+    readonly lastUsedAt: {
         readonly type: "timestamp";
         readonly description?: string;
         readonly required?: boolean;
@@ -90,7 +90,7 @@ export declare const exportDownloadTokenEntity: import("@cosmicdrift/kumiko-type
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: false;
     };
-    useCount: {
+    readonly useCount: {
         readonly type: "bigInt";
         readonly description?: string;
         readonly required?: boolean;
@@ -102,7 +102,7 @@ export declare const exportDownloadTokenEntity: import("@cosmicdrift/kumiko-type
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: false;
     };
-    lastUsedFromIp: {
+    readonly lastUsedFromIp: {
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
@@ -125,7 +125,7 @@ export declare const exportDownloadTokenEntity: import("@cosmicdrift/kumiko-type
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: false;
     };
-    lastUsedUserAgent: {
+    readonly lastUsedUserAgent: {
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
@@ -150,7 +150,7 @@ export declare const exportDownloadTokenEntity: import("@cosmicdrift/kumiko-type
     };
 }, "tenant">;
 export declare const exportDownloadTokensTable: import("@cosmicdrift/kumiko-framework/db").EntityTable<import("@cosmicdrift/kumiko-types/fields").EntityDefinition<{
-    jobId: {
+    readonly jobId: {
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
@@ -173,7 +173,7 @@ export declare const exportDownloadTokensTable: import("@cosmicdrift/kumiko-fram
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: true;
     };
-    tokenHash: {
+    readonly tokenHash: {
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
@@ -196,7 +196,7 @@ export declare const exportDownloadTokensTable: import("@cosmicdrift/kumiko-fram
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: true;
     };
-    issuedAt: {
+    readonly issuedAt: {
         readonly type: "timestamp";
         readonly description?: string;
         readonly required?: boolean;
@@ -211,7 +211,7 @@ export declare const exportDownloadTokensTable: import("@cosmicdrift/kumiko-fram
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: true;
     };
-    expiresAt: {
+    readonly expiresAt: {
         readonly type: "timestamp";
         readonly description?: string;
         readonly required?: boolean;
@@ -226,7 +226,7 @@ export declare const exportDownloadTokensTable: import("@cosmicdrift/kumiko-fram
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: true;
     };
-    lastUsedAt: {
+    readonly lastUsedAt: {
         readonly type: "timestamp";
         readonly description?: string;
         readonly required?: boolean;
@@ -241,7 +241,7 @@ export declare const exportDownloadTokensTable: import("@cosmicdrift/kumiko-fram
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: false;
     };
-    useCount: {
+    readonly useCount: {
         readonly type: "bigInt";
         readonly description?: string;
         readonly required?: boolean;
@@ -253,7 +253,7 @@ export declare const exportDownloadTokensTable: import("@cosmicdrift/kumiko-fram
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: false;
     };
-    lastUsedFromIp: {
+    readonly lastUsedFromIp: {
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
@@ -276,7 +276,7 @@ export declare const exportDownloadTokensTable: import("@cosmicdrift/kumiko-fram
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: false;
     };
-    lastUsedUserAgent: {
+    readonly lastUsedUserAgent: {
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;