@cosmicdrift/kumiko-bundled-features 0.378.0 → 0.379.0

package/dist/ledger/web/index.js

@@ -1,4 +1,3 @@
-// @runtime client
 // Client-safe ledger surface: QN constants, the pure recurring helpers
 // (projection + Soll/Ist merge), and the Zod payload schemas (for client-side
 // pre-validation before dispatch) — nothing else. The full `../ledger` entry
@@ -6,6 +5,6 @@
 // browser bundle that imports from there fails on Node builtins. A client screen
 // (e.g. a rent-cashflow view) imports the dispatch QNs + the pure forecast/merge
 // from HERE, then dispatches via the renderer's useDispatcher.
-export { ACCOUNT_TYPES, LEDGER_FEATURE_NAME, LedgerHandlers, LedgerQueries, SCHEDULE_INTERVALS, TRANSACTION_STATUS, } from "../constants.js";
 export { mergeScheduleActuals, projectSchedule, scheduleReference, } from "../recurring.js";
 export { confirmSchedulePeriodPayloadSchema, postingSchema, } from "../schemas.js";
+export { ACCOUNT_TYPES, LEDGER_FEATURE_NAME, LedgerHandlers, LedgerQueries, SCHEDULE_INTERVALS, TRANSACTION_STATUS, } from "./constants.js";

package/dist/legal-pages/feature.d.ts

@@ -1,6 +1,6 @@
 import { type FeatureDefinition } from "@cosmicdrift/kumiko-framework/engine";
 import { type PublicPageWrapLayout } from "../page-render/index.ts";
-import { type LegalPageRoute, type LegalRequiredBlock } from "./constants.ts";
+import { type LegalPageRoute, type LegalRequiredBlock } from "./web/constants.ts";
 export { type LegalPagesBootCheckCtx, runLegalPagesBootCheck } from "./lib/boot-check.ts";
 export type LegalPagesWrapLayout = PublicPageWrapLayout;
 export type LegalPagesOptions = {

package/dist/legal-pages/feature.js

@@ -2,10 +2,10 @@ import { computeRevisionEtag, etagMatches } from "@cosmicdrift/kumiko-framework/
 import { defineFeature, SYSTEM_TENANT_ID, } from "@cosmicdrift/kumiko-framework/engine";
 import { escapeHtml } from "@cosmicdrift/kumiko-renderer/headless";
 import { cachedSecurePageResponse, redirectToCanonicalPath, slashVariantOf, } from "../page-render/index.js";
-import { LEGAL_REQUIRED_BLOCKS, LEGAL_ROUTES, LEGAL_TERMS_ROUTES, } from "./constants.js";
 import { runLegalPagesBootCheck } from "./lib/boot-check.js";
 import { validateRoutes } from "./lib/validate-routes.js";
 import { renderMarkdownToHtml, wrapInLayout } from "./markdown.js";
+import { LEGAL_REQUIRED_BLOCKS, LEGAL_ROUTES, LEGAL_TERMS_ROUTES, } from "./web/constants.js";
 export { runLegalPagesBootCheck } from "./lib/boot-check.js";
 // QN-Konstante als dokumentierter Public-Contract des template-resolver-
 // Features. Ein magic-string statt eines Code-Imports ist hier explizit

package/dist/legal-pages/index.d.ts

@@ -1,5 +1,5 @@
-export { LEGAL_OPTIONAL_BLOCKS, LEGAL_PAGES_FEATURE, LEGAL_REQUIRED_BLOCKS, LEGAL_ROUTES, LEGAL_TERMS_ROUTES, type LegalPageRoute, LegalPagesErrors, type LegalRequiredBlock, legalPagePath, } from "./constants.ts";
 export { createLegalPagesFeature, type LegalPagesBootCheckCtx, type LegalPagesOptions, runLegalPagesBootCheck, } from "./feature.ts";
 export { createLegalPagesLayout, type LegalPagesLayoutOptions } from "./layout.ts";
 export { renderMarkdownToHtml, wrapInLayout } from "./markdown.ts";
 export { type LegalContentBlock, type LegalContentSeedFn, type LegalContentSeedSource, legalContentSeed, } from "./seed.ts";
+export { LEGAL_OPTIONAL_BLOCKS, LEGAL_PAGES_FEATURE, LEGAL_REQUIRED_BLOCKS, LEGAL_ROUTES, LEGAL_TERMS_ROUTES, type LegalPageRoute, LegalPagesErrors, type LegalRequiredBlock, legalPagePath, } from "./web/constants.ts";

package/dist/legal-pages/index.js

@@ -1,5 +1,5 @@
-export { LEGAL_OPTIONAL_BLOCKS, LEGAL_PAGES_FEATURE, LEGAL_REQUIRED_BLOCKS, LEGAL_ROUTES, LEGAL_TERMS_ROUTES, LegalPagesErrors, legalPagePath, } from "./constants.js";
 export { createLegalPagesFeature, runLegalPagesBootCheck, } from "./feature.js";
 export { createLegalPagesLayout } from "./layout.js";
 export { renderMarkdownToHtml, wrapInLayout } from "./markdown.js";
 export { legalContentSeed, } from "./seed.js";
+export { LEGAL_OPTIONAL_BLOCKS, LEGAL_PAGES_FEATURE, LEGAL_REQUIRED_BLOCKS, LEGAL_ROUTES, LEGAL_TERMS_ROUTES, LegalPagesErrors, legalPagePath, } from "./web/constants.js";

package/dist/legal-pages/lib/boot-check.d.ts

@@ -1,5 +1,5 @@
 import { type TemplateResolverApi } from "@cosmicdrift/kumiko-bundled-features/template-resolver";
-import { type LegalRequiredBlock } from "../constants.ts";
+import { type LegalRequiredBlock } from "../web/constants.ts";
 export type LegalPagesBootCheckCtx = {
     readonly templateResolver?: TemplateResolverApi;
     readonly log?: {

package/dist/legal-pages/lib/boot-check.js

@@ -1,6 +1,6 @@
 import { requireTemplateResolver, TEXT_BLOCK_KIND, } from "@cosmicdrift/kumiko-bundled-features/template-resolver";
 import { SYSTEM_TENANT_ID } from "@cosmicdrift/kumiko-framework/engine";
-import { LEGAL_REQUIRED_BLOCKS } from "../constants.js";
+import { LEGAL_REQUIRED_BLOCKS } from "../web/constants.js";
 // Missing required blocks fail the boot only in production; elsewhere they warn,
 // so a dev setup without seeded legal texts still starts. A complete set logs
 // info on purpose, so a skipped check is visible.

package/dist/legal-pages/lib/validate-routes.d.ts

@@ -1,2 +1,2 @@
-import type { LegalPageRoute } from "../constants.ts";
+import type { LegalPageRoute } from "../web/constants.ts";
 export declare function validateRoutes(routes: readonly LegalPageRoute[]): void;

package/dist/legal-pages/web/client-plugin.js

@@ -1,4 +1,3 @@
-// @runtime client
 // Client-Feature-Factory für legal-pages Visual-Tree. Liefert statische
 // Tree-Knoten für die DACH-Compliance-Blöcke (imprint, privacy in de/en).
 // Jeder Knoten linkt auf text-content's edit-Action — reines Cross-Feature-
@@ -15,7 +14,7 @@
 // leer (Provider-Author-Hinweis dass Block existiert aber befüllt werden
 // muss). Aktuell ist legal-pages's Boot-Check der primäre Wächter für
 // fehlende Pflicht-Blocks.
-import { LEGAL_OPTIONAL_BLOCKS, LEGAL_REQUIRED_BLOCKS } from "../constants.js";
+import { LEGAL_OPTIONAL_BLOCKS, LEGAL_REQUIRED_BLOCKS } from "./constants.js";
 const treeProvider = () => (emit) => {
     // V.1.5d Slug-first Verschachtelung (Variante C):
     //   📁 Legal

package/dist/legal-pages/{constants.js → web/constants.js}

@@ -1,22 +1,20 @@
-// @runtime client
 // Feature name
 export const LEGAL_PAGES_FEATURE = "legal-pages";
 // Required slugs that must exist as text-blocks for production-boot.
-// Pro Sprache + Slug eine Pflicht-Kombo. Wer mehr Sprachen will, ergänzt
-// die Liste — Boot-Check wird dynamisch aus der Liste generiert.
+// One mandatory slug per language; anyone who wants more languages extends
+// the list, the boot check is generated dynamically from it.
 export const LEGAL_REQUIRED_BLOCKS = [
     { slug: "imprint", lang: "de" },
     { slug: "privacy", lang: "de" },
 ];
-// Optionale Blocks die NICHT Boot-fail-relevant sind, aber die Routes
-// servieren falls vorhanden. EN-Versionen sind in DACH-Apps oft nur
-// "nice-to-have".
+// Optional blocks that are NOT boot-fail relevant, but whose routes are
+// served when present. EN versions are often only nice-to-have in DACH apps.
 export const LEGAL_OPTIONAL_BLOCKS = [
     { slug: "imprint", lang: "en" },
     { slug: "privacy", lang: "en" },
 ];
-// Public-Route-Mapping: URL-Path → (slug, lang). DE nutzt die deutschen
-// Standard-Bezeichnungen, EN die englischen.
+// Public route mapping: URL path -> (slug, lang). DE uses the German
+// standard names, EN the English ones.
 export const LEGAL_ROUTES = [
     { path: "/legal/impressum", slug: "imprint", lang: "de", titleFallback: "Impressum" },
     {

package/dist/legal-pages/web/index.js

@@ -1,3 +1,2 @@
-// @runtime client
 // Public exports für die Browser-Seite des legal-pages Features.
 export { legalPagesClient } from "./client-plugin.js";

package/dist/managed-pages/feature.js

@@ -9,10 +9,10 @@ import { bySlugQuery } from "./handlers/by-slug.query.js";
 import { byTenantPublishedQuery } from "./handlers/by-tenant-published.query.js";
 import { pageCrudQueries, pageCrudWrites } from "./handlers/page-crud.js";
 import { setWrite } from "./handlers/set.write.js";
-import { MANAGED_PAGES_I18N } from "./i18n.js";
 import { createBrandingSettingsScreen } from "./screens/branding-screen.js";
 import { pageEditScreen, pageListScreen } from "./screens/page-screens.js";
 import { pageEntity } from "./table.js";
+import { MANAGED_PAGES_I18N } from "./web/i18n.js";
 // 60s-shared-cache saves the origin-revalidate roundtrip; CMS edits are live within 60s.
 const PUBLIC_PAGE_CACHE = { kind: "revalidate", maxAgeSeconds: 60 };
 // QN-Konstante als dokumentierter Public-Contract — der Render-Pfad ruft

package/dist/managed-pages/web/client-plugin.js

@@ -1,11 +1,10 @@
-// @runtime client
 // Client-Feature-Factory für managed-pages. Bringt NUR die Übersetzungen mit —
 // die Screens (page-list/page-edit/branding-settings) sind schema-driven
 // (entityList/entityEdit/configEdit), also keine custom-React-Components zu
 // registrieren. Apps mounten es in createKumikoApp({ clientFeatures:
 // [managedPagesClient()] }), damit die Admin-Labels übersetzt rendern.
 import { mergeTranslations } from "@cosmicdrift/kumiko-renderer";
-import { defaultTranslations } from "./i18n.js";
+import { defaultTranslations } from "./default-translations.js";
 export function managedPagesClient(options) {
     return {
         name: "managed-pages",

package/dist/managed-pages/web/default-translations.d.ts

@@ -0,0 +1,2 @@
+import { type TranslationsByLocale } from "@cosmicdrift/kumiko-renderer";
+export declare const defaultTranslations: TranslationsByLocale;

package/dist/managed-pages/web/default-translations.js

@@ -0,0 +1,11 @@
+// Client i18n bundle for the managed-pages admin screens. The browser renderer
+// builds its fallback locale store ONLY from clientFeatures[].translations; the
+// server-side r.translations bundle (feature.ts) never reaches it. To render the
+// configEdit/entityEdit labels translated instead of raw, we mirror the same keys here.
+//
+// Single source: pivots MANAGED_PAGES_I18N (key-first { key: {de,en} }, server
+// form) into the locale-first TranslationsByLocale form the client expects, so
+// there is no key duplication and no drift.
+import { translationsByLocaleFromKeys, } from "@cosmicdrift/kumiko-renderer";
+import { MANAGED_PAGES_I18N } from "./i18n.js";
+export const defaultTranslations = translationsByLocaleFromKeys(MANAGED_PAGES_I18N);

package/dist/managed-pages/web/i18n.d.ts

@@ -1,2 +1,5 @@
-import { type TranslationsByLocale } from "@cosmicdrift/kumiko-renderer";
-export declare const defaultTranslations: TranslationsByLocale;
+type LocalizedString = {
+    readonly en: string;
+};
+export declare const MANAGED_PAGES_I18N: Readonly<Record<string, LocalizedString>>;
+export {};

package/dist/managed-pages/web/i18n.js

@@ -1,13 +1,54 @@
-// @runtime client
-// Client-i18n-Bundle für die managed-pages Admin-Screens. Der Browser-Renderer
-// baut seinen Fallback-Locale-Store NUR aus clientFeatures[].translations — der
-// server-seitige r.translations-Bundle (feature.ts) erreicht ihn nie. Damit die
-// configEdit/entityEdit-Labels im Client übersetzt rendern statt roh, spiegeln
-// wir hier dieselben Keys.
+// Pure data (i18n keys) that lives under web/ so the web bundle may pivot it into
+// the browser store; feature.ts (server) imports it as well (the server may import
+// client-safe pure data, like PAT constants.ts).
 //
-// Single source: pivotiert MANAGED_PAGES_I18N (key-first { key: {de,en} },
-// Server-Form) in die locale-first TranslationsByLocale-Form die der Client
-// erwartet — kein Key-Duplikat, kein Drift.
-import { translationsByLocaleFromKeys, } from "@cosmicdrift/kumiko-renderer";
-import { MANAGED_PAGES_I18N } from "../i18n.js";
-export const defaultTranslations = translationsByLocaleFromKeys(MANAGED_PAGES_I18N);
+// Translation bundle for the managed-pages admin screens. Without these keys the
+// UI renders the raw i18n keys (screen:*.title, entity:*:field:*, section
+// headers). Once a feature calls r.translations, the boot validator
+// (required-surface-keys) demands the COMPLETE required-surface set in de+en;
+// this file covers every screen/field/section key managed-pages registers. The
+// two customCss keys are always supplied (harmless with allowCustomCss:false, but
+// required for consumers that enable it).
+export const MANAGED_PAGES_I18N = {
+    // Screen titles (global/unprefixed, screenTitleKey = screen:<id>.title)
+    "screen:page-list.title": { en: "Pages" },
+    "screen:page-edit.title": { en: "Edit page" },
+    "screen:branding-settings.title": { en: "Branding" },
+    // Page-Entity Feld-Labels (managed-pages:entity:page:field:*)
+    "managed-pages:entity:page:field:slug": { en: "Slug" },
+    "managed-pages:entity:page:field:lang": { en: "Language" },
+    "managed-pages:entity:page:field:title": { en: "Title" },
+    "managed-pages:entity:page:field:published": { en: "Published" },
+    "managed-pages:entity:page:field:published:option:true": {
+        en: "Published",
+    },
+    "managed-pages:entity:page:field:published:option:false": { en: "Draft" },
+    "managed-pages:entity:page:field:description": { en: "Description" },
+    "managed-pages:entity:page:field:ogImage": { en: "OG image" },
+    "managed-pages:entity:page:field:body": { en: "Content" },
+    // Config-Edit Feld-Labels (managed-pages:entity:__config-edit__:field:*, camelCase Form-Keys)
+    "managed-pages:entity:__config-edit__:field:title": { en: "Site title" },
+    "managed-pages:entity:__config-edit__:field:description": {
+        en: "Description",
+    },
+    "managed-pages:entity:__config-edit__:field:siteUrl": { en: "Site URL" },
+    "managed-pages:entity:__config-edit__:field:accentColor": {
+        en: "Accent color",
+    },
+    "managed-pages:entity:__config-edit__:field:logoUrl": { en: "Logo URL" },
+    "managed-pages:entity:__config-edit__:field:logoFile": { en: "Logo file" },
+    "managed-pages:entity:__config-edit__:field:layoutPreset": { en: "Layout" },
+    // Section-Header
+    "managed-pages:section.meta": { en: "Metadata" },
+    "managed-pages:section.body": { en: "Content" },
+    "managed-pages:branding.section.identity": { en: "Identity" },
+    // Row-Actions + Confirm (pageListScreen)
+    "managed-pages:actions.edit": { en: "Edit" },
+    "managed-pages:actions.delete": { en: "Delete" },
+    "managed-pages:confirms.page-delete": {
+        en: "Delete this page?",
+    },
+    // Nur bei allowCustomCss:true im Screen — unconditional geliefert
+    "managed-pages:entity:__config-edit__:field:customCss": { en: "Custom CSS" },
+    "managed-pages:branding.section.custom-css": { en: "Custom CSS" },
+};

package/dist/managed-pages/web/index.d.ts

@@ -1,2 +1,2 @@
 export { type ManagedPagesClientOptions, managedPagesClient } from "./client-plugin.tsx";
-export { defaultTranslations } from "./i18n.ts";
+export { defaultTranslations } from "./default-translations.ts";

package/dist/managed-pages/web/index.js

@@ -1,3 +1,2 @@
-// @runtime client
 export { managedPagesClient } from "./client-plugin.js";
-export { defaultTranslations } from "./i18n.js";
+export { defaultTranslations } from "./default-translations.js";

package/dist/metrics/compute.d.ts

@@ -1,8 +1,8 @@
 import type { WhereObject } from "@cosmicdrift/kumiko-framework/db";
 import type { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import type { TenantDb } from "@cosmicdrift/kumiko-types/tenant-db-types";
-import { type MetricRange } from "./constants.ts";
 import type { MetricDefinition, MetricResult } from "./types.ts";
+import { type MetricRange } from "./web/constants.ts";
 export type MetricRunParams = {
     readonly range: MetricRange;
     readonly timeZone: string;

package/dist/metrics/compute.js

@@ -1,4 +1,4 @@
-import { MAX_GROUP_ROWS } from "./constants.js";
+import { MAX_GROUP_ROWS } from "./web/constants.js";
 import { bucketStartsMs, computeWindow, resolveBucket } from "./window.js";
 const NULL_KEY_TEXT = "—";
 function keyText(key) {

package/dist/metrics/feature.js

@@ -3,10 +3,10 @@ import { InternalError, ValidationError } from "@cosmicdrift/kumiko-framework/er
 import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import * as z from "zod";
 import { runMetric } from "./compute.js";
-import { METRIC_RANGES, METRICS_FEATURE, METRICS_SYSTEM_FEATURE, } from "./constants.js";
 import { metricFilterPayloadShape, metricFilterWhere, resolveMetricFilterWhere, } from "./filters.js";
 import { METRICS_I18N } from "./i18n.js";
 import { metricHasTenantColumn, validateMetrics } from "./validate.js";
+import { METRIC_RANGES, METRICS_FEATURE, METRICS_SYSTEM_FEATURE, } from "./web/constants.js";
 import { isValidTimeZone } from "./window.js";
 const DEFAULT_RANGE = "7d";
 const DEFAULT_TIME_ZONE = "UTC";

package/dist/metrics/index.d.ts

@@ -1,5 +1,5 @@
-export { METRIC_RANGES, METRICS_FEATURE, METRICS_SYSTEM_FEATURE, type MetricRange, type MetricScope, metricQueryName, } from "./constants.ts";
 export { activeTenantsMetric, activeUsersMetric, auditWritesMetric, DEFAULT_METRICS, deliveriesByChannelMetric, failedDeliveriesMetric, failedJobRunsMetric, jobRunsByStatusMetric, tenantJobFailuresMetric, } from "./default-metrics.ts";
 export { createMetricsFeature, createSystemMetricsFeature } from "./feature.ts";
 export { METRICS_I18N } from "./i18n.ts";
 export { defineMetric, type MetricDefinition, type MetricFilterResolver, type MetricPoint, type MetricResult, type MetricRow, type MetricSegment, type MetricSeries, type MetricsFeatureOptions, } from "./types.ts";
+export { METRIC_RANGES, METRICS_FEATURE, METRICS_SYSTEM_FEATURE, type MetricRange, type MetricScope, metricQueryName, } from "./web/constants.ts";

package/dist/metrics/index.js

@@ -1,6 +1,6 @@
 // Public API of the metrics bundled-feature.
-export { METRIC_RANGES, METRICS_FEATURE, METRICS_SYSTEM_FEATURE, metricQueryName, } from "./constants.js";
 export { activeTenantsMetric, activeUsersMetric, auditWritesMetric, DEFAULT_METRICS, deliveriesByChannelMetric, failedDeliveriesMetric, failedJobRunsMetric, jobRunsByStatusMetric, tenantJobFailuresMetric, } from "./default-metrics.js";
 export { createMetricsFeature, createSystemMetricsFeature } from "./feature.js";
 export { METRICS_I18N } from "./i18n.js";
 export { defineMetric, } from "./types.js";
+export { METRIC_RANGES, METRICS_FEATURE, METRICS_SYSTEM_FEATURE, metricQueryName, } from "./web/constants.js";

package/dist/metrics/types.d.ts

@@ -4,7 +4,7 @@ import type { AggregateMeasure, AggregateTimeBucket } from "@cosmicdrift/kumiko-
 import type { SchemaTable } from "@cosmicdrift/kumiko-types/schema-table-types";
 import type { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import type { WhereObject } from "@cosmicdrift/kumiko-types/where-clause-types";
-import type { MetricRange, MetricScope } from "./constants.ts";
+import type { MetricRange, MetricScope } from "./web/constants.ts";
 /** Maps a payload value (e.g. a folder id) to the values `column` may have (e.g. the folder and its subfolders' loan ids). Runs with the tenant handler context, so reads stay tenant-scoped; the result only narrows. An empty result yields no rows. */
 export type MetricFilterResolver = {
     readonly column: string;

package/dist/metrics/validate.js

@@ -1,6 +1,6 @@
 import { extractTableInfo, isTimestamptzType } from "@cosmicdrift/kumiko-framework/db";
-import { METRIC_RANGES } from "./constants.js";
 import { filterValueKindOf, metricFilterEntries, RESERVED_PAYLOAD_KEYS } from "./filters.js";
+import { METRIC_RANGES } from "./web/constants.js";
 const KEBAB_ID = /^[a-z][a-z0-9]*(-[a-z0-9]+)*$/;
 const FILTER_PAYLOAD_KEY = /^[a-z][a-zA-Z0-9]*$/;
 const TENANT_ID_FIELD = "tenantId";

package/dist/metrics/{constants.js → web/constants.js}

@@ -1,4 +1,3 @@
-// @runtime client
 // Pure constants — imported by server (feature.ts) and by panel declarations,
 // so no runtime import from the engine barrel here.
 export const METRICS_FEATURE = "metrics";

package/dist/metrics/window.d.ts

@@ -1,7 +1,7 @@
 import type { AggregateTimeBucket } from "@cosmicdrift/kumiko-types/aggregate-types";
 import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
-import type { MetricRange } from "./constants.ts";
 import type { MetricDefinition } from "./types.ts";
+import type { MetricRange } from "./web/constants.ts";
 export type MetricWindow = {
     readonly start: Temporal.Instant;
     readonly end: Temporal.Instant;

package/dist/notes-history/feature.js

@@ -14,11 +14,11 @@
 // erasure without a delete path.
 import { defineEntityListHandler, defineFeature, } from "@cosmicdrift/kumiko-framework/engine";
 import { assertNoWhereRuleInOwnershipWrite } from "../shared/index.js";
-import { DEFAULT_NOTES_HISTORY_ACCESS, NOTES_HISTORY_FEATURE_NAME } from "./constants.js";
 import { createNoteEntryEntity, noteMentionEntity } from "./entity.js";
 import { createNoteEntryExecutor } from "./executor.js";
 import { createAddNoteHandler } from "./handlers/add-note.write.js";
 import { NOTES_HISTORY_FEATURE_I18N } from "./i18n.js";
+import { DEFAULT_NOTES_HISTORY_ACCESS, NOTES_HISTORY_FEATURE_NAME } from "./web/constants.js";
 function registerNotesHistory(r, access, ownership, parents) {
     r.describe("Generic, host-agnostic, append-only note history for any entity. Owns one event-sourced entity, `note-entry` (`read_note_entries`), keyed by (entityType, entityId) — so attaching notes adds NO column to the host entity and needs no relational pivot or JOIN. Provides a `create` write-handler (author stamped server-side from the caller, never client-supplied) and a `list` query filterable on entityId. Deliberately append-only: no update or delete handler is registered — a correction is a new entry, not an edit, so who-said-what-when stays reconstructable. Every path uses one access rule — adopt the host's model with createNotesHistoryFeature({ access: { openToAll: { reason } } }) or pin roles with createNotesHistoryFeature({ roles }).");
     r.uiHints({

package/dist/notes-history/handlers/add-note.write.js

@@ -3,9 +3,9 @@ import { ValidationError, writeFailure } from "@cosmicdrift/kumiko-framework/err
 import { decryptStoredPii, denyUnlessJoinRowParentVisible } from "../../shared/index.js";
 import { tenantMembershipsTable } from "../../tenant/index.js";
 import { userTable } from "../../user/index.js";
-import { DEFAULT_NOTES_HISTORY_ACCESS } from "../constants.js";
 import { noteEntryExecutor, noteMentionExecutor } from "../executor.js";
 import { addNotePayloadSchema } from "../schemas.js";
+import { DEFAULT_NOTES_HISTORY_ACCESS } from "../web/constants.js";
 const READ_AUTHOR_DISPLAY_NAME_REASON = "reads the author's displayName from the global users table inside a savepoint so a missing user feature cannot poison the note transaction";
 // add-note — appends a note-entry to (entityType, entityId). authorId is
 // NEVER read from the payload: it is always the authenticated caller

package/dist/notes-history/index.d.ts

@@ -1,6 +1,6 @@
-export { DEFAULT_NOTES_HISTORY_ACCESS, DEFAULT_NOTES_HISTORY_ROLES, NOTES_HISTORY_FEATURE_NAME, NOTES_SECTION_EXTENSION_NAME, NotesHistoryHandlers, NotesHistoryQueries, } from "./constants.ts";
 export { noteEntryEntity, noteMentionEntity } from "./entity.ts";
 export { noteEntryExecutor, noteEntryTable, noteMentionExecutor, noteMentionTable, } from "./executor.ts";
 export { createNotesHistoryFeature, type NotesHistoryFeatureOptions, } from "./feature.ts";
 export { addNoteHandler, createAddNoteHandler, } from "./handlers/add-note.write.ts";
 export { type AddNotePayload, addNotePayloadSchema } from "./schemas.ts";
+export { DEFAULT_NOTES_HISTORY_ACCESS, DEFAULT_NOTES_HISTORY_ROLES, NOTES_HISTORY_FEATURE_NAME, NOTES_SECTION_EXTENSION_NAME, NotesHistoryHandlers, NotesHistoryQueries, } from "./web/constants.ts";

package/dist/notes-history/index.js

@@ -1,6 +1,6 @@
-export { DEFAULT_NOTES_HISTORY_ACCESS, DEFAULT_NOTES_HISTORY_ROLES, NOTES_HISTORY_FEATURE_NAME, NOTES_SECTION_EXTENSION_NAME, NotesHistoryHandlers, NotesHistoryQueries, } from "./constants.js";
 export { noteEntryEntity, noteMentionEntity } from "./entity.js";
 export { noteEntryExecutor, noteEntryTable, noteMentionExecutor, noteMentionTable, } from "./executor.js";
 export { createNotesHistoryFeature, } from "./feature.js";
 export { addNoteHandler, createAddNoteHandler, } from "./handlers/add-note.write.js";
 export { addNotePayloadSchema } from "./schemas.js";
+export { DEFAULT_NOTES_HISTORY_ACCESS, DEFAULT_NOTES_HISTORY_ROLES, NOTES_HISTORY_FEATURE_NAME, NOTES_SECTION_EXTENSION_NAME, NotesHistoryHandlers, NotesHistoryQueries, } from "./web/constants.js";

package/dist/notes-history/web/client-plugin.js

@@ -1,5 +1,4 @@
-// @runtime client
-import { NOTES_HISTORY_FEATURE_NAME, NOTES_SECTION_EXTENSION_NAME } from "../constants.js";
+import { NOTES_HISTORY_FEATURE_NAME, NOTES_SECTION_EXTENSION_NAME } from "./constants.js";
 import { defaultTranslations } from "./i18n.js";
 import { NotesSection } from "./notes-section.js";
 export function notesHistoryClient() {

package/dist/notes-history/{constants.js → web/constants.js}

@@ -1,4 +1,3 @@
-// @runtime client
 // notes-history bundle constants — feature-name + qualified handler/query names.
 //
 // Spec: kumiko-platform/docs/plans/notes-history-bundle.md

package/dist/notes-history/web/i18n.js

@@ -1,4 +1,3 @@
-// @runtime client
 // Default translation bundle for the notes-history UI. notesHistoryClient()
 // hangs it into the LocaleProvider as a fallback bundle — apps override
 // individual keys via notesHistoryClient({ translations }).

package/dist/notes-history/web/index.d.ts

@@ -1,3 +1,3 @@
-export { NOTES_SECTION_EXTENSION_NAME, NotesHistoryHandlers, NotesHistoryQueries, } from "../constants.ts";
 export { notesHistoryClient } from "./client-plugin.tsx";
+export { NOTES_SECTION_EXTENSION_NAME, NotesHistoryHandlers, NotesHistoryQueries, } from "./constants.ts";
 export { NotesSection } from "./notes-section.tsx";

package/dist/notes-history/web/index.js

@@ -1,4 +1,3 @@
-// @runtime client
-export { NOTES_SECTION_EXTENSION_NAME, NotesHistoryHandlers, NotesHistoryQueries, } from "../constants.js";
 export { notesHistoryClient } from "./client-plugin.js";
+export { NOTES_SECTION_EXTENSION_NAME, NotesHistoryHandlers, NotesHistoryQueries, } from "./constants.js";
 export { NotesSection } from "./notes-section.js";

package/dist/notes-history/web/notes-section.js

@@ -1,5 +1,4 @@
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
-// @runtime client
 // NotesSection — drop-in note history for ANY entity. Shows every note
 // chronologically (newest first) with author + timestamp, plus a textarea to
 // append a new one. Append-only: there is no edit/delete affordance because
@@ -13,9 +12,9 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 //                   (RenderEdit passes { entityName, entityId }).
 import { formatWhen, useDispatcher, usePrimitives, useQuery, useTranslation, } from "@cosmicdrift/kumiko-renderer";
 import { useState } from "react";
-import { NotesHistoryHandlers, NotesHistoryQueries } from "../constants.js";
+import { NotesHistoryHandlers, NotesHistoryQueries } from "./constants.js";
 // Matches @cosmicdrift/kumiko-framework/crypto PII_ERASED_SENTINEL — cannot
-// import that module from @runtime client (runtime-isolation).
+// import that module from client code (runtime-isolation).
 const PII_ERASED_SENTINEL = "[[erased]]";
 function displayAuthorName(authorName, unknownLabel) {
     return authorName && authorName !== PII_ERASED_SENTINEL ? authorName : unknownLabel;

package/dist/personal-access-tokens/feature.d.ts

@@ -1,7 +1,7 @@
 import { type FeatureDefinition, type ProjectionListScreenDefinition } from "@cosmicdrift/kumiko-framework/engine";
-import { type PatRateLimit } from "./constants.ts";
 import { type CreatePatOptions } from "./handlers/create.write.ts";
-import type { PatScopeConfig } from "./scopes.ts";
+import { type PatRateLimit } from "./web/constants.ts";
+import type { PatScopeConfig } from "./web/scopes.ts";
 export type BindPatAutoRevokeOnPasswordChange = (revoker: (userId: string) => Promise<number>) => void;
 export declare function bindPatAutoRevokeOnPasswordChangeFromFeature(feature: FeatureDefinition): BindPatAutoRevokeOnPasswordChange | undefined;
 export type PersonalAccessTokensOptions = {

package/dist/personal-access-tokens/feature.js

@@ -2,7 +2,6 @@ import { EXT_TOKEN_VERIFIER, } from "@cosmicdrift/kumiko-bundled-features/auth-f
 import { PAT_TOKEN_PREFIX } from "@cosmicdrift/kumiko-framework/api";
 import { deriveEntityTableMeta } from "@cosmicdrift/kumiko-framework/db";
 import { defineFeature, } from "@cosmicdrift/kumiko-framework/engine";
-import { API_TOKEN_ENTITY_NAME, PAT_DEFAULT_RATE_LIMIT, PAT_FEATURE, } from "./constants.js";
 import { availabilityQuery } from "./handlers/availability.query.js";
 import { buildAvailableScopesQuery } from "./handlers/available-scopes.query.js";
 import { createPatCreateHandler } from "./handlers/create.write.js";
@@ -13,6 +12,7 @@ import { PAT_REVOKED_EVENT_SHORT, patRevokedSchema } from "./pat-revoked-event.j
 import { createPatResolver } from "./resolver.js";
 import { apiTokenEntity } from "./schema/api-token.js";
 import { createPatMintScreen, patListScreen } from "./screens.js";
+import { API_TOKEN_ENTITY_NAME, PAT_DEFAULT_RATE_LIMIT, PAT_FEATURE, } from "./web/constants.js";
 // Password-change is the only field-level trigger — see the postSave hook
 // below. MFA-enable/disable is wired separately (auth-mfa's
 // revokeAllPatTokens callback, late-bound at app-composition time) since
@@ -82,11 +82,14 @@ export function createPersonalAccessTokensFeature(options) {
         // is r.systemScope()'d (the user aggregate is a systemStream, framework
         // #497), so a postSave hook on "user" gets a poisoned ctx.db here. The
         // concrete revoker is bound once run{Prod,Dev}App has a real db handle.
-        let autoRevokeOnPasswordChange = options.autoRevokeOnPasswordChange;
+        // Explicit option wins; the runtime binding is replaceable so a second boot of the same
+        // feature instance binds its own database.
+        let boundAutoRevoke;
         r.hook({
             type: "postSave",
             target: { allOf: "user" },
             handler: async (result) => {
+                const autoRevokeOnPasswordChange = options.autoRevokeOnPasswordChange ?? boundAutoRevoke;
                 // skip: nothing bound — same late-bind pattern as sessions/feature.ts
                 if (!autoRevokeOnPasswordChange)
                     return;
@@ -101,8 +104,7 @@ export function createPersonalAccessTokensFeature(options) {
             },
         });
         const bindAutoRevokeOnPasswordChange = (revoker) => {
-            // explicit constructor option wins over the runtime binding
-            autoRevokeOnPasswordChange ??= revoker;
+            boundAutoRevoke = revoker;
         };
         const handlers = {
             create: r.writeHandler(createPatCreateHandler({ mfaVerifier: options.mfaVerifier })),

package/dist/personal-access-tokens/handlers/available-scopes.query.d.ts

@@ -1,5 +1,5 @@
 import * as z from "zod";
-import type { PatScopeConfig } from "../scopes.ts";
+import type { PatScopeConfig } from "../web/scopes.ts";
 export declare function buildAvailableScopesQuery(scopes: PatScopeConfig): import("@cosmicdrift/kumiko-types/define-handler").QueryHandlerDefinition<"available-scopes", z.ZodObject<{}, z.core.$strip>, {
     name: string;
     label: string;

package/dist/personal-access-tokens/handlers/create.write.js

@@ -6,9 +6,9 @@ import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import * as z from "zod";
 import { encryptForDirectWrite, verifyPassword } from "../../shared/index.js";
 import { UserQueries } from "../../user/index.js";
-import { API_TOKEN_ENTITY_NAME, PAT_DEFAULT_EXPIRES_IN_DAYS, PatErrors } from "../constants.js";
 import { mintPatToken } from "../hash.js";
 import { apiTokenEntity, apiTokenTable } from "../schema/api-token.js";
+import { API_TOKEN_ENTITY_NAME, PAT_DEFAULT_EXPIRES_IN_DAYS, PatErrors } from "../web/constants.js";
 // @wrapper-known error-helper
 function reauthFailed() {
     return writeFailure(new UnprocessableError(PatErrors.reauthRequired, {

package/dist/personal-access-tokens/handlers/revoke.write.js

@@ -4,9 +4,9 @@ import { UnprocessableError, writeFailure } from "@cosmicdrift/kumiko-framework/
 import { generateId } from "@cosmicdrift/kumiko-framework/utils";
 import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import * as z from "zod";
-import { API_TOKEN_ENTITY_NAME, PatErrors } from "../constants.js";
 import { PAT_REVOKED_AGGREGATE_TYPE, PAT_REVOKED_EVENT_QN } from "../pat-revoked-event.js";
 import { apiTokenTable } from "../schema/api-token.js";
+import { API_TOKEN_ENTITY_NAME, PatErrors } from "../web/constants.js";
 // Revoke one of the caller's own tokens. Ownership is enforced in the WHERE
 // (userId = caller), so a caller can't revoke another user's token and a miss
 // is a uniform ownership error with no existence oracle. isNull(revokedAt)

package/dist/personal-access-tokens/hash.js

@@ -1,6 +1,6 @@
 import { createHash } from "node:crypto";
 import { generateToken, PAT_TOKEN_PREFIX } from "@cosmicdrift/kumiko-framework/api";
-import { PAT_PREFIX_DISPLAY_LENGTH } from "./constants.js";
+import { PAT_PREFIX_DISPLAY_LENGTH } from "./web/constants.js";
 // A PAT is high-entropy (32 random bytes from generateToken). A single SHA-256
 // is the right hash here: fast on the per-request auth path, and there's no
 // brute-force surface that would justify argon2 (that's for low-entropy

package/dist/personal-access-tokens/i18n.d.ts

@@ -1,4 +1,4 @@
-import type { PatScopeConfig } from "./scopes.ts";
+import type { PatScopeConfig } from "./web/scopes.ts";
 type LocalizedString = {
     readonly en: string;
 };

package/dist/personal-access-tokens/i18n.js

@@ -1,6 +1,6 @@
 import { ACTION_FORM_ENTITY } from "@cosmicdrift/kumiko-framework/ui-types";
 import { fieldLabelKey, fieldOptionLabelKey } from "@cosmicdrift/kumiko-renderer/headless";
-import { PAT_FEATURE } from "./constants.js";
+import { PAT_FEATURE } from "./web/constants.js";
 const mintFieldKey = (field) => fieldLabelKey(PAT_FEATURE, ACTION_FORM_ENTITY, field);
 const scopeOptionKey = (grant) => fieldOptionLabelKey(PAT_FEATURE, ACTION_FORM_ENTITY, "scopes", grant);
 export const PAT_FEATURE_I18N = {

package/dist/personal-access-tokens/index.d.ts

@@ -1,7 +1,5 @@
 import type { FeatureDefinition } from "@cosmicdrift/kumiko-framework/engine";
-import { type PatRateLimit } from "./constants.ts";
-export type { PatRateLimit } from "./constants.ts";
-export { PAT_DEFAULT_RATE_LIMIT, PAT_FEATURE, PatHandlers, PatQueries } from "./constants.ts";
+import { type PatRateLimit } from "./web/constants.ts";
 export type { BindPatAutoRevokeOnPasswordChange, PersonalAccessTokensOptions } from "./feature.ts";
 export { bindPatAutoRevokeOnPasswordChangeFromFeature, createPersonalAccessTokensFeature, } from "./feature.ts";
 export type { CreatePatOptions, PatMfaVerifyResult } from "./handlers/create.write.ts";
@@ -10,6 +8,8 @@ export { PAT_REVOKED_AGGREGATE_TYPE, PAT_REVOKED_EVENT_QN, PAT_REVOKED_EVENT_SHO
 export { createPatResolver } from "./resolver.ts";
 export { revokeAllPatTokensForUser } from "./revoke-for-user.ts";
 export { apiTokenEntity, apiTokenTable } from "./schema/api-token.ts";
-export type { PatScopeConfig, PatScopeDef } from "./scopes.ts";
-export { expandScopes } from "./scopes.ts";
+export type { PatRateLimit } from "./web/constants.ts";
+export { PAT_DEFAULT_RATE_LIMIT, PAT_FEATURE, PatHandlers, PatQueries } from "./web/constants.ts";
+export type { PatScopeConfig, PatScopeDef } from "./web/scopes.ts";
+export { expandScopes } from "./web/scopes.ts";
 export declare function patRateLimitFromFeature(feature: FeatureDefinition): PatRateLimit;

package/dist/personal-access-tokens/index.js

@@ -1,12 +1,12 @@
-import { PAT_DEFAULT_RATE_LIMIT } from "./constants.js";
-export { PAT_DEFAULT_RATE_LIMIT, PAT_FEATURE, PatHandlers, PatQueries } from "./constants.js";
+import { PAT_DEFAULT_RATE_LIMIT } from "./web/constants.js";
 export { bindPatAutoRevokeOnPasswordChangeFromFeature, createPersonalAccessTokensFeature, } from "./feature.js";
 export { hashPatToken, mintPatToken } from "./hash.js";
 export { PAT_REVOKED_AGGREGATE_TYPE, PAT_REVOKED_EVENT_QN, PAT_REVOKED_EVENT_SHORT, patRevokedSchema, } from "./pat-revoked-event.js";
 export { createPatResolver } from "./resolver.js";
 export { revokeAllPatTokensForUser } from "./revoke-for-user.js";
 export { apiTokenEntity, apiTokenTable } from "./schema/api-token.js";
-export { expandScopes } from "./scopes.js";
+export { PAT_DEFAULT_RATE_LIMIT, PAT_FEATURE, PatHandlers, PatQueries } from "./web/constants.js";
+export { expandScopes } from "./web/scopes.js";
 // Reads the per-token rate-limit config off a mounted PAT feature's exports.
 // Falls back to the default when absent. run-prod-app uses this to build the
 // limiter from the same declaration the feature was given.