@cosmicdrift/kumiko-framework 0.368.0 → 0.370.0

package/dist/api/index.d.ts

@@ -1,37 +1,37 @@
-export type { SetTenantCookieOptions } from "./anonymous-cookie.js";
-export { deleteTenantCookie, setTenantCookie } from "./anonymous-cookie.js";
-export { collectAnonymousLiveEntities } from "./anonymous-live-entities.js";
-export { LOCALE_HEADER_NAME, NO_ROUTE_MATCH_HEADER_NAME } from "./api-constants.js";
-export type { AnonymousAccessConfig, AnonymousAccessResolved, AuthMiddlewareOptions, AuthSessionChecker, AuthSessionCheckResult, AuthSessionStatus, TenantExists, TenantLifecycleStatusResolver, TenantResolver, TokenVerifier, } from "./auth-middleware.js";
-export { authMiddleware, getUser, PAT_TOKEN_PREFIX, sessionCheckStatus, } from "./auth-middleware.js";
-export type { AuthRoutesConfig, LoginRateLimiter, SessionChecker, SessionCreator, SessionMassRevoker, SessionMetadata, SessionRevoker, } from "./auth-routes.js";
-export { createAuthRoutes, createInMemoryLoginRateLimiter, createRedisLoginRateLimiter, } from "./auth-routes.js";
-export type { ClientIpHeaderSource, ClientIpResolver } from "./client-ip.js";
-export { assertValidTrustedProxyHops, clientIpSourceFromHonoContext, createClientIpResolver, extractSocketAddress, parseTrustedProxyHopsEnv, TRUSTED_PROXY_HOPS_ENV, UNKNOWN_CLIENT_IP, } from "./client-ip.js";
-export type { AnonymousExtraRoute, AnonymousExtraRouteDeps, ExtraRouteDefinition, ExtraRouteEntry, ExtraRouteRejectionOptions, ExtraRouteRejectionStatus, RoleDispatchArgs, SignatureExtraRoute, SignatureExtraRouteDeps, SignatureExtraRouteVerifyDeps, SignatureExtraRouteVerifyRequest, SystemDispatchArgs, UserExtraRoute, UserExtraRouteDeps, } from "./extra-route.js";
-export { ExtraRouteEntries, ExtraRouteRejection, signatureRoute } from "./extra-route.js";
-export type { CachedResponseInit, CachePolicy } from "./http-cache.js";
-export { cacheControlHeader, cachedResponse, computeRevisionEtag, computeStrongEtag, computeWeakEtag, etagMatches, parseIfNoneMatch, } from "./http-cache.js";
-export type { JwtHelper, JwtKeyring, JwtPayload } from "./jwt.js";
-export { createJwtHelper, loadJwtSecretOrKeyring } from "./jwt.js";
-export { publicOriginOf } from "./origin-middleware.js";
-export { patAllows, qnMatches } from "./pat-scope.js";
-export type { PostAuthLandingArgs, PostAuthLandingFlow, PostAuthLandingResolver, } from "./post-auth-landing.js";
-export { isSafeLandingPath } from "./post-auth-landing.js";
-export type { RedisSseBroker, RedisSseBrokerOptions } from "./redis-sse-broker.js";
-export { createDefaultSseBroker, createRedisSseBroker, isRedisSseBroker, } from "./redis-sse-broker.js";
-export { type RequestContextData, readonlyRequestContext as requestContext, } from "./request-context.js";
-export { buildRequestContextDataFromRequest, requestIdMiddleware, } from "./request-id-middleware.js";
-export type { MetricsRouteOptions } from "./route-registrars.js";
-export { createMetricsApp, DEFAULT_MAX_REQUEST_BYTES, isPrometheusMeter, } from "./route-registrars.js";
-export { createApiRoutes } from "./routes.js";
-export type { KumikoServer, ServerOptions } from "./server.js";
-export { buildServer, makeDispatchSystemQuery, makeDispatchSystemWrite, makeDispatchWriteAs, withFileProviderResolver, } from "./server.js";
-export type { ResolvedSessionCookies, SessionCookieBase, SessionCookieNames, } from "./session-cookies.js";
-export { AUTH_COOKIE_BASE, CSRF_COOKIE_BASE, getSessionCookies, HOST_COOKIE_PREFIX, isHostPrefixedCookieName, resolveSessionCookieNames, resolveSessionCookies, sessionCookieName, sessionCookiesMiddleware, TENANT_COOKIE_BASE, } from "./session-cookies.js";
-export type { SseBroker, SseClient, SseEvent } from "./sse-broker.js";
-export { createSseBroker } from "./sse-broker.js";
-export { createSseRoute, SSE_HEARTBEAT_INTERVAL_MS, type SseRouteOptions } from "./sse-route.js";
-export { generateToken } from "./tokens.js";
-export type { KumikoServeEnv, KumikoServerWebSocket, KumikoWebSocketData, WebSocketUpgradeServer, } from "./websocket-route.js";
-export { createKumikoWebSocketHandler, isWebSocketUpgradeRequest, kumikoWebSocketHandler, WEBSOCKET_BACKPRESSURE_LIMIT_BYTES, WEBSOCKET_DEFAULT_MAX_CONNECTIONS_PER_USER, WEBSOCKET_HEARTBEAT_INTERVAL_MS, WEBSOCKET_MAX_PAYLOAD_BYTES, WEBSOCKET_PENDING_BUFFER_LIMIT_BYTES, WEBSOCKET_REVALIDATION_FAILURE_LIMIT, WEBSOCKET_ROUTE_PATH_PREFIX, } from "./websocket-route.js";
+export type { SetTenantCookieOptions } from "./anonymous-cookie.ts";
+export { deleteTenantCookie, setTenantCookie } from "./anonymous-cookie.ts";
+export { collectAnonymousLiveEntities } from "./anonymous-live-entities.ts";
+export { LOCALE_HEADER_NAME, NO_ROUTE_MATCH_HEADER_NAME } from "./api-constants.ts";
+export type { AnonymousAccessConfig, AnonymousAccessResolved, AuthMiddlewareOptions, AuthSessionChecker, AuthSessionCheckResult, AuthSessionStatus, TenantExists, TenantLifecycleStatusResolver, TenantResolver, TokenVerifier, } from "./auth-middleware.ts";
+export { authMiddleware, getUser, PAT_TOKEN_PREFIX, sessionCheckStatus, } from "./auth-middleware.ts";
+export type { AuthRoutesConfig, LoginRateLimiter, SessionChecker, SessionCreator, SessionMassRevoker, SessionMetadata, SessionRevoker, } from "./auth-routes.ts";
+export { createAuthRoutes, createInMemoryLoginRateLimiter, createRedisLoginRateLimiter, } from "./auth-routes.ts";
+export type { ClientIpHeaderSource, ClientIpResolver } from "./client-ip.ts";
+export { assertValidTrustedProxyHops, clientIpSourceFromHonoContext, createClientIpResolver, extractSocketAddress, parseTrustedProxyHopsEnv, TRUSTED_PROXY_HOPS_ENV, UNKNOWN_CLIENT_IP, } from "./client-ip.ts";
+export type { AnonymousExtraRoute, AnonymousExtraRouteDeps, ExtraRouteDefinition, ExtraRouteEntry, ExtraRouteRejectionOptions, ExtraRouteRejectionStatus, RoleDispatchArgs, SignatureExtraRoute, SignatureExtraRouteDeps, SignatureExtraRouteVerifyDeps, SignatureExtraRouteVerifyRequest, SystemDispatchArgs, UserExtraRoute, UserExtraRouteDeps, } from "./extra-route.ts";
+export { ExtraRouteEntries, ExtraRouteRejection, signatureRoute } from "./extra-route.ts";
+export type { CachedResponseInit, CachePolicy } from "./http-cache.ts";
+export { cacheControlHeader, cachedResponse, computeRevisionEtag, computeStrongEtag, computeWeakEtag, etagMatches, parseIfNoneMatch, } from "./http-cache.ts";
+export type { JwtHelper, JwtKeyring, JwtPayload } from "./jwt.ts";
+export { createJwtHelper, loadJwtSecretOrKeyring } from "./jwt.ts";
+export { publicOriginOf } from "./origin-middleware.ts";
+export { patAllows, qnMatches } from "./pat-scope.ts";
+export type { PostAuthLandingArgs, PostAuthLandingFlow, PostAuthLandingResolver, } from "./post-auth-landing.ts";
+export { isSafeLandingPath } from "./post-auth-landing.ts";
+export type { RedisSseBroker, RedisSseBrokerOptions } from "./redis-sse-broker.ts";
+export { createDefaultSseBroker, createRedisSseBroker, isRedisSseBroker, } from "./redis-sse-broker.ts";
+export { type RequestContextData, readonlyRequestContext as requestContext, } from "./request-context.ts";
+export { buildRequestContextDataFromRequest, requestIdMiddleware, } from "./request-id-middleware.ts";
+export type { MetricsRouteOptions } from "./route-registrars.ts";
+export { createMetricsApp, DEFAULT_MAX_REQUEST_BYTES, isPrometheusMeter, } from "./route-registrars.ts";
+export { createApiRoutes } from "./routes.ts";
+export type { KumikoServer, ServerOptions } from "./server.ts";
+export { buildServer, makeDispatchSystemQuery, makeDispatchSystemWrite, makeDispatchWriteAs, withFileProviderResolver, } from "./server.ts";
+export type { ResolvedSessionCookies, SessionCookieBase, SessionCookieNames, } from "./session-cookies.ts";
+export { AUTH_COOKIE_BASE, CSRF_COOKIE_BASE, getSessionCookies, HOST_COOKIE_PREFIX, isHostPrefixedCookieName, resolveSessionCookieNames, resolveSessionCookies, sessionCookieName, sessionCookiesMiddleware, TENANT_COOKIE_BASE, } from "./session-cookies.ts";
+export type { SseBroker, SseClient, SseEvent } from "./sse-broker.ts";
+export { createSseBroker } from "./sse-broker.ts";
+export { createSseRoute, SSE_HEARTBEAT_INTERVAL_MS, type SseRouteOptions } from "./sse-route.ts";
+export { generateToken } from "./tokens.ts";
+export type { KumikoServeEnv, KumikoServerWebSocket, KumikoWebSocketData, WebSocketUpgradeServer, } from "./websocket-route.ts";
+export { createKumikoWebSocketHandler, isWebSocketUpgradeRequest, kumikoWebSocketHandler, WEBSOCKET_BACKPRESSURE_LIMIT_BYTES, WEBSOCKET_DEFAULT_MAX_CONNECTIONS_PER_USER, WEBSOCKET_HEARTBEAT_INTERVAL_MS, WEBSOCKET_MAX_PAYLOAD_BYTES, WEBSOCKET_PENDING_BUFFER_LIMIT_BYTES, WEBSOCKET_REVALIDATION_FAILURE_LIMIT, WEBSOCKET_ROUTE_PATH_PREFIX, } from "./websocket-route.ts";

package/dist/api/jwt.d.ts

@@ -1,4 +1,4 @@
-import type { SessionUser, TenantId } from "../engine/types/index.js";
+import type { SessionUser, TenantId } from "../engine/types/index.ts";
 export type JwtPayload = {
     sub: string;
     tenantId: TenantId;

package/dist/api/observability-middleware.d.ts

@@ -1,5 +1,5 @@
 import type { Context, Next } from "hono";
-import { type Meter, type SensitiveFilterConfig, type Tracer } from "../observability/index.js";
+import { type Meter, type SensitiveFilterConfig, type Tracer } from "../observability/index.ts";
 export type ObservabilityMiddlewareOptions = {
     readonly tracer: Tracer;
     readonly meter: Meter;

package/dist/api/readiness.d.ts

@@ -1,5 +1,5 @@
 import type { Redis } from "ioredis";
-import type { DbConnection } from "../db/connection.js";
+import type { DbConnection } from "../db/connection.ts";
 export type ReadinessCheck = {
     readonly name: string;
     readonly run: () => Promise<void>;

package/dist/api/redis-sse-broker.d.ts

@@ -1,5 +1,5 @@
-import { type RedisClientOptions } from "../redis/client.js";
-import { type SseBroker } from "./sse-broker.js";
+import { type RedisClientOptions } from "../redis/client.ts";
+import { type SseBroker } from "./sse-broker.ts";
 export type RedisSseBrokerOptions = {
     readonly redisUrl: string;
     readonly clientOptions?: RedisClientOptions;

package/dist/api/request-context.d.ts

@@ -1,6 +1,6 @@
 import { type WriteOrigin } from "@cosmicdrift/kumiko-types/event-store-types";
 import type { AgentRisk } from "@cosmicdrift/kumiko-types/handlers";
-import type { ErrorDocsConfig } from "../errors/docs-url.js";
+import type { ErrorDocsConfig } from "../errors/docs-url.ts";
 export type RequestContextData = {
     readonly requestId: string;
     readonly correlationId: string;

package/dist/api/request-id-middleware.d.ts

@@ -1,7 +1,7 @@
 import type { Context, Next } from "hono";
-import type { ErrorDocsConfig } from "../errors/docs-url.js";
-import { type ClientIpResolver } from "./client-ip.js";
-import { type RequestContextData } from "./request-context.js";
+import type { ErrorDocsConfig } from "../errors/docs-url.ts";
+import { type ClientIpResolver } from "./client-ip.ts";
+import { type RequestContextData } from "./request-context.ts";
 /**
  * Builds the RequestContextData record for a raw Fetch Request — requestId
  * (client-supplied + sanitized, or generated), correlationId (mirrors

package/dist/api/route-registrars.d.ts

@@ -1,8 +1,8 @@
 import { Hono, type MiddlewareHandler } from "hono";
-import type { DbConnection } from "../db/connection.js";
-import type { Lifecycle } from "../lifecycle/index.js";
-import type { Meter, PrometheusMeter } from "../observability/index.js";
-import type { EventConsumer } from "../pipeline/event-dispatcher.js";
+import type { DbConnection } from "../db/connection.ts";
+import type { Lifecycle } from "../lifecycle/index.ts";
+import type { Meter, PrometheusMeter } from "../observability/index.ts";
+import type { EventConsumer } from "../pipeline/event-dispatcher.ts";
 export declare const DEFAULT_MAX_REQUEST_BYTES = 1048576;
 export declare function registerBodyLimit(app: Hono, maxBytes: number): void;
 export declare function bodyLimitForRoutePath(path: string, maxBytes: number): readonly MiddlewareHandler[];

package/dist/api/routes.d.ts

@@ -1,5 +1,5 @@
 import { type Context, Hono } from "hono";
-import type { Dispatcher } from "../pipeline/dispatcher.js";
+import type { Dispatcher } from "../pipeline/dispatcher.ts";
 export declare const StreamFrame: {
     readonly chunk: "chunk";
     readonly ping: "ping";

package/dist/api/server.d.ts

@@ -1,21 +1,21 @@
 import type { CacheSyncBus } from "@cosmicdrift/kumiko-types/cache-sync-types";
 import { Hono } from "hono";
-import type { PgListenClient } from "../db/connection.js";
-import { type AppContext, type Registry, type RunIn, type WriteResult } from "../engine/types/index.js";
-import type { ErrorDocsConfig } from "../errors/docs-url.js";
-import type { Lifecycle } from "../lifecycle/index.js";
-import { type ObservabilityOptions, type ObservabilityProvider } from "../observability/index.js";
-import type { DispatcherOptions } from "../pipeline/dispatcher.js";
-import { type Dispatcher } from "../pipeline/dispatcher.js";
-import type { EventDedup } from "../pipeline/event-dedup.js";
-import type { EventDispatcher } from "../pipeline/event-dispatcher.js";
-import { type SystemHooks } from "../pipeline/lifecycle-pipeline.js";
-import { type AuthEndpointRateLimitOptions, type GlobalIpRateLimitOptions } from "../rate-limit/index.js";
-import { type AnonymousAccessResolved } from "./auth-middleware.js";
-import { type AuthRoutesConfig } from "./auth-routes.js";
-import { type ExtraRouteDefinition, type RoleDispatchArgs, type SystemDispatchArgs } from "./extra-route.js";
-import { type JwtHelper, type JwtKeyring } from "./jwt.js";
-import type { SseBroker } from "./sse-broker.js";
+import type { PgListenClient } from "../db/connection.ts";
+import { type AppContext, type Registry, type RunIn, type WriteResult } from "../engine/types/index.ts";
+import type { ErrorDocsConfig } from "../errors/docs-url.ts";
+import type { Lifecycle } from "../lifecycle/index.ts";
+import { type ObservabilityOptions, type ObservabilityProvider } from "../observability/index.ts";
+import type { DispatcherOptions } from "../pipeline/dispatcher.ts";
+import { type Dispatcher } from "../pipeline/dispatcher.ts";
+import type { EventDedup } from "../pipeline/event-dedup.ts";
+import type { EventDispatcher } from "../pipeline/event-dispatcher.ts";
+import { type SystemHooks } from "../pipeline/lifecycle-pipeline.ts";
+import { type AuthEndpointRateLimitOptions, type GlobalIpRateLimitOptions } from "../rate-limit/index.ts";
+import { type AnonymousAccessResolved } from "./auth-middleware.ts";
+import { type AuthRoutesConfig } from "./auth-routes.ts";
+import { type ExtraRouteDefinition, type RoleDispatchArgs, type SystemDispatchArgs } from "./extra-route.ts";
+import { type JwtHelper, type JwtKeyring } from "./jwt.ts";
+import type { SseBroker } from "./sse-broker.ts";
 export type ServerOptions = {
     registry: Registry;
     context: AppContext;

package/dist/api/sse-broker.d.ts

@@ -1,4 +1,4 @@
-import type { SessionUser } from "../engine/types/index.js";
+import type { SessionUser } from "../engine/types/index.ts";
 export type SseClient = {
     id: string;
     send: (event: SseEvent) => void;

package/dist/api/sse-route.d.ts

@@ -1,5 +1,5 @@
 import { Hono } from "hono";
-import { type SseBroker } from "./sse-broker.js";
+import { type SseBroker } from "./sse-broker.ts";
 /**
  * Heartbeat-Cadence für SSE-Streams.
  *

package/dist/api/websocket-route.d.ts

@@ -1,7 +1,7 @@
 import { WEBSOCKET_BACKPRESSURE_LIMIT_BYTES, WEBSOCKET_DEFAULT_MAX_CONNECTIONS_PER_USER, WEBSOCKET_DEFAULT_MAX_MESSAGE_BYTES, WEBSOCKET_MAX_PAYLOAD_BYTES, WEBSOCKET_ROUTE_PATH_PREFIX, type WebSocketMessageData, type WebSocketSessionHandlers } from "@cosmicdrift/kumiko-types/websocket-route";
-import type { SessionUser } from "../engine/types/index.js";
-import { type AuthSessionChecker, type TenantLifecycleStatusResolver } from "./auth-middleware.js";
-import { type RequestContextData } from "./request-context.js";
+import type { SessionUser } from "../engine/types/index.ts";
+import { type AuthSessionChecker, type TenantLifecycleStatusResolver } from "./auth-middleware.ts";
+import { type RequestContextData } from "./request-context.ts";
 export { WEBSOCKET_BACKPRESSURE_LIMIT_BYTES, WEBSOCKET_DEFAULT_MAX_CONNECTIONS_PER_USER, WEBSOCKET_DEFAULT_MAX_MESSAGE_BYTES, WEBSOCKET_MAX_PAYLOAD_BYTES, WEBSOCKET_ROUTE_PATH_PREFIX, };
 export declare const WEBSOCKET_HEARTBEAT_INTERVAL_MS = 25000;
 export declare const WEBSOCKET_PENDING_BUFFER_LIMIT_BYTES: number;

package/dist/auth/index.d.ts

@@ -1,2 +1,2 @@
-export type { Role } from "./roles.js";
-export { ROLES } from "./roles.js";
+export type { Role } from "./roles.ts";
+export { ROLES } from "./roles.ts";

package/dist/compliance/duration-spec.d.ts

@@ -1,5 +1,5 @@
-import { getTemporal } from "../time/index.js";
-import type { DurationSpec, RetentionSpec } from "./profiles.js";
+import { getTemporal } from "../time/index.ts";
+import type { DurationSpec, RetentionSpec } from "./profiles.ts";
 type Instant = InstanceType<ReturnType<typeof getTemporal>["Instant"]>;
 export declare function durationSpecToMs(spec: DurationSpec): number;
 export declare function addDurationSpec(now: Instant, spec: DurationSpec): Instant;

package/dist/compliance/index.d.ts

@@ -1,6 +1,6 @@
-export { addDurationSpec, describeDurationSpec, durationSpecToMs, subtractRetentionSpec, } from "./duration-spec.js";
-export { complianceProfileOverrideSchema } from "./override-schema.js";
-export type { AuthorityNotificationDeadline, ComplianceProfile, ComplianceProfileKey, ComplianceProfileOverride, DurationSpec, EffectiveComplianceProfile, RetentionSpec, UserNotificationRequiredPolicy, } from "./profiles.js";
-export { COMPLIANCE_PROFILES, OVERRIDABLE_PROFILE_KEYS, resolveComplianceProfile, SELECTABLE_PROFILE_KEYS, } from "./profiles.js";
-export type { BundleTier, SubProcessor } from "./sub-processors.js";
-export { getActiveSubProcessors, getPlannedSubProcessors, KUMIKO_SUB_PROCESSORS, } from "./sub-processors.js";
+export { addDurationSpec, describeDurationSpec, durationSpecToMs, subtractRetentionSpec, } from "./duration-spec.ts";
+export { complianceProfileOverrideSchema } from "./override-schema.ts";
+export type { AuthorityNotificationDeadline, ComplianceProfile, ComplianceProfileKey, ComplianceProfileOverride, DurationSpec, EffectiveComplianceProfile, RetentionSpec, UserNotificationRequiredPolicy, } from "./profiles.ts";
+export { COMPLIANCE_PROFILES, OVERRIDABLE_PROFILE_KEYS, resolveComplianceProfile, SELECTABLE_PROFILE_KEYS, } from "./profiles.ts";
+export type { BundleTier, SubProcessor } from "./sub-processors.ts";
+export { getActiveSubProcessors, getPlannedSubProcessors, KUMIKO_SUB_PROCESSORS, } from "./sub-processors.ts";

package/dist/compliance/profiles.d.ts

@@ -1,4 +1,4 @@
-import type { BundleTier } from "./sub-processors.js";
+import type { BundleTier } from "./sub-processors.ts";
 export type ComplianceProfileKey = "eu-dsgvo" | "swiss-dsg" | "de-hr-dsgvo-hgb" | "minimal-no-region";
 export type DurationSpec = {
     readonly days: number;

package/dist/config/index.d.ts

@@ -0,0 +1,44 @@
+import type { FeatureDefinition } from "../engine/types/index.ts";
+export type AppInfraPorts = {
+    readonly postgres?: number;
+    readonly redis?: number;
+    readonly meilisearch?: number;
+    /** S3 mock (MinIO) used by integration and E2E runs. */
+    readonly s3?: number;
+};
+export type AppPorts = {
+    /** `bun run dev` listens here. */
+    readonly dev: number;
+    /** The E2E server (playwright.config.ts webServer) listens here. */
+    readonly e2e: number;
+    /** Local infrastructure of this app. One port per app, so parallel E2E runs
+     *  of several apps never share a Meilisearch or Postgres. */
+    readonly infra?: AppInfraPorts;
+};
+export type AppClientConfig = {
+    /** Client bundle entry files, relative to the app root (e.g. "src/client.tsx"). */
+    readonly entries: readonly string[];
+};
+export type AppConfig = {
+    /** Features mounted in every environment: dev, tests, prod. */
+    readonly features: readonly FeatureDefinition[];
+    /** Features mounted only in production on top of `features`. */
+    readonly prodFeatures?: readonly FeatureDefinition[];
+    readonly client: AppClientConfig;
+    readonly ports: AppPorts;
+};
+export declare const APP_CONFIG_FILE = "kumiko.config.ts";
+declare const INFRA_PORT_NAMES: readonly ["postgres", "redis", "meilisearch", "s3"];
+export type AppPortRole = "dev" | "e2e" | (typeof INFRA_PORT_NAMES)[number];
+export type AppPortEntry = {
+    readonly role: AppPortRole;
+    readonly port: number;
+};
+/** Every port the app claims, in a stable order. */
+export declare function listAppPorts(ports: AppPorts): readonly AppPortEntry[];
+/** Problems with the declared ports: out of range or claimed twice by this app. */
+export declare function findAppPortProblems(ports: AppPorts): readonly string[];
+export declare function defineAppConfig(config: AppConfig): AppConfig;
+/** The full feature list prod boots with: `features` plus `prodFeatures`. */
+export declare function allAppFeatures(config: Pick<AppConfig, "features" | "prodFeatures">): readonly FeatureDefinition[];
+export {};

package/dist/config/index.js

@@ -0,0 +1,61 @@
+export const APP_CONFIG_FILE = "kumiko.config.ts";
+const INFRA_PORT_NAMES = [
+    "postgres",
+    "redis",
+    "meilisearch",
+    "s3",
+];
+/** Every port the app claims, in a stable order. */
+export function listAppPorts(ports) {
+    const entries = [
+        { role: "dev", port: ports.dev },
+        { role: "e2e", port: ports.e2e },
+    ];
+    for (const role of INFRA_PORT_NAMES) {
+        const port = ports.infra?.[role];
+        if (port !== undefined)
+            entries.push({ role, port });
+    }
+    return entries;
+}
+function isValidPort(port) {
+    return Number.isInteger(port) && port >= 1 && port <= 65535;
+}
+/** Problems with the declared ports: out of range or claimed twice by this app. */
+export function findAppPortProblems(ports) {
+    const problems = [];
+    const owners = new Map();
+    for (const { role, port } of listAppPorts(ports)) {
+        if (!isValidPort(port)) {
+            problems.push(`ports.${role} must be an integer in 1..65535, got ${port}`);
+            continue;
+        }
+        const owner = owners.get(port);
+        if (owner !== undefined)
+            problems.push(`ports.${role} reuses port ${port} of ports.${owner}`);
+        else
+            owners.set(port, role);
+    }
+    return problems;
+}
+// Entries end up in the server's bundle list and in generated files, so only
+// plain relative paths inside the app are accepted.
+const CLIENT_ENTRY_RE = /^(?!\/)(?!.*\.\.)[A-Za-z0-9_./-]+\.(ts|tsx)$/;
+export function defineAppConfig(config) {
+    const problems = [...findAppPortProblems(config.ports)];
+    if (config.client.entries.length === 0)
+        problems.push("client.entries must name at least one entry");
+    for (const entry of config.client.entries) {
+        if (!CLIENT_ENTRY_RE.test(entry)) {
+            problems.push(`client.entries: "${entry}" must be a relative .ts/.tsx path inside the app`);
+        }
+    }
+    if (problems.length > 0) {
+        throw new Error(`defineAppConfig: ${problems.join("; ")}`);
+    }
+    return config;
+}
+/** The full feature list prod boots with: `features` plus `prodFeatures`. */
+export function allAppFeatures(config) {
+    return [...config.features, ...(config.prodFeatures ?? [])];
+}

package/dist/crypto/blind-index.d.ts

@@ -1,4 +1,4 @@
-import type { EntityDefinition } from "../engine/types/fields.js";
+import type { EntityDefinition } from "../engine/types/fields.ts";
 export declare function computeBlindIndex(key: Uint8Array, plaintext: string): string;
 export declare function decodeBlindIndexKey(base64Key: string): Uint8Array;
 export declare function configureBlindIndexKey(base64Key: string | undefined): void;

package/dist/crypto/event-pii.d.ts

@@ -1,5 +1,5 @@
 import type { EventPiiFields } from "@cosmicdrift/kumiko-types/handlers";
-import { type EventSubjectEnvelope } from "./subject-resolver.js";
+import { type EventSubjectEnvelope } from "./subject-resolver.ts";
 export type EventPiiCatalog = ReadonlyMap<string, EventPiiFields>;
 export declare function configureEventPiiCatalog(next: EventPiiCatalog): void;
 export declare function configuredEventPiiCatalog(): EventPiiCatalog;

package/dist/crypto/in-memory-kms-adapter.d.ts

@@ -1,4 +1,4 @@
-import { type KmsHealth, type LocalKeyKmsAdapter, type SubjectDek, type SubjectId } from "./kms-adapter.js";
+import { type KmsHealth, type LocalKeyKmsAdapter, type SubjectDek, type SubjectId } from "./kms-adapter.ts";
 export declare class InMemoryKmsAdapter implements LocalKeyKmsAdapter {
     readonly capabilities: {
         readonly mode: "local-key";

package/dist/crypto/index.d.ts

@@ -1,11 +1,11 @@
-export { blindIndexFieldName, collectLookupableFields, computeBlindIndex, computeBlindIndexValues, configureBlindIndexKey, configuredBlindIndexKey, decodeBlindIndexKey, } from "./blind-index.js";
-export { configuredEventPiiCatalog, configureEventPiiCatalog, type EventPiiCatalog, encryptEventPayloadPii, } from "./event-pii.js";
-export { InMemoryKmsAdapter } from "./in-memory-kms-adapter.js";
-export { isSelfPiiField } from "./is-self-pii-field.js";
-export { type KekSourceEnv, type KekSourceOptions, resolvePlatformKeks } from "./kek-source.js";
-export { isLocalKeyKmsAdapter, KeyAlreadyExistsError, KeyErasedError, KeyNotFoundError, type KmsAdapter, type KmsContext, type KmsHealth, type LocalKeyKmsAdapter, RECORD_ENTITY_PATTERN, type RemoteCryptoKmsAdapter, type SubjectDek, type SubjectId, type SubjectKey, subjectIdFromKey, subjectIdSchema, subjectIdToKey, subjectKeyForRecord, subjectKeyForTenant, subjectKeyForUser, } from "./kms-adapter.js";
-export { type ActiveKmsWiring, buildPgKmsOptions, type KmsWiring, type KmsWiringEnv, type KmsWiringOptions, type KmsWiringRelease, type PgKmsRotationEnv, type PlaintextPiiWiring, requireKmsWiring, requireKmsWiringAsync, resolveKmsWiring, resolveKmsWiringAsync, } from "./kms-wiring.js";
-export { createPgKmsAdapter, PgKmsAdapter, type PgKmsAdapterOptions, type RewrapOptions, type RewrapResult, rewrapSubjectKeys, } from "./pg-kms-adapter.js";
-export { configuredPiiSubjectKms, configurePiiSubjectKms, decryptPiiFieldValues, decryptPiiValueForSubject, type EncryptPiiOptions, encryptPiiFieldValues, encryptPiiJsonValueForSubject, encryptPiiValueForSubject, isPiiCiphertext, PII_CIPHERTEXT_PREFIX, PII_CIPHERTEXT_PREFIX_JSON, PII_ERASED_SENTINEL, } from "./pii-field-encryption.js";
-export { createRequestKmsCache, type RequestKmsCache, } from "./request-kms-cache.js";
-export { collectPiiEncryptedFields, collectPiiSubjectFields, collectSearchableSubjectFields, isRecordKeyedField, type ResolveSubjectOptions, resolveSubjectForField, SubjectResolutionError, } from "./subject-resolver.js";
+export { blindIndexFieldName, collectLookupableFields, computeBlindIndex, computeBlindIndexValues, configureBlindIndexKey, configuredBlindIndexKey, decodeBlindIndexKey, } from "./blind-index.ts";
+export { configuredEventPiiCatalog, configureEventPiiCatalog, type EventPiiCatalog, encryptEventPayloadPii, } from "./event-pii.ts";
+export { InMemoryKmsAdapter } from "./in-memory-kms-adapter.ts";
+export { isSelfPiiField } from "./is-self-pii-field.ts";
+export { type KekSourceEnv, type KekSourceOptions, resolvePlatformKeks } from "./kek-source.ts";
+export { isLocalKeyKmsAdapter, KeyAlreadyExistsError, KeyErasedError, KeyNotFoundError, type KmsAdapter, type KmsContext, type KmsHealth, type LocalKeyKmsAdapter, RECORD_ENTITY_PATTERN, type RemoteCryptoKmsAdapter, type SubjectDek, type SubjectId, type SubjectKey, subjectIdFromKey, subjectIdSchema, subjectIdToKey, subjectKeyForRecord, subjectKeyForTenant, subjectKeyForUser, } from "./kms-adapter.ts";
+export { type ActiveKmsWiring, buildPgKmsOptions, type KmsWiring, type KmsWiringEnv, type KmsWiringOptions, type KmsWiringRelease, type PgKmsRotationEnv, type PlaintextPiiWiring, requireKmsWiring, requireKmsWiringAsync, resolveKmsWiring, resolveKmsWiringAsync, } from "./kms-wiring.ts";
+export { createPgKmsAdapter, PgKmsAdapter, type PgKmsAdapterOptions, type RewrapOptions, type RewrapResult, rewrapSubjectKeys, } from "./pg-kms-adapter.ts";
+export { configuredPiiSubjectKms, configurePiiSubjectKms, decryptPiiFieldValues, decryptPiiValueForSubject, type EncryptPiiOptions, encryptPiiFieldValues, encryptPiiJsonValueForSubject, encryptPiiValueForSubject, isPiiCiphertext, PII_CIPHERTEXT_PREFIX, PII_CIPHERTEXT_PREFIX_JSON, PII_ERASED_SENTINEL, } from "./pii-field-encryption.ts";
+export { createRequestKmsCache, type RequestKmsCache, } from "./request-kms-cache.ts";
+export { collectPiiEncryptedFields, collectPiiSubjectFields, collectSearchableSubjectFields, isRecordKeyedField, type ResolveSubjectOptions, resolveSubjectForField, SubjectResolutionError, } from "./subject-resolver.ts";

package/dist/crypto/is-self-pii-field.d.ts

@@ -1,4 +1,4 @@
-import type { EntityDefinition } from "../engine/types/fields.js";
+import type { EntityDefinition } from "../engine/types/fields.ts";
 type AnyField = EntityDefinition["fields"][string];
 /** True when the field's own row id is the PII subject (`pii: true`). */
 export declare function isSelfPiiField(field: AnyField): boolean;

package/dist/crypto/kms-wiring.d.ts

@@ -1,5 +1,5 @@
-import { type KekSourceOptions } from "./kek-source.js";
-import { type PgKmsAdapter, type PgKmsAdapterOptions } from "./pg-kms-adapter.js";
+import { type KekSourceOptions } from "./kek-source.ts";
+import { type PgKmsAdapter, type PgKmsAdapterOptions } from "./pg-kms-adapter.ts";
 export type KmsWiringEnv = {
     readonly PLATFORM_KEK?: string | undefined;
     readonly SUBJECT_KEYS_DATABASE_URL?: string | undefined;

package/dist/crypto/owner-transition-rekey.d.ts

@@ -1,3 +1,3 @@
-import type { EntityDefinition } from "../engine/types/fields.js";
+import type { EntityDefinition } from "../engine/types/fields.ts";
 export declare function isPlainUserOwnedField(field: EntityDefinition["fields"][string]): boolean;
 export declare function personalFieldsRekeyedOnOwnerTransition(entity: EntityDefinition, previous: Record<string, unknown>, mergedNew: Record<string, unknown>, submittedChanges: Record<string, unknown>): Record<string, unknown>;

package/dist/crypto/pg-kms-adapter.d.ts

@@ -1,4 +1,4 @@
-import { type KmsContext, type KmsHealth, type LocalKeyKmsAdapter, type SubjectDek, type SubjectId } from "./kms-adapter.js";
+import { type KmsContext, type KmsHealth, type LocalKeyKmsAdapter, type SubjectDek, type SubjectId } from "./kms-adapter.ts";
 export interface PgKmsAdapterOptions {
     /** Connection string of the DEDICATED subject-keys cluster — never the app DB (its backup retention must stay shorter, see kms-adapter.md). */
     readonly databaseUrl: string;

package/dist/crypto/pii-field-encryption.d.ts

@@ -1,7 +1,7 @@
-import type { EntityDefinition } from "../engine/types/fields.js";
-import type { TenantId } from "../engine/types/identifiers.js";
-import { type KmsAdapter, type KmsContext, type LocalKeyKmsAdapter, PII_ERASED_SENTINEL, type SubjectId } from "./kms-adapter.js";
-import { isPiiCiphertext, PII_CIPHERTEXT_PREFIX, PII_CIPHERTEXT_PREFIX_JSON } from "./pii-ciphertext-format.js";
+import type { EntityDefinition } from "../engine/types/fields.ts";
+import type { TenantId } from "../engine/types/identifiers.ts";
+import { type KmsAdapter, type KmsContext, type LocalKeyKmsAdapter, PII_ERASED_SENTINEL, type SubjectId } from "./kms-adapter.ts";
+import { isPiiCiphertext, PII_CIPHERTEXT_PREFIX, PII_CIPHERTEXT_PREFIX_JSON } from "./pii-ciphertext-format.ts";
 export { isPiiCiphertext, PII_CIPHERTEXT_PREFIX, PII_CIPHERTEXT_PREFIX_JSON, PII_ERASED_SENTINEL };
 export declare function piiCiphertextSubject(value: string): SubjectId;
 export declare function encryptPiiValueForSubject(kms: LocalKeyKmsAdapter, subject: SubjectId, value: string, kmsCtx: KmsContext, field: string): Promise<string>;

package/dist/crypto/request-kms-cache.d.ts

@@ -1,4 +1,4 @@
-import type { KmsContext, LocalKeyKmsAdapter, SubjectDek, SubjectId } from "./kms-adapter.js";
+import type { KmsContext, LocalKeyKmsAdapter, SubjectDek, SubjectId } from "./kms-adapter.ts";
 export interface RequestKmsCache {
     getKey(subject: SubjectId, ctx: KmsContext): Promise<SubjectDek>;
     /** Drops one subject's cached DEK — called when its key is shredded mid-request. */

package/dist/crypto/subject-resolver.d.ts

@@ -1,7 +1,7 @@
 import { type EventPiiSubject } from "@cosmicdrift/kumiko-types/handlers";
-import type { EntityDefinition } from "../engine/types/fields.js";
-import type { TenantId } from "../engine/types/identifiers.js";
-import { type SubjectId } from "./kms-adapter.js";
+import type { EntityDefinition } from "../engine/types/fields.ts";
+import type { TenantId } from "../engine/types/identifiers.ts";
+import { type SubjectId } from "./kms-adapter.ts";
 export declare class SubjectResolutionError extends Error {
     readonly fieldName: string;
     constructor(fieldName: string, reason: string);

package/dist/db/apply-entity-event.d.ts

@@ -1,7 +1,7 @@
-import type { EntityDefinition } from "../engine/types/index.js";
-import type { StoredEvent } from "../event-store/index.js";
-import type { DbRow, DbRunner } from "./connection.js";
-import type { TableColumns } from "./dialect.js";
+import type { EntityDefinition } from "../engine/types/index.ts";
+import type { StoredEvent } from "../event-store/index.ts";
+import type { DbRow, DbRunner } from "./connection.ts";
+import type { TableColumns } from "./dialect.ts";
 type Table = TableColumns<any>;
 export type AutoVerb = "created" | "updated" | "deleted" | "restored" | "forgotten";
 export type ApplyResult = {

package/dist/db/assert-exists-in.d.ts

@@ -1,7 +1,7 @@
-import type { TenantId } from "../engine/types/identifiers.js";
-import { NotFoundError } from "../errors/index.js";
-import type { DbConnection } from "./connection.js";
-import type { TenantDb } from "./tenant-db.js";
+import type { TenantId } from "../engine/types/identifiers.ts";
+import { NotFoundError } from "../errors/index.ts";
+import type { DbConnection } from "./connection.ts";
+import type { TenantDb } from "./tenant-db.ts";
 /**
  * Generic constraint helper: asserts a value exists in a table.
  * Returns a ready-to-return NotFoundError when the row is missing, or null

package/dist/db/blind-index-cleanup.d.ts

@@ -1,5 +1,5 @@
-import type { FeatureDefinition } from "../engine/types/index.js";
-import type { DbRunner } from "./connection.js";
+import type { FeatureDefinition } from "../engine/types/index.ts";
+import type { DbRunner } from "./connection.ts";
 export declare function nullBlindIndexesForSubject(db: DbRunner, features: ReadonlyMap<string, FeatureDefinition>, subjectKey: string): Promise<void>;
 export declare function subjectRowExistsInTenant(db: DbRunner, features: ReadonlyMap<string, FeatureDefinition>, subjectId: string, tenantId: string): Promise<boolean>;
 export declare function recordRowExistsInTenant(db: DbRunner, features: ReadonlyMap<string, FeatureDefinition>, entityName: string, recordId: string, tenantId: string): Promise<boolean>;

package/dist/db/collect-table-metas.d.ts

@@ -1,3 +1,3 @@
-import type { FeatureDefinition } from "../engine/types/index.js";
-import { type EntityTableMeta } from "./entity-table-meta.js";
+import type { FeatureDefinition } from "../engine/types/index.ts";
+import { type EntityTableMeta } from "./entity-table-meta.ts";
 export declare function collectTableMetas(features: readonly FeatureDefinition[]): readonly EntityTableMeta[];

package/dist/db/compound-types.d.ts

@@ -1,4 +1,4 @@
-import type { EntityDefinition } from "../engine/types/index.js";
+import type { EntityDefinition } from "../engine/types/index.ts";
 /**
  * API-Form (combined) → DB-Form (flat). Wird vor jedem Insert/Update aufgerufen.
  */

package/dist/db/config-seed.d.ts

@@ -1,8 +1,8 @@
-import type { EntityDefinition } from "../engine/index.js";
-import type { ConfigSeedDef, Registry } from "../engine/types/index.js";
-import type { EnvelopeCipher } from "../secrets/envelope-cipher.js";
-import type { DbConnection } from "./connection.js";
-import type { EntityTable } from "./table-builder.js";
+import type { EntityDefinition } from "../engine/index.ts";
+import type { ConfigSeedDef, Registry } from "../engine/types/index.ts";
+import type { EnvelopeCipher } from "../secrets/envelope-cipher.ts";
+import type { DbConnection } from "./connection.ts";
+import type { EntityTable } from "./table-builder.ts";
 /**
  * Seed config values at boot time via the event-store executor.
  *

package/dist/db/connection.d.ts

@@ -19,12 +19,7 @@ export type DbConnectionHandle = {
     close: () => Promise<void>;
 };
 export declare const DEFAULT_DB_CLOSE_TIMEOUT_SECONDS = 5;
-export declare function createDbConnection(options: CreateDbConnectionOptions): DbConnectionHandle;
-/**
- * @deprecated Positional form, use `createDbConnection({ url, ... })`. Run
- * `bun kumiko-upgrade --apply` to rewrite call sites. Removed in the first release after 2026-10-29.
- */
-export declare function createDbConnection(url: string, options?: DbConnectionOptions): DbConnectionHandle;
+export declare function createDbConnection({ url, ...options }: CreateDbConnectionOptions): DbConnectionHandle;
 export declare function dbConnectionOptionsFromEnv(env?: Readonly<Record<string, string | undefined>>): DbConnectionOptions;
 export declare const DEFAULT_OUTSIDE_TRANSACTION_POOL_MAX = 3;
 export declare function outsideTransactionPoolOptionsFromEnv(env?: Readonly<Record<string, string | undefined>>): DbConnectionOptions;