@cosmicdrift/kumiko-framework 0.368.0 → 0.370.0

package/dist/engine/event-def.js

@@ -0,0 +1,123 @@
+import { normalizeEventPiiSubject } from "@cosmicdrift/kumiko-types/handlers";
+import { ZodObject } from "zod";
+import { qn, toKebab } from "./qualified-name.js";
+// A payload field that still holds null/undefined after parsing — the case
+// where an event-PII owner field yields no subject at append time (fw#2776).
+// A `.default(...)` accepts undefined but parses to a value, so it is not
+// absentable.
+function isAbsentable(field) {
+    return [null, undefined].some((candidate) => {
+        const parsed = field.safeParse(candidate);
+        return parsed.success && (parsed.data === null || parsed.data === undefined);
+    });
+}
+const NON_STRING_SCHEMA_TYPES = new Set([
+    "number",
+    "int",
+    "boolean",
+    "bigint",
+    "date",
+    "object",
+    "array",
+]);
+// An owner id is resolved through "non-empty string or absent" at append time,
+// so a schema that can never yield a string would make every append throw in
+// prod. Wrappers (optional/nullable/default/...) are looked through.
+function neverYieldsString(field) {
+    let current = field;
+    for (;;) {
+        const def = current._zod.def;
+        if (def.innerType === undefined)
+            return NON_STRING_SCHEMA_TYPES.has(def.type);
+        current = def.innerType;
+    }
+}
+function assertOwnerFieldYieldsPresentString(args) {
+    const { featureName, eventName, field, ownerField, owner } = args;
+    if (neverYieldsString(owner)) {
+        throw new Error(`[Feature ${featureName}] defineEvent("${eventName}"): piiFields."${field}" is owned by "${ownerField}", whose payload schema is not a string — the subject id must be a non-empty string, so every append would fail. ` +
+            `Use a string owner field, or declare whenAbsent ("tenant" | "self" | "plaintext").`);
+    }
+    if (isAbsentable(owner)) {
+        throw new Error(`[Feature ${featureName}] defineEvent("${eventName}"): piiFields."${field}" is owned by "${ownerField}", which the payload schema allows to be null/undefined. ` +
+            `Declare what happens then: { personal: { of: "${ownerField}", whenAbsent: "tenant" } } encrypts under the envelope tenant key, ` +
+            `whenAbsent: "self" under the event's own record key, whenAbsent: "plaintext" acknowledges that the value ships unencrypted and cannot be crypto-shredded (fw#2776).`);
+    }
+}
+// piiFields misconfiguration is a boot-time error, not a silent
+// plaintext leak: both the pii field and its owner field must exist
+// on the payload schema (checkable when the schema is a ZodObject).
+function validateEventPiiFields(featureName, eventName, schema, piiFields) {
+    const shape = schema instanceof ZodObject ? schema.shape : undefined;
+    for (const [field, spec] of Object.entries(piiFields)) {
+        const normalized = normalizeEventPiiSubject(spec);
+        // Only the user form names an owner field — tenant/self subjects come
+        // from the write-time envelope (tenantId / aggregateType+aggregateId),
+        // so there is no owner-field existence or self-reference check for them.
+        if (normalized.kind !== "user") {
+            if (shape && !(field in shape)) {
+                throw new Error(`[Feature ${featureName}] defineEvent("${eventName}"): piiFields references "${field}" which is not a field of the payload schema.`);
+            }
+            continue;
+        }
+        if (field === normalized.ownerField) {
+            throw new Error(`[Feature ${featureName}] defineEvent("${eventName}"): piiFields."${field}" cannot use itself as the owner field — the subject id is a plaintext pseudonymous fk, the pii field is the value it owns.`);
+        }
+        if (normalized.ownerField === "id") {
+            throw new Error(`[Feature ${featureName}] defineEvent("${eventName}"): piiFields."${field}" uses owner field "id" — on entities \`of: "id"\` means record-owned, but on events it would encrypt under a phantom user key that a forget never reaches. Use \`personal: "self"\` for a record-owned event field.`);
+        }
+        for (const required of [field, normalized.ownerField]) {
+            if (shape && !(required in shape)) {
+                throw new Error(`[Feature ${featureName}] defineEvent("${eventName}"): piiFields references "${required}" which is not a field of the payload schema.`);
+            }
+        }
+        const owner = shape?.[normalized.ownerField];
+        if (normalized.whenAbsent === undefined && owner !== undefined) {
+            assertOwnerFieldYieldsPresentString({
+                featureName,
+                eventName,
+                field,
+                ownerField: normalized.ownerField,
+                owner,
+            });
+        }
+    }
+}
+/**
+ * The EventDef that `r.defineEvent` returns, built outside a feature's setup
+ * callback, so a module can hand the definition to `emitEvent` without the
+ * feature instance. Registration still goes through `r.defineEvent`.
+ */
+export function createEventDef(options) {
+    const { feature, name: eventName, schema } = options;
+    // Fail-closed PII stance gate (fw#2558) — runs before anything else so
+    // an untyped JS consumer (no compiler to stop it) still can't register
+    // an event without declaring whether its payload carries personal data.
+    const missingStanceError = () => new Error(`[Feature ${feature}] defineEvent("${eventName}") must declare an explicit PII stance. Pass { piiFields: { <payloadField>: { personal: { of: "<userIdField>" } } } } for payload fields owned by a user (or { personal: "tenant" } / { personal: "self" } for tenant- or record-scoped subjects), or { piiFields: "none" } when the payload holds none.`);
+    if (options.piiFields === undefined)
+        throw missingStanceError();
+    const piiFields = options.piiFields;
+    // @cast-boundary runtime-guard — an untyped JS caller can hand
+    // anything through `piiFields` (including null), so re-check the
+    // shape before trusting it as EventPiiStance: `typeof null === "object"`
+    // would otherwise pass through to Object.keys(null) below and throw a
+    // raw TypeError instead of this guidance message.
+    if (piiFields !== "none" && (typeof piiFields !== "object" || piiFields === null)) {
+        throw missingStanceError();
+    }
+    if (piiFields !== "none" && Object.keys(piiFields).length === 0) {
+        throw new Error(`[Feature ${feature}] defineEvent("${eventName}"): piiFields: {} is not a stance — use piiFields: "none" to declare the payload holds no personal data.`);
+    }
+    if (piiFields !== "none")
+        validateEventPiiFields(feature, eventName, schema, piiFields);
+    const version = options.version ?? 1;
+    if (!Number.isInteger(version) || version < 1) {
+        throw new Error(`[Feature ${feature}] defineEvent("${eventName}"): version must be a positive integer, got ${String(version)}`);
+    }
+    // @cast-boundary engine-bridge — runtime-string mirrors the
+    // template-literal-type via QualifiedEventName + toKebab. Both
+    // sides are tested (CamelToKebab type-tests + scan-events kebab
+    // tests), so the cast is a contract, not a typing-loss.
+    const qualified = qn(toKebab(feature), "event", toKebab(eventName));
+    return { name: qualified, schema, version, piiFields };
+}

package/dist/engine/event-helpers.d.ts

@@ -1,4 +1,4 @@
-import type { AppendEventArgs, EventDef, HandlerContext } from "./types/handlers.js";
+import type { AppendEventArgs, EventDef, HandlerContext } from "./types/handlers.ts";
 export type EmitCtx = Pick<HandlerContext, "unsafeAppendEvent">;
 export declare function emitEvent<TPayload>(ctx: EmitCtx, eventDef: EventDef<TPayload>, args: {
     readonly aggregateId: string;

package/dist/engine/extension-names.d.ts

@@ -1,12 +1,12 @@
 import type { DerivativeRendererPlugin } from "@cosmicdrift/kumiko-types/derivatives-types";
-import type { OverlayResolverPlugin } from "../derivatives/derivatives-context.js";
-import type { FileProviderPlugin } from "../files/provider-resolver.js";
-import type { PrincipalStatusPlugin, TenantLifecycleStatusPlugin } from "./active-membership.js";
-import type { TenantDataExtensionHooks } from "./extensions/tenant-data.js";
-import type { TenantResourceExtensionHooks } from "./extensions/tenant-resource.js";
-import type { UserDataExtensionOptions } from "./extensions/user-data.js";
-import type { AssignableFromRole } from "./role-assignment.js";
-import { TENANT_TIER_RESOLVER_EXT, type TierResolverPlugin } from "./tier-resolver-extension.js";
+import type { OverlayResolverPlugin } from "../derivatives/derivatives-context.ts";
+import type { FileProviderPlugin } from "../files/provider-resolver.ts";
+import type { PrincipalStatusPlugin, TenantLifecycleStatusPlugin } from "./active-membership.ts";
+import type { TenantDataExtensionHooks } from "./extensions/tenant-data.ts";
+import type { TenantResourceExtensionHooks } from "./extensions/tenant-resource.ts";
+import type { UserDataExtensionOptions } from "./extensions/user-data.ts";
+import type { AssignableFromRole } from "./role-assignment.ts";
+import { TENANT_TIER_RESOLVER_EXT, type TierResolverPlugin } from "./tier-resolver-extension.ts";
 /**
  * `userData` — User-Daten-Rights-Hooks (DSGVO Art. 15 + 17 + 20).
  *

package/dist/engine/extension-selector-plugins.d.ts

@@ -1,5 +1,8 @@
-import type { Registry } from "./types/feature.js";
+import type { Registry } from "./types/feature.ts";
+import type { RegistrarExtensionRegistration } from "./types/index.ts";
 export declare const SELECTED_EXTENSIONS_QUERY = "config:query:config-value:selected-extensions";
 export declare const EXTENSION_SELECTOR_HINT_KEY = "config.settings.extensionSelectorHint";
 export declare function selectablePluginIds(registry: Pick<Registry, "getExtensionUsages">, extensionName: string): string[];
+export declare function isSelectableInSettings(usage: RegistrarExtensionRegistration): boolean;
+export declare function settingsSelectablePluginIds(registry: Pick<Registry, "getExtensionUsages">, extensionName: string): string[];
 export declare function extensionSelectorTargets(registry: Pick<Registry, "getAllExtensionSelectors">): ReadonlyMap<string, string>;

package/dist/engine/extension-selector-plugins.js

@@ -5,6 +5,20 @@ export const EXTENSION_SELECTOR_HINT_KEY = "config.settings.extensionSelectorHin
 export function selectablePluginIds(registry, extensionName) {
     return [...new Set(registry.getExtensionUsages(extensionName).map((u) => u.entityName))].sort();
 }
+// A plugin registered with `selectableInSettings: false` (a test inbox) stays a valid
+// stored value for seeds and dev setups, but the generated settings never offer it.
+const SELECTABLE_IN_SETTINGS_OPTION = "selectableInSettings";
+export function isSelectableInSettings(usage) {
+    return usage.options?.[SELECTABLE_IN_SETTINGS_OPTION] !== false;
+}
+export function settingsSelectablePluginIds(registry, extensionName) {
+    return [
+        ...new Set(registry
+            .getExtensionUsages(extensionName)
+            .filter(isSelectableInSettings)
+            .map((u) => u.entityName)),
+    ].sort();
+}
 export function extensionSelectorTargets(registry) {
     const extensionByKey = new Map();
     for (const [extensionName, selectorKey] of registry.getAllExtensionSelectors()) {

package/dist/engine/extensions/escape-hatch-usage.d.ts

@@ -1,2 +1,2 @@
-import type { RegistrarExtensionRegistration } from "../types/config.js";
+import type { RegistrarExtensionRegistration } from "../types/config.ts";
 export declare function extensionUsageEscapeHatchReason(usage: Pick<RegistrarExtensionRegistration, "options">): string | undefined;

package/dist/engine/extensions/storage-provider.d.ts

@@ -1,4 +1,4 @@
-import type { TenantResourceDestroyHook, TenantResourceExtensionHooks, TenantResourceHookCtx } from "./tenant-resource.js";
+import type { TenantResourceDestroyHook, TenantResourceExtensionHooks, TenantResourceHookCtx } from "./tenant-resource.ts";
 export type StorageProviderHookCtx = TenantResourceHookCtx;
 export type StorageProviderDestroyTenantHook = TenantResourceDestroyHook;
 export type StorageProviderExtensionHooks = TenantResourceExtensionHooks;

package/dist/engine/extensions/tenant-data.d.ts

@@ -1,7 +1,7 @@
 import type { FileProviderResolver } from "@cosmicdrift/kumiko-types/file-provider-resolver-types";
-import type { TenantDb } from "../../db/tenant-db.js";
-import type { Registry, TenantId } from "../types/index.js";
-import type { TenantDestroyHookResult } from "./tenant-resource.js";
+import type { TenantDb } from "../../db/tenant-db.ts";
+import type { Registry, TenantId } from "../types/index.ts";
+import type { TenantDestroyHookResult } from "./tenant-resource.ts";
 export interface TenantDataHookCtx {
     readonly db: TenantDb;
     readonly registry: Registry;

package/dist/engine/extensions/tenant-resource.d.ts

@@ -1,6 +1,6 @@
 import type { FileProviderResolver } from "@cosmicdrift/kumiko-types/file-provider-resolver-types";
-import type { DbRunner } from "../../db/connection.js";
-import type { TenantId } from "../types/index.js";
+import type { DbRunner } from "../../db/connection.ts";
+import type { TenantId } from "../types/index.ts";
 export type TenantDestroyHookResult = {
     readonly done: true;
     readonly processed?: number;

package/dist/engine/extensions/user-data.d.ts

@@ -1,5 +1,5 @@
-import type { TenantDb } from "../../db/tenant-db.js";
-import type { Registry, TenantId } from "../types/index.js";
+import type { TenantDb } from "../../db/tenant-db.ts";
+import type { Registry, TenantId } from "../types/index.ts";
 type UserId = string;
 /**
  * Strategie für den Forget-Pfad pro Entity:

package/dist/engine/factories.d.ts

@@ -1,5 +1,5 @@
 import type { EntityTenancy } from "@cosmicdrift/kumiko-types/tenancy-brand";
-import type { BigIntFieldDef, BooleanFieldDef, DateFieldDef, DecimalFieldDef, DerivedFieldDef, EmbeddedFieldDef, EntityDefinition, EntityIndexDef, FieldsMap, FileFieldDef, FilesFieldDef, ImageFieldDef, ImagesFieldDef, JsonbFieldDef, LocatedTimestampFieldDef, LongTextFieldDef, MoneyFieldDef, MultiSelectFieldDef, NumberFieldDef, PersonalAnnotations, PersonalAnnotationsLongText, PersonalAnnotationsNoFind, ResolvedPiiFlags, RetentionDef, SelectFieldDef, TextFieldDef, TimestampFieldDef, TzFieldDef } from "./types/index.js";
+import type { BigIntFieldDef, BooleanFieldDef, DateFieldDef, DecimalFieldDef, DerivedFieldDef, EmbeddedFieldDef, EntityDefinition, EntityIndexDef, FieldsMap, FileFieldDef, FilesFieldDef, ImageFieldDef, ImagesFieldDef, JsonbFieldDef, LocatedTimestampFieldDef, LongTextFieldDef, MoneyFieldDef, MultiSelectFieldDef, NumberFieldDef, PersonalAnnotations, PersonalAnnotationsLongText, PersonalAnnotationsNoFind, ResolvedPiiFlags, RetentionDef, SelectFieldDef, TextFieldDef, TimestampFieldDef, TzFieldDef } from "./types/index.ts";
 export declare function createTextField<R extends true | false = false>(overrides: Partial<Omit<TextFieldDef, "type" | "required" | keyof ResolvedPiiFlags>> & PersonalAnnotations & {
     required?: R;
 }): TextFieldDef & {

package/dist/engine/feature-ast/extractors/ai-steps.d.ts

@@ -1,6 +1,6 @@
 import type { CallExpression, SourceFile } from "ts-morph";
-import type { AiClassifyPattern, AiExtractPattern, AiGeneratePattern } from "../patterns.js";
-import { type ExtractOutput } from "./shared.js";
+import type { AiClassifyPattern, AiExtractPattern, AiGeneratePattern } from "../patterns.ts";
+import { type ExtractOutput } from "./shared.ts";
 export declare function extractAiGenerate(call: CallExpression, sourceFile: SourceFile): ExtractOutput<AiGeneratePattern>;
 export declare function extractAiExtract(call: CallExpression, sourceFile: SourceFile): ExtractOutput<AiExtractPattern>;
 export declare function extractAiClassify(call: CallExpression, sourceFile: SourceFile): ExtractOutput<AiClassifyPattern>;

package/dist/engine/feature-ast/extractors/events.d.ts

@@ -1,5 +1,5 @@
 import type { CallExpression, SourceFile } from "ts-morph";
-import type { DefineEventPattern, NotificationPattern } from "../patterns.js";
-import { type ExtractOutput } from "./shared.js";
+import type { DefineEventPattern, NotificationPattern } from "../patterns.ts";
+import { type ExtractOutput } from "./shared.ts";
 export declare function extractDefineEvent(call: CallExpression, sourceFile: SourceFile): ExtractOutput<DefineEventPattern>;
 export declare function extractNotification(call: CallExpression, sourceFile: SourceFile): ExtractOutput<NotificationPattern>;

package/dist/engine/feature-ast/extractors/handlers.d.ts

@@ -1,8 +1,8 @@
 import type { CallExpression, SourceFile } from "ts-morph";
-import type { AccessRule, AgentHandlerHints, AgentRisk, EscapeHatchDeclaration, PayloadRateLimitOption, RateLimitDeclaration } from "../../types/handlers.js";
-import type { QueryHandlerPattern, StreamHandlerPattern, WriteHandlerPattern } from "../patterns.js";
-import type { SourceLocation } from "../source-location.js";
-import { type ExtractOutput, type RawRefSentinel } from "./shared.js";
+import type { AccessRule, AgentHandlerHints, AgentRisk, EscapeHatchDeclaration, PayloadRateLimitOption, RateLimitDeclaration } from "../../types/handlers.ts";
+import type { QueryHandlerPattern, StreamHandlerPattern, WriteHandlerPattern } from "../patterns.ts";
+import type { SourceLocation } from "../source-location.ts";
+import { type ExtractOutput, type RawRefSentinel } from "./shared.ts";
 export type ParsedHandlerCall = {
     readonly source: SourceLocation;
     readonly handlerName?: string;

package/dist/engine/feature-ast/extractors/hooks.d.ts

@@ -1,9 +1,9 @@
 import type { CallExpression, Node, SourceFile } from "ts-morph";
-import type { LifecycleHookType } from "../../constants.js";
-import type { AccessRule, EscapeHatchDeclaration, PayloadRateLimitOption, RateLimitDeclaration } from "../../types/handlers.js";
-import type { HookPhase } from "../../types/hooks.js";
-import type { AuthClaimsPattern, HookPattern } from "../patterns.js";
-import { type ExtractOutput, type RawRefSentinel } from "./shared.js";
+import type { LifecycleHookType } from "../../constants.ts";
+import type { AccessRule, EscapeHatchDeclaration, PayloadRateLimitOption, RateLimitDeclaration } from "../../types/handlers.ts";
+import type { HookPhase } from "../../types/hooks.ts";
+import type { AuthClaimsPattern, HookPattern } from "../patterns.ts";
+import { type ExtractOutput, type RawRefSentinel } from "./shared.ts";
 export type HeaderReadResult<T> = {
     readonly kind: "value";
     readonly value: T;

package/dist/engine/feature-ast/extractors/index.d.ts

@@ -1,14 +1,14 @@
-export { extractAiClassify, extractAiExtract, extractAiGenerate, } from "./ai-steps.js";
-export { extractDefineEvent, extractNotification, } from "./events.js";
-export { extractQueryHandler, extractStreamHandler, extractWriteHandler, type ParsedHandlerCall, parseHandlerCall, } from "./handlers.js";
-export { extractAuthClaims, extractHook, isHookType, readOptionalAccessRule, readOptionalAdditionalRateLimits, readOptionalPhase, readOptionalRateLimit, } from "./hooks.js";
-export { extractHttpRoute, extractJob, isHttpRouteMethod, } from "./jobs-routes.js";
-export { collectScreenOpaqueProps, extractMultiStreamProjection, extractProjection, extractScreen, readApplyBodies, readScreenStatic, } from "./projections-screens.js";
-export { findImportBindingForLocalName, resolveModuleFile, } from "./resolve-import.js";
-export { extractDescribe, extractOptionalRequires, extractReadsConfig, extractRequires, extractSystemScope, extractToggleable, extractUiHints, } from "./round1.js";
-export { extractEntity, extractNav, extractRelation, extractWorkspace, } from "./round2.js";
-export { extractClaimKey, extractConfig, extractMetric, extractReferenceData, extractSecret, extractSecretNamespace, extractTranslations, extractUseExtension, isClaimKeyType, type NamedOptionsResult, readNamedOptions, } from "./round3.js";
-export { extractBootCheck, extractEnvSchema, extractExposesApi, extractExtendsRegistrar, extractStoreTable, extractUsesApi, } from "./round5.js";
-export { extractTreeActions } from "./round6.js";
-export type { ExtractOutput } from "./shared.js";
-export { fail, findFunctionLiteral, isPlainObject, ok, readBooleanProperty, readDataLiteralNode, readNameOrRef, readNameOrRefOrList, readObjectPropertyInitializer, readPropertyKey, readStringLiteralArgs, readVarargsOrArrayProp, resolveSameFileObjectLiteral, } from "./shared.js";
+export { extractAiClassify, extractAiExtract, extractAiGenerate, } from "./ai-steps.ts";
+export { extractDefineEvent, extractNotification, } from "./events.ts";
+export { extractQueryHandler, extractStreamHandler, extractWriteHandler, type ParsedHandlerCall, parseHandlerCall, } from "./handlers.ts";
+export { extractAuthClaims, extractHook, isHookType, readOptionalAccessRule, readOptionalAdditionalRateLimits, readOptionalPhase, readOptionalRateLimit, } from "./hooks.ts";
+export { extractHttpRoute, extractJob, isHttpRouteMethod, } from "./jobs-routes.ts";
+export { collectScreenOpaqueProps, extractMultiStreamProjection, extractProjection, extractScreen, readApplyBodies, readScreenStatic, } from "./projections-screens.ts";
+export { findImportBindingForLocalName, resolveModuleFile, } from "./resolve-import.ts";
+export { extractDescribe, extractOptionalRequires, extractReadsConfig, extractRequires, extractSystemScope, extractToggleable, extractUiHints, } from "./round1.ts";
+export { extractEntity, extractNav, extractRelation, extractWorkspace, } from "./round2.ts";
+export { extractClaimKey, extractConfig, extractMetric, extractReferenceData, extractSecret, extractSecretNamespace, extractTranslations, extractUseExtension, isClaimKeyType, type NamedOptionsResult, readNamedOptions, } from "./round3.ts";
+export { extractBootCheck, extractEnvSchema, extractExposesApi, extractExtendsRegistrar, extractStoreTable, extractUsesApi, } from "./round5.ts";
+export { extractTreeActions } from "./round6.ts";
+export type { ExtractOutput } from "./shared.ts";
+export { fail, findFunctionLiteral, isPlainObject, ok, readBooleanProperty, readDataLiteralNode, readNameOrRef, readNameOrRefOrList, readObjectPropertyInitializer, readPropertyKey, readStringLiteralArgs, readVarargsOrArrayProp, resolveSameFileObjectLiteral, } from "./shared.ts";

package/dist/engine/feature-ast/extractors/jobs-routes.d.ts

@@ -1,7 +1,7 @@
 import type { CallExpression, SourceFile } from "ts-morph";
-import type { HttpRouteMethod } from "../../types/http-route.js";
-import type { HttpRoutePattern, JobPattern } from "../patterns.js";
-import { type ExtractOutput } from "./shared.js";
+import type { HttpRouteMethod } from "../../types/http-route.ts";
+import type { HttpRoutePattern, JobPattern } from "../patterns.ts";
+import { type ExtractOutput } from "./shared.ts";
 export declare function isHttpRouteMethod(value: string): value is HttpRouteMethod;
 export declare function extractJob(call: CallExpression, sourceFile: SourceFile): ExtractOutput<JobPattern>;
 export declare function extractHttpRoute(call: CallExpression, sourceFile: SourceFile): ExtractOutput<HttpRoutePattern>;

package/dist/engine/feature-ast/extractors/projections-screens.d.ts

@@ -1,7 +1,7 @@
 import type { CallExpression, Node, SourceFile } from "ts-morph";
-import type { MultiStreamProjectionPattern, ProjectionPattern, ScreenPattern } from "../patterns.js";
-import type { SourceLocation } from "../source-location.js";
-import { type ExtractOutput } from "./shared.js";
+import type { MultiStreamProjectionPattern, ProjectionPattern, ScreenPattern } from "../patterns.ts";
+import type { SourceLocation } from "../source-location.ts";
+import { type ExtractOutput } from "./shared.ts";
 export declare function readApplyBodies(defObj: ReturnType<Node["asKind"]>, sourceFile: SourceFile): Record<string, SourceLocation> | undefined;
 export declare function extractProjection(call: CallExpression, sourceFile: SourceFile): ExtractOutput<ProjectionPattern>;
 export declare function extractMultiStreamProjection(call: CallExpression, sourceFile: SourceFile): ExtractOutput<MultiStreamProjectionPattern>;

package/dist/engine/feature-ast/extractors/round1.d.ts

@@ -1,6 +1,6 @@
 import type { CallExpression, SourceFile } from "ts-morph";
-import type { DescribePattern, OptionalRequiresPattern, ReadsConfigPattern, RequiresPattern, SystemScopePattern, ToggleablePattern, UiHintsPattern } from "../patterns.js";
-import { type ExtractOutput } from "./shared.js";
+import type { DescribePattern, OptionalRequiresPattern, ReadsConfigPattern, RequiresPattern, SystemScopePattern, ToggleablePattern, UiHintsPattern } from "../patterns.ts";
+import { type ExtractOutput } from "./shared.ts";
 export declare function extractRequires(call: CallExpression, sourceFile: SourceFile): ExtractOutput<RequiresPattern>;
 export declare function extractOptionalRequires(call: CallExpression, sourceFile: SourceFile): ExtractOutput<OptionalRequiresPattern>;
 export declare function extractReadsConfig(call: CallExpression, sourceFile: SourceFile): ExtractOutput<ReadsConfigPattern>;

package/dist/engine/feature-ast/extractors/round2.d.ts

@@ -1,6 +1,6 @@
 import type { CallExpression, SourceFile } from "ts-morph";
-import type { EntityPattern, NavPattern, RelationPattern, WorkspacePattern } from "../patterns.js";
-import { type ExtractOutput } from "./shared.js";
+import type { EntityPattern, NavPattern, RelationPattern, WorkspacePattern } from "../patterns.ts";
+import { type ExtractOutput } from "./shared.ts";
 export declare function extractEntity(call: CallExpression, sourceFile: SourceFile): ExtractOutput<EntityPattern>;
 export declare function extractRelation(call: CallExpression, sourceFile: SourceFile): ExtractOutput<RelationPattern>;
 export declare function extractNav(call: CallExpression, sourceFile: SourceFile): ExtractOutput<NavPattern>;

package/dist/engine/feature-ast/extractors/round3.d.ts

@@ -1,8 +1,8 @@
 import type { CallExpression, SourceFile } from "ts-morph";
-import type { ClaimKeyType } from "../../types/handlers.js";
-import type { ParseError } from "../parse.js";
-import type { ClaimKeyPattern, ConfigPattern, MetricPattern, ReferenceDataPattern, SecretNamespacePattern, SecretPattern, TranslationsPattern, UseExtensionPattern } from "../patterns.js";
-import { type ExtractOutput, type ReadDataLiteralOptions } from "./shared.js";
+import type { ClaimKeyType } from "../../types/handlers.ts";
+import type { ParseError } from "../parse.ts";
+import type { ClaimKeyPattern, ConfigPattern, MetricPattern, ReferenceDataPattern, SecretNamespacePattern, SecretPattern, TranslationsPattern, UseExtensionPattern } from "../patterns.ts";
+import { type ExtractOutput, type ReadDataLiteralOptions } from "./shared.ts";
 export type NamedOptionsResult = {
     readonly kind: "ok";
     readonly name: string;

package/dist/engine/feature-ast/extractors/round5.d.ts

@@ -1,6 +1,6 @@
 import type { CallExpression, SourceFile } from "ts-morph";
-import type { EnvSchemaPattern, ExposesApiPattern, ExtendsRegistrarPattern, UsesApiPattern } from "../patterns.js";
-import { type ExtractOutput } from "./shared.js";
+import type { EnvSchemaPattern, ExposesApiPattern, ExtendsRegistrarPattern, UsesApiPattern } from "../patterns.ts";
+import { type ExtractOutput } from "./shared.ts";
 export declare function extractEnvSchema(call: CallExpression, sourceFile: SourceFile): ExtractOutput<EnvSchemaPattern>;
 export declare function extractExtendsRegistrar(call: CallExpression, sourceFile: SourceFile): ExtractOutput<ExtendsRegistrarPattern>;
 export declare function extractUsesApi(call: CallExpression, sourceFile: SourceFile): ExtractOutput<UsesApiPattern>;

package/dist/engine/feature-ast/extractors/round6.d.ts

@@ -1,4 +1,4 @@
 import type { CallExpression, SourceFile } from "ts-morph";
-import type { TreeActionsPattern } from "../patterns.js";
-import { type ExtractOutput } from "./shared.js";
+import type { TreeActionsPattern } from "../patterns.ts";
+import { type ExtractOutput } from "./shared.ts";
 export declare function extractTreeActions(call: CallExpression, sourceFile: SourceFile): ExtractOutput<TreeActionsPattern>;

package/dist/engine/feature-ast/extractors/shared.d.ts

@@ -1,6 +1,6 @@
 import type { CallExpression, ObjectLiteralExpression } from "ts-morph";
 import { Node } from "ts-morph";
-import type { ParseError } from "../parse.js";
+import type { ParseError } from "../parse.ts";
 export type ExtractOutput<TPattern> = {
     readonly kind: "pattern";
     readonly pattern: TPattern;
@@ -51,7 +51,7 @@ export declare function readStringOrRaw(node: Node): string | RawRefSentinel | u
  * — see #1009).
  */
 export declare function readStringOrRawArgs(call: CallExpression): readonly (string | RawRefSentinel)[] | undefined;
-export { isPlainObject } from "../../../utils/is-plain-object.js";
+export { isPlainObject } from "../../../utils/is-plain-object.ts";
 export declare function readPropertyKey(propAssign: import("ts-morph").PropertyAssignment): string;
 /**
  * Resolved name plus, when the source node was an identifier rather than

package/dist/engine/feature-ast/index.d.ts

@@ -1,16 +1,16 @@
-export type { FormFieldLabel, FormFieldSpec, FormInputType, PatternCategory, PatternFormSchema, } from "../pattern-library/index.js";
-export { getPatternSchema, groupByCategory, PATTERN_LIBRARY } from "../pattern-library/index.js";
-export type { ParseError, ParseResult } from "./parse.js";
-export { parseFeatureFile, parseSourceFile } from "./parse.js";
-export type { HandlerHeaderUpdate, PatternChange, PatternId, QueryHandlerHeaderKey, StreamHandlerHeaderKey, WriteHandlerHeaderKey, } from "./patch.js";
-export { addPattern, applyChanges, removePattern, replacePattern, SINGLETON_KINDS, updatePattern, } from "./patch.js";
-export type { AddAuthClaimsArgs, AddClaimKeyArgs, AddConfigArgs, AddDefineEventArgs, AddEntityArgs, AddHookArgs, AddHttpRouteArgs, AddJobArgs, AddMetricArgs, AddMultiStreamProjectionArgs, AddNavArgs, AddNotificationArgs, AddOptionalRequiresArgs, AddProjectionArgs, AddQueryHandlerArgs, AddReadsConfigArgs, AddReferenceDataArgs, AddRelationArgs, AddRequiresArgs, AddScreenArgs, AddSecretArgs, AddStreamHandlerArgs, AddToggleableArgs, AddTranslationsArgs, AddUseExtensionArgs, AddWorkspaceArgs, AddWriteHandlerArgs, FeaturePatcher, } from "./patcher.js";
-export { createFeaturePatcher } from "./patcher.js";
-export type { PatternChangeIssue, PatternChangesParseResult } from "./pattern-change-schema.js";
-export { parsePatternChanges } from "./pattern-change-schema.js";
-export type { AuthClaimsPattern, ClaimKeyPattern, ConfigPattern, DefineEventPattern, Editability, EntityPattern, ExtendsRegistrarPattern, FeaturePattern, FeaturePatternKind, HookPattern, HttpRoutePattern, JobPattern, MetricPattern, MultiStreamProjectionPattern, NavPattern, NotificationPattern, OptionalRequiresPattern, ProjectionPattern, QueryHandlerPattern, ReadsConfigPattern, ReferenceDataPattern, RelationPattern, RequiresPattern, ScreenPattern, SecretNamespacePattern, SecretPattern, StreamHandlerPattern, SystemScopePattern, ToggleablePattern, TranslationsPattern, UnknownPattern, UseExtensionPattern, WorkspacePattern, WriteHandlerPattern, } from "./patterns.js";
-export { getEditability } from "./patterns.js";
-export type { RenderFeatureFileInput } from "./render.js";
-export { FEATURE_FILE_VERSION, renderFeatureFile, renderPattern, renderValue, VERSION_HEADER, } from "./render.js";
-export type { SourceLocation, SourcePosition } from "./source-location.js";
-export { sourceLocationFromNode } from "./source-location.js";
+export type { FormFieldLabel, FormFieldSpec, FormInputType, PatternCategory, PatternFormSchema, } from "../pattern-library/index.ts";
+export { getPatternSchema, groupByCategory, PATTERN_LIBRARY } from "../pattern-library/index.ts";
+export type { ParseError, ParseResult } from "./parse.ts";
+export { parseFeatureFile, parseSourceFile } from "./parse.ts";
+export type { HandlerHeaderUpdate, PatternChange, PatternId, QueryHandlerHeaderKey, StreamHandlerHeaderKey, WriteHandlerHeaderKey, } from "./patch.ts";
+export { addPattern, applyChanges, removePattern, replacePattern, SINGLETON_KINDS, updatePattern, } from "./patch.ts";
+export type { AddAuthClaimsArgs, AddClaimKeyArgs, AddConfigArgs, AddDefineEventArgs, AddEntityArgs, AddHookArgs, AddHttpRouteArgs, AddJobArgs, AddMetricArgs, AddMultiStreamProjectionArgs, AddNavArgs, AddNotificationArgs, AddOptionalRequiresArgs, AddProjectionArgs, AddQueryHandlerArgs, AddReadsConfigArgs, AddReferenceDataArgs, AddRelationArgs, AddRequiresArgs, AddScreenArgs, AddSecretArgs, AddStreamHandlerArgs, AddToggleableArgs, AddTranslationsArgs, AddUseExtensionArgs, AddWorkspaceArgs, AddWriteHandlerArgs, FeaturePatcher, } from "./patcher.ts";
+export { createFeaturePatcher } from "./patcher.ts";
+export type { PatternChangeIssue, PatternChangesParseResult } from "./pattern-change-schema.ts";
+export { parsePatternChanges } from "./pattern-change-schema.ts";
+export type { AuthClaimsPattern, ClaimKeyPattern, ConfigPattern, DefineEventPattern, Editability, EntityPattern, ExtendsRegistrarPattern, FeaturePattern, FeaturePatternKind, HookPattern, HttpRoutePattern, JobPattern, MetricPattern, MultiStreamProjectionPattern, NavPattern, NotificationPattern, OptionalRequiresPattern, ProjectionPattern, QueryHandlerPattern, ReadsConfigPattern, ReferenceDataPattern, RelationPattern, RequiresPattern, ScreenPattern, SecretNamespacePattern, SecretPattern, StreamHandlerPattern, SystemScopePattern, ToggleablePattern, TranslationsPattern, UnknownPattern, UseExtensionPattern, WorkspacePattern, WriteHandlerPattern, } from "./patterns.ts";
+export { getEditability } from "./patterns.ts";
+export type { RenderFeatureFileInput } from "./render.ts";
+export { FEATURE_FILE_VERSION, renderFeatureFile, renderPattern, renderValue, VERSION_HEADER, } from "./render.ts";
+export type { SourceLocation, SourcePosition } from "./source-location.ts";
+export { sourceLocationFromNode } from "./source-location.ts";

package/dist/engine/feature-ast/parse.d.ts

@@ -1,6 +1,6 @@
 import type { SourceFile } from "ts-morph";
-import type { FeaturePattern } from "./patterns.js";
-import { type SourceLocation } from "./source-location.js";
+import type { FeaturePattern } from "./patterns.ts";
+import { type SourceLocation } from "./source-location.ts";
 export type ParseError = {
     readonly methodName: string;
     readonly source: SourceLocation;

package/dist/engine/feature-ast/patch.d.ts

@@ -1,5 +1,5 @@
 import { type SourceFile } from "ts-morph";
-import type { FeaturePattern, QueryHandlerPattern, StreamHandlerPattern, WriteHandlerPattern } from "./patterns.js";
+import type { FeaturePattern, QueryHandlerPattern, StreamHandlerPattern, WriteHandlerPattern } from "./patterns.ts";
 /**
  * Identifier used by replace/remove. Discriminated union: each pattern
  * kind names the property the patcher must match against. Adding a new

package/dist/engine/feature-ast/patcher.d.ts

@@ -1,19 +1,19 @@
 import type { SourceFile } from "ts-morph";
-import type { LifecycleHookType } from "../constants.js";
-import type { ConfigKeyDefinition, ConfigKeyType, JobDefinition, RunIn, TranslationKeys } from "../types/config.js";
-import type { MetricOptions, SecretNamespaceOptions, SecretOptions } from "../types/feature.js";
-import type { EntityDefinition } from "../types/fields.js";
-import type { AccessRule, ClaimKeyType, EscapeHatchDeclaration, RateLimitOption } from "../types/handlers.js";
-import type { HookPhase } from "../types/hooks.js";
-import type { HttpRouteMethod } from "../types/http-route.js";
-import type { NavDefinition } from "../types/nav.js";
-import type { MspErrorMode } from "../types/projection.js";
-import type { RelationDefinition } from "../types/relations.js";
-import type { ScreenDefinition } from "../types/screen.js";
-import type { WorkspaceDefinition } from "../types/workspace.js";
-import { type PatternChange, type PatternId } from "./patch.js";
-import type { FeaturePattern } from "./patterns.js";
-import type { SourceLocation } from "./source-location.js";
+import type { LifecycleHookType } from "../constants.ts";
+import type { ConfigKeyDefinition, ConfigKeyType, JobDefinition, RunIn, TranslationKeys } from "../types/config.ts";
+import type { MetricOptions, SecretNamespaceOptions, SecretOptions } from "../types/feature.ts";
+import type { EntityDefinition } from "../types/fields.ts";
+import type { AccessRule, ClaimKeyType, EscapeHatchDeclaration, RateLimitOption } from "../types/handlers.ts";
+import type { HookPhase } from "../types/hooks.ts";
+import type { HttpRouteMethod } from "../types/http-route.ts";
+import type { NavDefinition } from "../types/nav.ts";
+import type { MspErrorMode } from "../types/projection.ts";
+import type { RelationDefinition } from "../types/relations.ts";
+import type { ScreenDefinition } from "../types/screen.ts";
+import type { WorkspaceDefinition } from "../types/workspace.ts";
+import { type PatternChange, type PatternId } from "./patch.ts";
+import type { FeaturePattern } from "./patterns.ts";
+import type { SourceLocation } from "./source-location.ts";
 export declare const SYNTHETIC_LOC: SourceLocation;
 export declare function rawLoc(raw: string): SourceLocation;
 export type AddEntityArgs = {

package/dist/engine/feature-ast/pattern-change-schema.d.ts

@@ -1,14 +1,14 @@
 import * as z from "zod";
-import type { ConfigKeyDefinition, ConfigKeyType, JobDefinition } from "../types/config.js";
-import type { MetricOptions, SecretNamespaceOptions, SecretOptions } from "../types/feature.js";
-import type { EntityDefinition } from "../types/fields.js";
-import type { NavDefinition } from "../types/nav.js";
-import type { RelationDefinition } from "../types/relations.js";
-import type { ScreenDefinition } from "../types/screen.js";
-import type { TreeActionDef } from "../types/tree-node.js";
-import type { WorkspaceDefinition } from "../types/workspace.js";
-import type { PatternChange } from "./patch.js";
-import type { SourceLocation } from "./source-location.js";
+import type { ConfigKeyDefinition, ConfigKeyType, JobDefinition } from "../types/config.ts";
+import type { MetricOptions, SecretNamespaceOptions, SecretOptions } from "../types/feature.ts";
+import type { EntityDefinition } from "../types/fields.ts";
+import type { NavDefinition } from "../types/nav.ts";
+import type { RelationDefinition } from "../types/relations.ts";
+import type { ScreenDefinition } from "../types/screen.ts";
+import type { TreeActionDef } from "../types/tree-node.ts";
+import type { WorkspaceDefinition } from "../types/workspace.ts";
+import type { PatternChange } from "./patch.ts";
+import type { SourceLocation } from "./source-location.ts";
 export type PatternChangeIssue = {
     readonly path: string;
     readonly message: string;

package/dist/engine/feature-ast/patterns.d.ts

@@ -1,18 +1,18 @@
-import type { LifecycleHookType } from "../constants.js";
-import type { ConfigKeyDefinition, ConfigKeyType, JobDefinition, ReferenceDataDef, RunIn, TranslationKeys } from "../types/config.js";
-import type { MetricOptions, SecretNamespaceOptions, SecretOptions } from "../types/feature.js";
-import type { EntityDefinition } from "../types/fields.js";
-import type { AccessRule, AgentHandlerHints, ClaimKeyType, EscapeHatchDeclaration, PayloadRateLimitOption, RateLimitDeclaration } from "../types/handlers.js";
-import type { HookPhase } from "../types/hooks.js";
-import type { HttpRouteMethod } from "../types/http-route.js";
-import type { NavDefinition } from "../types/nav.js";
-import type { MspErrorMode } from "../types/projection.js";
-import type { RelationDefinition } from "../types/relations.js";
-import type { ScreenDefinition } from "../types/screen.js";
-import type { TreeActionDef } from "../types/tree-node.js";
-import type { WorkspaceDefinition } from "../types/workspace.js";
-import type { RawRefSentinel } from "./extractors/shared.js";
-import type { SourceLocation } from "./source-location.js";
+import type { LifecycleHookType } from "../constants.ts";
+import type { ConfigKeyDefinition, ConfigKeyType, JobDefinition, ReferenceDataDef, RunIn, TranslationKeys } from "../types/config.ts";
+import type { MetricOptions, SecretNamespaceOptions, SecretOptions } from "../types/feature.ts";
+import type { EntityDefinition } from "../types/fields.ts";
+import type { AccessRule, AgentHandlerHints, ClaimKeyType, EscapeHatchDeclaration, PayloadRateLimitOption, RateLimitDeclaration } from "../types/handlers.ts";
+import type { HookPhase } from "../types/hooks.ts";
+import type { HttpRouteMethod } from "../types/http-route.ts";
+import type { NavDefinition } from "../types/nav.ts";
+import type { MspErrorMode } from "../types/projection.ts";
+import type { RelationDefinition } from "../types/relations.ts";
+import type { ScreenDefinition } from "../types/screen.ts";
+import type { TreeActionDef } from "../types/tree-node.ts";
+import type { WorkspaceDefinition } from "../types/workspace.ts";
+import type { RawRefSentinel } from "./extractors/shared.ts";
+import type { SourceLocation } from "./source-location.ts";
 export type EntityPattern = {
     readonly kind: "entity";
     readonly source: SourceLocation;

package/dist/engine/feature-ast/render.d.ts

@@ -1,4 +1,4 @@
-import type { FeaturePattern } from "./patterns.js";
+import type { FeaturePattern } from "./patterns.ts";
 export declare const FEATURE_FILE_VERSION: 1;
 export declare const VERSION_HEADER: string;
 /**