@cosmicdrift/kumiko-framework 0.368.0 → 0.370.0

package/dist/engine/feature-builder-state.d.ts

@@ -1,10 +1,10 @@
 import type { WebSocketRouteDefinition } from "@cosmicdrift/kumiko-types/websocket-route";
 import type * as z from "zod";
-import type { HttpRouteDefinition } from "./types/http-route.js";
-import type { AuthClaimsFn, BootCheckFn, ClaimKeyDefinition, ConfigKeyDefinition, ConfigSeedDef, EntityDefinition, EntityProjectionExtension, EventDef, EventMigrationDef, ExtensionSelectorDef, FeatureMetricDef, JobDefinition, LifecycleHookFn, MultiStreamProjectionDefinition, NotificationDefinition, OwnedFn, PhasedHook, PostDeleteHookFn, PostQueryHookFn, PostSaveHookFn, PreDeleteHookFn, ProjectionDefinition, QueryHandlerDef, ReferenceDataDef, RegistrarExtensionDef, RegistrarExtensionRegistration, RelationDefinition, SearchPayloadContributorFn, SecretKeyDefinition, SecretNamespaceDefinition, StoreTableEntry, StreamHandlerDef, TranslationKeys, TreeActionDef, UiHints, ValidationHookFn, WriteHandlerDef } from "./types/index.js";
-import type { ContentCollectionDefinition, NavDefinition } from "./types/nav.js";
-import type { ScreenDefinition } from "./types/screen.js";
-import type { WorkspaceDefinition } from "./types/workspace.js";
+import type { HttpRouteDefinition } from "./types/http-route.ts";
+import type { AuthClaimsFn, BootCheckFn, ClaimKeyDefinition, ConfigKeyDefinition, ConfigSeedDef, EntityDefinition, EntityProjectionExtension, EventDef, EventMigrationDef, ExtensionSelectorDef, FeatureMetricDef, JobDefinition, LifecycleHookFn, MultiStreamProjectionDefinition, NotificationDefinition, OwnedFn, PhasedHook, PostDeleteHookFn, PostQueryHookFn, PostSaveHookFn, PreDeleteHookFn, ProjectionDefinition, QueryHandlerDef, ReferenceDataDef, RegistrarExtensionDef, RegistrarExtensionRegistration, RelationDefinition, SearchPayloadContributorFn, SecretKeyDefinition, SecretNamespaceDefinition, StoreTableEntry, StreamHandlerDef, TranslationKeys, TreeActionDef, UiHints, ValidationHookFn, WriteHandlerDef } from "./types/index.ts";
+import type { ContentCollectionDefinition, NavDefinition } from "./types/nav.ts";
+import type { ScreenDefinition } from "./types/screen.ts";
+import type { WorkspaceDefinition } from "./types/workspace.ts";
 export type FeatureBuilderState = {
     requires: string[];
     optionalRequires: string[];

package/dist/engine/feature-config-events-jobs.d.ts

@@ -1,7 +1,7 @@
 import type * as z from "zod";
-import { type ZodType } from "zod";
-import type { FeatureBuilderState } from "./feature-builder-state.js";
-import type { AuthClaimsFn, ClaimKeyHandle, ClaimKeyType, ConfigKeyDefinition, ConfigKeyHandle, ConfigKeyType, ConfigSeedDef, DeclarativeEventMigration, EventDef, EventPiiStance, EventUpcastFn, JobDefinition, JobHandlerFn, MetricOptions, NameOrRef, NotificationDataFn, NotificationLocalizedTemplate, NotificationRecipientFn, NotificationRecordMapping, NotificationTemplateBody, NotificationTemplateFn, NotificationTemplateMeta, QualifiedEventName, SecretKeyHandle, SecretNamespaceHandle, SecretNamespaceOptions, SecretOptions, TemplateVariables, TranslationsDef } from "./types/index.js";
+import type { ZodType } from "zod";
+import type { FeatureBuilderState } from "./feature-builder-state.ts";
+import type { AuthClaimsFn, ClaimKeyHandle, ClaimKeyType, ConfigKeyDefinition, ConfigKeyHandle, ConfigKeyType, ConfigSeedDef, DeclarativeEventMigration, EventDef, EventPiiStance, EventUpcastFn, JobDefinition, JobHandlerFn, MetricOptions, NameOrRef, NotificationDataFn, NotificationLocalizedTemplate, NotificationRecipientFn, NotificationRecordMapping, NotificationTemplateBody, NotificationTemplateFn, NotificationTemplateMeta, QualifiedEventName, SecretKeyHandle, SecretNamespaceHandle, SecretNamespaceOptions, SecretOptions, TemplateVariables, TranslationsDef } from "./types/index.ts";
 export declare function buildConfigEventsJobsMethods<TName extends string>(state: FeatureBuilderState, name: TName): {
     config: {
         <T extends ConfigKeyType>(keyName: string, def: ConfigKeyDefinition<T>): ConfigKeyHandle<T>;
@@ -28,6 +28,7 @@ export declare function buildConfigEventsJobsMethods<TName extends string>(state
         readonly renamedFrom?: readonly string[];
         readonly systemOnly?: boolean;
         readonly unsubscribe?: boolean;
+        readonly tenantTransport?: boolean;
     }), definition?: {
         readonly trigger?: {
             readonly on: NameOrRef;
@@ -43,6 +44,7 @@ export declare function buildConfigEventsJobsMethods<TName extends string>(state
         readonly renamedFrom?: readonly string[];
         readonly systemOnly?: boolean;
         readonly unsubscribe?: boolean;
+        readonly tenantTransport?: boolean;
     }): void;
     translations(def: TranslationsDef): void;
     defineEvent: <const TInner extends string, TPayload>(eventName: TInner, schema: ZodType<TPayload>, options: {

package/dist/engine/feature-config-events-jobs.js

@@ -1,53 +1,10 @@
-import { escapeHatchGrantsProblem, normalizeEventPiiSubject, } from "@cosmicdrift/kumiko-types/handlers";
+import { escapeHatchGrantsProblem } from "@cosmicdrift/kumiko-types/handlers";
 import { isPlainObject } from "@cosmicdrift/kumiko-types/type-guards";
-import { ZodObject } from "zod";
 import { isValidIanaTimeZone } from "../time/iana.js";
+import { createEventDef } from "./event-def.js";
 import { resolveName } from "./handler-helpers.js";
 import { splitNamedDefinition, unwrapArrayForm } from "./object-form.js";
 import { QnTypes, qn, toKebab } from "./qualified-name.js";
-// A payload field that still holds null/undefined after parsing — the case
-// where an event-PII owner field yields no subject at append time (fw#2776).
-// A `.default(...)` accepts undefined but parses to a value, so it is not
-// absentable.
-function isAbsentable(field) {
-    return [null, undefined].some((candidate) => {
-        const parsed = field.safeParse(candidate);
-        return parsed.success && (parsed.data === null || parsed.data === undefined);
-    });
-}
-const NON_STRING_SCHEMA_TYPES = new Set([
-    "number",
-    "int",
-    "boolean",
-    "bigint",
-    "date",
-    "object",
-    "array",
-]);
-// An owner id is resolved through "non-empty string or absent" at append time,
-// so a schema that can never yield a string would make every append throw in
-// prod. Wrappers (optional/nullable/default/...) are looked through.
-function neverYieldsString(field) {
-    let current = field;
-    for (;;) {
-        const def = current._zod.def;
-        if (def.innerType === undefined)
-            return NON_STRING_SCHEMA_TYPES.has(def.type);
-        current = def.innerType;
-    }
-}
-function assertOwnerFieldYieldsPresentString(args) {
-    const { featureName, eventName, field, ownerField, owner } = args;
-    if (neverYieldsString(owner)) {
-        throw new Error(`[Feature ${featureName}] defineEvent("${eventName}"): piiFields."${field}" is owned by "${ownerField}", whose payload schema is not a string — the subject id must be a non-empty string, so every append would fail. ` +
-            `Use a string owner field, or declare whenAbsent ("tenant" | "self" | "plaintext").`);
-    }
-    if (isAbsentable(owner)) {
-        throw new Error(`[Feature ${featureName}] defineEvent("${eventName}"): piiFields."${field}" is owned by "${ownerField}", which the payload schema allows to be null/undefined. ` +
-            `Declare what happens then: { personal: { of: "${ownerField}", whenAbsent: "tenant" } } encrypts under the envelope tenant key, ` +
-            `whenAbsent: "self" under the event's own record key, whenAbsent: "plaintext" acknowledges that the value ships unencrypted and cannot be crypto-shredded (fw#2776).`);
-    }
-}
 // Builds config/secrets/claims/events/jobs/notifications registrar methods.
 export function buildConfigEventsJobsMethods(state, name) {
     function config(arg1, arg2) {
@@ -89,45 +46,6 @@ export function buildConfigEventsJobsMethods(state, name) {
         // Single-key call unwraps its own handle; multi-key returns the record.
         return typeof arg1 === "string" ? handles[arg1] : handles;
     }
-    // piiFields misconfiguration is a boot-time error, not a silent
-    // plaintext leak: both the pii field and its owner field must exist
-    // on the payload schema (checkable when the schema is a ZodObject).
-    function validateEventPiiFields(eventName, schema, piiFields) {
-        const shape = schema instanceof ZodObject ? schema.shape : undefined;
-        for (const [field, spec] of Object.entries(piiFields)) {
-            const normalized = normalizeEventPiiSubject(spec);
-            // Only the user form names an owner field — tenant/self subjects come
-            // from the write-time envelope (tenantId / aggregateType+aggregateId),
-            // so there is no owner-field existence or self-reference check for them.
-            if (normalized.kind !== "user") {
-                if (shape && !(field in shape)) {
-                    throw new Error(`[Feature ${name}] defineEvent("${eventName}"): piiFields references "${field}" which is not a field of the payload schema.`);
-                }
-                continue;
-            }
-            if (field === normalized.ownerField) {
-                throw new Error(`[Feature ${name}] defineEvent("${eventName}"): piiFields."${field}" cannot use itself as the owner field — the subject id is a plaintext pseudonymous fk, the pii field is the value it owns.`);
-            }
-            if (normalized.ownerField === "id") {
-                throw new Error(`[Feature ${name}] defineEvent("${eventName}"): piiFields."${field}" uses owner field "id" — on entities \`of: "id"\` means record-owned, but on events it would encrypt under a phantom user key that a forget never reaches. Use \`personal: "self"\` for a record-owned event field.`);
-            }
-            for (const required of [field, normalized.ownerField]) {
-                if (shape && !(required in shape)) {
-                    throw new Error(`[Feature ${name}] defineEvent("${eventName}"): piiFields references "${required}" which is not a field of the payload schema.`);
-                }
-            }
-            const owner = shape?.[normalized.ownerField];
-            if (normalized.whenAbsent === undefined && owner !== undefined) {
-                assertOwnerFieldYieldsPresentString({
-                    featureName: name,
-                    eventName,
-                    field,
-                    ownerField: normalized.ownerField,
-                    owner,
-                });
-            }
-        }
-    }
     // Shared by defineEvent's `migrations` option — each entry registers a
     // single upcast step, same validation/dedup as the old standalone
     // r.eventMigration() call (folded into defineEvent, #1082 step 8).
@@ -222,59 +140,20 @@ export function buildConfigEventsJobsMethods(state, name) {
                     : {}),
                 ...(resolvedDefinition.systemOnly === true ? { systemOnly: true } : {}),
                 ...(resolvedDefinition.unsubscribe === true ? { unsubscribe: true } : {}),
+                ...(resolvedDefinition.tenantTransport === true ? { tenantTransport: true } : {}),
             };
         },
         translations(def) {
             state.translations = { ...state.translations, ...def.keys };
         },
         defineEvent: (eventName, schema, options) => {
-            // Fail-closed PII stance gate (fw#2558) — runs before anything else so
-            // an untyped JS consumer (no compiler to stop it) still can't register
-            // an event without declaring whether its payload carries personal data.
-            const missingStanceError = () => new Error(`[Feature ${name}] defineEvent("${eventName}") must declare an explicit PII stance. Pass { piiFields: { <payloadField>: { personal: { of: "<userIdField>" } } } } for payload fields owned by a user (or { personal: "tenant" } / { personal: "self" } for tenant- or record-scoped subjects), or { piiFields: "none" } when the payload holds none.`);
-            if (options === undefined || options.piiFields === undefined) {
-                throw missingStanceError();
-            }
-            const piiFields = options.piiFields;
-            // @cast-boundary runtime-guard — an untyped JS caller can hand
-            // anything through `piiFields` (including null), so re-check the
-            // shape before trusting it as EventPiiStance: `typeof null === "object"`
-            // would otherwise pass through to Object.keys(null) below and throw a
-            // raw TypeError instead of this guidance message.
-            if (piiFields !== "none" && (typeof piiFields !== "object" || piiFields === null)) {
-                throw missingStanceError();
-            }
-            if (piiFields !== "none" && Object.keys(piiFields).length === 0) {
-                throw new Error(`[Feature ${name}] defineEvent("${eventName}"): piiFields: {} is not a stance — use piiFields: "none" to declare the payload holds no personal data.`);
-            }
-            if (piiFields !== "none") {
-                validateEventPiiFields(eventName, schema, piiFields);
-            }
-            // Return the fully-qualified event name so callers can pass it
-            // straight to ctx.appendEvent without hand-building the
-            // "<feature>:event:<name>" shape. Registry keeps events keyed by
-            // short name — qualification is the framework's job, not the feature
-            // author's.
-            //
-            // The runtime kebab-step (`qn(toKebab(feature), …)`) is mirrored at
-            // the type-level by `QualifiedEventName<TName, TInner>` so the
-            // returned `name` carries the literal qualified shape that the
-            // augmented `KumikoEventTypeMap` keys against.
-            const qualified = qn(toKebab(name), "event", toKebab(eventName));
-            const version = options.version ?? 1;
-            if (!Number.isInteger(version) || version < 1) {
-                throw new Error(`[Feature ${name}] defineEvent("${eventName}"): version must be a positive integer, got ${String(version)}`);
-            }
-            // @cast-boundary engine-bridge — runtime-string mirrors the
-            // template-literal-type via QualifiedEventName + toKebab. Both
-            // sides are tested (CamelToKebab type-tests + scan-events kebab
-            // tests), so the cast is a contract, not a typing-loss.
-            const def = {
-                name: qualified,
+            const def = createEventDef({
+                feature: name,
+                name: eventName,
                 schema,
-                version,
-                piiFields,
-            };
+                piiFields: options?.piiFields,
+                ...(options?.version !== undefined ? { version: options.version } : {}),
+            });
             state.events[eventName] = def;
             for (const m of options.migrations ?? []) {
                 registerEventMigration(eventName, m.fromVersion, m.toVersion, m.transform);

package/dist/engine/feature-entity-handlers.d.ts

@@ -1,9 +1,9 @@
 import type * as z from "zod";
 import type { ZodType } from "zod";
-import { type QueryHandlerDefinition, type StreamHandlerDefinition, type WriteHandlerDefinition } from "./define-handler.js";
-import type { RegisterEntityCrudOptions } from "./entity-handlers.js";
-import type { FeatureBuilderState } from "./feature-builder-state.js";
-import type { AccessRule, EntityDefinition, EntityObjectDefinition, EntityRef, EscapeHatchDeclaration, HandlerRef, KumikoEventTypeMap, NameOrRef, RateLimitDeclaration, RelationDefinition, StreamHandlerFn } from "./types/index.js";
+import { type QueryHandlerDefinition, type StreamHandlerDefinition, type WriteHandlerDefinition } from "./define-handler.ts";
+import type { RegisterEntityCrudOptions } from "./entity-handlers.ts";
+import type { FeatureBuilderState } from "./feature-builder-state.ts";
+import type { AccessRule, EntityDefinition, EntityObjectDefinition, EntityRef, EscapeHatchDeclaration, HandlerRef, KumikoEventTypeMap, NameOrRef, RateLimitDeclaration, RelationDefinition, StreamHandlerFn } from "./types/index.ts";
 export declare function buildEntityHandlerMethods<TName extends string>(state: FeatureBuilderState, name: TName): {
     entity(definition: EntityObjectDefinition): EntityRef;
     relation(entityRefOrDefinition: NameOrRef | ({

package/dist/engine/feature-entity-handlers.js

@@ -1,9 +1,9 @@
 import { ENTITY_CONVENTION_QUERY_BRAND } from "@cosmicdrift/kumiko-types/handlers";
 import { toTableName } from "../db/table-builder.js";
 import { isEntityConventionQueryHandler, isPagedQueryHandler, PAGED_QUERY_HANDLER_BRAND, } from "./define-handler.js";
-import { registerCrudHandlers } from "./entity-handlers.js";
+import { assertEscapeHatchAccessIsSystemAdminOnly, registerCrudHandlers, } from "./entity-handlers.js";
 import { resolveName } from "./handler-helpers.js";
-import { isObjectArgument, throwPositionalFormRemoved } from "./object-form.js";
+import { isObjectArgument, throwObjectArgumentRequired } from "./object-form.js";
 const CRUD_VERBS = new Set(["create", "update", "delete"]);
 const CRUD_REGISTERED_VERBS = new Set([...CRUD_VERBS, "restore", "list", "detail"]);
 // A silent overwrite would drop framework behaviour that rides on the r.crud
@@ -84,7 +84,7 @@ export function buildEntityHandlerMethods(state, name) {
     const methods = {
         entity(definition) {
             if (!isObjectArgument(definition))
-                throwPositionalFormRemoved(name, "entity");
+                throwObjectArgumentRequired(name, "entity");
             const { name: entityName, backingTable, ...entityDefinition } = definition;
             state.entities[entityName] = entityDefinition;
             if (backingTable !== undefined)
@@ -105,7 +105,7 @@ export function buildEntityHandlerMethods(state, name) {
         },
         writeHandler(def) {
             if (!isObjectArgument(def))
-                throwPositionalFormRemoved(name, "writeHandler");
+                throwObjectArgumentRequired(name, "writeHandler");
             assertHandlerHasAccess(name, "writeHandler", def.name, def.access);
             assertHandlerNameFree(state, name, "write", def.name);
             state.writeHandlers[def.name] = {
@@ -144,9 +144,15 @@ export function buildEntityHandlerMethods(state, name) {
         },
         queryHandler(def) {
             if (!isObjectArgument(def))
-                throwPositionalFormRemoved(name, "queryHandler");
+                throwObjectArgumentRequired(name, "queryHandler");
             assertHandlerHasAccess(name, "queryHandler", def.name, def.access);
             assertHandlerNameFree(state, name, "query", def.name);
+            // A generated entity handler checks its escapeHatch when it is built, but a
+            // spread of it can add escapeHatch afterwards; the registered object is
+            // what the dispatcher trusts, so the check runs on it again.
+            if (def.escapeHatch !== undefined && isEntityConventionQueryHandler(def)) {
+                assertEscapeHatchAccessIsSystemAdminOnly(def.name, "query", def.access);
+            }
             state.queryHandlers[def.name] = {
                 name: def.name,
                 schema: def.schema,

package/dist/engine/feature-manifest.d.ts

@@ -1,4 +1,4 @@
-import type { Registry, UiHints } from "./types/feature.js";
+import type { Registry, UiHints } from "./types/feature.ts";
 export type ManifestConfigKey = {
     readonly key: string;
     readonly qualifiedName: string;

package/dist/engine/feature-ui-extensions.d.ts

@@ -1,11 +1,11 @@
 import { type WebSocketRouteDefinition } from "@cosmicdrift/kumiko-types/websocket-route";
-import type { EntityTableMeta } from "../db/entity-table-meta.js";
-import type { FeatureBuilderState } from "./feature-builder-state.js";
-import type { HttpRouteDefinition } from "./types/http-route.js";
-import type { BootCheckFn, EntityProjectionExtension, ExtensionSelectorPanel, HookDefinition, MultiStreamProjectionDefinition, NameOrRef, ProjectionDefinition, RegistrarExtensionDef, SearchPayloadContributorFn, StoreTableOptions, TreeActionDef, TreeActionsHandle } from "./types/index.js";
-import type { ContentCollectionDefinition, NavDefinition } from "./types/nav.js";
-import type { ScreenDefinition } from "./types/screen.js";
-import type { WorkspaceDefinition } from "./types/workspace.js";
+import type { EntityTableMeta } from "../db/entity-table-meta.ts";
+import type { FeatureBuilderState } from "./feature-builder-state.ts";
+import type { HttpRouteDefinition } from "./types/http-route.ts";
+import type { BootCheckFn, EntityProjectionExtension, ExtensionSelectorPanel, HookDefinition, MultiStreamProjectionDefinition, NameOrRef, ProjectionDefinition, RegistrarExtensionDef, SearchPayloadContributorFn, StoreTableOptions, TreeActionDef, TreeActionsHandle } from "./types/index.ts";
+import type { ContentCollectionDefinition, NavDefinition } from "./types/nav.ts";
+import type { ScreenDefinition } from "./types/screen.ts";
+import type { WorkspaceDefinition } from "./types/workspace.ts";
 export declare function buildUiExtensionsMethods<TName extends string>(state: FeatureBuilderState, name: TName): {
     hook(definition: HookDefinition): void;
     searchPayloadExtension(entityRef: NameOrRef, fn: SearchPayloadContributorFn): void;

package/dist/engine/feature-ui-extensions.js

@@ -4,7 +4,7 @@ import { WEBSOCKET_MAX_CONNECTIONS_PER_USER_LIMIT, WEBSOCKET_MAX_PAYLOAD_BYTES,
 import { bindHookEscapeHatchGrant } from "../pipeline/system-identity-switch.js";
 import { LifecycleHookTypes } from "./constants.js";
 import { resolveName } from "./handler-helpers.js";
-import { isObjectArgument, throwPositionalFormRemoved } from "./object-form.js";
+import { isObjectArgument, throwObjectArgumentRequired } from "./object-form.js";
 import { isKebabSegment, isValidQn, qualifyEntityName, toKebab } from "./qualified-name.js";
 import { HookPhases } from "./types/index.js";
 // Builds hooks/extensions/projections/screens/nav/workspace/tables/tree-actions
@@ -110,7 +110,7 @@ export function buildUiExtensionsMethods(state, name) {
     return {
         hook(definition) {
             if (!isObjectArgument(definition))
-                throwPositionalFormRemoved(name, "hook");
+                throwObjectArgumentRequired(name, "hook");
             const { type, target, handler: fn } = definition;
             const options = {
                 ...(definition.phase !== undefined && { phase: definition.phase }),

package/dist/engine/field-access.d.ts

@@ -1,4 +1,4 @@
-import type { EntityDefinition, SessionUser } from "./types/index.js";
+import type { EntityDefinition, SessionUser } from "./types/index.ts";
 export declare function maskWriteOnlyFields<T extends Readonly<Record<string, unknown>>>(entity: EntityDefinition, row: T): T;
 export declare function dropEmptyWriteOnlyValues<T extends Readonly<Record<string, unknown>>>(entity: EntityDefinition, values: T): T;
 export declare function filterReadFields(entity: EntityDefinition, data: Readonly<Record<string, unknown>>, user: SessionUser): Record<string, unknown>;

package/dist/engine/field-helpers.d.ts

@@ -1,4 +1,4 @@
-import type { AnyFileFieldDef, FieldDefinition } from "./types/fields.js";
+import type { AnyFileFieldDef, FieldDefinition } from "./types/fields.ts";
 export declare const DEFAULT_CURRENCIES: readonly ["EUR", "USD", "GBP", "CHF", "JPY", "SEK", "NOK", "DKK", "PLN", "CZK", "CAD", "AUD", "NZD", "CNY", "INR"];
 export declare const DEFAULT_LOCALES: readonly ["de", "en", "es"];
 export declare function isFileField(field: FieldDefinition | undefined): field is AnyFileFieldDef;

package/dist/engine/handler-helpers.d.ts

@@ -1,4 +1,4 @@
-import type { NameOrRef, WriteResult } from "./types/handlers.js";
+import type { NameOrRef, WriteResult } from "./types/handlers.ts";
 /**
  * Override the success-side `data` of a WriteResult while forwarding the
  * failure half untouched. Useful for handlers that delegate to the

package/dist/engine/index.d.ts

@@ -1,88 +1,89 @@
-export { handlerFieldLabelKey, handlerTitleKey } from "../i18n/required-surface-keys.js";
-export { hasAccess } from "./access.js";
-export { isPrincipalStatusPlugin, isTenantLifecycleStatusPlugin, type PrincipalProfile, type PrincipalStatus, type PrincipalStatusPlugin, TENANT_TEARDOWN_STATUSES, type TenantLifecycleStatusPlugin, } from "./active-membership.js";
-export { PII_DIRECT_NAME_HINTS, PII_USER_OWNED_NAME_HINTS, PII_USER_REFERENCE_NAME_HINTS, } from "./boot-validator/entity-handler.js";
-export { entityHasAnonymizableSubjectField } from "./boot-validator/pii-retention.js";
-export { type CardMetaOverflow, collectCardMetaOverflow, collectWriteHandlerQns, MAX_TRANSFER_DEPTH, SECURITY_BASELINE_FEATURE_NAMES, type ValidateBootOptions, validateAppCustomScreenWriteQns, validateBoot, } from "./boot-validator.js";
-export { bridgeStub } from "./bridge-stub.js";
-export { type BuildAppSchemaOptions, buildAppSchema } from "./build-app-schema.js";
-export type { ConfigFeatureSchema } from "./build-config-feature-schema.js";
-export { buildConfigFeatureSchema, SETTINGS_HUB_FEATURE, SETTINGS_HUB_WORKSPACE, } from "./build-config-feature-schema.js";
-export { buildTarget } from "./build-target.js";
-export { type PendingChange, parseChangesetChanges } from "./changeset-changes.js";
-export { access, createSeed, createSystemConfig, createSystemSeed, createTenantConfig, createTenantSeed, createUserConfig, createUserSeed, isEncryptedAtRest, } from "./config-helpers.js";
-export type { SystemHookName } from "./constants.js";
-export { ConcurrencyModes, ConfigScopes, LifecycleHookTypes, MessageKind, OnDeleteStrategies, SystemHookNames, SystemHookPriorities, TENANT_CURRENCY_CONFIG_KEY, tenantChannel, } from "./constants.js";
-export type { App, AppConfig } from "./create-app.js";
-export { createApp } from "./create-app.js";
-export { mayOverrideTenant, tenantOverrideDenied } from "./cross-tenant.js";
-export { dedupeFeatures } from "./dedupe-features.js";
-export { defineFeature } from "./define-feature.js";
-export type { PagedQueryHandlerDefinition, QueryHandlerDefinition, StreamHandlerDefinition, WriteHandlerDefinition, WriteHandlerInput, } from "./define-handler.js";
-export { definePagedQueryHandler, defineQueryHandler, defineWriteHandler, isPagedQueryHandler, } from "./define-handler.js";
-export { defineRoles } from "./define-roles.js";
-export { defineStep, getStep, listStepKinds } from "./define-step.js";
-export type { WorkflowDefinition, WorkflowInput, WorkflowTrigger } from "./define-workflow.js";
-export { computeDefinitionFingerprint, defineWorkflow } from "./define-workflow.js";
-export type { ToggleReader } from "./effective-features.js";
-export { computeEffectiveFeatures, isToggleableFeature } from "./effective-features.js";
-export { createEntityExecutor, defineEntityCreateHandler, defineEntityDeleteHandler, defineEntityDetailHandler, defineEntityListHandler, defineEntityQueryHandler, defineEntityRestoreHandler, defineEntityUpdateHandler, defineEntityWriteHandler, defineProjectionQueryHandler, type EntityCrudRegistrar, entityListSchema, MAX_LIST_LIMIT, type RegisterEntityCrudOptions, } from "./entity-handlers.js";
-export { declareEscapeHatch } from "./escape-hatch-declaration.js";
-export type { EmitCtx } from "./event-helpers.js";
-export { emitEvent, typedPayload } from "./event-helpers.js";
-export type { KumikoExtensionName, TenantResourceExtensionName } from "./extension-names.js";
-export { EXT_ASSIGNABLE_ROLE, EXT_DERIVATIVE_OVERLAY_RESOLVER, EXT_DERIVATIVE_PUBLIC_PREDICATE, EXT_DERIVATIVE_RENDERER, EXT_EXTERNAL_RESOURCE, EXT_FILE_PROVIDER, EXT_INFRA_RESOURCE, EXT_PRINCIPAL_STATUS, EXT_SEARCH_ADAPTER, EXT_STORAGE_PROVIDER, EXT_TENANT_DATA, EXT_TENANT_LIFECYCLE_STATUS, EXT_USER_DATA, EXT_USER_DATA_ORDER, FILE_PROVIDER_CONFIG_KEY, FILE_STORAGE_PROVIDER_BOOT_SENTINEL, FILE_STORAGE_PROVIDER_ENV, TENANT_MEMBERSHIPS_QUERY, } from "./extension-names.js";
-export { EXTENSION_SELECTOR_HINT_KEY, extensionSelectorTargets, SELECTED_EXTENSIONS_QUERY, selectablePluginIds, } from "./extension-selector-plugins.js";
-export { extensionUsageEscapeHatchReason } from "./extensions/escape-hatch-usage.js";
-export type { StorageProviderDestroyTenantHook, StorageProviderExtensionHooks, StorageProviderHookCtx, } from "./extensions/storage-provider.js";
-export { isTenantDataExtensionHooks, type TenantDataDestroyHook, type TenantDataExtensionHooks, type TenantDataHookCtx, } from "./extensions/tenant-data.js";
-export { isTenantResourceExtensionHooks, type TenantDestroyHookResult, type TenantResourceDestroyHook, type TenantResourceExtensionHooks, type TenantResourceHookCtx, } from "./extensions/tenant-resource.js";
-export type { TenantUserModel, UserDataDeleteHook, UserDataDeleteStrategy, UserDataExportHook, UserDataExportSnippet, UserDataExtensionHooks, UserDataExtensionOptions, UserDataHookCtx, UserDataStorageProvider, } from "./extensions/user-data.js";
-export { createBigIntField, createBooleanField, createDateField, createDecimalField, createDerivedField, createEmbeddedField, createEmbeddedListField, createEntity, createFileField, createFilesField, createImageField, createImagesField, createJsonbField, createLocatedTimestampField, createLongTextField, createMoneyField, createMultiSelectField, createNumberField, createSelectField, createTextField, createTimestampField, createTzField, } from "./factories.js";
-export type { AddEntityArgs, AddHookArgs, AddRelationArgs, AddWriteHandlerArgs, FeaturePatcher, FeaturePattern, FeaturePatternKind, FormFieldLabel, FormFieldSpec, FormInputType, HandlerHeaderUpdate, ParseError, ParseResult, PatternCategory, PatternChange, PatternChangeIssue, PatternChangesParseResult, PatternFormSchema, PatternId, RenderFeatureFileInput, SourceLocation, } from "./feature-ast/index.js";
-export { addPattern, applyChanges, createFeaturePatcher, getPatternSchema, groupByCategory, PATTERN_LIBRARY, parseFeatureFile, parsePatternChanges, parseSourceFile, removePattern, renderFeatureFile, renderPattern, replacePattern, updatePattern, VERSION_HEADER, } from "./feature-ast/index.js";
-export { type ChangelogEntry, type ChangelogType, compareVersions, type FeatureChangelog, filterEntriesAfter, parseFeatureChangelog, sortEntries, validateChangelog, } from "./feature-changelog.js";
-export { type BuildManifestOptions, buildManifestFromRegistry, type FeatureManifest, type ManifestConfigKey, type ManifestExtension, type ManifestFeature, type ManifestSecret, type ManifestSystemEvent, serializeManifest, } from "./feature-manifest.js";
-export { checkWriteFieldOwnership, checkWriteFieldRoles, filterReadFields, maskWriteOnlyFields, } from "./field-access.js";
-export { HANDLER_FIELD_REFERENCES_META_KEY, type HandlerFieldPathSegment, type HandlerFieldReference, type HandlerFieldReferenceAtPath, type HandlerFieldReferenceMeta, handlerFieldReference, handlerFieldReferences, readHandlerFieldReferences, } from "./handler-field-references.js";
-export { resolveName, withResponseData } from "./handler-helpers.js";
-export { i18nKey } from "./i18n-key.js";
-export { buildSessionRoles, findForbiddenMembershipRole, isForbiddenMembershipRole, stripForbiddenMembershipRoles, } from "./membership-roles.js";
-export type { OwnershipClause, OwnershipMap, OwnershipRef, OwnershipRule } from "./ownership.js";
-export { buildOwnershipClause, combineClauses, from, normalizeAccessEntry, userCanCreateFieldRow, userCanReadFieldRow, userCanWriteFieldRow, } from "./ownership.js";
-export type { ParsedRefTarget } from "./parse-ref-target.js";
-export { parseRefTarget, parseRefTargetEntityName } from "./parse-ref-target.js";
-export { buildPipelineSteps, stepsPipeline } from "./pipeline.js";
-export { projectAppSchemaForRoles } from "./project-app-schema-for-roles.js";
-export { defineApply, defineMspApply, setFields } from "./projection-helpers.js";
-export type { BuiltinQnType, ParsedQn, QnType } from "./qualified-name.js";
-export { isValidQn, parseQn, QnTypes, qn, toKebab } from "./qualified-name.js";
-export { readClaim } from "./read-claim.js";
-export { createRegistry } from "./registry.js";
-export { qualifyTranslationKey } from "./registry-ingest.js";
-export type { ClampInfo, ResolveOptions } from "./resolve-config-or-param.js";
-export { resolveConfigOrParam } from "./resolve-config-or-param.js";
-export type { AssignableAppRoles, AssignableFromRole } from "./role-assignment.js";
-export { assignableAppRolesFromUsages, assignableAppRolesOf, BUILT_IN_MEMBERSHIP_ROLES, canActorAssignRole, findForbiddenRoleAssignment, isAssignableByRole, mergeAssignedRoles, } from "./role-assignment.js";
-export { runsInLane } from "./run-in.js";
-export type { StepListOutcome } from "./run-pipeline.js";
-export { runPipeline, runStepList } from "./run-pipeline.js";
-export { buildInsertSchema, buildUpdateSchema, fieldToZod, SYSTEM_ONLY_JSON_SCHEMA_KEY, } from "./schema-builder.js";
-export type { UnavailableSelectOption } from "./screen-helpers.js";
-export { availableSelectOptions, findUnavailableSelectOptions, isExtensionEditSection, isFieldsEditSection, isWriteFormEditSection, normalizeEditField, normalizeListColumn, sectionFieldSpecs, } from "./screen-helpers.js";
-export type { TransitionGraph } from "./state-machine.js";
-export { defineTransitions, guardTransition } from "./state-machine.js";
-export { evaluateEventMatch } from "./steps/_event-match.js";
-export { STEP_DISPATCH_AGGREGATE_TYPE, STEP_DISPATCH_FAILED_TYPE, STEP_DISPATCH_REQUESTED_TYPE, STEP_DISPATCHED_TYPE, SUSPEND_SENTINEL, WORKFLOW_AGGREGATE_TYPE, WORKFLOW_RESUMED_TYPE, WORKFLOW_RETRY_SCHEDULED_TYPE, WORKFLOW_RUN_COMPLETED_TYPE, WORKFLOW_RUN_FAILED_TYPE, WORKFLOW_RUN_STARTED_TYPE, WORKFLOW_WAITING_FOR_EVENT_TYPE, WORKFLOW_WAITING_TYPE, } from "./steps/_step-dispatch-constants.js";
-export { describeWorkflowStepError } from "./steps/describe-workflow-step-error.js";
-export { unwrapWorkflowStepError, WorkflowStepError } from "./steps/workflow-step-error.js";
-export { WORKFLOW_SYSTEM_EVENT_DEFS } from "./steps/workflow-system-events.js";
-export { ANONYMOUS_ROLE, ANONYMOUS_USER_ID, createAnonymousUser, createSystemUser, SYSTEM_ROLE, SYSTEM_USER_ID, } from "./system-user.js";
-export { assertNotificationVariables, templateVariable, templateVariablesToZod, } from "./template-variables.js";
-export { type EffectiveFeaturesResolver, findTierResolverUsage, isTierResolverPlugin, requireTierResolverPlugin, TENANT_TIER_RESOLVER_EXT, type TierResolverPlugin, type TrialGate, } from "./tier-resolver-extension.js";
-export { findOverDeepTransferChain, resolveTransferAdjacency as resolveEntityTransferAdjacency, type TransferAdjacency, type TransferEdge, type TransferEdgeLink, } from "./transfer-adjacency.js";
-export { isSystemTenant, isUuid, parseTenantId, SYSTEM_TENANT_ID } from "./types/identifiers.js";
-export type { AccessRule, ActionFormScreenDefinition, ActiveMembership, ActiveMembershipRejection, ActiveMembershipResult, AgentExposure, AgentHandlerHints, AgentRisk, AppContext, AppendEventArgs, AppendEventFn, AuthClaimsContext, AuthClaimsFn, AuthClaimsHookDef, BeforeTransactionPhase, BeforeTransactionResult, BelongsToRelation, BigIntFieldDef, BooleanFieldDef, CamelToKebab, ChatSendFailureCode, ClaimKeyDefinition, ClaimKeyHandle, ClaimKeyJsType, ClaimKeyType, ConcurrencyMode, ConfigAccessor, ConfigAccessorFactory, ConfigBacking, ConfigCascade, ConfigCascadeLevel, ConfigDefinition, ConfigEditScreenDefinition, ConfigKeyAccess, ConfigKeyDefinition, ConfigKeyHandle, ConfigKeyType, ConfigMask, ConfigResolver, ConfigScope, ConfigSecretsReader, ConfigSeedDef, ConfigStoredRow, ConfigStoredRowWithSource, ConfigValidateContext, ConfigValidateFn, ConfigValue, ConfigValueSource, ConfigValueWithSource, ContentCollectionDefinition, CreateSeedOptions, CreateTenantSeedOptions, CreateUserSeedOptions, CustomScreenDefinition, CustomScreenRoute, DashboardChartPanel, DashboardCustomPanel, DashboardDateParam, DashboardFeedPanel, DashboardFilterDefinition, DashboardI18nText, DashboardListPanel, DashboardMoneyParam, DashboardPanelDefinition, DashboardPanelVisibility, DashboardProgressListPanel, DashboardScreenDefinition, DashboardScreenPanel, DashboardStatGroupPanel, DashboardStatPanel, DashboardText, DashboardTextParam, DashboardValueFormat, DateFieldDef, DecimalFieldDef, DeleteContext, DeliveryErrorCode, DeliveryFailureCode, DeliverySkipReason, DeriveContext, DerivedFieldDef, DerivedFieldsMap, DerivedValueType, EditExtensionSection, EditFieldPrefill, EditFieldSpec, EditFieldsSection, EditLayout, EditRelatedListSection, EditSectionSpec, EmbeddedListEditSpec, EntityDefinition, EntityEditAction, EntityEditActionPlacement, EntityEditScreenDefinition, EntityId, EntityListExpandableRow, EntityListScreenDefinition, EntityObjectDefinition, EntityRef, EntityRelations, EscapeHatchAuditSink, EscapeHatchDeclaration, EscapeHatchKind, EscapeHatchReporter, EscapeHatchTarget, EscapeHatchUseEvent, EventDef, ExtensionOptionsArgs, ExtensionOptionsFor, FeatureDefinition, FeatureRegistrar, FieldAccess, FieldCondition, FieldDefinition, FieldFormatRegistry, FieldIconKey, FieldRenderer, FileFieldDef, FilesFieldDef, Findability, FormatSpec, FormWidth, HandlerContext, HasManyRelation, HookDefinition, HookMap, ImageFieldDef, ImagesFieldDef, JobBackoff, JobBackoffStrategy, JobContext, JobDefinition, JobHandlerFn, JobTrigger, JobTriggerEvent, JsonbFieldDef, KumikoEntityTypeMap, KumikoEventTypeMap, KumikoExtensionOptionsMap, KumikoHandlerPayloadMap, KumikoHandlerResultMap, LifecycleHookType, ListColumnSpec, ListFacetSpec, ListPaginationMode, ListSortDir, ListSortSpec, LongTextFindability, ManyToManyRelation, MaxPerTenantOptions, MemberReader, MetricNavigate, MetricSpec, MspErrorMode, MspErrorPolicy, MultiSelectFieldDef, MultiStreamApplyFn, MultiStreamProjectionDefinition, NameOrRef, NavDefinition, NavIconKey, NotificationDataFn, NotificationDefinition, NotificationLocalizedTemplate, NotificationRecipientFn, NotificationRecordMapping, NotificationTemplateBody, NotificationTemplateFn, NotificationTemplateMeta, NotifyDeferred, NotifyDelivery, NotifyDeliveryStatus, NotifyDispatched, NotifyFactory, NotifyFn, NotifyJobDispatcher, NotifyOptions, NotifyPriority, NotifyResult, NumberFieldDef, OnDeleteStrategy, OpenToAllAccessRule, OpenToAllDeclaration, OpenToAllPersonalData, ParentRefDef, PersonalAnnotations, PersonalAnnotationsLongText, PersonalAnnotationsNoFind, PersonalSubject, PlatformComponent, PluralForms, PostDeleteHookFn, PostSaveHookFn, PreDeleteHookFn, PreparedWriteEvent, PreQueryHookFn, PreSaveHookFn, ProjectionDefinition, ProjectionDetailScreenDefinition, ProjectionListScreenDefinition, ProjectionTable, QualifiedEventName, QueryEvent, QueryHandlerDef, QueryHandlerFn, RateLimitPer, RecordHeaderSpec, RecordHeaderSubtitlePart, ReferenceDataDef, Registry, RelationDefinition, ResolvedPiiFlags, RetentionDef, RoleAccessPersonalData, RoleAccessRule, RowAction, RowActionNavigate, RowActionNavigateBase, RowActionWriteHandler, RowFieldExtractor, SaveContext, ScreenDefinition, ScreenFilter, ScreenFilterOp, ScreenNavSugar, ScreenSlots, SecretKeyDefinition, SecretKeyHandle, SecretMintConfirmStep, SecretMintScreenDefinition, SecretNamespaceDefinition, SecretNamespaceHandle, SecretNamespaceOptions, SecretReveal, SecretRevealField, SecretsEditScreenDefinition, SecretsEditSection, SelectFieldDef, SessionUser, SessionUserOrigin, StreamHandlerDef, StreamHandlerFn, Subscribe, TargetRef, TemplateListVariableDef, TemplateScalarVariableDef, TemplateVariableDef, TemplateVariables, TenantId, TenantWriteTarget, TextFieldDef, ToolbarAction, TranslationEntry, TranslationKeys, TranslationsDef, TranslationValue, TreeAction, TreeActionDef, TreeActionsHandle, TreeChildrenSubscribe, TreeNode, TreeNodeState, UnitKey, UnsafeAppendEventFn, ValidationError, ValidationHookFn, WorkspaceDefinition, WriteEvent, WriteHandlerDef, WriteHandlerFn, WriteResult, } from "./types/index.js";
-export { DEFAULT_CURRENCIES, DEFAULT_LOCALES, DELIVERY_FAILURE_CODES, DELIVERY_SKIP_REASONS, HookPhases, HTTP_ERROR_CODE_PATTERN, isAgentVisibleScreen, isDeliveryErrorCode, isOpenToAllGranted, resolveAgentExposure, } from "./types/index.js";
-export type { AwaitedEventType, PipelineBuildCtx, PipelineCtx, PipelineDef, StepBuilder, StepDef, StepFailureStrategy, StepInstance, StepKind, StepNamespace, StepResolver, } from "./types/step.js";
-export { runValidation } from "./validation.js";
+export { handlerFieldLabelKey, handlerTitleKey } from "../i18n/required-surface-keys.ts";
+export { hasAccess } from "./access.ts";
+export { isPrincipalStatusPlugin, isTenantLifecycleStatusPlugin, type PrincipalProfile, type PrincipalStatus, type PrincipalStatusPlugin, TENANT_TEARDOWN_STATUSES, type TenantLifecycleStatusPlugin, } from "./active-membership.ts";
+export { PII_DIRECT_NAME_HINTS, PII_USER_OWNED_NAME_HINTS, PII_USER_REFERENCE_NAME_HINTS, } from "./boot-validator/entity-handler.ts";
+export { entityHasAnonymizableSubjectField } from "./boot-validator/pii-retention.ts";
+export { type CardMetaOverflow, collectCardMetaOverflow, collectWriteHandlerQns, MAX_TRANSFER_DEPTH, SECURITY_BASELINE_FEATURE_NAMES, type ValidateBootOptions, validateAppCustomScreenWriteQns, validateBoot, } from "./boot-validator.ts";
+export { bridgeStub } from "./bridge-stub.ts";
+export { type BuildAppSchemaOptions, buildAppSchema } from "./build-app-schema.ts";
+export type { ConfigFeatureSchema } from "./build-config-feature-schema.ts";
+export { buildConfigFeatureSchema, SETTINGS_HUB_FEATURE, SETTINGS_HUB_WORKSPACE, } from "./build-config-feature-schema.ts";
+export { buildTarget } from "./build-target.ts";
+export { type PendingChange, parseChangesetChanges } from "./changeset-changes.ts";
+export { access, createSeed, createSystemConfig, createSystemSeed, createTenantConfig, createTenantSeed, createUserConfig, createUserSeed, isEncryptedAtRest, } from "./config-helpers.ts";
+export type { SystemHookName } from "./constants.ts";
+export { ConcurrencyModes, ConfigScopes, LifecycleHookTypes, MessageKind, OnDeleteStrategies, SystemHookNames, SystemHookPriorities, TENANT_CURRENCY_CONFIG_KEY, tenantChannel, } from "./constants.ts";
+export type { App, AppConfig } from "./create-app.ts";
+export { createApp } from "./create-app.ts";
+export { mayOverrideTenant, tenantOverrideDenied } from "./cross-tenant.ts";
+export { dedupeFeatures } from "./dedupe-features.ts";
+export { defineFeature } from "./define-feature.ts";
+export type { PagedQueryHandlerDefinition, QueryHandlerDefinition, StreamHandlerDefinition, WriteHandlerDefinition, WriteHandlerInput, } from "./define-handler.ts";
+export { definePagedQueryHandler, defineQueryHandler, defineWriteHandler, isPagedQueryHandler, } from "./define-handler.ts";
+export { defineRoles } from "./define-roles.ts";
+export { defineStep, getStep, listStepKinds } from "./define-step.ts";
+export type { WorkflowDefinition, WorkflowInput, WorkflowTrigger } from "./define-workflow.ts";
+export { computeDefinitionFingerprint, defineWorkflow } from "./define-workflow.ts";
+export type { ToggleReader } from "./effective-features.ts";
+export { computeEffectiveFeatures, isToggleableFeature } from "./effective-features.ts";
+export { createEntityExecutor, defineEntityCreateHandler, defineEntityDeleteHandler, defineEntityDetailHandler, defineEntityListHandler, defineEntityQueryHandler, defineEntityRestoreHandler, defineEntityUpdateHandler, defineEntityWriteHandler, defineProjectionQueryHandler, type EntityCrudRegistrar, entityListSchema, MAX_LIST_LIMIT, type RegisterEntityCrudOptions, } from "./entity-handlers.ts";
+export { declareEscapeHatch } from "./escape-hatch-declaration.ts";
+export { type CreateEventDefOptions, createEventDef } from "./event-def.ts";
+export type { EmitCtx } from "./event-helpers.ts";
+export { emitEvent, typedPayload } from "./event-helpers.ts";
+export type { KumikoExtensionName, TenantResourceExtensionName } from "./extension-names.ts";
+export { EXT_ASSIGNABLE_ROLE, EXT_DERIVATIVE_OVERLAY_RESOLVER, EXT_DERIVATIVE_PUBLIC_PREDICATE, EXT_DERIVATIVE_RENDERER, EXT_EXTERNAL_RESOURCE, EXT_FILE_PROVIDER, EXT_INFRA_RESOURCE, EXT_PRINCIPAL_STATUS, EXT_SEARCH_ADAPTER, EXT_STORAGE_PROVIDER, EXT_TENANT_DATA, EXT_TENANT_LIFECYCLE_STATUS, EXT_USER_DATA, EXT_USER_DATA_ORDER, FILE_PROVIDER_CONFIG_KEY, FILE_STORAGE_PROVIDER_BOOT_SENTINEL, FILE_STORAGE_PROVIDER_ENV, TENANT_MEMBERSHIPS_QUERY, } from "./extension-names.ts";
+export { EXTENSION_SELECTOR_HINT_KEY, extensionSelectorTargets, SELECTED_EXTENSIONS_QUERY, selectablePluginIds, } from "./extension-selector-plugins.ts";
+export { extensionUsageEscapeHatchReason } from "./extensions/escape-hatch-usage.ts";
+export type { StorageProviderDestroyTenantHook, StorageProviderExtensionHooks, StorageProviderHookCtx, } from "./extensions/storage-provider.ts";
+export { isTenantDataExtensionHooks, type TenantDataDestroyHook, type TenantDataExtensionHooks, type TenantDataHookCtx, } from "./extensions/tenant-data.ts";
+export { isTenantResourceExtensionHooks, type TenantDestroyHookResult, type TenantResourceDestroyHook, type TenantResourceExtensionHooks, type TenantResourceHookCtx, } from "./extensions/tenant-resource.ts";
+export type { TenantUserModel, UserDataDeleteHook, UserDataDeleteStrategy, UserDataExportHook, UserDataExportSnippet, UserDataExtensionHooks, UserDataExtensionOptions, UserDataHookCtx, UserDataStorageProvider, } from "./extensions/user-data.ts";
+export { createBigIntField, createBooleanField, createDateField, createDecimalField, createDerivedField, createEmbeddedField, createEmbeddedListField, createEntity, createFileField, createFilesField, createImageField, createImagesField, createJsonbField, createLocatedTimestampField, createLongTextField, createMoneyField, createMultiSelectField, createNumberField, createSelectField, createTextField, createTimestampField, createTzField, } from "./factories.ts";
+export type { AddEntityArgs, AddHookArgs, AddRelationArgs, AddWriteHandlerArgs, FeaturePatcher, FeaturePattern, FeaturePatternKind, FormFieldLabel, FormFieldSpec, FormInputType, HandlerHeaderUpdate, ParseError, ParseResult, PatternCategory, PatternChange, PatternChangeIssue, PatternChangesParseResult, PatternFormSchema, PatternId, RenderFeatureFileInput, SourceLocation, } from "./feature-ast/index.ts";
+export { addPattern, applyChanges, createFeaturePatcher, getPatternSchema, groupByCategory, PATTERN_LIBRARY, parseFeatureFile, parsePatternChanges, parseSourceFile, removePattern, renderFeatureFile, renderPattern, replacePattern, updatePattern, VERSION_HEADER, } from "./feature-ast/index.ts";
+export { type ChangelogEntry, type ChangelogType, compareVersions, type FeatureChangelog, filterEntriesAfter, parseFeatureChangelog, sortEntries, validateChangelog, } from "./feature-changelog.ts";
+export { type BuildManifestOptions, buildManifestFromRegistry, type FeatureManifest, type ManifestConfigKey, type ManifestExtension, type ManifestFeature, type ManifestSecret, type ManifestSystemEvent, serializeManifest, } from "./feature-manifest.ts";
+export { checkWriteFieldOwnership, checkWriteFieldRoles, filterReadFields, maskWriteOnlyFields, } from "./field-access.ts";
+export { HANDLER_FIELD_REFERENCES_META_KEY, type HandlerFieldPathSegment, type HandlerFieldReference, type HandlerFieldReferenceAtPath, type HandlerFieldReferenceMeta, handlerFieldReference, handlerFieldReferences, readHandlerFieldReferences, } from "./handler-field-references.ts";
+export { resolveName, withResponseData } from "./handler-helpers.ts";
+export { i18nKey } from "./i18n-key.ts";
+export { buildSessionRoles, findForbiddenMembershipRole, isForbiddenMembershipRole, stripForbiddenMembershipRoles, } from "./membership-roles.ts";
+export type { OwnershipClause, OwnershipMap, OwnershipRef, OwnershipRule } from "./ownership.ts";
+export { buildOwnershipClause, combineClauses, from, normalizeAccessEntry, userCanCreateFieldRow, userCanReadFieldRow, userCanWriteFieldRow, } from "./ownership.ts";
+export type { ParsedRefTarget } from "./parse-ref-target.ts";
+export { parseRefTarget, parseRefTargetEntityName } from "./parse-ref-target.ts";
+export { buildPipelineSteps, stepsPipeline } from "./pipeline.ts";
+export { projectAppSchemaForRoles } from "./project-app-schema-for-roles.ts";
+export { defineApply, defineMspApply, setFields } from "./projection-helpers.ts";
+export type { BuiltinQnType, ParsedQn, QnType } from "./qualified-name.ts";
+export { isValidQn, parseQn, QnTypes, qn, toKebab } from "./qualified-name.ts";
+export { readClaim } from "./read-claim.ts";
+export { createRegistry } from "./registry.ts";
+export { qualifyTranslationKey } from "./registry-ingest.ts";
+export type { ClampInfo, ResolveOptions } from "./resolve-config-or-param.ts";
+export { resolveConfigOrParam } from "./resolve-config-or-param.ts";
+export type { AssignableAppRoles, AssignableFromRole } from "./role-assignment.ts";
+export { assignableAppRolesFromUsages, assignableAppRolesOf, BUILT_IN_MEMBERSHIP_ROLES, canActorAssignRole, findForbiddenRoleAssignment, isAssignableByRole, mergeAssignedRoles, } from "./role-assignment.ts";
+export { runsInLane } from "./run-in.ts";
+export type { StepListOutcome } from "./run-pipeline.ts";
+export { runPipeline, runStepList } from "./run-pipeline.ts";
+export { buildInsertSchema, buildUpdateSchema, fieldToZod, SYSTEM_ONLY_JSON_SCHEMA_KEY, } from "./schema-builder.ts";
+export type { UnavailableSelectOption } from "./screen-helpers.ts";
+export { availableSelectOptions, findUnavailableSelectOptions, isExtensionEditSection, isFieldsEditSection, isWriteFormEditSection, normalizeEditField, normalizeListColumn, sectionFieldSpecs, } from "./screen-helpers.ts";
+export type { TransitionGraph } from "./state-machine.ts";
+export { defineTransitions, guardTransition } from "./state-machine.ts";
+export { evaluateEventMatch } from "./steps/_event-match.ts";
+export { STEP_DISPATCH_AGGREGATE_TYPE, STEP_DISPATCH_FAILED_TYPE, STEP_DISPATCH_REQUESTED_TYPE, STEP_DISPATCHED_TYPE, SUSPEND_SENTINEL, WORKFLOW_AGGREGATE_TYPE, WORKFLOW_RESUMED_TYPE, WORKFLOW_RETRY_SCHEDULED_TYPE, WORKFLOW_RUN_COMPLETED_TYPE, WORKFLOW_RUN_FAILED_TYPE, WORKFLOW_RUN_STARTED_TYPE, WORKFLOW_WAITING_FOR_EVENT_TYPE, WORKFLOW_WAITING_TYPE, } from "./steps/_step-dispatch-constants.ts";
+export { describeWorkflowStepError } from "./steps/describe-workflow-step-error.ts";
+export { unwrapWorkflowStepError, WorkflowStepError } from "./steps/workflow-step-error.ts";
+export { WORKFLOW_SYSTEM_EVENT_DEFS } from "./steps/workflow-system-events.ts";
+export { ANONYMOUS_ROLE, ANONYMOUS_USER_ID, createAnonymousUser, createSystemUser, SYSTEM_ROLE, SYSTEM_USER_ID, } from "./system-user.ts";
+export { assertNotificationVariables, templateVariable, templateVariablesToZod, } from "./template-variables.ts";
+export { type EffectiveFeaturesResolver, findTierResolverUsage, isTierResolverPlugin, requireTierResolverPlugin, TENANT_TIER_RESOLVER_EXT, type TierResolverPlugin, type TrialGate, } from "./tier-resolver-extension.ts";
+export { findOverDeepTransferChain, resolveTransferAdjacency as resolveEntityTransferAdjacency, type TransferAdjacency, type TransferEdge, type TransferEdgeLink, } from "./transfer-adjacency.ts";
+export { isSystemTenant, isUuid, parseTenantId, SYSTEM_TENANT_ID } from "./types/identifiers.ts";
+export type { AccessRule, ActionFormScreenDefinition, ActiveMembership, ActiveMembershipRejection, ActiveMembershipResult, AgentExposure, AgentHandlerHints, AgentRisk, AppContext, AppendEventArgs, AppendEventFn, AuthClaimsContext, AuthClaimsFn, AuthClaimsHookDef, BeforeTransactionPhase, BeforeTransactionResult, BelongsToRelation, BigIntFieldDef, BooleanFieldDef, BootOptionName, CamelToKebab, ChatSendFailureCode, ClaimKeyDefinition, ClaimKeyHandle, ClaimKeyJsType, ClaimKeyType, ConcurrencyMode, ConfigAccessor, ConfigAccessorFactory, ConfigBacking, ConfigCascade, ConfigCascadeLevel, ConfigDefinition, ConfigEditScreenDefinition, ConfigKeyAccess, ConfigKeyDefinition, ConfigKeyHandle, ConfigKeyType, ConfigMask, ConfigResolver, ConfigScope, ConfigSecretsReader, ConfigSeedDef, ConfigStoredRow, ConfigStoredRowWithSource, ConfigValidateContext, ConfigValidateFn, ConfigValue, ConfigValueSource, ConfigValueWithSource, ContentCollectionDefinition, CreateSeedOptions, CreateTenantSeedOptions, CreateUserSeedOptions, CustomScreenDefinition, CustomScreenRoute, DashboardChartPanel, DashboardCustomPanel, DashboardDateParam, DashboardFeedPanel, DashboardFilterDefinition, DashboardI18nText, DashboardListPanel, DashboardMoneyParam, DashboardPanelDefinition, DashboardPanelVisibility, DashboardProgressListPanel, DashboardScreenDefinition, DashboardScreenPanel, DashboardStatGroupPanel, DashboardStatPanel, DashboardText, DashboardTextParam, DashboardValueFormat, DateFieldDef, DecimalFieldDef, DeleteContext, DeliveryErrorCode, DeliveryFailureCode, DeliverySkipReason, DeriveContext, DerivedFieldDef, DerivedFieldsMap, DerivedValueType, EditExtensionSection, EditFieldPrefill, EditFieldSpec, EditFieldsSection, EditLayout, EditRelatedListSection, EditSectionSpec, EmbeddedListEditSpec, EntityDefinition, EntityEditAction, EntityEditActionPlacement, EntityEditScreenDefinition, EntityId, EntityListExpandableRow, EntityListScreenDefinition, EntityObjectDefinition, EntityRef, EntityRelations, EscapeHatchAuditSink, EscapeHatchDeclaration, EscapeHatchKind, EscapeHatchReporter, EscapeHatchTarget, EscapeHatchUseEvent, EventDef, ExtensionOptionsArgs, ExtensionOptionsFor, FeatureDefinition, FeatureRegistrar, FieldAccess, FieldCondition, FieldDefinition, FieldFormatRegistry, FieldIconKey, FieldRenderer, FileFieldDef, FilesFieldDef, Findability, FormatSpec, FormWidth, HandlerContext, HasManyRelation, HookDefinition, HookMap, ImageFieldDef, ImagesFieldDef, JobBackoff, JobBackoffStrategy, JobContext, JobDefinition, JobHandlerFn, JobTrigger, JobTriggerEvent, JsonbFieldDef, KumikoEntityTypeMap, KumikoEventTypeMap, KumikoExtensionOptionsMap, KumikoHandlerPayloadMap, KumikoHandlerResultMap, LifecycleHookType, ListColumnSpec, ListFacetSpec, ListPaginationMode, ListSortDir, ListSortSpec, LongTextFindability, ManyToManyRelation, MaxPerTenantOptions, MemberReader, MetricNavigate, MetricSpec, MspErrorMode, MspErrorPolicy, MultiSelectFieldDef, MultiStreamApplyFn, MultiStreamProjectionDefinition, NameOrRef, NavDefinition, NavIconKey, NotificationDataFn, NotificationDefinition, NotificationLocalizedTemplate, NotificationRecipientFn, NotificationRecordMapping, NotificationTemplateBody, NotificationTemplateFn, NotificationTemplateMeta, NotifyDeferred, NotifyDelivery, NotifyDeliveryStatus, NotifyDispatched, NotifyFactory, NotifyFn, NotifyJobDispatcher, NotifyOptions, NotifyPriority, NotifyResult, NumberFieldDef, OnDeleteStrategy, OpenToAllAccessRule, OpenToAllDeclaration, OpenToAllPersonalData, ParentRefDef, PersonalAnnotations, PersonalAnnotationsLongText, PersonalAnnotationsNoFind, PersonalSubject, PlatformComponent, PluralForms, PostDeleteHookFn, PostSaveHookFn, PreDeleteHookFn, PreparedWriteEvent, PreQueryHookFn, PreSaveHookFn, ProjectionDefinition, ProjectionDetailScreenDefinition, ProjectionListScreenDefinition, ProjectionTable, QualifiedEventName, QueryEvent, QueryHandlerDef, QueryHandlerFn, RateLimitPer, RecordHeaderSpec, RecordHeaderSubtitlePart, ReferenceDataDef, Registry, RelationDefinition, ResolvedPiiFlags, RetentionDef, RoleAccessPersonalData, RoleAccessRule, RowAction, RowActionNavigate, RowActionNavigateBase, RowActionWriteHandler, RowFieldExtractor, SaveContext, ScreenDefinition, ScreenFilter, ScreenFilterOp, ScreenNavSugar, ScreenSlots, SecretKeyDefinition, SecretKeyHandle, SecretMintConfirmStep, SecretMintScreenDefinition, SecretNamespaceDefinition, SecretNamespaceHandle, SecretNamespaceOptions, SecretReveal, SecretRevealField, SecretsEditScreenDefinition, SecretsEditSection, SelectFieldDef, SessionUser, SessionUserOrigin, StackBootRequirement, StreamHandlerDef, StreamHandlerFn, Subscribe, TargetRef, TemplateListVariableDef, TemplateScalarVariableDef, TemplateVariableDef, TemplateVariables, TenantId, TenantWriteTarget, TextFieldDef, ToolbarAction, TranslationEntry, TranslationKeys, TranslationsDef, TranslationValue, TreeAction, TreeActionDef, TreeActionsHandle, TreeChildrenSubscribe, TreeNode, TreeNodeState, UnitKey, UnsafeAppendEventFn, ValidationError, ValidationHookFn, WorkspaceDefinition, WriteEvent, WriteHandlerDef, WriteHandlerFn, WriteResult, } from "./types/index.ts";
+export { DEFAULT_CURRENCIES, DEFAULT_LOCALES, DELIVERY_FAILURE_CODES, DELIVERY_SKIP_REASONS, HookPhases, HTTP_ERROR_CODE_PATTERN, isAgentVisibleScreen, isDeliveryErrorCode, isOpenToAllGranted, resolveAgentExposure, } from "./types/index.ts";
+export type { AwaitedEventType, PipelineBuildCtx, PipelineCtx, PipelineDef, StepBuilder, StepDef, StepFailureStrategy, StepInstance, StepKind, StepNamespace, StepResolver, } from "./types/step.ts";
+export { runValidation } from "./validation.ts";

package/dist/engine/index.js

@@ -28,6 +28,7 @@ export { createEntityExecutor, defineEntityCreateHandler, defineEntityDeleteHand
 // unverändert lauffähig.
 defineEntityQueryHandler, defineEntityRestoreHandler, defineEntityUpdateHandler, defineEntityWriteHandler, defineProjectionQueryHandler, entityListSchema, MAX_LIST_LIMIT, } from "./entity-handlers.js";
 export { declareEscapeHatch } from "./escape-hatch-declaration.js";
+export { createEventDef } from "./event-def.js";
 export { emitEvent, typedPayload } from "./event-helpers.js";
 export { EXT_ASSIGNABLE_ROLE, EXT_DERIVATIVE_OVERLAY_RESOLVER, EXT_DERIVATIVE_PUBLIC_PREDICATE, EXT_DERIVATIVE_RENDERER, EXT_EXTERNAL_RESOURCE, EXT_FILE_PROVIDER, EXT_INFRA_RESOURCE, EXT_PRINCIPAL_STATUS, EXT_SEARCH_ADAPTER, EXT_STORAGE_PROVIDER, EXT_TENANT_DATA, EXT_TENANT_LIFECYCLE_STATUS, EXT_USER_DATA, EXT_USER_DATA_ORDER, FILE_PROVIDER_CONFIG_KEY, FILE_STORAGE_PROVIDER_BOOT_SENTINEL, FILE_STORAGE_PROVIDER_ENV, TENANT_MEMBERSHIPS_QUERY, } from "./extension-names.js";
 export { EXTENSION_SELECTOR_HINT_KEY, extensionSelectorTargets, SELECTED_EXTENSIONS_QUERY, selectablePluginIds, } from "./extension-selector-plugins.js";

package/dist/engine/instruction-fields.d.ts

@@ -1,2 +1,2 @@
-import type { EntityDefinition } from "./types/index.js";
+import type { EntityDefinition } from "./types/index.ts";
 export declare function instructionFieldNames(entity: EntityDefinition): readonly string[];