@cosmicdrift/kumiko-framework 0.369.0 → 0.370.0

package/dist/pipeline/handler-access-error.d.ts

@@ -1,3 +1,3 @@
-import type { SessionUser } from "../engine/types/index.js";
-import { type KumikoError } from "../errors/index.js";
+import type { SessionUser } from "../engine/types/index.ts";
+import { type KumikoError } from "../errors/index.ts";
 export declare function handlerAccessError(user: Pick<SessionUser, "roles">, type: string): KumikoError;

package/dist/pipeline/index.d.ts

@@ -1,42 +1,42 @@
-export type { EscapeHatchReportWindow } from "../observability/escape-hatch-report.js";
-export { createEscapeHatchReporter, createEscapeHatchReportWindow, ESCAPE_HATCH_USED_SIGNAL, fallbackEscapeHatchReporter, flushEscapeHatchAudits, reportEscapeHatchUse, UNATTRIBUTED_ACTOR, withEscapeHatchAuditScope, } from "../observability/escape-hatch-report.js";
-export { normalizePayloadBucketValue } from "../rate-limit/bucket.js";
-export type { AppendDomainEventCoreDeps } from "./append-event-core.js";
-export { appendDomainEventCore } from "./append-event-core.js";
-export type { ResolveAuthClaimsArgs } from "./auth-claims-resolver.js";
-export { resolveAuthClaims } from "./auth-claims-resolver.js";
-export { createCascadeDeleteHook } from "./cascade-handler.js";
-export type { Dispatcher } from "./dispatcher.js";
-export { createDispatcher, dispatcherToWriteRef } from "./dispatcher.js";
-export type { FailedWriteResult } from "./dispatcher-utils.js";
-export { isFailedWriteResult } from "./dispatcher-utils.js";
-export type { DistributedLock } from "./distributed-lock.js";
-export { createDistributedLock } from "./distributed-lock.js";
-export type { EntityCache, EntityCacheOptions } from "./entity-cache.js";
-export { createEntityCache } from "./entity-cache.js";
-export type { ConsumerStatus, PendingGapEntry } from "./event-consumer-state.js";
-export { ConsumerStatuses, createEventConsumerStateTable, eventConsumerStateTable, SHARED_INSTANCE_SENTINEL, } from "./event-consumer-state.js";
-export type { EventDedup } from "./event-dedup.js";
-export { createEventDedup } from "./event-dedup.js";
-export type { ConsumerProgress, ConsumerRecoveryState, DispatcherPassResult, EventConsumer, EventConsumerBatchHandler, EventConsumerHandler, EventDispatcher, EventDispatcherOptions, } from "./event-dispatcher.js";
-export { createEventDispatcher, disableConsumer, enableConsumer, getAllConsumerProgress, getConsumerState, listConsumersWithState, restartConsumer, skipPoisonEvent, } from "./event-dispatcher.js";
-export type { ConsumerCursor } from "./event-dispatcher-delivery.js";
-export { selectConsumerCursorForUpdate } from "./event-dispatcher-delivery.js";
-export type { PruneEventsOptions, PruneEventsResult } from "./event-retention.js";
-export { ConsumerLagError, pruneEvents } from "./event-retention.js";
-export type { IdempotencyGuard } from "./idempotency.js";
-export { createIdempotencyGuard } from "./idempotency.js";
-export { assertInstructionFieldWriteAllowed, assertIrreversibleOperationAllowed, isIrreversibleEntityVerb, } from "./irreversible-operation-gate.js";
-export type { LifecycleHooks, SystemHookDef, SystemHooks } from "./lifecycle-pipeline.js";
-export { createLifecycleHooks } from "./lifecycle-pipeline.js";
-export type { MspRebuildDeps } from "./msp-rebuild.js";
-export { rebuildMultiStreamProjection } from "./msp-rebuild.js";
-export type { MultiStreamApplyContext, MultiStreamApplyContextDeps, } from "./multi-stream-apply-context.js";
-export { createMultiStreamApplyContext } from "./multi-stream-apply-context.js";
-export { assertNotifyTargetsOwnTenant, createDeferringNotify } from "./notify-scope.js";
-export type { ProjectionProgress, RebuildResult } from "./projection-rebuild.js";
-export { getAllProjectionProgress, getProjectionState, listProjectionsWithState, rebuildProjection, } from "./projection-rebuild.js";
-export type { ProjectionStatus } from "./projection-state.js";
-export { createProjectionStateTable, ProjectionStatuses, projectionStateTable, } from "./projection-state.js";
-export { runProjectionsForEvent } from "./projections-runner.js";
-export { ACCESS_INVALIDATION_CONSUMER_NAME, createAccessInvalidationEventConsumer, createSearchEventConsumer, createSseBroadcastEventConsumer, SEARCH_CONSUMER_NAME, SSE_BROADCAST_CONSUMER_NAME, } from "./system-hooks.js";
+export type { EscapeHatchReportWindow } from "../observability/escape-hatch-report.ts";
+export { createEscapeHatchReporter, createEscapeHatchReportWindow, ESCAPE_HATCH_USED_SIGNAL, fallbackEscapeHatchReporter, flushEscapeHatchAudits, reportEscapeHatchUse, UNATTRIBUTED_ACTOR, withEscapeHatchAuditScope, } from "../observability/escape-hatch-report.ts";
+export { normalizePayloadBucketValue } from "../rate-limit/bucket.ts";
+export type { AppendDomainEventCoreDeps } from "./append-event-core.ts";
+export { appendDomainEventCore } from "./append-event-core.ts";
+export type { ResolveAuthClaimsArgs } from "./auth-claims-resolver.ts";
+export { resolveAuthClaims } from "./auth-claims-resolver.ts";
+export { createCascadeDeleteHook } from "./cascade-handler.ts";
+export type { Dispatcher } from "./dispatcher.ts";
+export { createDispatcher, dispatcherToWriteRef } from "./dispatcher.ts";
+export type { FailedWriteResult } from "./dispatcher-utils.ts";
+export { isFailedWriteResult } from "./dispatcher-utils.ts";
+export type { DistributedLock } from "./distributed-lock.ts";
+export { createDistributedLock } from "./distributed-lock.ts";
+export type { EntityCache, EntityCacheOptions } from "./entity-cache.ts";
+export { createEntityCache } from "./entity-cache.ts";
+export type { ConsumerStatus, PendingGapEntry } from "./event-consumer-state.ts";
+export { ConsumerStatuses, createEventConsumerStateTable, eventConsumerStateTable, SHARED_INSTANCE_SENTINEL, } from "./event-consumer-state.ts";
+export type { EventDedup } from "./event-dedup.ts";
+export { createEventDedup } from "./event-dedup.ts";
+export type { ConsumerProgress, ConsumerRecoveryState, DispatcherPassResult, EventConsumer, EventConsumerBatchHandler, EventConsumerHandler, EventDispatcher, EventDispatcherOptions, } from "./event-dispatcher.ts";
+export { createEventDispatcher, disableConsumer, enableConsumer, getAllConsumerProgress, getConsumerState, listConsumersWithState, restartConsumer, skipPoisonEvent, } from "./event-dispatcher.ts";
+export type { ConsumerCursor } from "./event-dispatcher-delivery.ts";
+export { selectConsumerCursorForUpdate } from "./event-dispatcher-delivery.ts";
+export type { PruneEventsOptions, PruneEventsResult } from "./event-retention.ts";
+export { ConsumerLagError, pruneEvents } from "./event-retention.ts";
+export type { IdempotencyGuard } from "./idempotency.ts";
+export { createIdempotencyGuard } from "./idempotency.ts";
+export { assertInstructionFieldWriteAllowed, assertIrreversibleOperationAllowed, isIrreversibleEntityVerb, } from "./irreversible-operation-gate.ts";
+export type { LifecycleHooks, SystemHookDef, SystemHooks } from "./lifecycle-pipeline.ts";
+export { createLifecycleHooks } from "./lifecycle-pipeline.ts";
+export type { MspRebuildDeps } from "./msp-rebuild.ts";
+export { rebuildMultiStreamProjection } from "./msp-rebuild.ts";
+export type { MultiStreamApplyContext, MultiStreamApplyContextDeps, } from "./multi-stream-apply-context.ts";
+export { createMultiStreamApplyContext } from "./multi-stream-apply-context.ts";
+export { assertNotifyTargetsOwnTenant, createDeferringNotify } from "./notify-scope.ts";
+export type { ProjectionProgress, RebuildResult } from "./projection-rebuild.ts";
+export { getAllProjectionProgress, getProjectionState, listProjectionsWithState, rebuildProjection, } from "./projection-rebuild.ts";
+export type { ProjectionStatus } from "./projection-state.ts";
+export { createProjectionStateTable, ProjectionStatuses, projectionStateTable, } from "./projection-state.ts";
+export { runProjectionsForEvent } from "./projections-runner.ts";
+export { ACCESS_INVALIDATION_CONSUMER_NAME, createAccessInvalidationEventConsumer, createSearchEventConsumer, createSseBroadcastEventConsumer, SEARCH_CONSUMER_NAME, SSE_BROADCAST_CONSUMER_NAME, } from "./system-hooks.ts";

package/dist/pipeline/irreversible-operation-gate.d.ts

@@ -1,4 +1,4 @@
-import type { EntityDefinition } from "../engine/types/index.js";
+import type { EntityDefinition } from "../engine/types/index.ts";
 export declare function isIrreversibleEntityVerb(verb: "delete" | "forget", entity: EntityDefinition): boolean;
 export declare function assertIrreversibleOperationAllowed(operation: string): void;
 export declare function assertInstructionFieldWriteAllowed(entityName: string, verb: "create" | "update", writtenFieldNames: readonly string[], instructionFieldNames: readonly string[]): void;

package/dist/pipeline/lifecycle-pipeline.d.ts

@@ -1,5 +1,5 @@
-import type { AppContext, DeleteContext, HookPhase, PostDeleteBatchHookFn, PostDeleteHookFn, PostSaveBatchHookFn, PostSaveHookFn, PreDeleteHookFn, PreSaveHookFn, Registry, SaveContext } from "../engine/types/index.js";
-import type { EventDedup } from "./event-dedup.js";
+import type { AppContext, DeleteContext, HookPhase, PostDeleteBatchHookFn, PostDeleteHookFn, PostSaveBatchHookFn, PostSaveHookFn, PreDeleteHookFn, PreSaveHookFn, Registry, SaveContext } from "../engine/types/index.ts";
+import type { EventDedup } from "./event-dedup.ts";
 export type SystemHookDef<TFn> = {
     readonly name: string;
     readonly priority: number;

package/dist/pipeline/member-read-only-transaction.d.ts

@@ -1,3 +1,3 @@
-import type { DbTx } from "../db/connection.js";
-import { type DispatchContext } from "./dispatch-shared.js";
+import type { DbTx } from "../db/connection.ts";
+import { type DispatchContext } from "./dispatch-shared.ts";
 export declare function runInMemberReadOnlyTransaction<T>(ctx: DispatchContext, tx: DbTx | undefined, fn: (readOnlyTx: DbTx) => Promise<T>): Promise<T>;

package/dist/pipeline/member-reader.d.ts

@@ -1,7 +1,7 @@
-import type { DbTx } from "../db/connection.js";
-import type { TenantId } from "../engine/types/identifiers.js";
-import type { MemberReader } from "../engine/types/index.js";
-import { type ActiveMembershipPolicy } from "./active-membership.js";
-import { type DispatchContext } from "./dispatch-shared.js";
+import type { DbTx } from "../db/connection.ts";
+import type { TenantId } from "../engine/types/identifiers.ts";
+import type { MemberReader } from "../engine/types/index.ts";
+import { type ActiveMembershipPolicy } from "./active-membership.ts";
+import { type DispatchContext } from "./dispatch-shared.ts";
 export declare const BACKGROUND_READ_POLICY: ActiveMembershipPolicy;
 export declare function createMemberReaderFn(ctx: DispatchContext, tenantId: TenantId, tx?: DbTx): MemberReader;

package/dist/pipeline/msp-rebuild.d.ts

@@ -1,7 +1,7 @@
-import type { DbConnection } from "../db/connection.js";
-import type { Registry } from "../engine/types/index.js";
-import type { Meter } from "../observability/types/metric.js";
-import type { RebuildResult } from "./projection-rebuild.js";
+import type { DbConnection } from "../db/connection.ts";
+import type { Registry } from "../engine/types/index.ts";
+import type { Meter } from "../observability/types/metric.ts";
+import type { RebuildResult } from "./projection-rebuild.ts";
 export type MspRebuildDeps = {
     readonly db: DbConnection;
     readonly registry: Registry;

package/dist/pipeline/multi-stream-apply-context.d.ts

@@ -1,9 +1,9 @@
 import type { DerivativesContext } from "@cosmicdrift/kumiko-types/derivatives-types";
 import type { MultiStreamApplyContext } from "@cosmicdrift/kumiko-types/multi-stream-apply-context-types";
 import type { SecretsContext } from "@cosmicdrift/kumiko-types/secrets-types";
-import type { DbRunner } from "../db/connection.js";
-import type { Registry, TenantId } from "../engine/types/index.js";
-import type { FileContext } from "../files/file-handle.js";
+import type { DbRunner } from "../db/connection.ts";
+import type { Registry, TenantId } from "../engine/types/index.ts";
+import type { FileContext } from "../files/file-handle.ts";
 export type { MultiStreamApplyContext } from "@cosmicdrift/kumiko-types/multi-stream-apply-context-types";
 export type MultiStreamApplyContextDeps = {
     readonly registry: Registry;

package/dist/pipeline/notify-scope.d.ts

@@ -1,6 +1,6 @@
-import type { TenantId } from "../engine/types/identifiers.js";
-import type { NotifyFn, NotifyOptions, Registry } from "../engine/types/index.js";
-import type { AfterCommitHook } from "./dispatcher-utils.js";
+import type { TenantId } from "../engine/types/identifiers.ts";
+import type { NotifyFn, NotifyOptions, Registry } from "../engine/types/index.ts";
+import type { AfterCommitHook } from "./dispatcher-utils.ts";
 export declare function assertNotifyTargetsOwnTenant(options: NotifyOptions, tenantId: TenantId): void;
 type DeferringNotifyDeps = {
     readonly registry: Pick<Registry, "getAllNotifications"> | undefined;

package/dist/pipeline/pending-gap-ranges.d.ts

@@ -1,5 +1,5 @@
-import type { PendingIdRange } from "../db/queries/event-store.js";
-import type { PendingGapEntry } from "./event-consumer-state.js";
+import type { PendingIdRange } from "../db/queries/event-store.ts";
+import type { PendingGapEntry } from "./event-consumer-state.ts";
 export declare function toIdRanges(gaps: readonly PendingGapEntry[]): PendingIdRange[];
 export declare function rangeContainsId(range: PendingGapEntry, id: bigint): boolean;
 export declare function isRangeFullyCoveredByFetch(range: PendingGapEntry, truncated: boolean, maxFetchedId: bigint | null): boolean;

package/dist/pipeline/pre-handler-gates.d.ts

@@ -1,6 +1,6 @@
-import type { SessionUser, WriteHandlerDef } from "../engine/types/index.js";
-import { type WriteFailure } from "../errors/index.js";
-import type { DispatchContext } from "./dispatch-shared.js";
+import type { SessionUser, WriteHandlerDef } from "../engine/types/index.ts";
+import { type WriteFailure } from "../errors/index.ts";
+import type { DispatchContext } from "./dispatch-shared.ts";
 export type PreHandlerGateMode = "charge" | "recheck";
 export type PreHandlerGateResult = {
     readonly isSuccess: true;

package/dist/pipeline/pre-transaction-reservations.d.ts

@@ -1,8 +1,8 @@
 import type { ReservationHandle } from "@cosmicdrift/kumiko-types/handlers";
-import type { SessionUser, WriteHandlerDef } from "../engine/types/index.js";
-import { type WriteErrorInfo } from "../errors/index.js";
-import type { BatchCommand, DispatchContext } from "./dispatch-shared.js";
-import type { WriteOrigin } from "./write-origin.js";
+import type { SessionUser, WriteHandlerDef } from "../engine/types/index.ts";
+import { type WriteErrorInfo } from "../errors/index.ts";
+import type { BatchCommand, DispatchContext } from "./dispatch-shared.ts";
+import type { WriteOrigin } from "./write-origin.ts";
 type ReservationConfirm = ReservationHandle["confirmInTransaction"];
 export type ConsumedReservation = {
     readonly confirmInTransaction: ReservationConfirm | undefined;

package/dist/pipeline/projection-rebuild.d.ts

@@ -1,7 +1,7 @@
 /// <reference types="temporal-polyfill/global" preserve="true" />
-import type { DbConnection } from "../db/connection.js";
-import type { Registry } from "../engine/types/index.js";
-import type { Meter } from "../observability/types/metric.js";
+import type { DbConnection } from "../db/connection.ts";
+import type { Registry } from "../engine/types/index.ts";
+import type { Meter } from "../observability/types/metric.ts";
 export declare const REBUILD_BATCH_SIZE = 1000;
 export type RebuildResult = {
     readonly projection: string;

package/dist/pipeline/projection-state.d.ts

@@ -1,4 +1,4 @@
-import type { DbConnection } from "../db/connection.js";
+import type { DbConnection } from "../db/connection.ts";
 export declare const projectionStateTable: import("@cosmicdrift/kumiko-types/schema-table-types").SchemaTable;
 export declare const ProjectionStatuses: {
     readonly idle: "idle";

package/dist/pipeline/projections-runner.d.ts

@@ -1,6 +1,6 @@
-import type { DbRunner } from "../db/index.js";
-import type { LifecycleResult, Registry } from "../engine/types/index.js";
-import type { StoredEvent } from "../event-store/index.js";
+import type { DbRunner } from "../db/index.ts";
+import type { LifecycleResult, Registry } from "../engine/types/index.ts";
+import type { StoredEvent } from "../event-store/index.ts";
 export declare function runProjections(result: LifecycleResult, registry: Registry, runner: DbRunner | undefined): Promise<void>;
 export declare function hasLiveProjectionsForEvent(event: StoredEvent, registry: Registry): boolean;
 export declare function runProjectionsForEvent(event: StoredEvent, registry: Registry, tx: DbRunner): Promise<void>;

package/dist/pipeline/projections-runner.js

@@ -12,16 +12,15 @@ import { InternalError } from "../errors/index.js";
 //   through the dispatcher gets its projections, no opt-in needed.
 //
 // Contracts:
-//   - Projections receive the exact StoredEvent from the executor. If you
-//     hand-craft a SaveContext (tests, non-executor writes), just don't set
-//     `event` and the runner no-ops.
+//   - Projections receive the exact StoredEvent from the executor.
 //   - `runner` is the caller's already-resolved DbRunner — projections-runner
 //     has no TenantDb access of its own to derive one from.
 //   - Apply-function throws bubble up unchanged. The dispatcher wraps the
 //     whole lifecycle in a try/catch that rolls the tx back; the event is
 //     gone from the events table just like a rolled-back state change.
 export async function runProjections(result, registry, runner) {
-    // skip: hand-crafted result with no event — nothing to project
+    // skip: isLifecycleResult only checks `kind`, so an untyped handler result
+    // shaped like a lifecycle result can still arrive without its event
     if (!result.event)
         return;
     if (!runner) {

package/dist/pipeline/system-hooks.d.ts

@@ -1,7 +1,7 @@
-import { type SseBroker } from "../api/sse-broker.js";
-import type { EntityId, JobRunnerRef, Registry, TenantId } from "../engine/types/index.js";
-import type { SearchAdapter, SearchDocument } from "../search/types.js";
-import type { EventConsumer } from "./event-dispatcher.js";
+import { type SseBroker } from "../api/sse-broker.ts";
+import type { EntityId, JobRunnerRef, Registry, TenantId } from "../engine/types/index.ts";
+import type { SearchAdapter, SearchDocument } from "../search/types.ts";
+import type { EventConsumer } from "./event-dispatcher.ts";
 export declare const SEARCH_CONSUMER_NAME = "system:consumer:search";
 export type SearchOperation = {
     readonly kind: "index";

package/dist/pipeline/system-identity-switch.d.ts

@@ -1,6 +1,6 @@
-import type { TenantId } from "../engine/types/identifiers.js";
-import type { ActiveMembershipResult, EscapeHatchDeclaration, EscapeHatchReporter, HandlerContext, LifecycleHookFn, MemberReader, SessionUser, WriteResult } from "../engine/types/index.js";
-import { AccessDeniedError } from "../errors/index.js";
+import type { TenantId } from "../engine/types/identifiers.ts";
+import type { ActiveMembershipResult, EscapeHatchDeclaration, EscapeHatchReporter, HandlerContext, LifecycleHookFn, MemberReader, SessionUser, WriteResult } from "../engine/types/index.ts";
+import { AccessDeniedError } from "../errors/index.ts";
 export type QueryAsFn = (user: SessionUser, qn: string, payload: unknown) => Promise<unknown>;
 export type WriteAsFn = (user: SessionUser, qn: string, payload: unknown) => Promise<WriteResult>;
 export type ResolveActiveMembershipFn = (userId: string, tenantId: TenantId) => Promise<ActiveMembershipResult>;

package/dist/pipeline/tenant-timezone-cache.d.ts

@@ -1,4 +1,4 @@
-import type { TenantId } from "../engine/types/identifiers.js";
+import type { TenantId } from "../engine/types/identifiers.ts";
 export type TenantTimezoneCacheOptions = {
     readonly ttlMs?: number;
     readonly maxEntries?: number;

package/dist/pipeline/write-origin.d.ts

@@ -1,7 +1,7 @@
 import { isPersonalDataGated, type WriteOrigin } from "@cosmicdrift/kumiko-types/event-store-types";
-import { type PersonalDataGate } from "../db/tenant-db.js";
-import type { Registry, SessionUser } from "../engine/types/index.js";
-import { AccessDeniedError } from "../errors/index.js";
+import { type PersonalDataGate } from "../db/tenant-db.ts";
+import type { Registry, SessionUser } from "../engine/types/index.ts";
+import { AccessDeniedError } from "../errors/index.ts";
 export { isPersonalDataGated, type WriteOrigin };
 export declare function effectiveWriteOrigin(root: WriteOrigin, inherited?: WriteOrigin): WriteOrigin;
 export declare function parseWriteOrigin(value: unknown): WriteOrigin | undefined;

package/dist/pipeline/write-result-masking.d.ts

@@ -1,5 +1,5 @@
-import type { WriteResult } from "../engine/types/index.js";
-import type { BatchCommand, BatchResult, DispatchContext } from "./dispatch-shared.js";
+import type { WriteResult } from "../engine/types/index.ts";
+import type { BatchCommand, BatchResult, DispatchContext } from "./dispatch-shared.ts";
 type EntityLookup = Pick<DispatchContext["registry"], "getHandlerEntity" | "getEntity">;
 export declare function maskWriteResultForClient(registry: EntityLookup, handlerType: string, result: WriteResult): WriteResult;
 export declare function maskBatchResultForClient(registry: EntityLookup, commands: readonly BatchCommand[], batch: BatchResult): BatchResult;

package/dist/random/index.d.ts

@@ -1,2 +1,2 @@
-export { type AdjNounNameOptions, type GenerateUniqueNameOptions, generateAdjNounName, generateNoConfusableId, generateUniqueName, } from "./generate.js";
-export { ADJECTIVES, NOUNS } from "./words.js";
+export { type AdjNounNameOptions, type GenerateUniqueNameOptions, generateAdjNounName, generateNoConfusableId, generateUniqueName, } from "./generate.ts";
+export { ADJECTIVES, NOUNS } from "./words.ts";

package/dist/rate-limit/bucket.d.ts

@@ -1,4 +1,4 @@
-import type { PayloadBucketNormalization, RateLimitOption, SessionUser } from "../engine/types/index.js";
+import type { PayloadBucketNormalization, RateLimitOption, SessionUser } from "../engine/types/index.ts";
 export type BucketContext = {
     readonly handlerName: string;
     readonly user: SessionUser;

package/dist/rate-limit/index.d.ts

@@ -1,3 +1,3 @@
-export { type BucketContext, type BucketResult, buildBucketKey, buildPayloadBucketKey, createPayloadDigest, normalizePayloadBucketValue, } from "./bucket.js";
-export { type AuthEndpointRateLimitOptions, authEndpointRateLimit, type GlobalIpRateLimitOptions, globalIpRateLimit, type HttpRouteRateLimitOptions, httpRouteRateLimit, } from "./middleware.js";
-export { createRateLimitResolver, type RateLimitConfig, type RateLimitDecision, type RateLimitResolver, type RateLimitResolverOptions, } from "./resolver.js";
+export { type BucketContext, type BucketResult, buildBucketKey, buildPayloadBucketKey, createPayloadDigest, normalizePayloadBucketValue, } from "./bucket.ts";
+export { type AuthEndpointRateLimitOptions, authEndpointRateLimit, type GlobalIpRateLimitOptions, globalIpRateLimit, type HttpRouteRateLimitOptions, httpRouteRateLimit, } from "./middleware.ts";
+export { createRateLimitResolver, type RateLimitConfig, type RateLimitDecision, type RateLimitResolver, type RateLimitResolverOptions, } from "./resolver.ts";

package/dist/rate-limit/middleware.d.ts

@@ -1,7 +1,7 @@
 import type { Context, MiddlewareHandler } from "hono";
-import { type ClientIpResolver } from "../api/client-ip.js";
-import type { HttpRouteRateLimit } from "../engine/types/http-route.js";
-import type { RateLimitResolver } from "./resolver.js";
+import { type ClientIpResolver } from "../api/client-ip.ts";
+import type { HttpRouteRateLimit } from "../engine/types/http-route.ts";
+import type { RateLimitResolver } from "./resolver.ts";
 export type GlobalIpRateLimitOptions = {
     readonly resolver: RateLimitResolver;
     readonly limit?: number;

package/dist/redis/cache-sync-bus.d.ts

@@ -1,6 +1,6 @@
 import type { CacheSyncBus, ClosableCacheSyncBus } from "@cosmicdrift/kumiko-types/cache-sync-types";
-import { type RedisClientOptions } from "./client.js";
-import { type PubSubSignal } from "./pubsub-signal.js";
+import { type RedisClientOptions } from "./client.ts";
+import { type PubSubSignal } from "./pubsub-signal.ts";
 export type { CacheSyncBus, ClosableCacheSyncBus };
 export declare function createLocalCacheSyncBus(): ClosableCacheSyncBus;
 export type CacheSyncBusOverSignalOptions = {

package/dist/redis/cache-sync-topics.d.ts

@@ -1,4 +1,4 @@
-import type { TenantId } from "../engine/types/identifiers.js";
+import type { TenantId } from "../engine/types/identifiers.ts";
 export declare const CACHE_SYNC_TOPICS: {
     readonly tenantConfig: "tenant-config";
     readonly tierAssignment: "tier-assignment";

package/dist/redis/index.d.ts

@@ -1,8 +1,8 @@
-export type { CacheSyncBus, CacheSyncBusOverSignalOptions, ClosableCacheSyncBus, RedisCacheSyncBusOptions, ResolvedCacheSyncBus, } from "./cache-sync-bus.js";
-export { createCacheSyncBusOverSignal, createDefaultCacheSyncBus, createLocalCacheSyncBus, createRedisCacheSyncBus, resolveCacheSyncBus, } from "./cache-sync-bus.js";
-export type { TenantConfigSyncMessage, TierAssignmentSyncMessage } from "./cache-sync-topics.js";
-export { CACHE_SYNC_TOPICS, isTenantConfigSyncMessage, isTierAssignmentSyncMessage, } from "./cache-sync-topics.js";
-export type { RedisClientOptions } from "./client.js";
-export { createRedisClient, redisChannelPrefixFromEnv, redisClientOptionsFromEnv, } from "./client.js";
-export type { PubSubSignal, PubSubSignalOptions } from "./pubsub-signal.js";
-export { createRedisPubSubSignal } from "./pubsub-signal.js";
+export type { CacheSyncBus, CacheSyncBusOverSignalOptions, ClosableCacheSyncBus, RedisCacheSyncBusOptions, ResolvedCacheSyncBus, } from "./cache-sync-bus.ts";
+export { createCacheSyncBusOverSignal, createDefaultCacheSyncBus, createLocalCacheSyncBus, createRedisCacheSyncBus, resolveCacheSyncBus, } from "./cache-sync-bus.ts";
+export type { TenantConfigSyncMessage, TierAssignmentSyncMessage } from "./cache-sync-topics.ts";
+export { CACHE_SYNC_TOPICS, isTenantConfigSyncMessage, isTierAssignmentSyncMessage, } from "./cache-sync-topics.ts";
+export type { RedisClientOptions } from "./client.ts";
+export { createRedisClient, redisChannelPrefixFromEnv, redisClientOptionsFromEnv, } from "./client.ts";
+export type { PubSubSignal, PubSubSignalOptions } from "./pubsub-signal.ts";
+export { createRedisPubSubSignal } from "./pubsub-signal.ts";

package/dist/redis/pubsub-signal.d.ts

@@ -1,4 +1,4 @@
-import { type RedisClientOptions } from "./client.js";
+import { type RedisClientOptions } from "./client.ts";
 export type PubSubSignal = {
     publish(channel: string, payload: unknown): void;
     publishConfirmed(channel: string, payload: unknown): Promise<void>;

package/dist/schema-cli.d.ts

@@ -1,4 +1,4 @@
-import type { FeatureDefinition } from "./engine/types/feature.js";
+import type { FeatureDefinition } from "./engine/types/feature.ts";
 export type SchemaCliOut = {
     readonly log: (line: string) => void;
     readonly err: (line: string) => void;

package/dist/schema-cli.js

@@ -7,6 +7,14 @@
 // NO-MAGIC-ON-DATA: reads only checked-in artifacts (kumiko/schema.ts →
 // ENTITY_METAS, kumiko/migrations/*.sql). Never auto-generates at runtime,
 // never applies on app-boot — apply/baseline are explicit deploy-steps.
+var __rewriteRelativeImportExtension = (this && this.__rewriteRelativeImportExtension) || function (path, preserveJsx) {
+    if (typeof path === "string" && /^\.\.?\//.test(path)) {
+        return path.replace(/\.(tsx)$|((?:\.d)?)((?:\.[^./]+?)?)\.([cm]?)ts$/i, function (m, tsx, d, ext, cm) {
+            return tsx ? preserveJsx ? ".jsx" : ".js" : d && (!ext || !cm) ? m : (d + ext + "." + cm.toLowerCase() + "js");
+        });
+    }
+    return path;
+};
 import { existsSync, mkdirSync, readdirSync, writeFileSync } from "node:fs";
 import { join, resolve as resolvePath } from "node:path";
 import { configureBlindIndexKey, configurePiiSubjectKms, resolveKmsWiringAsync, } from "./crypto/index.js";
@@ -25,7 +33,7 @@ const SNAPSHOT_FILENAME = ".snapshot.json";
 // want a graceful exit code (validate) catch it themselves.
 async function loadSchemaModFromApp(schemaFile) {
     // bun imports TS directly — no spawn needed.
-    const mod = (await import(schemaFile));
+    const mod = (await import(__rewriteRelativeImportExtension(schemaFile)));
     if (!Array.isArray(mod.ENTITY_METAS)) {
         throw new Error(`Schema file ${schemaFile} muss \`export const ENTITY_METAS: EntityTableMeta[]\` haben.`);
     }

package/dist/search/derive-search-adapter-config.d.ts

@@ -1,3 +1,3 @@
-import type { Registry } from "../engine/types/index.js";
-import type { SearchAdapterConfig } from "./types.js";
+import type { Registry } from "../engine/types/index.ts";
+import type { SearchAdapterConfig } from "./types.ts";
 export declare function deriveSearchAdapterConfig(registry: Registry): SearchAdapterConfig | undefined;

package/dist/search/in-memory-adapter.d.ts

@@ -1,2 +1,2 @@
-import type { SearchAdapter } from "./types.js";
+import type { SearchAdapter } from "./types.ts";
 export declare function createInMemorySearchAdapter(): SearchAdapter;

package/dist/search/index.d.ts

@@ -1,6 +1,6 @@
-export { deriveSearchAdapterConfig } from "./derive-search-adapter-config.js";
-export { createInMemorySearchAdapter } from "./in-memory-adapter.js";
-export { purgeSearchDocumentsForSubject } from "./purge-subject.js";
-export type { ReindexEntityFailure, ReindexEntityOptions, ReindexEntityResult, } from "./reindex-entity.js";
-export { reindexEntity } from "./reindex-entity.js";
-export type { SearchAdapter, SearchAdapterConfig, SearchDocument, SearchOptions, SearchResult, } from "./types.js";
+export { deriveSearchAdapterConfig } from "./derive-search-adapter-config.ts";
+export { createInMemorySearchAdapter } from "./in-memory-adapter.ts";
+export { purgeSearchDocumentsForSubject } from "./purge-subject.ts";
+export type { ReindexEntityFailure, ReindexEntityOptions, ReindexEntityResult, } from "./reindex-entity.ts";
+export { reindexEntity } from "./reindex-entity.ts";
+export type { SearchAdapter, SearchAdapterConfig, SearchDocument, SearchOptions, SearchResult, } from "./types.ts";

package/dist/search/meilisearch-adapter.d.ts

@@ -1,5 +1,5 @@
-import type { EntityId, TenantId } from "../engine/types/identifiers.js";
-import type { SearchAdapter } from "./types.js";
+import type { EntityId, TenantId } from "../engine/types/identifiers.ts";
+import type { SearchAdapter } from "./types.ts";
 export type MeilisearchAdapterOptions = {
     url: string;
     apiKey: string;

package/dist/search/purge-subject.d.ts

@@ -1,7 +1,7 @@
-import type { SubjectId } from "../crypto/kms-adapter.js";
-import type { DbRunner } from "../db/connection.js";
-import type { FeatureDefinition } from "../engine/types/index.js";
-import type { SearchAdapter } from "./types.js";
+import type { SubjectId } from "../crypto/kms-adapter.ts";
+import type { DbRunner } from "../db/connection.ts";
+import type { FeatureDefinition } from "../engine/types/index.ts";
+import type { SearchAdapter } from "./types.ts";
 export declare function purgeSearchDocumentsForSubject(db: DbRunner, features: ReadonlyMap<string, FeatureDefinition>, search: SearchAdapter, subjectKey: string, 
 /** When set, also match rows by ownership — needed after anonymize rewrites ciphertext. */
 subject?: SubjectId): Promise<void>;

package/dist/search/reindex-entity.d.ts

@@ -1,6 +1,6 @@
-import type { DbRunner } from "../db/connection.js";
-import type { Registry, TenantId } from "../engine/types/index.js";
-import type { SearchAdapter } from "./types.js";
+import type { DbRunner } from "../db/connection.ts";
+import type { Registry, TenantId } from "../engine/types/index.ts";
+import type { SearchAdapter } from "./types.ts";
 export type ReindexEntityFailure = {
     readonly entityId: string;
     readonly reason: string;

package/dist/secrets/dek-cache.d.ts

@@ -1,4 +1,4 @@
-import type { KeyScope, MasterKeyProvider } from "./types.js";
+import type { KeyScope, MasterKeyProvider } from "./types.ts";
 export type DekCacheOptions = {
     readonly ttlMs?: number;
     readonly maxEntries?: number;

package/dist/secrets/env-master-key-provider.d.ts

@@ -1,4 +1,4 @@
-import type { MasterKeyProvider } from "./types.js";
+import type { MasterKeyProvider } from "./types.ts";
 export type EnvMasterKeyProviderOptions = {
     readonly env?: Readonly<Record<string, string | undefined>>;
 };

package/dist/secrets/env-master-key-provider.js

@@ -3,6 +3,7 @@
 // without a maintenance window. See loadKeyring + resolveCurrentVersion at
 // the bottom for the env contract.
 import { createCipheriv, createDecipheriv, randomBytes } from "node:crypto";
+import { isDryRunEnvActive } from "../env/dry-run.js";
 import { InternalError } from "../errors/index.js";
 const ALGORITHM = "aes-256-gcm";
 const KEK_LENGTH = 32; // AES-256
@@ -10,21 +11,22 @@ const IV_LENGTH = 12;
 const TAG_LENGTH = 16;
 export function createEnvMasterKeyProvider(opts = {}) {
     const env = opts.env ?? process.env;
-    const keyring = loadKeyring(env);
-    const current = resolveCurrentVersion(env);
-    // --- Boot validation (after keyring + current are known) -------------
-    if (!keyring.has(current)) {
-        throw new InternalError({
-            message: `[secrets] currentVersion=${current} not present in keyring ` +
-                `(have versions: ${[...keyring.keys()].sort().join(",")}). ` +
-                `Check KUMIKO_SECRETS_MASTER_KEY_V${current} is set.`,
-        });
-    }
+    let loaded;
+    const keyringState = () => {
+        loaded ??= loadValidatedKeyring(env);
+        return loaded;
+    };
+    // Apps build this provider at module load, before runProdApp runs. A dry
+    // run inspects an env that may hold no key yet, so the check moves to the
+    // first key operation there; a real boot still fails here, at construction.
+    if (!isDryRunEnvActive(env) && !isDryRunEnvActive(process.env))
+        keyringState();
     // --- KEK-wrap / unwrap boilerplate (AES-256-GCM) ---------------------
     // The DEK is the plaintext here; we encrypt it with the KEK. Same
     // algorithm as the value encryption, just a different role.
     return {
         async wrapDek(dek) {
+            const { keyring, current } = keyringState();
             const kek = keyring.get(current);
             if (!kek) {
                 // Should never reach here — boot validation above guarantees the
@@ -47,6 +49,7 @@ export function createEnvMasterKeyProvider(opts = {}) {
             };
         },
         async unwrapDek(encryptedDek, kekVersion) {
+            const { keyring } = keyringState();
             const kek = keyring.get(kekVersion);
             if (!kek) {
                 throw new InternalError({
@@ -63,7 +66,7 @@ export function createEnvMasterKeyProvider(opts = {}) {
             return Buffer.concat([decipher.update(ciphertext), decipher.final()]);
         },
         currentVersion() {
-            return current;
+            return keyringState().current;
         },
         async isAvailable() {
             // Env-backed provider is always "available" once boot passed — the
@@ -73,6 +76,18 @@ export function createEnvMasterKeyProvider(opts = {}) {
         },
     };
 }
+function loadValidatedKeyring(env) {
+    const keyring = loadKeyring(env);
+    const current = resolveCurrentVersion(env);
+    if (!keyring.has(current)) {
+        throw new InternalError({
+            message: `[secrets] currentVersion=${current} not present in keyring ` +
+                `(have versions: ${[...keyring.keys()].sort().join(",")}). ` +
+                `Check KUMIKO_SECRETS_MASTER_KEY_V${current} is set.`,
+        });
+    }
+    return { keyring, current };
+}
 // ENV schema (Decision 1 — per-version variables):
 //   KUMIKO_SECRETS_MASTER_KEY_V1=<base64 32 bytes>
 //   KUMIKO_SECRETS_MASTER_KEY_V2=<base64 32 bytes>

package/dist/secrets/envelope-cipher.d.ts

@@ -1,6 +1,6 @@
 import type { EnvelopeCipher } from "@cosmicdrift/kumiko-types/envelope-cipher-types";
-import type { DekCache } from "./dek-cache.js";
-import type { MasterKeyProvider } from "./types.js";
+import type { DekCache } from "./dek-cache.ts";
+import type { MasterKeyProvider } from "./types.ts";
 export type { EnvelopeCipher } from "@cosmicdrift/kumiko-types/envelope-cipher-types";
 export type EnvelopeCipherOptions = {
     readonly dekCache?: DekCache;

package/dist/secrets/envelope.d.ts

@@ -1,3 +1,3 @@
-import type { Envelope, KeyScope, MasterKeyProvider } from "./types.js";
+import type { Envelope, KeyScope, MasterKeyProvider } from "./types.ts";
 export declare function encryptValue(plaintext: string, provider: MasterKeyProvider, scope?: KeyScope): Promise<Envelope>;
 export declare function decryptValue(envelope: Envelope, provider: MasterKeyProvider, scope?: KeyScope): Promise<string>;