@cosmicdrift/kumiko-framework 0.369.0 → 0.371.0

package/dist/pipeline/event-retention.d.ts

@@ -1,5 +1,5 @@
 /// <reference types="temporal-polyfill/global" preserve="true" />
-import type { DbConnection } from "../db/connection.js";
+import type { DbConnection } from "../db/connection.ts";
 export type PruneEventsOptions = {
     readonly olderThan?: Temporal.Instant;
     readonly olderThanDays?: number;

package/dist/pipeline/handler-access-error.d.ts

@@ -1,3 +1,3 @@
-import type { SessionUser } from "../engine/types/index.js";
-import { type KumikoError } from "../errors/index.js";
+import type { SessionUser } from "../engine/types/index.ts";
+import { type KumikoError } from "../errors/index.ts";
 export declare function handlerAccessError(user: Pick<SessionUser, "roles">, type: string): KumikoError;

package/dist/pipeline/index.d.ts

@@ -1,42 +1,42 @@
-export type { EscapeHatchReportWindow } from "../observability/escape-hatch-report.js";
-export { createEscapeHatchReporter, createEscapeHatchReportWindow, ESCAPE_HATCH_USED_SIGNAL, fallbackEscapeHatchReporter, flushEscapeHatchAudits, reportEscapeHatchUse, UNATTRIBUTED_ACTOR, withEscapeHatchAuditScope, } from "../observability/escape-hatch-report.js";
-export { normalizePayloadBucketValue } from "../rate-limit/bucket.js";
-export type { AppendDomainEventCoreDeps } from "./append-event-core.js";
-export { appendDomainEventCore } from "./append-event-core.js";
-export type { ResolveAuthClaimsArgs } from "./auth-claims-resolver.js";
-export { resolveAuthClaims } from "./auth-claims-resolver.js";
-export { createCascadeDeleteHook } from "./cascade-handler.js";
-export type { Dispatcher } from "./dispatcher.js";
-export { createDispatcher, dispatcherToWriteRef } from "./dispatcher.js";
-export type { FailedWriteResult } from "./dispatcher-utils.js";
-export { isFailedWriteResult } from "./dispatcher-utils.js";
-export type { DistributedLock } from "./distributed-lock.js";
-export { createDistributedLock } from "./distributed-lock.js";
-export type { EntityCache, EntityCacheOptions } from "./entity-cache.js";
-export { createEntityCache } from "./entity-cache.js";
-export type { ConsumerStatus, PendingGapEntry } from "./event-consumer-state.js";
-export { ConsumerStatuses, createEventConsumerStateTable, eventConsumerStateTable, SHARED_INSTANCE_SENTINEL, } from "./event-consumer-state.js";
-export type { EventDedup } from "./event-dedup.js";
-export { createEventDedup } from "./event-dedup.js";
-export type { ConsumerProgress, ConsumerRecoveryState, DispatcherPassResult, EventConsumer, EventConsumerBatchHandler, EventConsumerHandler, EventDispatcher, EventDispatcherOptions, } from "./event-dispatcher.js";
-export { createEventDispatcher, disableConsumer, enableConsumer, getAllConsumerProgress, getConsumerState, listConsumersWithState, restartConsumer, skipPoisonEvent, } from "./event-dispatcher.js";
-export type { ConsumerCursor } from "./event-dispatcher-delivery.js";
-export { selectConsumerCursorForUpdate } from "./event-dispatcher-delivery.js";
-export type { PruneEventsOptions, PruneEventsResult } from "./event-retention.js";
-export { ConsumerLagError, pruneEvents } from "./event-retention.js";
-export type { IdempotencyGuard } from "./idempotency.js";
-export { createIdempotencyGuard } from "./idempotency.js";
-export { assertInstructionFieldWriteAllowed, assertIrreversibleOperationAllowed, isIrreversibleEntityVerb, } from "./irreversible-operation-gate.js";
-export type { LifecycleHooks, SystemHookDef, SystemHooks } from "./lifecycle-pipeline.js";
-export { createLifecycleHooks } from "./lifecycle-pipeline.js";
-export type { MspRebuildDeps } from "./msp-rebuild.js";
-export { rebuildMultiStreamProjection } from "./msp-rebuild.js";
-export type { MultiStreamApplyContext, MultiStreamApplyContextDeps, } from "./multi-stream-apply-context.js";
-export { createMultiStreamApplyContext } from "./multi-stream-apply-context.js";
-export { assertNotifyTargetsOwnTenant, createDeferringNotify } from "./notify-scope.js";
-export type { ProjectionProgress, RebuildResult } from "./projection-rebuild.js";
-export { getAllProjectionProgress, getProjectionState, listProjectionsWithState, rebuildProjection, } from "./projection-rebuild.js";
-export type { ProjectionStatus } from "./projection-state.js";
-export { createProjectionStateTable, ProjectionStatuses, projectionStateTable, } from "./projection-state.js";
-export { runProjectionsForEvent } from "./projections-runner.js";
-export { ACCESS_INVALIDATION_CONSUMER_NAME, createAccessInvalidationEventConsumer, createSearchEventConsumer, createSseBroadcastEventConsumer, SEARCH_CONSUMER_NAME, SSE_BROADCAST_CONSUMER_NAME, } from "./system-hooks.js";
+export type { EscapeHatchReportWindow } from "../observability/escape-hatch-report.ts";
+export { createEscapeHatchReporter, createEscapeHatchReportWindow, ESCAPE_HATCH_USED_SIGNAL, fallbackEscapeHatchReporter, flushEscapeHatchAudits, reportEscapeHatchUse, UNATTRIBUTED_ACTOR, withEscapeHatchAuditScope, } from "../observability/escape-hatch-report.ts";
+export { normalizePayloadBucketValue } from "../rate-limit/bucket.ts";
+export type { AppendDomainEventCoreDeps } from "./append-event-core.ts";
+export { appendDomainEventCore } from "./append-event-core.ts";
+export type { ResolveAuthClaimsArgs } from "./auth-claims-resolver.ts";
+export { resolveAuthClaims } from "./auth-claims-resolver.ts";
+export { createCascadeDeleteHook } from "./cascade-handler.ts";
+export type { Dispatcher } from "./dispatcher.ts";
+export { createDispatcher, dispatcherToWriteRef } from "./dispatcher.ts";
+export type { FailedWriteResult } from "./dispatcher-utils.ts";
+export { isFailedWriteResult } from "./dispatcher-utils.ts";
+export type { DistributedLock } from "./distributed-lock.ts";
+export { createDistributedLock } from "./distributed-lock.ts";
+export type { EntityCache, EntityCacheOptions } from "./entity-cache.ts";
+export { createEntityCache } from "./entity-cache.ts";
+export type { ConsumerStatus, PendingGapEntry } from "./event-consumer-state.ts";
+export { ConsumerStatuses, createEventConsumerStateTable, eventConsumerStateTable, SHARED_INSTANCE_SENTINEL, } from "./event-consumer-state.ts";
+export type { EventDedup } from "./event-dedup.ts";
+export { createEventDedup } from "./event-dedup.ts";
+export type { ConsumerProgress, ConsumerRecoveryState, DispatcherPassResult, EventConsumer, EventConsumerBatchHandler, EventConsumerHandler, EventDispatcher, EventDispatcherOptions, } from "./event-dispatcher.ts";
+export { createEventDispatcher, disableConsumer, enableConsumer, getAllConsumerProgress, getConsumerState, listConsumersWithState, restartConsumer, skipPoisonEvent, } from "./event-dispatcher.ts";
+export type { ConsumerCursor } from "./event-dispatcher-delivery.ts";
+export { selectConsumerCursorForUpdate } from "./event-dispatcher-delivery.ts";
+export type { PruneEventsOptions, PruneEventsResult } from "./event-retention.ts";
+export { ConsumerLagError, pruneEvents } from "./event-retention.ts";
+export type { IdempotencyGuard } from "./idempotency.ts";
+export { createIdempotencyGuard } from "./idempotency.ts";
+export { assertInstructionFieldWriteAllowed, assertIrreversibleOperationAllowed, isIrreversibleEntityVerb, } from "./irreversible-operation-gate.ts";
+export type { LifecycleHooks, SystemHookDef, SystemHooks } from "./lifecycle-pipeline.ts";
+export { createLifecycleHooks } from "./lifecycle-pipeline.ts";
+export type { MspRebuildDeps } from "./msp-rebuild.ts";
+export { rebuildMultiStreamProjection } from "./msp-rebuild.ts";
+export type { MultiStreamApplyContext, MultiStreamApplyContextDeps, } from "./multi-stream-apply-context.ts";
+export { createMultiStreamApplyContext } from "./multi-stream-apply-context.ts";
+export { assertNotifyTargetsOwnTenant, createDeferringNotify } from "./notify-scope.ts";
+export type { ProjectionProgress, RebuildResult } from "./projection-rebuild.ts";
+export { getAllProjectionProgress, getProjectionState, listProjectionsWithState, rebuildProjection, } from "./projection-rebuild.ts";
+export type { ProjectionStatus } from "./projection-state.ts";
+export { createProjectionStateTable, ProjectionStatuses, projectionStateTable, } from "./projection-state.ts";
+export { runProjectionsForEvent } from "./projections-runner.ts";
+export { ACCESS_INVALIDATION_CONSUMER_NAME, createAccessInvalidationEventConsumer, createSearchEventConsumer, createSseBroadcastEventConsumer, SEARCH_CONSUMER_NAME, SSE_BROADCAST_CONSUMER_NAME, } from "./system-hooks.ts";

package/dist/pipeline/irreversible-operation-gate.d.ts

@@ -1,4 +1,4 @@
-import type { EntityDefinition } from "../engine/types/index.js";
+import type { EntityDefinition } from "../engine/types/index.ts";
 export declare function isIrreversibleEntityVerb(verb: "delete" | "forget", entity: EntityDefinition): boolean;
 export declare function assertIrreversibleOperationAllowed(operation: string): void;
 export declare function assertInstructionFieldWriteAllowed(entityName: string, verb: "create" | "update", writtenFieldNames: readonly string[], instructionFieldNames: readonly string[]): void;

package/dist/pipeline/lifecycle-pipeline.d.ts

@@ -1,5 +1,5 @@
-import type { AppContext, DeleteContext, HookPhase, PostDeleteBatchHookFn, PostDeleteHookFn, PostSaveBatchHookFn, PostSaveHookFn, PreDeleteHookFn, PreSaveHookFn, Registry, SaveContext } from "../engine/types/index.js";
-import type { EventDedup } from "./event-dedup.js";
+import type { AppContext, DeleteContext, HookPhase, PostDeleteBatchHookFn, PostDeleteHookFn, PostSaveBatchHookFn, PostSaveHookFn, PreDeleteHookFn, PreSaveHookFn, Registry, SaveContext } from "../engine/types/index.ts";
+import type { EventDedup } from "./event-dedup.ts";
 export type SystemHookDef<TFn> = {
     readonly name: string;
     readonly priority: number;

package/dist/pipeline/member-read-only-transaction.d.ts

@@ -1,3 +1,3 @@
-import type { DbTx } from "../db/connection.js";
-import { type DispatchContext } from "./dispatch-shared.js";
+import type { DbTx } from "../db/connection.ts";
+import { type DispatchContext } from "./dispatch-shared.ts";
 export declare function runInMemberReadOnlyTransaction<T>(ctx: DispatchContext, tx: DbTx | undefined, fn: (readOnlyTx: DbTx) => Promise<T>): Promise<T>;

package/dist/pipeline/member-reader.d.ts

@@ -1,7 +1,7 @@
-import type { DbTx } from "../db/connection.js";
-import type { TenantId } from "../engine/types/identifiers.js";
-import type { MemberReader } from "../engine/types/index.js";
-import { type ActiveMembershipPolicy } from "./active-membership.js";
-import { type DispatchContext } from "./dispatch-shared.js";
+import type { DbTx } from "../db/connection.ts";
+import type { TenantId } from "../engine/types/identifiers.ts";
+import type { MemberReader } from "../engine/types/index.ts";
+import { type ActiveMembershipPolicy } from "./active-membership.ts";
+import { type DispatchContext } from "./dispatch-shared.ts";
 export declare const BACKGROUND_READ_POLICY: ActiveMembershipPolicy;
 export declare function createMemberReaderFn(ctx: DispatchContext, tenantId: TenantId, tx?: DbTx): MemberReader;

package/dist/pipeline/msp-rebuild.d.ts

@@ -1,7 +1,7 @@
-import type { DbConnection } from "../db/connection.js";
-import type { Registry } from "../engine/types/index.js";
-import type { Meter } from "../observability/types/metric.js";
-import type { RebuildResult } from "./projection-rebuild.js";
+import type { DbConnection } from "../db/connection.ts";
+import type { Registry } from "../engine/types/index.ts";
+import type { Meter } from "../observability/types/metric.ts";
+import type { RebuildResult } from "./projection-rebuild.ts";
 export type MspRebuildDeps = {
     readonly db: DbConnection;
     readonly registry: Registry;

package/dist/pipeline/multi-stream-apply-context.d.ts

@@ -1,9 +1,9 @@
 import type { DerivativesContext } from "@cosmicdrift/kumiko-types/derivatives-types";
 import type { MultiStreamApplyContext } from "@cosmicdrift/kumiko-types/multi-stream-apply-context-types";
 import type { SecretsContext } from "@cosmicdrift/kumiko-types/secrets-types";
-import type { DbRunner } from "../db/connection.js";
-import type { Registry, TenantId } from "../engine/types/index.js";
-import type { FileContext } from "../files/file-handle.js";
+import type { DbRunner } from "../db/connection.ts";
+import type { Registry, TenantId } from "../engine/types/index.ts";
+import type { FileContext } from "../files/file-handle.ts";
 export type { MultiStreamApplyContext } from "@cosmicdrift/kumiko-types/multi-stream-apply-context-types";
 export type MultiStreamApplyContextDeps = {
     readonly registry: Registry;

package/dist/pipeline/notify-scope.d.ts

@@ -1,6 +1,6 @@
-import type { TenantId } from "../engine/types/identifiers.js";
-import type { NotifyFn, NotifyOptions, Registry } from "../engine/types/index.js";
-import type { AfterCommitHook } from "./dispatcher-utils.js";
+import type { TenantId } from "../engine/types/identifiers.ts";
+import type { NotifyFn, NotifyOptions, Registry } from "../engine/types/index.ts";
+import type { AfterCommitHook } from "./dispatcher-utils.ts";
 export declare function assertNotifyTargetsOwnTenant(options: NotifyOptions, tenantId: TenantId): void;
 type DeferringNotifyDeps = {
     readonly registry: Pick<Registry, "getAllNotifications"> | undefined;

package/dist/pipeline/pending-gap-ranges.d.ts

@@ -1,5 +1,5 @@
-import type { PendingIdRange } from "../db/queries/event-store.js";
-import type { PendingGapEntry } from "./event-consumer-state.js";
+import type { PendingIdRange } from "../db/queries/event-store.ts";
+import type { PendingGapEntry } from "./event-consumer-state.ts";
 export declare function toIdRanges(gaps: readonly PendingGapEntry[]): PendingIdRange[];
 export declare function rangeContainsId(range: PendingGapEntry, id: bigint): boolean;
 export declare function isRangeFullyCoveredByFetch(range: PendingGapEntry, truncated: boolean, maxFetchedId: bigint | null): boolean;

package/dist/pipeline/pre-handler-gates.d.ts

@@ -1,6 +1,6 @@
-import type { SessionUser, WriteHandlerDef } from "../engine/types/index.js";
-import { type WriteFailure } from "../errors/index.js";
-import type { DispatchContext } from "./dispatch-shared.js";
+import type { SessionUser, WriteHandlerDef } from "../engine/types/index.ts";
+import { type WriteFailure } from "../errors/index.ts";
+import type { DispatchContext } from "./dispatch-shared.ts";
 export type PreHandlerGateMode = "charge" | "recheck";
 export type PreHandlerGateResult = {
     readonly isSuccess: true;

package/dist/pipeline/pre-transaction-reservations.d.ts

@@ -1,8 +1,8 @@
 import type { ReservationHandle } from "@cosmicdrift/kumiko-types/handlers";
-import type { SessionUser, WriteHandlerDef } from "../engine/types/index.js";
-import { type WriteErrorInfo } from "../errors/index.js";
-import type { BatchCommand, DispatchContext } from "./dispatch-shared.js";
-import type { WriteOrigin } from "./write-origin.js";
+import type { SessionUser, WriteHandlerDef } from "../engine/types/index.ts";
+import { type WriteErrorInfo } from "../errors/index.ts";
+import type { BatchCommand, DispatchContext } from "./dispatch-shared.ts";
+import type { WriteOrigin } from "./write-origin.ts";
 type ReservationConfirm = ReservationHandle["confirmInTransaction"];
 export type ConsumedReservation = {
     readonly confirmInTransaction: ReservationConfirm | undefined;

package/dist/pipeline/projection-rebuild.d.ts

@@ -1,7 +1,7 @@
 /// <reference types="temporal-polyfill/global" preserve="true" />
-import type { DbConnection } from "../db/connection.js";
-import type { Registry } from "../engine/types/index.js";
-import type { Meter } from "../observability/types/metric.js";
+import type { DbConnection } from "../db/connection.ts";
+import type { Registry } from "../engine/types/index.ts";
+import type { Meter } from "../observability/types/metric.ts";
 export declare const REBUILD_BATCH_SIZE = 1000;
 export type RebuildResult = {
     readonly projection: string;

package/dist/pipeline/projection-state.d.ts

@@ -1,4 +1,4 @@
-import type { DbConnection } from "../db/connection.js";
+import type { DbConnection } from "../db/connection.ts";
 export declare const projectionStateTable: import("@cosmicdrift/kumiko-types/schema-table-types").SchemaTable;
 export declare const ProjectionStatuses: {
     readonly idle: "idle";

package/dist/pipeline/projections-runner.d.ts

@@ -1,6 +1,6 @@
-import type { DbRunner } from "../db/index.js";
-import type { LifecycleResult, Registry } from "../engine/types/index.js";
-import type { StoredEvent } from "../event-store/index.js";
+import type { DbRunner } from "../db/index.ts";
+import type { LifecycleResult, Registry } from "../engine/types/index.ts";
+import type { StoredEvent } from "../event-store/index.ts";
 export declare function runProjections(result: LifecycleResult, registry: Registry, runner: DbRunner | undefined): Promise<void>;
 export declare function hasLiveProjectionsForEvent(event: StoredEvent, registry: Registry): boolean;
 export declare function runProjectionsForEvent(event: StoredEvent, registry: Registry, tx: DbRunner): Promise<void>;

package/dist/pipeline/projections-runner.js

@@ -12,16 +12,15 @@ import { InternalError } from "../errors/index.js";
 //   through the dispatcher gets its projections, no opt-in needed.
 //
 // Contracts:
-//   - Projections receive the exact StoredEvent from the executor. If you
-//     hand-craft a SaveContext (tests, non-executor writes), just don't set
-//     `event` and the runner no-ops.
+//   - Projections receive the exact StoredEvent from the executor.
 //   - `runner` is the caller's already-resolved DbRunner — projections-runner
 //     has no TenantDb access of its own to derive one from.
 //   - Apply-function throws bubble up unchanged. The dispatcher wraps the
 //     whole lifecycle in a try/catch that rolls the tx back; the event is
 //     gone from the events table just like a rolled-back state change.
 export async function runProjections(result, registry, runner) {
-    // skip: hand-crafted result with no event — nothing to project
+    // skip: isLifecycleResult only checks `kind`, so an untyped handler result
+    // shaped like a lifecycle result can still arrive without its event
     if (!result.event)
         return;
     if (!runner) {

package/dist/pipeline/system-hooks.d.ts

@@ -1,7 +1,7 @@
-import { type SseBroker } from "../api/sse-broker.js";
-import type { EntityId, JobRunnerRef, Registry, TenantId } from "../engine/types/index.js";
-import type { SearchAdapter, SearchDocument } from "../search/types.js";
-import type { EventConsumer } from "./event-dispatcher.js";
+import { type SseBroker } from "../api/sse-broker.ts";
+import type { EntityId, JobRunnerRef, Registry, TenantId } from "../engine/types/index.ts";
+import type { SearchAdapter, SearchDocument } from "../search/types.ts";
+import type { EventConsumer } from "./event-dispatcher.ts";
 export declare const SEARCH_CONSUMER_NAME = "system:consumer:search";
 export type SearchOperation = {
     readonly kind: "index";

package/dist/pipeline/system-identity-switch.d.ts

@@ -1,6 +1,6 @@
-import type { TenantId } from "../engine/types/identifiers.js";
-import type { ActiveMembershipResult, EscapeHatchDeclaration, EscapeHatchReporter, HandlerContext, LifecycleHookFn, MemberReader, SessionUser, WriteResult } from "../engine/types/index.js";
-import { AccessDeniedError } from "../errors/index.js";
+import type { TenantId } from "../engine/types/identifiers.ts";
+import type { ActiveMembershipResult, EscapeHatchDeclaration, EscapeHatchReporter, HandlerContext, LifecycleHookFn, MemberReader, SessionUser, WriteResult } from "../engine/types/index.ts";
+import { AccessDeniedError } from "../errors/index.ts";
 export type QueryAsFn = (user: SessionUser, qn: string, payload: unknown) => Promise<unknown>;
 export type WriteAsFn = (user: SessionUser, qn: string, payload: unknown) => Promise<WriteResult>;
 export type ResolveActiveMembershipFn = (userId: string, tenantId: TenantId) => Promise<ActiveMembershipResult>;

package/dist/pipeline/tenant-timezone-cache.d.ts

@@ -1,4 +1,4 @@
-import type { TenantId } from "../engine/types/identifiers.js";
+import type { TenantId } from "../engine/types/identifiers.ts";
 export type TenantTimezoneCacheOptions = {
     readonly ttlMs?: number;
     readonly maxEntries?: number;

package/dist/pipeline/write-origin.d.ts

@@ -1,7 +1,7 @@
 import { isPersonalDataGated, type WriteOrigin } from "@cosmicdrift/kumiko-types/event-store-types";
-import { type PersonalDataGate } from "../db/tenant-db.js";
-import type { Registry, SessionUser } from "../engine/types/index.js";
-import { AccessDeniedError } from "../errors/index.js";
+import { type PersonalDataGate } from "../db/tenant-db.ts";
+import type { Registry, SessionUser } from "../engine/types/index.ts";
+import { AccessDeniedError } from "../errors/index.ts";
 export { isPersonalDataGated, type WriteOrigin };
 export declare function effectiveWriteOrigin(root: WriteOrigin, inherited?: WriteOrigin): WriteOrigin;
 export declare function parseWriteOrigin(value: unknown): WriteOrigin | undefined;

package/dist/pipeline/write-result-masking.d.ts

@@ -1,5 +1,5 @@
-import type { WriteResult } from "../engine/types/index.js";
-import type { BatchCommand, BatchResult, DispatchContext } from "./dispatch-shared.js";
+import type { WriteResult } from "../engine/types/index.ts";
+import type { BatchCommand, BatchResult, DispatchContext } from "./dispatch-shared.ts";
 type EntityLookup = Pick<DispatchContext["registry"], "getHandlerEntity" | "getEntity">;
 export declare function maskWriteResultForClient(registry: EntityLookup, handlerType: string, result: WriteResult): WriteResult;
 export declare function maskBatchResultForClient(registry: EntityLookup, commands: readonly BatchCommand[], batch: BatchResult): BatchResult;

package/dist/random/index.d.ts

@@ -1,2 +1,2 @@
-export { type AdjNounNameOptions, type GenerateUniqueNameOptions, generateAdjNounName, generateNoConfusableId, generateUniqueName, } from "./generate.js";
-export { ADJECTIVES, NOUNS } from "./words.js";
+export { type AdjNounNameOptions, type GenerateUniqueNameOptions, generateAdjNounName, generateNoConfusableId, generateUniqueName, } from "./generate.ts";
+export { ADJECTIVES, NOUNS } from "./words.ts";

package/dist/rate-limit/bucket.d.ts

@@ -1,4 +1,4 @@
-import type { PayloadBucketNormalization, RateLimitOption, SessionUser } from "../engine/types/index.js";
+import type { PayloadBucketNormalization, RateLimitOption, SessionUser } from "../engine/types/index.ts";
 export type BucketContext = {
     readonly handlerName: string;
     readonly user: SessionUser;

package/dist/rate-limit/index.d.ts

@@ -1,3 +1,3 @@
-export { type BucketContext, type BucketResult, buildBucketKey, buildPayloadBucketKey, createPayloadDigest, normalizePayloadBucketValue, } from "./bucket.js";
-export { type AuthEndpointRateLimitOptions, authEndpointRateLimit, type GlobalIpRateLimitOptions, globalIpRateLimit, type HttpRouteRateLimitOptions, httpRouteRateLimit, } from "./middleware.js";
-export { createRateLimitResolver, type RateLimitConfig, type RateLimitDecision, type RateLimitResolver, type RateLimitResolverOptions, } from "./resolver.js";
+export { type BucketContext, type BucketResult, buildBucketKey, buildPayloadBucketKey, createPayloadDigest, normalizePayloadBucketValue, } from "./bucket.ts";
+export { type AuthEndpointRateLimitOptions, authEndpointRateLimit, type GlobalIpRateLimitOptions, globalIpRateLimit, type HttpRouteRateLimitOptions, httpRouteRateLimit, } from "./middleware.ts";
+export { createRateLimitResolver, type RateLimitConfig, type RateLimitDecision, type RateLimitResolver, type RateLimitResolverOptions, } from "./resolver.ts";

package/dist/rate-limit/middleware.d.ts

@@ -1,7 +1,7 @@
 import type { Context, MiddlewareHandler } from "hono";
-import { type ClientIpResolver } from "../api/client-ip.js";
-import type { HttpRouteRateLimit } from "../engine/types/http-route.js";
-import type { RateLimitResolver } from "./resolver.js";
+import { type ClientIpResolver } from "../api/client-ip.ts";
+import type { HttpRouteRateLimit } from "../engine/types/http-route.ts";
+import type { RateLimitResolver } from "./resolver.ts";
 export type GlobalIpRateLimitOptions = {
     readonly resolver: RateLimitResolver;
     readonly limit?: number;

package/dist/redis/cache-sync-bus.d.ts

@@ -1,6 +1,6 @@
 import type { CacheSyncBus, ClosableCacheSyncBus } from "@cosmicdrift/kumiko-types/cache-sync-types";
-import { type RedisClientOptions } from "./client.js";
-import { type PubSubSignal } from "./pubsub-signal.js";
+import { type RedisClientOptions } from "./client.ts";
+import { type PubSubSignal } from "./pubsub-signal.ts";
 export type { CacheSyncBus, ClosableCacheSyncBus };
 export declare function createLocalCacheSyncBus(): ClosableCacheSyncBus;
 export type CacheSyncBusOverSignalOptions = {

package/dist/redis/cache-sync-topics.d.ts

@@ -1,4 +1,4 @@
-import type { TenantId } from "../engine/types/identifiers.js";
+import type { TenantId } from "../engine/types/identifiers.ts";
 export declare const CACHE_SYNC_TOPICS: {
     readonly tenantConfig: "tenant-config";
     readonly tierAssignment: "tier-assignment";

package/dist/redis/index.d.ts

@@ -1,8 +1,8 @@
-export type { CacheSyncBus, CacheSyncBusOverSignalOptions, ClosableCacheSyncBus, RedisCacheSyncBusOptions, ResolvedCacheSyncBus, } from "./cache-sync-bus.js";
-export { createCacheSyncBusOverSignal, createDefaultCacheSyncBus, createLocalCacheSyncBus, createRedisCacheSyncBus, resolveCacheSyncBus, } from "./cache-sync-bus.js";
-export type { TenantConfigSyncMessage, TierAssignmentSyncMessage } from "./cache-sync-topics.js";
-export { CACHE_SYNC_TOPICS, isTenantConfigSyncMessage, isTierAssignmentSyncMessage, } from "./cache-sync-topics.js";
-export type { RedisClientOptions } from "./client.js";
-export { createRedisClient, redisChannelPrefixFromEnv, redisClientOptionsFromEnv, } from "./client.js";
-export type { PubSubSignal, PubSubSignalOptions } from "./pubsub-signal.js";
-export { createRedisPubSubSignal } from "./pubsub-signal.js";
+export type { CacheSyncBus, CacheSyncBusOverSignalOptions, ClosableCacheSyncBus, RedisCacheSyncBusOptions, ResolvedCacheSyncBus, } from "./cache-sync-bus.ts";
+export { createCacheSyncBusOverSignal, createDefaultCacheSyncBus, createLocalCacheSyncBus, createRedisCacheSyncBus, resolveCacheSyncBus, } from "./cache-sync-bus.ts";
+export type { TenantConfigSyncMessage, TierAssignmentSyncMessage } from "./cache-sync-topics.ts";
+export { CACHE_SYNC_TOPICS, isTenantConfigSyncMessage, isTierAssignmentSyncMessage, } from "./cache-sync-topics.ts";
+export type { RedisClientOptions } from "./client.ts";
+export { createRedisClient, redisChannelPrefixFromEnv, redisClientOptionsFromEnv, } from "./client.ts";
+export type { PubSubSignal, PubSubSignalOptions } from "./pubsub-signal.ts";
+export { createRedisPubSubSignal } from "./pubsub-signal.ts";

package/dist/redis/pubsub-signal.d.ts

@@ -1,4 +1,4 @@
-import { type RedisClientOptions } from "./client.js";
+import { type RedisClientOptions } from "./client.ts";
 export type PubSubSignal = {
     publish(channel: string, payload: unknown): void;
     publishConfirmed(channel: string, payload: unknown): Promise<void>;

package/dist/schema-cli.d.ts

@@ -1,4 +1,4 @@
-import type { FeatureDefinition } from "./engine/types/feature.js";
+import type { FeatureDefinition } from "./engine/types/feature.ts";
 export type SchemaCliOut = {
     readonly log: (line: string) => void;
     readonly err: (line: string) => void;

package/dist/schema-cli.js

@@ -7,17 +7,34 @@
 // NO-MAGIC-ON-DATA: reads only checked-in artifacts (kumiko/schema.ts →
 // ENTITY_METAS, kumiko/migrations/*.sql). Never auto-generates at runtime,
 // never applies on app-boot — apply/baseline are explicit deploy-steps.
+var __rewriteRelativeImportExtension = (this && this.__rewriteRelativeImportExtension) || function (path, preserveJsx) {
+    if (typeof path === "string" && /^\.\.?\//.test(path)) {
+        return path.replace(/\.(tsx)$|((?:\.d)?)((?:\.[^./]+?)?)\.([cm]?)ts$/i, function (m, tsx, d, ext, cm) {
+            return tsx ? preserveJsx ? ".jsx" : ".js" : d && (!ext || !cm) ? m : (d + ext + "." + cm.toLowerCase() + "js");
+        });
+    }
+    return path;
+};
 import { existsSync, mkdirSync, readdirSync, writeFileSync } from "node:fs";
 import { join, resolve as resolvePath } from "node:path";
 import { configureBlindIndexKey, configurePiiSubjectKms, resolveKmsWiringAsync, } from "./crypto/index.js";
 import { assertUniqueTableNames, assertValidMigrationName, baselineMigrations, createDbConnection, diffReplayAgainstSnapshot, fetchAppliedMigrations, findCommentedDropTables, generateMigration, isRetiredFrameworkTable, loadMigrationsFromDir, loadSnapshotJson, readMigrationSqlTexts, rebuildTablesFromDiff, replayMigrationsDir, runMigrationsFromDir, tableExists, writeRebuildMarker, writeSnapshotJson, } from "./db/index.js";
 import { validateBoot } from "./engine/boot-validator.js";
+import { FILE_STORAGE_PROVIDER_BOOT_SENTINEL, FILE_STORAGE_PROVIDER_ENV, } from "./engine/extension-names.js";
 import { createRegistry } from "./engine/registry.js";
 import { createEventsTable } from "./event-store/index.js";
 import { queueRebuildsFromMarkers, reportPendingRebuildRun, runPendingRebuilds, } from "./migrations/index.js";
 import { createEventConsumerStateTable, createProjectionStateTable } from "./pipeline/index.js";
 import { ensureTemporalPolyfill } from "./time/index.js";
 const SNAPSHOT_FILENAME = ".snapshot.json";
+// `validate` only sees the composed FEATURES. The file provider normally comes from
+// runProdApp's `fileStorage` option, which defaults FILE_STORAGE_PROVIDER at boot, so
+// an unset variable here is no misconfiguration. The deploy env is checked by the real boot.
+function withFileStoragePresence(env) {
+    return env[FILE_STORAGE_PROVIDER_ENV] === undefined
+        ? { ...env, [FILE_STORAGE_PROVIDER_ENV]: FILE_STORAGE_PROVIDER_BOOT_SENTINEL }
+        : { ...env };
+}
 // Single load-path for kumiko/schema.ts (512/3) — `generate` and `validate`
 // both need ENTITY_METAS (and validate additionally wants FEATURES); this is
 // the one place that enforces "ENTITY_METAS must be an array" so the two
@@ -25,7 +42,7 @@ const SNAPSHOT_FILENAME = ".snapshot.json";
 // want a graceful exit code (validate) catch it themselves.
 async function loadSchemaModFromApp(schemaFile) {
     // bun imports TS directly — no spawn needed.
-    const mod = (await import(schemaFile));
+    const mod = (await import(__rewriteRelativeImportExtension(schemaFile)));
     if (!Array.isArray(mod.ENTITY_METAS)) {
         throw new Error(`Schema file ${schemaFile} muss \`export const ENTITY_METAS: EntityTableMeta[]\` haben.`);
     }
@@ -239,7 +256,9 @@ export async function runSchemaCli(argv, appCwd, out, options = {}) {
             // 2. Boot validity — needs the composed feature set.
             if (Array.isArray(mod.FEATURES)) {
                 try {
-                    validateBoot(mod.FEATURES);
+                    validateBoot(mod.FEATURES, {
+                        env: withFileStoragePresence(process.env),
+                    });
                     out.log("  ✓ boot: feature configuration is valid");
                 }
                 catch (e) {

package/dist/search/derive-search-adapter-config.d.ts

@@ -1,3 +1,3 @@
-import type { Registry } from "../engine/types/index.js";
-import type { SearchAdapterConfig } from "./types.js";
+import type { Registry } from "../engine/types/index.ts";
+import type { SearchAdapterConfig } from "./types.ts";
 export declare function deriveSearchAdapterConfig(registry: Registry): SearchAdapterConfig | undefined;

package/dist/search/in-memory-adapter.d.ts

@@ -1,2 +1,2 @@
-import type { SearchAdapter } from "./types.js";
+import type { SearchAdapter } from "./types.ts";
 export declare function createInMemorySearchAdapter(): SearchAdapter;

package/dist/search/index.d.ts

@@ -1,6 +1,6 @@
-export { deriveSearchAdapterConfig } from "./derive-search-adapter-config.js";
-export { createInMemorySearchAdapter } from "./in-memory-adapter.js";
-export { purgeSearchDocumentsForSubject } from "./purge-subject.js";
-export type { ReindexEntityFailure, ReindexEntityOptions, ReindexEntityResult, } from "./reindex-entity.js";
-export { reindexEntity } from "./reindex-entity.js";
-export type { SearchAdapter, SearchAdapterConfig, SearchDocument, SearchOptions, SearchResult, } from "./types.js";
+export { deriveSearchAdapterConfig } from "./derive-search-adapter-config.ts";
+export { createInMemorySearchAdapter } from "./in-memory-adapter.ts";
+export { purgeSearchDocumentsForSubject } from "./purge-subject.ts";
+export type { ReindexEntityFailure, ReindexEntityOptions, ReindexEntityResult, } from "./reindex-entity.ts";
+export { reindexEntity } from "./reindex-entity.ts";
+export type { SearchAdapter, SearchAdapterConfig, SearchDocument, SearchOptions, SearchResult, } from "./types.ts";

package/dist/search/meilisearch-adapter.d.ts

@@ -1,5 +1,5 @@
-import type { EntityId, TenantId } from "../engine/types/identifiers.js";
-import type { SearchAdapter } from "./types.js";
+import type { EntityId, TenantId } from "../engine/types/identifiers.ts";
+import type { SearchAdapter } from "./types.ts";
 export type MeilisearchAdapterOptions = {
     url: string;
     apiKey: string;

package/dist/search/purge-subject.d.ts

@@ -1,7 +1,7 @@
-import type { SubjectId } from "../crypto/kms-adapter.js";
-import type { DbRunner } from "../db/connection.js";
-import type { FeatureDefinition } from "../engine/types/index.js";
-import type { SearchAdapter } from "./types.js";
+import type { SubjectId } from "../crypto/kms-adapter.ts";
+import type { DbRunner } from "../db/connection.ts";
+import type { FeatureDefinition } from "../engine/types/index.ts";
+import type { SearchAdapter } from "./types.ts";
 export declare function purgeSearchDocumentsForSubject(db: DbRunner, features: ReadonlyMap<string, FeatureDefinition>, search: SearchAdapter, subjectKey: string, 
 /** When set, also match rows by ownership — needed after anonymize rewrites ciphertext. */
 subject?: SubjectId): Promise<void>;

package/dist/search/reindex-entity.d.ts

@@ -1,6 +1,6 @@
-import type { DbRunner } from "../db/connection.js";
-import type { Registry, TenantId } from "../engine/types/index.js";
-import type { SearchAdapter } from "./types.js";
+import type { DbRunner } from "../db/connection.ts";
+import type { Registry, TenantId } from "../engine/types/index.ts";
+import type { SearchAdapter } from "./types.ts";
 export type ReindexEntityFailure = {
     readonly entityId: string;
     readonly reason: string;

package/dist/secrets/dek-cache.d.ts

@@ -1,4 +1,4 @@
-import type { KeyScope, MasterKeyProvider } from "./types.js";
+import type { KeyScope, MasterKeyProvider } from "./types.ts";
 export type DekCacheOptions = {
     readonly ttlMs?: number;
     readonly maxEntries?: number;

package/dist/secrets/env-master-key-provider.d.ts

@@ -1,4 +1,4 @@
-import type { MasterKeyProvider } from "./types.js";
+import type { MasterKeyProvider } from "./types.ts";
 export type EnvMasterKeyProviderOptions = {
     readonly env?: Readonly<Record<string, string | undefined>>;
 };