@cosmicdrift/kumiko-framework 0.369.0 → 0.371.0

package/dist/engine/feature-ast/extractors/handlers.d.ts

@@ -1,8 +1,8 @@
 import type { CallExpression, SourceFile } from "ts-morph";
-import type { AccessRule, AgentHandlerHints, AgentRisk, EscapeHatchDeclaration, PayloadRateLimitOption, RateLimitDeclaration } from "../../types/handlers.js";
-import type { QueryHandlerPattern, StreamHandlerPattern, WriteHandlerPattern } from "../patterns.js";
-import type { SourceLocation } from "../source-location.js";
-import { type ExtractOutput, type RawRefSentinel } from "./shared.js";
+import type { AccessRule, AgentHandlerHints, AgentRisk, EscapeHatchDeclaration, PayloadRateLimitOption, RateLimitDeclaration } from "../../types/handlers.ts";
+import type { QueryHandlerPattern, StreamHandlerPattern, WriteHandlerPattern } from "../patterns.ts";
+import type { SourceLocation } from "../source-location.ts";
+import { type ExtractOutput, type RawRefSentinel } from "./shared.ts";
 export type ParsedHandlerCall = {
     readonly source: SourceLocation;
     readonly handlerName?: string;

package/dist/engine/feature-ast/extractors/hooks.d.ts

@@ -1,9 +1,9 @@
 import type { CallExpression, Node, SourceFile } from "ts-morph";
-import type { LifecycleHookType } from "../../constants.js";
-import type { AccessRule, EscapeHatchDeclaration, PayloadRateLimitOption, RateLimitDeclaration } from "../../types/handlers.js";
-import type { HookPhase } from "../../types/hooks.js";
-import type { AuthClaimsPattern, HookPattern } from "../patterns.js";
-import { type ExtractOutput, type RawRefSentinel } from "./shared.js";
+import type { LifecycleHookType } from "../../constants.ts";
+import type { AccessRule, EscapeHatchDeclaration, PayloadRateLimitOption, RateLimitDeclaration } from "../../types/handlers.ts";
+import type { HookPhase } from "../../types/hooks.ts";
+import type { AuthClaimsPattern, HookPattern } from "../patterns.ts";
+import { type ExtractOutput, type RawRefSentinel } from "./shared.ts";
 export type HeaderReadResult<T> = {
     readonly kind: "value";
     readonly value: T;

package/dist/engine/feature-ast/extractors/index.d.ts

@@ -1,14 +1,14 @@
-export { extractAiClassify, extractAiExtract, extractAiGenerate, } from "./ai-steps.js";
-export { extractDefineEvent, extractNotification, } from "./events.js";
-export { extractQueryHandler, extractStreamHandler, extractWriteHandler, type ParsedHandlerCall, parseHandlerCall, } from "./handlers.js";
-export { extractAuthClaims, extractHook, isHookType, readOptionalAccessRule, readOptionalAdditionalRateLimits, readOptionalPhase, readOptionalRateLimit, } from "./hooks.js";
-export { extractHttpRoute, extractJob, isHttpRouteMethod, } from "./jobs-routes.js";
-export { collectScreenOpaqueProps, extractMultiStreamProjection, extractProjection, extractScreen, readApplyBodies, readScreenStatic, } from "./projections-screens.js";
-export { findImportBindingForLocalName, resolveModuleFile, } from "./resolve-import.js";
-export { extractDescribe, extractOptionalRequires, extractReadsConfig, extractRequires, extractSystemScope, extractToggleable, extractUiHints, } from "./round1.js";
-export { extractEntity, extractNav, extractRelation, extractWorkspace, } from "./round2.js";
-export { extractClaimKey, extractConfig, extractMetric, extractReferenceData, extractSecret, extractSecretNamespace, extractTranslations, extractUseExtension, isClaimKeyType, type NamedOptionsResult, readNamedOptions, } from "./round3.js";
-export { extractBootCheck, extractEnvSchema, extractExposesApi, extractExtendsRegistrar, extractStoreTable, extractUsesApi, } from "./round5.js";
-export { extractTreeActions } from "./round6.js";
-export type { ExtractOutput } from "./shared.js";
-export { fail, findFunctionLiteral, isPlainObject, ok, readBooleanProperty, readDataLiteralNode, readNameOrRef, readNameOrRefOrList, readObjectPropertyInitializer, readPropertyKey, readStringLiteralArgs, readVarargsOrArrayProp, resolveSameFileObjectLiteral, } from "./shared.js";
+export { extractAiClassify, extractAiExtract, extractAiGenerate, } from "./ai-steps.ts";
+export { extractDefineEvent, extractNotification, } from "./events.ts";
+export { extractQueryHandler, extractStreamHandler, extractWriteHandler, type ParsedHandlerCall, parseHandlerCall, } from "./handlers.ts";
+export { extractAuthClaims, extractHook, isHookType, readOptionalAccessRule, readOptionalAdditionalRateLimits, readOptionalPhase, readOptionalRateLimit, } from "./hooks.ts";
+export { extractHttpRoute, extractJob, isHttpRouteMethod, } from "./jobs-routes.ts";
+export { collectScreenOpaqueProps, extractMultiStreamProjection, extractProjection, extractScreen, readApplyBodies, readScreenStatic, } from "./projections-screens.ts";
+export { findImportBindingForLocalName, resolveModuleFile, } from "./resolve-import.ts";
+export { extractDescribe, extractOptionalRequires, extractReadsConfig, extractRequires, extractSystemScope, extractToggleable, extractUiHints, } from "./round1.ts";
+export { extractEntity, extractNav, extractRelation, extractWorkspace, } from "./round2.ts";
+export { extractClaimKey, extractConfig, extractMetric, extractReferenceData, extractSecret, extractSecretNamespace, extractTranslations, extractUseExtension, isClaimKeyType, type NamedOptionsResult, readNamedOptions, } from "./round3.ts";
+export { extractBootCheck, extractEnvSchema, extractExposesApi, extractExtendsRegistrar, extractStoreTable, extractUsesApi, } from "./round5.ts";
+export { extractTreeActions } from "./round6.ts";
+export type { ExtractOutput } from "./shared.ts";
+export { fail, findFunctionLiteral, isPlainObject, ok, readBooleanProperty, readDataLiteralNode, readNameOrRef, readNameOrRefOrList, readObjectPropertyInitializer, readPropertyKey, readStringLiteralArgs, readVarargsOrArrayProp, resolveSameFileObjectLiteral, } from "./shared.ts";

package/dist/engine/feature-ast/extractors/jobs-routes.d.ts

@@ -1,7 +1,7 @@
 import type { CallExpression, SourceFile } from "ts-morph";
-import type { HttpRouteMethod } from "../../types/http-route.js";
-import type { HttpRoutePattern, JobPattern } from "../patterns.js";
-import { type ExtractOutput } from "./shared.js";
+import type { HttpRouteMethod } from "../../types/http-route.ts";
+import type { HttpRoutePattern, JobPattern } from "../patterns.ts";
+import { type ExtractOutput } from "./shared.ts";
 export declare function isHttpRouteMethod(value: string): value is HttpRouteMethod;
 export declare function extractJob(call: CallExpression, sourceFile: SourceFile): ExtractOutput<JobPattern>;
 export declare function extractHttpRoute(call: CallExpression, sourceFile: SourceFile): ExtractOutput<HttpRoutePattern>;

package/dist/engine/feature-ast/extractors/projections-screens.d.ts

@@ -1,7 +1,7 @@
 import type { CallExpression, Node, SourceFile } from "ts-morph";
-import type { MultiStreamProjectionPattern, ProjectionPattern, ScreenPattern } from "../patterns.js";
-import type { SourceLocation } from "../source-location.js";
-import { type ExtractOutput } from "./shared.js";
+import type { MultiStreamProjectionPattern, ProjectionPattern, ScreenPattern } from "../patterns.ts";
+import type { SourceLocation } from "../source-location.ts";
+import { type ExtractOutput } from "./shared.ts";
 export declare function readApplyBodies(defObj: ReturnType<Node["asKind"]>, sourceFile: SourceFile): Record<string, SourceLocation> | undefined;
 export declare function extractProjection(call: CallExpression, sourceFile: SourceFile): ExtractOutput<ProjectionPattern>;
 export declare function extractMultiStreamProjection(call: CallExpression, sourceFile: SourceFile): ExtractOutput<MultiStreamProjectionPattern>;

package/dist/engine/feature-ast/extractors/round1.d.ts

@@ -1,6 +1,6 @@
 import type { CallExpression, SourceFile } from "ts-morph";
-import type { DescribePattern, OptionalRequiresPattern, ReadsConfigPattern, RequiresPattern, SystemScopePattern, ToggleablePattern, UiHintsPattern } from "../patterns.js";
-import { type ExtractOutput } from "./shared.js";
+import type { DescribePattern, OptionalRequiresPattern, ReadsConfigPattern, RequiresPattern, SystemScopePattern, ToggleablePattern, UiHintsPattern } from "../patterns.ts";
+import { type ExtractOutput } from "./shared.ts";
 export declare function extractRequires(call: CallExpression, sourceFile: SourceFile): ExtractOutput<RequiresPattern>;
 export declare function extractOptionalRequires(call: CallExpression, sourceFile: SourceFile): ExtractOutput<OptionalRequiresPattern>;
 export declare function extractReadsConfig(call: CallExpression, sourceFile: SourceFile): ExtractOutput<ReadsConfigPattern>;

package/dist/engine/feature-ast/extractors/round2.d.ts

@@ -1,6 +1,6 @@
 import type { CallExpression, SourceFile } from "ts-morph";
-import type { EntityPattern, NavPattern, RelationPattern, WorkspacePattern } from "../patterns.js";
-import { type ExtractOutput } from "./shared.js";
+import type { EntityPattern, NavPattern, RelationPattern, WorkspacePattern } from "../patterns.ts";
+import { type ExtractOutput } from "./shared.ts";
 export declare function extractEntity(call: CallExpression, sourceFile: SourceFile): ExtractOutput<EntityPattern>;
 export declare function extractRelation(call: CallExpression, sourceFile: SourceFile): ExtractOutput<RelationPattern>;
 export declare function extractNav(call: CallExpression, sourceFile: SourceFile): ExtractOutput<NavPattern>;

package/dist/engine/feature-ast/extractors/round3.d.ts

@@ -1,8 +1,8 @@
 import type { CallExpression, SourceFile } from "ts-morph";
-import type { ClaimKeyType } from "../../types/handlers.js";
-import type { ParseError } from "../parse.js";
-import type { ClaimKeyPattern, ConfigPattern, MetricPattern, ReferenceDataPattern, SecretNamespacePattern, SecretPattern, TranslationsPattern, UseExtensionPattern } from "../patterns.js";
-import { type ExtractOutput, type ReadDataLiteralOptions } from "./shared.js";
+import type { ClaimKeyType } from "../../types/handlers.ts";
+import type { ParseError } from "../parse.ts";
+import type { ClaimKeyPattern, ConfigPattern, MetricPattern, ReferenceDataPattern, SecretNamespacePattern, SecretPattern, TranslationsPattern, UseExtensionPattern } from "../patterns.ts";
+import { type ExtractOutput, type ReadDataLiteralOptions } from "./shared.ts";
 export type NamedOptionsResult = {
     readonly kind: "ok";
     readonly name: string;

package/dist/engine/feature-ast/extractors/round5.d.ts

@@ -1,6 +1,6 @@
 import type { CallExpression, SourceFile } from "ts-morph";
-import type { EnvSchemaPattern, ExposesApiPattern, ExtendsRegistrarPattern, UsesApiPattern } from "../patterns.js";
-import { type ExtractOutput } from "./shared.js";
+import type { EnvSchemaPattern, ExposesApiPattern, ExtendsRegistrarPattern, UsesApiPattern } from "../patterns.ts";
+import { type ExtractOutput } from "./shared.ts";
 export declare function extractEnvSchema(call: CallExpression, sourceFile: SourceFile): ExtractOutput<EnvSchemaPattern>;
 export declare function extractExtendsRegistrar(call: CallExpression, sourceFile: SourceFile): ExtractOutput<ExtendsRegistrarPattern>;
 export declare function extractUsesApi(call: CallExpression, sourceFile: SourceFile): ExtractOutput<UsesApiPattern>;

package/dist/engine/feature-ast/extractors/round6.d.ts

@@ -1,4 +1,4 @@
 import type { CallExpression, SourceFile } from "ts-morph";
-import type { TreeActionsPattern } from "../patterns.js";
-import { type ExtractOutput } from "./shared.js";
+import type { TreeActionsPattern } from "../patterns.ts";
+import { type ExtractOutput } from "./shared.ts";
 export declare function extractTreeActions(call: CallExpression, sourceFile: SourceFile): ExtractOutput<TreeActionsPattern>;

package/dist/engine/feature-ast/extractors/shared.d.ts

@@ -1,6 +1,6 @@
 import type { CallExpression, ObjectLiteralExpression } from "ts-morph";
 import { Node } from "ts-morph";
-import type { ParseError } from "../parse.js";
+import type { ParseError } from "../parse.ts";
 export type ExtractOutput<TPattern> = {
     readonly kind: "pattern";
     readonly pattern: TPattern;
@@ -51,7 +51,7 @@ export declare function readStringOrRaw(node: Node): string | RawRefSentinel | u
  * — see #1009).
  */
 export declare function readStringOrRawArgs(call: CallExpression): readonly (string | RawRefSentinel)[] | undefined;
-export { isPlainObject } from "../../../utils/is-plain-object.js";
+export { isPlainObject } from "../../../utils/is-plain-object.ts";
 export declare function readPropertyKey(propAssign: import("ts-morph").PropertyAssignment): string;
 /**
  * Resolved name plus, when the source node was an identifier rather than

package/dist/engine/feature-ast/index.d.ts

@@ -1,16 +1,16 @@
-export type { FormFieldLabel, FormFieldSpec, FormInputType, PatternCategory, PatternFormSchema, } from "../pattern-library/index.js";
-export { getPatternSchema, groupByCategory, PATTERN_LIBRARY } from "../pattern-library/index.js";
-export type { ParseError, ParseResult } from "./parse.js";
-export { parseFeatureFile, parseSourceFile } from "./parse.js";
-export type { HandlerHeaderUpdate, PatternChange, PatternId, QueryHandlerHeaderKey, StreamHandlerHeaderKey, WriteHandlerHeaderKey, } from "./patch.js";
-export { addPattern, applyChanges, removePattern, replacePattern, SINGLETON_KINDS, updatePattern, } from "./patch.js";
-export type { AddAuthClaimsArgs, AddClaimKeyArgs, AddConfigArgs, AddDefineEventArgs, AddEntityArgs, AddHookArgs, AddHttpRouteArgs, AddJobArgs, AddMetricArgs, AddMultiStreamProjectionArgs, AddNavArgs, AddNotificationArgs, AddOptionalRequiresArgs, AddProjectionArgs, AddQueryHandlerArgs, AddReadsConfigArgs, AddReferenceDataArgs, AddRelationArgs, AddRequiresArgs, AddScreenArgs, AddSecretArgs, AddStreamHandlerArgs, AddToggleableArgs, AddTranslationsArgs, AddUseExtensionArgs, AddWorkspaceArgs, AddWriteHandlerArgs, FeaturePatcher, } from "./patcher.js";
-export { createFeaturePatcher } from "./patcher.js";
-export type { PatternChangeIssue, PatternChangesParseResult } from "./pattern-change-schema.js";
-export { parsePatternChanges } from "./pattern-change-schema.js";
-export type { AuthClaimsPattern, ClaimKeyPattern, ConfigPattern, DefineEventPattern, Editability, EntityPattern, ExtendsRegistrarPattern, FeaturePattern, FeaturePatternKind, HookPattern, HttpRoutePattern, JobPattern, MetricPattern, MultiStreamProjectionPattern, NavPattern, NotificationPattern, OptionalRequiresPattern, ProjectionPattern, QueryHandlerPattern, ReadsConfigPattern, ReferenceDataPattern, RelationPattern, RequiresPattern, ScreenPattern, SecretNamespacePattern, SecretPattern, StreamHandlerPattern, SystemScopePattern, ToggleablePattern, TranslationsPattern, UnknownPattern, UseExtensionPattern, WorkspacePattern, WriteHandlerPattern, } from "./patterns.js";
-export { getEditability } from "./patterns.js";
-export type { RenderFeatureFileInput } from "./render.js";
-export { FEATURE_FILE_VERSION, renderFeatureFile, renderPattern, renderValue, VERSION_HEADER, } from "./render.js";
-export type { SourceLocation, SourcePosition } from "./source-location.js";
-export { sourceLocationFromNode } from "./source-location.js";
+export type { FormFieldLabel, FormFieldSpec, FormInputType, PatternCategory, PatternFormSchema, } from "../pattern-library/index.ts";
+export { getPatternSchema, groupByCategory, PATTERN_LIBRARY } from "../pattern-library/index.ts";
+export type { ParseError, ParseResult } from "./parse.ts";
+export { parseFeatureFile, parseSourceFile } from "./parse.ts";
+export type { HandlerHeaderUpdate, PatternChange, PatternId, QueryHandlerHeaderKey, StreamHandlerHeaderKey, WriteHandlerHeaderKey, } from "./patch.ts";
+export { addPattern, applyChanges, removePattern, replacePattern, SINGLETON_KINDS, updatePattern, } from "./patch.ts";
+export type { AddAuthClaimsArgs, AddClaimKeyArgs, AddConfigArgs, AddDefineEventArgs, AddEntityArgs, AddHookArgs, AddHttpRouteArgs, AddJobArgs, AddMetricArgs, AddMultiStreamProjectionArgs, AddNavArgs, AddNotificationArgs, AddOptionalRequiresArgs, AddProjectionArgs, AddQueryHandlerArgs, AddReadsConfigArgs, AddReferenceDataArgs, AddRelationArgs, AddRequiresArgs, AddScreenArgs, AddSecretArgs, AddStreamHandlerArgs, AddToggleableArgs, AddTranslationsArgs, AddUseExtensionArgs, AddWorkspaceArgs, AddWriteHandlerArgs, FeaturePatcher, } from "./patcher.ts";
+export { createFeaturePatcher } from "./patcher.ts";
+export type { PatternChangeIssue, PatternChangesParseResult } from "./pattern-change-schema.ts";
+export { parsePatternChanges } from "./pattern-change-schema.ts";
+export type { AuthClaimsPattern, ClaimKeyPattern, ConfigPattern, DefineEventPattern, Editability, EntityPattern, ExtendsRegistrarPattern, FeaturePattern, FeaturePatternKind, HookPattern, HttpRoutePattern, JobPattern, MetricPattern, MultiStreamProjectionPattern, NavPattern, NotificationPattern, OptionalRequiresPattern, ProjectionPattern, QueryHandlerPattern, ReadsConfigPattern, ReferenceDataPattern, RelationPattern, RequiresPattern, ScreenPattern, SecretNamespacePattern, SecretPattern, StreamHandlerPattern, SystemScopePattern, ToggleablePattern, TranslationsPattern, UnknownPattern, UseExtensionPattern, WorkspacePattern, WriteHandlerPattern, } from "./patterns.ts";
+export { getEditability } from "./patterns.ts";
+export type { RenderFeatureFileInput } from "./render.ts";
+export { FEATURE_FILE_VERSION, renderFeatureFile, renderPattern, renderValue, VERSION_HEADER, } from "./render.ts";
+export type { SourceLocation, SourcePosition } from "./source-location.ts";
+export { sourceLocationFromNode } from "./source-location.ts";

package/dist/engine/feature-ast/parse.d.ts

@@ -1,6 +1,6 @@
 import type { SourceFile } from "ts-morph";
-import type { FeaturePattern } from "./patterns.js";
-import { type SourceLocation } from "./source-location.js";
+import type { FeaturePattern } from "./patterns.ts";
+import { type SourceLocation } from "./source-location.ts";
 export type ParseError = {
     readonly methodName: string;
     readonly source: SourceLocation;

package/dist/engine/feature-ast/patch.d.ts

@@ -1,5 +1,5 @@
 import { type SourceFile } from "ts-morph";
-import type { FeaturePattern, QueryHandlerPattern, StreamHandlerPattern, WriteHandlerPattern } from "./patterns.js";
+import type { FeaturePattern, QueryHandlerPattern, StreamHandlerPattern, WriteHandlerPattern } from "./patterns.ts";
 /**
  * Identifier used by replace/remove. Discriminated union: each pattern
  * kind names the property the patcher must match against. Adding a new

package/dist/engine/feature-ast/patcher.d.ts

@@ -1,19 +1,19 @@
 import type { SourceFile } from "ts-morph";
-import type { LifecycleHookType } from "../constants.js";
-import type { ConfigKeyDefinition, ConfigKeyType, JobDefinition, RunIn, TranslationKeys } from "../types/config.js";
-import type { MetricOptions, SecretNamespaceOptions, SecretOptions } from "../types/feature.js";
-import type { EntityDefinition } from "../types/fields.js";
-import type { AccessRule, ClaimKeyType, EscapeHatchDeclaration, RateLimitOption } from "../types/handlers.js";
-import type { HookPhase } from "../types/hooks.js";
-import type { HttpRouteMethod } from "../types/http-route.js";
-import type { NavDefinition } from "../types/nav.js";
-import type { MspErrorMode } from "../types/projection.js";
-import type { RelationDefinition } from "../types/relations.js";
-import type { ScreenDefinition } from "../types/screen.js";
-import type { WorkspaceDefinition } from "../types/workspace.js";
-import { type PatternChange, type PatternId } from "./patch.js";
-import type { FeaturePattern } from "./patterns.js";
-import type { SourceLocation } from "./source-location.js";
+import type { LifecycleHookType } from "../constants.ts";
+import type { ConfigKeyDefinition, ConfigKeyType, JobDefinition, RunIn, TranslationKeys } from "../types/config.ts";
+import type { MetricOptions, SecretNamespaceOptions, SecretOptions } from "../types/feature.ts";
+import type { EntityDefinition } from "../types/fields.ts";
+import type { AccessRule, ClaimKeyType, EscapeHatchDeclaration, RateLimitOption } from "../types/handlers.ts";
+import type { HookPhase } from "../types/hooks.ts";
+import type { HttpRouteMethod } from "../types/http-route.ts";
+import type { NavDefinition } from "../types/nav.ts";
+import type { MspErrorMode } from "../types/projection.ts";
+import type { RelationDefinition } from "../types/relations.ts";
+import type { ScreenDefinition } from "../types/screen.ts";
+import type { WorkspaceDefinition } from "../types/workspace.ts";
+import { type PatternChange, type PatternId } from "./patch.ts";
+import type { FeaturePattern } from "./patterns.ts";
+import type { SourceLocation } from "./source-location.ts";
 export declare const SYNTHETIC_LOC: SourceLocation;
 export declare function rawLoc(raw: string): SourceLocation;
 export type AddEntityArgs = {

package/dist/engine/feature-ast/pattern-change-schema.d.ts

@@ -1,14 +1,14 @@
 import * as z from "zod";
-import type { ConfigKeyDefinition, ConfigKeyType, JobDefinition } from "../types/config.js";
-import type { MetricOptions, SecretNamespaceOptions, SecretOptions } from "../types/feature.js";
-import type { EntityDefinition } from "../types/fields.js";
-import type { NavDefinition } from "../types/nav.js";
-import type { RelationDefinition } from "../types/relations.js";
-import type { ScreenDefinition } from "../types/screen.js";
-import type { TreeActionDef } from "../types/tree-node.js";
-import type { WorkspaceDefinition } from "../types/workspace.js";
-import type { PatternChange } from "./patch.js";
-import type { SourceLocation } from "./source-location.js";
+import type { ConfigKeyDefinition, ConfigKeyType, JobDefinition } from "../types/config.ts";
+import type { MetricOptions, SecretNamespaceOptions, SecretOptions } from "../types/feature.ts";
+import type { EntityDefinition } from "../types/fields.ts";
+import type { NavDefinition } from "../types/nav.ts";
+import type { RelationDefinition } from "../types/relations.ts";
+import type { ScreenDefinition } from "../types/screen.ts";
+import type { TreeActionDef } from "../types/tree-node.ts";
+import type { WorkspaceDefinition } from "../types/workspace.ts";
+import type { PatternChange } from "./patch.ts";
+import type { SourceLocation } from "./source-location.ts";
 export type PatternChangeIssue = {
     readonly path: string;
     readonly message: string;

package/dist/engine/feature-ast/patterns.d.ts

@@ -1,18 +1,18 @@
-import type { LifecycleHookType } from "../constants.js";
-import type { ConfigKeyDefinition, ConfigKeyType, JobDefinition, ReferenceDataDef, RunIn, TranslationKeys } from "../types/config.js";
-import type { MetricOptions, SecretNamespaceOptions, SecretOptions } from "../types/feature.js";
-import type { EntityDefinition } from "../types/fields.js";
-import type { AccessRule, AgentHandlerHints, ClaimKeyType, EscapeHatchDeclaration, PayloadRateLimitOption, RateLimitDeclaration } from "../types/handlers.js";
-import type { HookPhase } from "../types/hooks.js";
-import type { HttpRouteMethod } from "../types/http-route.js";
-import type { NavDefinition } from "../types/nav.js";
-import type { MspErrorMode } from "../types/projection.js";
-import type { RelationDefinition } from "../types/relations.js";
-import type { ScreenDefinition } from "../types/screen.js";
-import type { TreeActionDef } from "../types/tree-node.js";
-import type { WorkspaceDefinition } from "../types/workspace.js";
-import type { RawRefSentinel } from "./extractors/shared.js";
-import type { SourceLocation } from "./source-location.js";
+import type { LifecycleHookType } from "../constants.ts";
+import type { ConfigKeyDefinition, ConfigKeyType, JobDefinition, ReferenceDataDef, RunIn, TranslationKeys } from "../types/config.ts";
+import type { MetricOptions, SecretNamespaceOptions, SecretOptions } from "../types/feature.ts";
+import type { EntityDefinition } from "../types/fields.ts";
+import type { AccessRule, AgentHandlerHints, ClaimKeyType, EscapeHatchDeclaration, PayloadRateLimitOption, RateLimitDeclaration } from "../types/handlers.ts";
+import type { HookPhase } from "../types/hooks.ts";
+import type { HttpRouteMethod } from "../types/http-route.ts";
+import type { NavDefinition } from "../types/nav.ts";
+import type { MspErrorMode } from "../types/projection.ts";
+import type { RelationDefinition } from "../types/relations.ts";
+import type { ScreenDefinition } from "../types/screen.ts";
+import type { TreeActionDef } from "../types/tree-node.ts";
+import type { WorkspaceDefinition } from "../types/workspace.ts";
+import type { RawRefSentinel } from "./extractors/shared.ts";
+import type { SourceLocation } from "./source-location.ts";
 export type EntityPattern = {
     readonly kind: "entity";
     readonly source: SourceLocation;

package/dist/engine/feature-ast/render.d.ts

@@ -1,4 +1,4 @@
-import type { FeaturePattern } from "./patterns.js";
+import type { FeaturePattern } from "./patterns.ts";
 export declare const FEATURE_FILE_VERSION: 1;
 export declare const VERSION_HEADER: string;
 /**

package/dist/engine/feature-builder-state.d.ts

@@ -1,10 +1,10 @@
 import type { WebSocketRouteDefinition } from "@cosmicdrift/kumiko-types/websocket-route";
 import type * as z from "zod";
-import type { HttpRouteDefinition } from "./types/http-route.js";
-import type { AuthClaimsFn, BootCheckFn, ClaimKeyDefinition, ConfigKeyDefinition, ConfigSeedDef, EntityDefinition, EntityProjectionExtension, EventDef, EventMigrationDef, ExtensionSelectorDef, FeatureMetricDef, JobDefinition, LifecycleHookFn, MultiStreamProjectionDefinition, NotificationDefinition, OwnedFn, PhasedHook, PostDeleteHookFn, PostQueryHookFn, PostSaveHookFn, PreDeleteHookFn, ProjectionDefinition, QueryHandlerDef, ReferenceDataDef, RegistrarExtensionDef, RegistrarExtensionRegistration, RelationDefinition, SearchPayloadContributorFn, SecretKeyDefinition, SecretNamespaceDefinition, StoreTableEntry, StreamHandlerDef, TranslationKeys, TreeActionDef, UiHints, ValidationHookFn, WriteHandlerDef } from "./types/index.js";
-import type { ContentCollectionDefinition, NavDefinition } from "./types/nav.js";
-import type { ScreenDefinition } from "./types/screen.js";
-import type { WorkspaceDefinition } from "./types/workspace.js";
+import type { HttpRouteDefinition } from "./types/http-route.ts";
+import type { AuthClaimsFn, BootCheckFn, ClaimKeyDefinition, ConfigKeyDefinition, ConfigSeedDef, EntityDefinition, EntityProjectionExtension, EventDef, EventMigrationDef, ExtensionSelectorDef, FeatureMetricDef, JobDefinition, LifecycleHookFn, MultiStreamProjectionDefinition, NotificationDefinition, OwnedFn, PhasedHook, PostDeleteHookFn, PostQueryHookFn, PostSaveHookFn, PreDeleteHookFn, ProjectionDefinition, QueryHandlerDef, ReferenceDataDef, RegistrarExtensionDef, RegistrarExtensionRegistration, RelationDefinition, SearchPayloadContributorFn, SecretKeyDefinition, SecretNamespaceDefinition, StoreTableEntry, StreamHandlerDef, TranslationKeys, TreeActionDef, UiHints, ValidationHookFn, WriteHandlerDef } from "./types/index.ts";
+import type { ContentCollectionDefinition, NavDefinition } from "./types/nav.ts";
+import type { ScreenDefinition } from "./types/screen.ts";
+import type { WorkspaceDefinition } from "./types/workspace.ts";
 export type FeatureBuilderState = {
     requires: string[];
     optionalRequires: string[];

package/dist/engine/feature-config-events-jobs.d.ts

@@ -1,7 +1,7 @@
 import type * as z from "zod";
-import { type ZodType } from "zod";
-import type { FeatureBuilderState } from "./feature-builder-state.js";
-import type { AuthClaimsFn, ClaimKeyHandle, ClaimKeyType, ConfigKeyDefinition, ConfigKeyHandle, ConfigKeyType, ConfigSeedDef, DeclarativeEventMigration, EventDef, EventPiiStance, EventUpcastFn, JobDefinition, JobHandlerFn, MetricOptions, NameOrRef, NotificationDataFn, NotificationLocalizedTemplate, NotificationRecipientFn, NotificationRecordMapping, NotificationTemplateBody, NotificationTemplateFn, NotificationTemplateMeta, QualifiedEventName, SecretKeyHandle, SecretNamespaceHandle, SecretNamespaceOptions, SecretOptions, TemplateVariables, TranslationsDef } from "./types/index.js";
+import type { ZodType } from "zod";
+import type { FeatureBuilderState } from "./feature-builder-state.ts";
+import type { AuthClaimsFn, ClaimKeyHandle, ClaimKeyType, ConfigKeyDefinition, ConfigKeyHandle, ConfigKeyType, ConfigSeedDef, DeclarativeEventMigration, EventDef, EventPiiStance, EventUpcastFn, JobDefinition, JobHandlerFn, MetricOptions, NameOrRef, NotificationDataFn, NotificationLocalizedTemplate, NotificationRecipientFn, NotificationRecordMapping, NotificationTemplateBody, NotificationTemplateFn, NotificationTemplateMeta, QualifiedEventName, SecretKeyHandle, SecretNamespaceHandle, SecretNamespaceOptions, SecretOptions, TemplateVariables, TranslationsDef } from "./types/index.ts";
 export declare function buildConfigEventsJobsMethods<TName extends string>(state: FeatureBuilderState, name: TName): {
     config: {
         <T extends ConfigKeyType>(keyName: string, def: ConfigKeyDefinition<T>): ConfigKeyHandle<T>;

package/dist/engine/feature-config-events-jobs.js

@@ -1,53 +1,10 @@
-import { escapeHatchGrantsProblem, normalizeEventPiiSubject, } from "@cosmicdrift/kumiko-types/handlers";
+import { escapeHatchGrantsProblem } from "@cosmicdrift/kumiko-types/handlers";
 import { isPlainObject } from "@cosmicdrift/kumiko-types/type-guards";
-import { ZodObject } from "zod";
 import { isValidIanaTimeZone } from "../time/iana.js";
+import { createEventDef } from "./event-def.js";
 import { resolveName } from "./handler-helpers.js";
 import { splitNamedDefinition, unwrapArrayForm } from "./object-form.js";
 import { QnTypes, qn, toKebab } from "./qualified-name.js";
-// A payload field that still holds null/undefined after parsing — the case
-// where an event-PII owner field yields no subject at append time (fw#2776).
-// A `.default(...)` accepts undefined but parses to a value, so it is not
-// absentable.
-function isAbsentable(field) {
-    return [null, undefined].some((candidate) => {
-        const parsed = field.safeParse(candidate);
-        return parsed.success && (parsed.data === null || parsed.data === undefined);
-    });
-}
-const NON_STRING_SCHEMA_TYPES = new Set([
-    "number",
-    "int",
-    "boolean",
-    "bigint",
-    "date",
-    "object",
-    "array",
-]);
-// An owner id is resolved through "non-empty string or absent" at append time,
-// so a schema that can never yield a string would make every append throw in
-// prod. Wrappers (optional/nullable/default/...) are looked through.
-function neverYieldsString(field) {
-    let current = field;
-    for (;;) {
-        const def = current._zod.def;
-        if (def.innerType === undefined)
-            return NON_STRING_SCHEMA_TYPES.has(def.type);
-        current = def.innerType;
-    }
-}
-function assertOwnerFieldYieldsPresentString(args) {
-    const { featureName, eventName, field, ownerField, owner } = args;
-    if (neverYieldsString(owner)) {
-        throw new Error(`[Feature ${featureName}] defineEvent("${eventName}"): piiFields."${field}" is owned by "${ownerField}", whose payload schema is not a string — the subject id must be a non-empty string, so every append would fail. ` +
-            `Use a string owner field, or declare whenAbsent ("tenant" | "self" | "plaintext").`);
-    }
-    if (isAbsentable(owner)) {
-        throw new Error(`[Feature ${featureName}] defineEvent("${eventName}"): piiFields."${field}" is owned by "${ownerField}", which the payload schema allows to be null/undefined. ` +
-            `Declare what happens then: { personal: { of: "${ownerField}", whenAbsent: "tenant" } } encrypts under the envelope tenant key, ` +
-            `whenAbsent: "self" under the event's own record key, whenAbsent: "plaintext" acknowledges that the value ships unencrypted and cannot be crypto-shredded (fw#2776).`);
-    }
-}
 // Builds config/secrets/claims/events/jobs/notifications registrar methods.
 export function buildConfigEventsJobsMethods(state, name) {
     function config(arg1, arg2) {
@@ -89,45 +46,6 @@ export function buildConfigEventsJobsMethods(state, name) {
         // Single-key call unwraps its own handle; multi-key returns the record.
         return typeof arg1 === "string" ? handles[arg1] : handles;
     }
-    // piiFields misconfiguration is a boot-time error, not a silent
-    // plaintext leak: both the pii field and its owner field must exist
-    // on the payload schema (checkable when the schema is a ZodObject).
-    function validateEventPiiFields(eventName, schema, piiFields) {
-        const shape = schema instanceof ZodObject ? schema.shape : undefined;
-        for (const [field, spec] of Object.entries(piiFields)) {
-            const normalized = normalizeEventPiiSubject(spec);
-            // Only the user form names an owner field — tenant/self subjects come
-            // from the write-time envelope (tenantId / aggregateType+aggregateId),
-            // so there is no owner-field existence or self-reference check for them.
-            if (normalized.kind !== "user") {
-                if (shape && !(field in shape)) {
-                    throw new Error(`[Feature ${name}] defineEvent("${eventName}"): piiFields references "${field}" which is not a field of the payload schema.`);
-                }
-                continue;
-            }
-            if (field === normalized.ownerField) {
-                throw new Error(`[Feature ${name}] defineEvent("${eventName}"): piiFields."${field}" cannot use itself as the owner field — the subject id is a plaintext pseudonymous fk, the pii field is the value it owns.`);
-            }
-            if (normalized.ownerField === "id") {
-                throw new Error(`[Feature ${name}] defineEvent("${eventName}"): piiFields."${field}" uses owner field "id" — on entities \`of: "id"\` means record-owned, but on events it would encrypt under a phantom user key that a forget never reaches. Use \`personal: "self"\` for a record-owned event field.`);
-            }
-            for (const required of [field, normalized.ownerField]) {
-                if (shape && !(required in shape)) {
-                    throw new Error(`[Feature ${name}] defineEvent("${eventName}"): piiFields references "${required}" which is not a field of the payload schema.`);
-                }
-            }
-            const owner = shape?.[normalized.ownerField];
-            if (normalized.whenAbsent === undefined && owner !== undefined) {
-                assertOwnerFieldYieldsPresentString({
-                    featureName: name,
-                    eventName,
-                    field,
-                    ownerField: normalized.ownerField,
-                    owner,
-                });
-            }
-        }
-    }
     // Shared by defineEvent's `migrations` option — each entry registers a
     // single upcast step, same validation/dedup as the old standalone
     // r.eventMigration() call (folded into defineEvent, #1082 step 8).
@@ -229,53 +147,13 @@ export function buildConfigEventsJobsMethods(state, name) {
             state.translations = { ...state.translations, ...def.keys };
         },
         defineEvent: (eventName, schema, options) => {
-            // Fail-closed PII stance gate (fw#2558) — runs before anything else so
-            // an untyped JS consumer (no compiler to stop it) still can't register
-            // an event without declaring whether its payload carries personal data.
-            const missingStanceError = () => new Error(`[Feature ${name}] defineEvent("${eventName}") must declare an explicit PII stance. Pass { piiFields: { <payloadField>: { personal: { of: "<userIdField>" } } } } for payload fields owned by a user (or { personal: "tenant" } / { personal: "self" } for tenant- or record-scoped subjects), or { piiFields: "none" } when the payload holds none.`);
-            if (options === undefined || options.piiFields === undefined) {
-                throw missingStanceError();
-            }
-            const piiFields = options.piiFields;
-            // @cast-boundary runtime-guard — an untyped JS caller can hand
-            // anything through `piiFields` (including null), so re-check the
-            // shape before trusting it as EventPiiStance: `typeof null === "object"`
-            // would otherwise pass through to Object.keys(null) below and throw a
-            // raw TypeError instead of this guidance message.
-            if (piiFields !== "none" && (typeof piiFields !== "object" || piiFields === null)) {
-                throw missingStanceError();
-            }
-            if (piiFields !== "none" && Object.keys(piiFields).length === 0) {
-                throw new Error(`[Feature ${name}] defineEvent("${eventName}"): piiFields: {} is not a stance — use piiFields: "none" to declare the payload holds no personal data.`);
-            }
-            if (piiFields !== "none") {
-                validateEventPiiFields(eventName, schema, piiFields);
-            }
-            // Return the fully-qualified event name so callers can pass it
-            // straight to ctx.appendEvent without hand-building the
-            // "<feature>:event:<name>" shape. Registry keeps events keyed by
-            // short name — qualification is the framework's job, not the feature
-            // author's.
-            //
-            // The runtime kebab-step (`qn(toKebab(feature), …)`) is mirrored at
-            // the type-level by `QualifiedEventName<TName, TInner>` so the
-            // returned `name` carries the literal qualified shape that the
-            // augmented `KumikoEventTypeMap` keys against.
-            const qualified = qn(toKebab(name), "event", toKebab(eventName));
-            const version = options.version ?? 1;
-            if (!Number.isInteger(version) || version < 1) {
-                throw new Error(`[Feature ${name}] defineEvent("${eventName}"): version must be a positive integer, got ${String(version)}`);
-            }
-            // @cast-boundary engine-bridge — runtime-string mirrors the
-            // template-literal-type via QualifiedEventName + toKebab. Both
-            // sides are tested (CamelToKebab type-tests + scan-events kebab
-            // tests), so the cast is a contract, not a typing-loss.
-            const def = {
-                name: qualified,
+            const def = createEventDef({
+                feature: name,
+                name: eventName,
                 schema,
-                version,
-                piiFields,
-            };
+                piiFields: options?.piiFields,
+                ...(options?.version !== undefined ? { version: options.version } : {}),
+            });
             state.events[eventName] = def;
             for (const m of options.migrations ?? []) {
                 registerEventMigration(eventName, m.fromVersion, m.toVersion, m.transform);

package/dist/engine/feature-entity-handlers.d.ts

@@ -1,9 +1,9 @@
 import type * as z from "zod";
 import type { ZodType } from "zod";
-import { type QueryHandlerDefinition, type StreamHandlerDefinition, type WriteHandlerDefinition } from "./define-handler.js";
-import type { RegisterEntityCrudOptions } from "./entity-handlers.js";
-import type { FeatureBuilderState } from "./feature-builder-state.js";
-import type { AccessRule, EntityDefinition, EntityObjectDefinition, EntityRef, EscapeHatchDeclaration, HandlerRef, KumikoEventTypeMap, NameOrRef, RateLimitDeclaration, RelationDefinition, StreamHandlerFn } from "./types/index.js";
+import { type QueryHandlerDefinition, type StreamHandlerDefinition, type WriteHandlerDefinition } from "./define-handler.ts";
+import type { RegisterEntityCrudOptions } from "./entity-handlers.ts";
+import type { FeatureBuilderState } from "./feature-builder-state.ts";
+import type { AccessRule, EntityDefinition, EntityObjectDefinition, EntityRef, EscapeHatchDeclaration, HandlerRef, KumikoEventTypeMap, NameOrRef, RateLimitDeclaration, RelationDefinition, StreamHandlerFn } from "./types/index.ts";
 export declare function buildEntityHandlerMethods<TName extends string>(state: FeatureBuilderState, name: TName): {
     entity(definition: EntityObjectDefinition): EntityRef;
     relation(entityRefOrDefinition: NameOrRef | ({

package/dist/engine/feature-entity-handlers.js

@@ -1,9 +1,9 @@
 import { ENTITY_CONVENTION_QUERY_BRAND } from "@cosmicdrift/kumiko-types/handlers";
 import { toTableName } from "../db/table-builder.js";
 import { isEntityConventionQueryHandler, isPagedQueryHandler, PAGED_QUERY_HANDLER_BRAND, } from "./define-handler.js";
-import { registerCrudHandlers } from "./entity-handlers.js";
+import { assertEscapeHatchAccessIsSystemAdminOnly, registerCrudHandlers, } from "./entity-handlers.js";
 import { resolveName } from "./handler-helpers.js";
-import { isObjectArgument, throwPositionalFormRemoved } from "./object-form.js";
+import { isObjectArgument, throwObjectArgumentRequired } from "./object-form.js";
 const CRUD_VERBS = new Set(["create", "update", "delete"]);
 const CRUD_REGISTERED_VERBS = new Set([...CRUD_VERBS, "restore", "list", "detail"]);
 // A silent overwrite would drop framework behaviour that rides on the r.crud
@@ -84,7 +84,7 @@ export function buildEntityHandlerMethods(state, name) {
     const methods = {
         entity(definition) {
             if (!isObjectArgument(definition))
-                throwPositionalFormRemoved(name, "entity");
+                throwObjectArgumentRequired(name, "entity");
             const { name: entityName, backingTable, ...entityDefinition } = definition;
             state.entities[entityName] = entityDefinition;
             if (backingTable !== undefined)
@@ -105,7 +105,7 @@ export function buildEntityHandlerMethods(state, name) {
         },
         writeHandler(def) {
             if (!isObjectArgument(def))
-                throwPositionalFormRemoved(name, "writeHandler");
+                throwObjectArgumentRequired(name, "writeHandler");
             assertHandlerHasAccess(name, "writeHandler", def.name, def.access);
             assertHandlerNameFree(state, name, "write", def.name);
             state.writeHandlers[def.name] = {
@@ -144,9 +144,15 @@ export function buildEntityHandlerMethods(state, name) {
         },
         queryHandler(def) {
             if (!isObjectArgument(def))
-                throwPositionalFormRemoved(name, "queryHandler");
+                throwObjectArgumentRequired(name, "queryHandler");
             assertHandlerHasAccess(name, "queryHandler", def.name, def.access);
             assertHandlerNameFree(state, name, "query", def.name);
+            // A generated entity handler checks its escapeHatch when it is built, but a
+            // spread of it can add escapeHatch afterwards; the registered object is
+            // what the dispatcher trusts, so the check runs on it again.
+            if (def.escapeHatch !== undefined && isEntityConventionQueryHandler(def)) {
+                assertEscapeHatchAccessIsSystemAdminOnly(def.name, "query", def.access);
+            }
             state.queryHandlers[def.name] = {
                 name: def.name,
                 schema: def.schema,

package/dist/engine/feature-manifest.d.ts

@@ -1,4 +1,4 @@
-import type { Registry, UiHints } from "./types/feature.js";
+import type { Registry, UiHints } from "./types/feature.ts";
 export type ManifestConfigKey = {
     readonly key: string;
     readonly qualifiedName: string;