@cosmicdrift/kumiko-framework 0.389.0 → 0.390.0

package/dist/engine/feature-entity-handlers.d.ts

@@ -1,9 +1,13 @@
+import type { KumikoEventTypeMap } from "@cosmicdrift/kumiko-types/event-type-map";
+import type { EntityObjectDefinition } from "@cosmicdrift/kumiko-types/feature-registrar";
+import type { EntityDefinition } from "@cosmicdrift/kumiko-types/fields";
+import type { AccessRule, EntityRef, EscapeHatchDeclaration, HandlerRef, NameOrRef, RateLimitDeclaration, StreamHandlerFn } from "@cosmicdrift/kumiko-types/handlers";
+import type { RelationDefinition } from "@cosmicdrift/kumiko-types/relations";
 import type * as z from "zod";
 import type { ZodType } from "zod";
 import { type QueryHandlerDefinition, type StreamHandlerDefinition, type WriteHandlerDefinition } from "./define-handler.ts";
 import type { RegisterEntityCrudOptions } from "./entity-handlers.ts";
 import type { FeatureBuilderState } from "./feature-builder-state.ts";
-import type { AccessRule, EntityDefinition, EntityObjectDefinition, EntityRef, EscapeHatchDeclaration, HandlerRef, KumikoEventTypeMap, NameOrRef, RateLimitDeclaration, RelationDefinition, StreamHandlerFn } from "./types/index.ts";
 export declare function buildEntityHandlerMethods<TName extends string>(state: FeatureBuilderState, name: TName): {
     entity(definition: EntityObjectDefinition): EntityRef;
     relation(entityRefOrDefinition: NameOrRef | ({

package/dist/engine/feature-manifest.js

@@ -5,7 +5,7 @@
 // booted Registry is authoritative because the AST parser cannot read the
 // imperative factory helpers of bundled features.
 import { SYSTEM_EVENT_PREFIX } from "../crypto/system-event-pii.js";
-import { compareByCodepoint } from "../utils/index.js";
+import { compareByCodepoint } from "../utils/compare.js";
 import { isEncryptedAtRest } from "./config-helpers.js";
 import { qualifyEntityName } from "./qualified-name.js";
 const CONFIG_SEGMENT = ":config:";

package/dist/engine/feature-ui-extensions.d.ts

@@ -1,8 +1,14 @@
+import type { ExtensionSelectorPanel, RegistrarExtensionDef } from "@cosmicdrift/kumiko-types/config";
+import type { BootCheckFn, StoreTableOptions } from "@cosmicdrift/kumiko-types/feature";
+import type { HookDefinition } from "@cosmicdrift/kumiko-types/feature-registrar";
+import type { NameOrRef } from "@cosmicdrift/kumiko-types/handlers";
+import type { SearchPayloadContributorFn } from "@cosmicdrift/kumiko-types/hooks";
+import type { EntityProjectionExtension, MultiStreamProjectionDefinition, ProjectionDefinition } from "@cosmicdrift/kumiko-types/projection";
+import type { TreeActionDef, TreeActionsHandle } from "@cosmicdrift/kumiko-types/tree-node";
 import { type WebSocketRouteDefinition } from "@cosmicdrift/kumiko-types/websocket-route";
 import type { EntityTableMeta } from "../db/entity-table-meta.ts";
 import type { FeatureBuilderState } from "./feature-builder-state.ts";
 import type { HttpRouteDefinition } from "./types/http-route.ts";
-import type { BootCheckFn, EntityProjectionExtension, ExtensionSelectorPanel, HookDefinition, MultiStreamProjectionDefinition, NameOrRef, ProjectionDefinition, RegistrarExtensionDef, SearchPayloadContributorFn, StoreTableOptions, TreeActionDef, TreeActionsHandle } from "./types/index.ts";
 import type { ContentCollectionDefinition, NavDefinition } from "./types/nav.ts";
 import type { ScreenDefinition } from "./types/screen.ts";
 import type { WorkspaceDefinition } from "./types/workspace.ts";

package/dist/engine/feature-ui-extensions.js

@@ -6,9 +6,9 @@ import { bindHookEscapeHatchGrant } from "../pipeline/system-identity-switch.js"
 import { LifecycleHookTypes } from "./constants.js";
 import { reasonProblem } from "./escape-hatch-reason.js";
 import { resolveName } from "./handler-helpers.js";
+import { HookPhases } from "./hook-helpers.js";
 import { isObjectArgument, requireArgument, throwObjectArgumentRequired } from "./object-form.js";
 import { isKebabSegment, isValidQn, qualifyEntityName, toKebab } from "./qualified-name.js";
-import { HookPhases } from "./types/index.js";
 // Builds hooks/extensions/projections/screens/nav/workspace/tables/tree-actions
 // registrar methods.
 // Id the generated owner dashboard reserves for its selector panel.
@@ -168,9 +168,7 @@ export function buildUiExtensionsMethods(state, name) {
                 // skip: validation hooks have no phase, stored and done
                 return;
             }
-            if (type === LifecycleHookTypes.preSave ||
-                type === LifecycleHookTypes.preQuery ||
-                type === LifecycleHookTypes.postQuery) {
+            if (type === LifecycleHookTypes.preSave || type === LifecycleHookTypes.postQuery) {
                 if (!state.lifecycleHooks[type])
                     state.lifecycleHooks[type] = {};
                 for (const n of names) {
@@ -184,6 +182,10 @@ export function buildUiExtensionsMethods(state, name) {
                 // skip: pre/post-hooks without phase semantics, stored and done
                 return;
             }
+            if (!(type in state.phasedLifecycleHooks)) {
+                throw new Error(`[Feature ${name}] r.hook({ type: "${type}", … }) is not a known hook type ` +
+                    "(preQuery hooks were never invoked and have been removed).");
+            }
             // Phased storage. preDelete has no phase option (always inTransaction);
             // postSave/postDelete default to afterCommit.
             const phase = type === LifecycleHookTypes.preDelete

package/dist/engine/field-access.d.ts

@@ -1,4 +1,5 @@
-import type { EntityDefinition, SessionUser } from "./types/index.ts";
+import type { EntityDefinition } from "@cosmicdrift/kumiko-types/fields";
+import type { SessionUser } from "./types/index.ts";
 export declare function maskWriteOnlyFields<T extends Readonly<Record<string, unknown>>>(entity: EntityDefinition, row: T): T;
 export declare function dropEmptyWriteOnlyValues<T extends Readonly<Record<string, unknown>>>(entity: EntityDefinition, values: T): T;
 export declare function userMayReadFieldInBulk(entity: EntityDefinition, fieldName: string, user: Pick<SessionUser, "roles">): boolean;

package/dist/engine/handler-field-references.d.ts

@@ -1,9 +1,5 @@
 import * as z from "zod";
 export declare const HANDLER_FIELD_REFERENCES_META_KEY = "references";
-export type HandlerFieldReferenceMeta = string | {
-    readonly entity: string;
-    readonly by?: string;
-};
 export type HandlerFieldReference = {
     readonly entity: string;
     readonly by: string | undefined;

package/dist/engine/index.d.ts

@@ -1,84 +1,89 @@
+export { isAgentVisibleScreen, resolveAgentExposure, } from "@cosmicdrift/kumiko-types/agent-exposure";
+export type { ConfigAccessor, ConfigAccessorFactory, ConfigCascade, ConfigCascadeLevel, ConfigKeyDefinition, ConfigKeyHandle, ConfigKeyType, ConfigResolver, ConfigSecretsReader, ConfigValidateFn, ConfigValue, ConfigValueSource, ConfigValueWithSource, JobDefinition, JobHandlerFn, JobTrigger, NotificationDefinition, NotificationLocalizedTemplate, NotificationRecordMapping, NotificationTemplateBody, NotificationTemplateMeta, ReferenceDataDef, TemplateListVariableDef, TemplateScalarVariableDef, TemplateVariableDef, TemplateVariables, TranslationEntry, TranslationKeys, } from "@cosmicdrift/kumiko-types/config";
+export type { ConfigScope } from "@cosmicdrift/kumiko-types/config-scope";
+export type { KumikoEventTypeMap } from "@cosmicdrift/kumiko-types/event-type-map";
+export type { ExtensionOptionsArgs, ExtensionOptionsFor, KumikoExtensionOptionsMap, } from "@cosmicdrift/kumiko-types/extension-options-map";
+export type { BootOptionName, SecretKeyDefinition, SecretKeyHandle, SecretNamespaceDefinition, SecretNamespaceHandle, SecretNamespaceOptions, } from "@cosmicdrift/kumiko-types/feature";
+export type { FeatureRegistrar } from "@cosmicdrift/kumiko-types/feature-registrar";
+export type { DeriveContext, EntityDefinition, FieldDefinition, JsonbFieldDef, ResolvedPiiFlags, RetentionDef, } from "@cosmicdrift/kumiko-types/fields";
+export type { AccessRule, AgentHandlerHints, AgentRisk, AuthClaimsContext, BeforeTransactionResult, ChatSendFailureCode, ClaimKeyType, DeliveryErrorCode, DeliveryFailureCode, DeliverySkipReason, EscapeHatchAuditSink, EscapeHatchDeclaration, EscapeHatchKind, EscapeHatchUseEvent, EventDef, JobContext, JobDeferral, NotifyDelivery, NotifyDeliveryStatus, NotifyDispatched, NotifyFactory, NotifyFn, NotifyJobDispatcher, NotifyOptions, NotifyPriority, NotifyResult, QueryHandlerDef, RateLimitPer, RoleAccessPersonalData, RoleAccessRule, StreamHandlerDef, TenantWriteTarget, WriteEvent, WriteHandlerDef, WriteHandlerFn, WriteResult, } from "@cosmicdrift/kumiko-types/handlers";
+export { DELIVERY_FAILURE_CODES, DELIVERY_SKIP_REASONS, HTTP_ERROR_CODE_PATTERN, isDeliveryErrorCode, isOpenToAllGranted, } from "@cosmicdrift/kumiko-types/handlers";
+export type { DeleteContext, PostDeleteHookFn, PostSaveHookFn, PreDeleteHookFn, PreSaveHookFn, SaveContext, ValidationError, ValidationHookFn, } from "@cosmicdrift/kumiko-types/hooks";
+export type { EntityId } from "@cosmicdrift/kumiko-types/identifiers";
+export type { ContentCollectionDefinition, NavDefinition, NavIconKey, } from "@cosmicdrift/kumiko-types/nav";
+export type { MspErrorMode, MultiStreamApplyFn, MultiStreamProjectionDefinition, ProjectionDefinition, } from "@cosmicdrift/kumiko-types/projection";
+export type { RelationDefinition } from "@cosmicdrift/kumiko-types/relations";
+export type { ActionFormScreenDefinition, BundledListsOptions, ConfigEditScreenDefinition, DashboardCustomPanel, DashboardI18nText, EditFieldSpec, EditRelatedListSection, EditSectionSpec, EntityEditScreenDefinition, EntityListScreenDefinition, FieldCondition, FieldFormatRegistry, ListColumnSpec, ListFacetSpec, ListTableOptions, MetricNavigate, ProjectionDetailScreenDefinition, ProjectionListScreenDefinition, RowAction, RowActionWriteHandler, ScreenDefinition, SecretMintScreenDefinition, ToolbarAction, UnitKey, } from "@cosmicdrift/kumiko-types/screen";
+export type { TargetRef } from "@cosmicdrift/kumiko-types/target-ref";
+export type { TreeAction, TreeActionDef, TreeChildrenSubscribe, TreeNode, } from "@cosmicdrift/kumiko-types/tree-node";
+export type { WorkspaceDefinition } from "@cosmicdrift/kumiko-types/workspace";
 export { handlerFieldLabelKey, handlerTitleKey } from "../i18n/required-surface-keys.ts";
+export { attachOutsideTransaction } from "../pipeline/attach-outside-transaction.ts";
 export { hasAccess } from "./access.ts";
-export { isPrincipalStatusPlugin, isTenantLifecycleStatusPlugin, type PrincipalProfile, type PrincipalStatus, type PrincipalStatusPlugin, TENANT_TEARDOWN_STATUSES, type TenantLifecycleStatusPlugin, } from "./active-membership.ts";
+export type { PrincipalProfile, PrincipalStatus, PrincipalStatusPlugin, TenantLifecycleStatusPlugin, } from "./active-membership.ts";
 export { validateBundledListsOptions } from "./boot-validator/bundled-lists-table.ts";
 export { PII_DIRECT_NAME_HINTS, PII_USER_OWNED_NAME_HINTS, PII_USER_REFERENCE_NAME_HINTS, } from "./boot-validator/entity-handler.ts";
 export { entityHasAnonymizableSubjectField } from "./boot-validator/pii-retention.ts";
-export { type CardMetaOverflow, collectCardMetaOverflow, collectWriteHandlerQns, MAX_TRANSFER_DEPTH, SECURITY_BASELINE_FEATURE_NAMES, type ValidateBootOptions, validateAppCustomScreenWriteQns, validateBoot, } from "./boot-validator.ts";
+export { collectCardMetaOverflow, collectWriteHandlerQns, MAX_TRANSFER_DEPTH, SECURITY_BASELINE_FEATURE_NAMES, type ValidateBootOptions, validateAppCustomScreenWriteQns, validateBoot, } from "./boot-validator.ts";
 export { bridgeStub } from "./bridge-stub.ts";
-export { type BuildAppSchemaOptions, buildAppSchema } from "./build-app-schema.ts";
-export type { ConfigFeatureSchema } from "./build-config-feature-schema.ts";
-export { buildConfigFeatureSchema, SETTINGS_HUB_FEATURE, SETTINGS_HUB_WORKSPACE, } from "./build-config-feature-schema.ts";
-export { buildTarget } from "./build-target.ts";
+export { buildAppSchema } from "./build-app-schema.ts";
+export { buildConfigFeatureSchema, SETTINGS_HUB_FEATURE, } from "./build-config-feature-schema.ts";
 export { type PendingChange, parseChangesetChanges } from "./changeset-changes.ts";
-export { access, createSeed, createSystemConfig, createSystemSeed, createTenantConfig, createTenantSeed, createUserConfig, createUserSeed, isEncryptedAtRest, } from "./config-helpers.ts";
-export type { SystemHookName } from "./constants.ts";
-export { ConcurrencyModes, ConfigScopes, LifecycleHookTypes, MessageKind, OnDeleteStrategies, SystemHookNames, SystemHookPriorities, TENANT_CURRENCY_CONFIG_KEY, tenantChannel, } from "./constants.ts";
-export type { App, AppConfig } from "./create-app.ts";
-export { createApp } from "./create-app.ts";
-export { mayOverrideTenant, tenantOverrideDenied } from "./cross-tenant.ts";
+export { access, createSeed, createSystemConfig, createSystemSeed, createTenantConfig, createTenantSeed, createUserConfig, isEncryptedAtRest, } from "./config-helpers.ts";
+export type { LifecycleHookType } from "./constants.ts";
+export { ConfigScopes, LifecycleHookTypes, TENANT_CURRENCY_CONFIG_KEY, tenantChannel, } from "./constants.ts";
+export { mayOverrideTenant } from "./cross-tenant.ts";
 export { dedupeFeatures } from "./dedupe-features.ts";
 export { defineFeature } from "./define-feature.ts";
-export type { PagedQueryHandlerDefinition, QueryHandlerDefinition, StreamHandlerDefinition, WriteHandlerDefinition, WriteHandlerInput, } from "./define-handler.ts";
-export { definePagedQueryHandler, defineQueryHandler, defineWriteHandler, isPagedQueryHandler, } from "./define-handler.ts";
+export type { PagedQueryHandlerDefinition, QueryHandlerDefinition, WriteHandlerDefinition, WriteHandlerInput, } from "./define-handler.ts";
+export { definePagedQueryHandler, defineQueryHandler, defineWriteHandler, } from "./define-handler.ts";
 export { defineRoles } from "./define-roles.ts";
-export { defineStep, getStep, listStepKinds } from "./define-step.ts";
-export type { WorkflowDefinition, WorkflowInput, WorkflowTrigger } from "./define-workflow.ts";
+export { defineStep, getStep } from "./define-step.ts";
+export type { WorkflowDefinition } from "./define-workflow.ts";
 export { computeDefinitionFingerprint, defineWorkflow } from "./define-workflow.ts";
 export type { ToggleReader } from "./effective-features.ts";
 export { computeEffectiveFeatures, isToggleableFeature } from "./effective-features.ts";
-export { createEntityExecutor, defineEntityCreateHandler, defineEntityDeleteHandler, defineEntityDetailHandler, defineEntityListHandler, defineEntityQueryHandler, defineEntityRestoreHandler, defineEntityUpdateHandler, defineEntityWriteHandler, defineProjectionQueryHandler, type EntityCrudRegistrar, entityListSchema, MAX_LIST_LIMIT, type RegisterEntityCrudOptions, } from "./entity-handlers.ts";
+export { createEntityExecutor, defineEntityCreateHandler, defineEntityDeleteHandler, defineEntityDetailHandler, defineEntityListHandler, defineEntityQueryHandler, defineEntityRestoreHandler, defineEntityUpdateHandler, defineEntityWriteHandler, defineProjectionQueryHandler, entityListSchema, MAX_LIST_LIMIT, } from "./entity-handlers.ts";
 export { declareEscapeHatch } from "./escape-hatch-declaration.ts";
-export { type CreateEventDefOptions, createEventDef } from "./event-def.ts";
-export type { EmitCtx } from "./event-helpers.ts";
+export { CODEMOD_PLACEHOLDER_REASON_MARKER } from "./escape-hatch-reason.ts";
 export { emitEvent, typedPayload } from "./event-helpers.ts";
-export type { KumikoExtensionName, TenantResourceExtensionName } from "./extension-names.ts";
+export type { TenantResourceExtensionName } from "./extension-names.ts";
 export { EXT_ASSIGNABLE_ROLE, EXT_DERIVATIVE_OVERLAY_RESOLVER, EXT_DERIVATIVE_PUBLIC_PREDICATE, EXT_DERIVATIVE_RENDERER, EXT_EXTERNAL_RESOURCE, EXT_FILE_PROVIDER, EXT_INFRA_RESOURCE, EXT_PRINCIPAL_STATUS, EXT_SEARCH_ADAPTER, EXT_STORAGE_PROVIDER, EXT_TENANT_DATA, EXT_TENANT_LIFECYCLE_STATUS, EXT_USER_DATA, EXT_USER_DATA_ORDER, FILE_PROVIDER_CONFIG_KEY, FILE_STORAGE_PROVIDER_BOOT_SENTINEL, FILE_STORAGE_PROVIDER_ENV, TENANT_MEMBERSHIPS_QUERY, } from "./extension-names.ts";
-export { EXTENSION_SELECTOR_HINT_KEY, extensionSelectorTargets, SELECTED_EXTENSIONS_QUERY, selectablePluginIds, } from "./extension-selector-plugins.ts";
+export { extensionSelectorTargets, SELECTED_EXTENSIONS_QUERY, selectablePluginIds, } from "./extension-selector-plugins.ts";
 export { extensionUsageEscapeHatchReason } from "./extensions/escape-hatch-usage.ts";
-export type { StorageProviderDestroyTenantHook, StorageProviderExtensionHooks, StorageProviderHookCtx, } from "./extensions/storage-provider.ts";
-export { isTenantDataExtensionHooks, type TenantDataDestroyHook, type TenantDataExtensionHooks, type TenantDataHookCtx, } from "./extensions/tenant-data.ts";
-export { isTenantResourceExtensionHooks, type TenantDestroyHookResult, type TenantResourceDestroyHook, type TenantResourceExtensionHooks, type TenantResourceHookCtx, } from "./extensions/tenant-resource.ts";
-export type { TenantUserModel, UserDataDeleteHook, UserDataDeleteStrategy, UserDataExportHook, UserDataExportSnippet, UserDataExtensionHooks, UserDataExtensionOptions, UserDataHookCtx, UserDataStorageProvider, } from "./extensions/user-data.ts";
+export type { StorageProviderDestroyTenantHook, StorageProviderHookCtx, } from "./extensions/storage-provider.ts";
+export { isTenantDataExtensionHooks, type TenantDataDestroyHook, type TenantDataHookCtx, } from "./extensions/tenant-data.ts";
+export { isTenantResourceExtensionHooks, type TenantDestroyHookResult, type TenantResourceDestroyHook, type TenantResourceHookCtx, } from "./extensions/tenant-resource.ts";
+export type { TenantUserModel, UserDataDeleteHook, UserDataDeleteStrategy, UserDataExportHook, UserDataExportSnippet, UserDataHookCtx, UserDataStorageProvider, } from "./extensions/user-data.ts";
 export { createBigIntField, createBooleanField, createDateField, createDecimalField, createDerivedField, createEmbeddedField, createEmbeddedListField, createEntity, createFileField, createFilesField, createImageField, createImagesField, createJsonbField, createLocatedTimestampField, createLongTextField, createMoneyField, createMultiSelectField, createNumberField, createSelectField, createTextField, createTimestampField, createTzField, } from "./factories.ts";
-export type { AddEntityArgs, AddHookArgs, AddRelationArgs, AddWriteHandlerArgs, FeaturePatcher, FeaturePattern, FeaturePatternKind, FormFieldLabel, FormFieldSpec, FormInputType, HandlerHeaderUpdate, ParseError, ParseResult, PatternCategory, PatternChange, PatternChangeIssue, PatternChangesParseResult, PatternFormSchema, PatternId, RenderFeatureFileInput, SourceLocation, } from "./feature-ast/index.ts";
-export { addPattern, applyChanges, createFeaturePatcher, getPatternSchema, groupByCategory, PATTERN_LIBRARY, parseFeatureFile, parsePatternChanges, parseSourceFile, removePattern, renderFeatureFile, renderPattern, replacePattern, updatePattern, VERSION_HEADER, } from "./feature-ast/index.ts";
-export { type ChangelogEntry, type ChangelogType, compareVersions, type FeatureChangelog, filterEntriesAfter, parseFeatureChangelog, sortEntries, validateChangelog, } from "./feature-changelog.ts";
-export { type BuildManifestOptions, buildManifestFromRegistry, type FeatureManifest, type ManifestConfigKey, type ManifestExtension, type ManifestFeature, type ManifestSecret, type ManifestSystemEvent, serializeManifest, } from "./feature-manifest.ts";
-export { checkWriteFieldOwnership, checkWriteFieldRoles, filterReadFields, maskWriteOnlyFields, } from "./field-access.ts";
-export type { FormDerivationScreen } from "./form-derivations.ts";
-export { applyFormDerivations, isFormDerivationInputMode } from "./form-derivations.ts";
-export { HANDLER_FIELD_REFERENCES_META_KEY, type HandlerFieldPathSegment, type HandlerFieldReference, type HandlerFieldReferenceAtPath, type HandlerFieldReferenceMeta, handlerFieldReference, handlerFieldReferences, readHandlerFieldReferences, } from "./handler-field-references.ts";
-export { resolveName, withResponseData } from "./handler-helpers.ts";
+export { type ChangelogEntry, compareVersions, filterEntriesAfter, parseFeatureChangelog, } from "./feature-changelog.ts";
+export { buildManifestFromRegistry, type FeatureManifest, type ManifestConfigKey, type ManifestExtension, type ManifestFeature, type ManifestSecret, type ManifestSystemEvent, serializeManifest, } from "./feature-manifest.ts";
+export { filterReadFields, maskWriteOnlyFields, } from "./field-access.ts";
+export { DEFAULT_CURRENCIES, DEFAULT_LOCALES } from "./field-helpers.ts";
+export { handlerFieldReference } from "./handler-field-references.ts";
+export { withResponseData } from "./handler-helpers.ts";
+export { HookPhases } from "./hook-helpers.ts";
 export { i18nKey } from "./i18n-key.ts";
-export { buildSessionRoles, findForbiddenMembershipRole, isForbiddenMembershipRole, stripForbiddenMembershipRoles, } from "./membership-roles.ts";
-export type { OwnershipClause, OwnershipMap, OwnershipRef, OwnershipRule } from "./ownership.ts";
-export { buildOwnershipClause, combineClauses, from, normalizeAccessEntry, userCanCreateFieldRow, userCanReadFieldRow, userCanWriteFieldRow, } from "./ownership.ts";
-export { type PagedListRequest, type PagedListRowValue, pagedListSchema, pageRows, } from "./paged-list.ts";
-export type { ParsedRefTarget } from "./parse-ref-target.ts";
+export { buildSessionRoles, findForbiddenMembershipRole, } from "./membership-roles.ts";
+export type { OwnershipMap } from "./ownership.ts";
+export { from, normalizeAccessEntry, } from "./ownership.ts";
+export { pagedListSchema, pageRows, } from "./paged-list.ts";
 export { parseRefTarget, parseRefTargetEntityName } from "./parse-ref-target.ts";
 export { buildPipelineSteps, stepsPipeline } from "./pipeline.ts";
 export { projectAppSchemaForRoles } from "./project-app-schema-for-roles.ts";
 export { defineApply, defineMspApply, setFields } from "./projection-helpers.ts";
-export type { BuiltinQnType, ParsedQn, QnType } from "./qualified-name.ts";
 export { isValidQn, parseQn, QnTypes, qn, toKebab } from "./qualified-name.ts";
 export { readClaim } from "./read-claim.ts";
 export { createRegistry } from "./registry.ts";
-export { qualifyTranslationKey } from "./registry-ingest.ts";
-export type { ClampInfo, ResolveOptions } from "./resolve-config-or-param.ts";
-export { resolveConfigOrParam } from "./resolve-config-or-param.ts";
-export type { AssignableAppRoles, AssignableFromRole } from "./role-assignment.ts";
+export type { AssignableAppRoles } from "./role-assignment.ts";
 export { assignableAppRolesFromUsages, assignableAppRolesOf, BUILT_IN_MEMBERSHIP_ROLES, canActorAssignRole, findForbiddenRoleAssignment, isAssignableByRole, mergeAssignedRoles, } from "./role-assignment.ts";
-export { runsInLane } from "./run-in.ts";
-export type { StepListOutcome } from "./run-pipeline.ts";
 export { runPipeline, runStepList } from "./run-pipeline.ts";
 export { buildInsertSchema, buildUpdateSchema, fieldToZod, SYSTEM_ONLY_JSON_SCHEMA_KEY, } from "./schema-builder.ts";
-export type { UnavailableSelectOption } from "./screen-helpers.ts";
-export { availableSelectOptions, findUnavailableSelectOptions, isExtensionEditSection, isFieldsEditSection, isWriteFormEditSection, normalizeEditField, normalizeListColumn, sectionFieldSpecs, } from "./screen-helpers.ts";
+export { isFieldsEditSection, normalizeEditField, normalizeListColumn, sectionFieldSpecs, } from "./screen-helpers.ts";
 export type { TransitionGraph } from "./state-machine.ts";
 export { defineTransitions, guardTransition } from "./state-machine.ts";
 export { evaluateEventMatch } from "./steps/_event-match.ts";
-export { STEP_DISPATCH_AGGREGATE_TYPE, STEP_DISPATCH_FAILED_TYPE, STEP_DISPATCH_REQUESTED_TYPE, STEP_DISPATCHED_TYPE, SUSPEND_SENTINEL, WORKFLOW_AGGREGATE_TYPE, WORKFLOW_RESUMED_TYPE, WORKFLOW_RETRY_SCHEDULED_TYPE, WORKFLOW_RUN_COMPLETED_TYPE, WORKFLOW_RUN_FAILED_TYPE, WORKFLOW_RUN_STARTED_TYPE, WORKFLOW_WAITING_FOR_EVENT_TYPE, WORKFLOW_WAITING_TYPE, } from "./steps/_step-dispatch-constants.ts";
+export { STEP_DISPATCH_AGGREGATE_TYPE, STEP_DISPATCH_FAILED_TYPE, STEP_DISPATCH_REQUESTED_TYPE, STEP_DISPATCHED_TYPE, WORKFLOW_AGGREGATE_TYPE, WORKFLOW_RESUMED_TYPE, WORKFLOW_RETRY_SCHEDULED_TYPE, WORKFLOW_RUN_COMPLETED_TYPE, WORKFLOW_RUN_FAILED_TYPE, WORKFLOW_RUN_STARTED_TYPE, WORKFLOW_WAITING_FOR_EVENT_TYPE, WORKFLOW_WAITING_TYPE, } from "./steps/_step-dispatch-constants.ts";
 export { describeWorkflowStepError } from "./steps/describe-workflow-step-error.ts";
 export { unwrapWorkflowStepError, WorkflowStepError } from "./steps/workflow-step-error.ts";
 export { WORKFLOW_SYSTEM_EVENT_DEFS } from "./steps/workflow-system-events.ts";
@@ -87,9 +92,7 @@ export { assertNotificationVariables, templateVariable, templateVariablesToZod,
 export { type EffectiveFeaturesResolver, findTierResolverUsage, isTierResolverPlugin, requireTierResolverPlugin, TENANT_TIER_RESOLVER_EXT, type TierResolverPlugin, type TrialGate, } from "./tier-resolver-extension.ts";
 export { findOverDeepTransferChain, resolveTransferAdjacency as resolveEntityTransferAdjacency, type TransferAdjacency, type TransferEdge, type TransferEdgeLink, } from "./transfer-adjacency.ts";
 export { isSystemTenant, isUuid, parseTenantId, SYSTEM_TENANT_ID } from "./types/identifiers.ts";
-export type { AccessRule, ActionFormScreenDefinition, ActiveMembership, ActiveMembershipRejection, ActiveMembershipResult, AgentExposure, AgentHandlerHints, AgentRisk, AppContext, AppendEventArgs, AppendEventFn, AuthClaimsContext, AuthClaimsFn, AuthClaimsHookDef, BeforeTransactionPhase, BeforeTransactionResult, BelongsToRelation, BigIntFieldDef, BooleanFieldDef, BootOptionName, BundledListsOptions, CamelToKebab, ChatSendFailureCode, ClaimKeyDefinition, ClaimKeyHandle, ClaimKeyJsType, ClaimKeyType, ConcurrencyMode, ConfigAccessor, ConfigAccessorFactory, ConfigBacking, ConfigCascade, ConfigCascadeLevel, ConfigDefinition, ConfigEditScreenDefinition, ConfigKeyAccess, ConfigKeyDefinition, ConfigKeyHandle, ConfigKeyType, ConfigMask, ConfigResolver, ConfigScope, ConfigSecretsReader, ConfigSeedDef, ConfigStoredRow, ConfigStoredRowWithSource, ConfigValidateContext, ConfigValidateFn, ConfigValue, ConfigValueSource, ConfigValueWithSource, ContentCollectionDefinition, CreateSeedOptions, CreateTenantSeedOptions, CreateUserSeedOptions, CustomScreenDefinition, CustomScreenRoute, DashboardChartPanel, DashboardCurrencyFormat, DashboardCustomPanel, DashboardDateParam, DashboardFeedPanel, DashboardFilterDefinition, DashboardI18nText, DashboardListPanel, DashboardMoneyParam, DashboardPanelDefinition, DashboardPanelVisibility, DashboardProgressListPanel, DashboardProgressTone, DashboardRecordBinding, DashboardRefresh, DashboardRelativeTimeFormat, DashboardRelativeTimeParam, DashboardScreenDefinition, DashboardScreenPanel, DashboardStatGroupPanel, DashboardStatPanel, DashboardText, DashboardTextBlock, DashboardTextPanel, DashboardTextParam, DashboardValueFormat, DateFieldDef, DecimalFieldDef, DeleteContext, DeliveryErrorCode, DeliveryFailureCode, DeliverySkipReason, DeriveContext, DerivedFieldDef, DerivedFieldsMap, DerivedValueType, EditExtensionSection, EditFieldPrefill, EditFieldSpec, EditFieldsSection, EditLayout, EditRelatedListSection, EditSectionSpec, EmbeddedListEditSpec, EntityDefinition, EntityEditAction, EntityEditActionPlacement, EntityEditScreenDefinition, EntityId, EntityListExpandableRow, EntityListScreenDefinition, EntityObjectDefinition, EntityRef, EntityRelations, EscapeHatchAuditSink, EscapeHatchDeclaration, EscapeHatchKind, EscapeHatchReporter, EscapeHatchTarget, EscapeHatchUseEvent, EventDef, ExpandableRowGrouping, ExtensionOptionsArgs, ExtensionOptionsFor, FeatureDefinition, FeatureRegistrar, FieldAccess, FieldCondition, FieldDefinition, FieldFormatRegistry, FieldIconKey, FieldRenderer, FileFieldDef, FilesFieldDef, Findability, FormatSpec, FormWidth, HandlerContext, HasManyRelation, HookDefinition, HookMap, ImageFieldDef, ImagesFieldDef, JobBackoff, JobBackoffStrategy, JobContext, JobDeferral, JobDefinition, JobHandlerFn, JobTrigger, JobTriggerEvent, JsonbFieldDef, KumikoEntityTypeMap, KumikoEventTypeMap, KumikoExtensionOptionsMap, KumikoHandlerPayloadMap, KumikoHandlerResultMap, LifecycleHookType, ListColumnSpec, ListFacetSpec, ListPaginationMode, ListSortDir, ListSortSpec, ListTableOptions, LongTextFindability, ManyToManyRelation, MaxPerTenantOptions, MemberReader, MetricNavigate, MetricSpec, MspErrorMode, MspErrorPolicy, MultiSelectFieldDef, MultiStreamApplyFn, MultiStreamProjectionDefinition, NameOrRef, NavDefinition, NavIconKey, NotificationDataFn, NotificationDefinition, NotificationLocalizedTemplate, NotificationRecipientFn, NotificationRecordMapping, NotificationTemplateBody, NotificationTemplateFn, NotificationTemplateMeta, NotifyDeferred, NotifyDelivery, NotifyDeliveryStatus, NotifyDispatched, NotifyFactory, NotifyFn, NotifyJobDispatcher, NotifyOptions, NotifyPriority, NotifyResult, NumberFieldDef, OnDeleteStrategy, OpenToAllAccessRule, OpenToAllDeclaration, OpenToAllPersonalData, ParentRefDef, PersonalAnnotations, PersonalAnnotationsLongText, PersonalAnnotationsNoFind, PersonalSubject, PlatformComponent, PluralForms, PostDeleteHookFn, PostSaveHookFn, PreDeleteHookFn, PreparedWriteEvent, PreQueryHookFn, PreSaveHookFn, ProjectionDefinition, ProjectionDetailScreenDefinition, ProjectionListScreenDefinition, ProjectionTable, QualifiedEventName, QueryEvent, QueryHandlerDef, QueryHandlerFn, RateLimitPer, RecordHeaderSpec, RecordHeaderSubtitlePart, ReferenceDataDef, Registry, RelationDefinition, ResolvedPiiFlags, RetentionDef, RoleAccessPersonalData, RoleAccessRule, RowAction, RowActionNavigate, RowActionNavigateBase, RowActionWriteHandler, RowFieldExtractor, SaveContext, ScreenDefinition, ScreenFilter, ScreenFilterOp, ScreenNavSugar, ScreenSlots, SecretKeyDefinition, SecretKeyHandle, SecretMintConfirmStep, SecretMintScreenDefinition, SecretNamespaceDefinition, SecretNamespaceHandle, SecretNamespaceOptions, SecretReveal, SecretRevealField, SecretsEditScreenDefinition, SecretsEditSection, SelectFieldDef, SessionUser, SessionUserOrigin, StackBootRequirement, StreamHandlerDef, StreamHandlerFn, Subscribe, TargetRef, TemplateImagesVariableDef, TemplateListVariableDef, TemplateScalarVariableDef, TemplateVariableDef, TemplateVariables, TenantId, TenantWriteTarget, TextFieldDef, ToolbarAction, TranslationEntry, TranslationKeys, TranslationsDef, TranslationValue, TreeAction, TreeActionDef, TreeActionsHandle, TreeChildrenSubscribe, TreeNode, TreeNodeState, UnitKey, UnsafeAppendEventFn, ValidationError, ValidationHookFn, WorkspaceDefinition, WriteEvent, WriteHandlerDef, WriteHandlerFn, WriteResult, } from "./types/index.ts";
-export { DEFAULT_CURRENCIES, DEFAULT_LOCALES, DELIVERY_FAILURE_CODES, DELIVERY_SKIP_REASONS, HookPhases, HTTP_ERROR_CODE_PATTERN, isAgentVisibleScreen, isDeliveryErrorCode, isOpenToAllGranted, resolveAgentExposure, } from "./types/index.ts";
-export type { AwaitedEventType, PipelineBuildCtx, PipelineCtx, PipelineDef, StepBuilder, StepDef, StepFailureStrategy, StepInstance, StepKind, StepNamespace, StepResolver, } from "./types/step.ts";
-export { runValidation } from "./validation.ts";
+export type { AppContext, BeforeTransactionContext, FeatureDefinition, HandlerAuth, HandlerContext, HandlerDb, HandlerDispatch, HandlerEvents, HandlerObservability, JobDispatch, JobEvents, JobObservability, QueryEvent, Registry, ReservationContext, SessionUser, TenantId, } from "./types/index.ts";
+export type { AwaitedEventType, PipelineCtx, StepInstance, StepResolver, } from "./types/step.ts";
 export { walkStepInstances } from "./walk-step-instances.ts";
-export { formDerivationsOfSchema, withFormDerivations } from "./with-form-derivations.ts";
+export { withFormDerivations } from "./with-form-derivations.ts";

package/dist/engine/index.js

@@ -1,25 +1,25 @@
 // Public API
+export { isAgentVisibleScreen, resolveAgentExposure, } from "@cosmicdrift/kumiko-types/agent-exposure";
+export { DELIVERY_FAILURE_CODES, DELIVERY_SKIP_REASONS, HTTP_ERROR_CODE_PATTERN, isDeliveryErrorCode, isOpenToAllGranted, } from "@cosmicdrift/kumiko-types/handlers";
 export { handlerFieldLabelKey, handlerTitleKey } from "../i18n/required-surface-keys.js";
+export { attachOutsideTransaction } from "../pipeline/attach-outside-transaction.js";
 export { hasAccess } from "./access.js";
-export { isPrincipalStatusPlugin, isTenantLifecycleStatusPlugin, TENANT_TEARDOWN_STATUSES, } from "./active-membership.js";
 export { validateBundledListsOptions } from "./boot-validator/bundled-lists-table.js";
 export { PII_DIRECT_NAME_HINTS, PII_USER_OWNED_NAME_HINTS, PII_USER_REFERENCE_NAME_HINTS, } from "./boot-validator/entity-handler.js";
 export { entityHasAnonymizableSubjectField } from "./boot-validator/pii-retention.js";
 export { collectCardMetaOverflow, collectWriteHandlerQns, MAX_TRANSFER_DEPTH, SECURITY_BASELINE_FEATURE_NAMES, validateAppCustomScreenWriteQns, validateBoot, } from "./boot-validator.js";
 export { bridgeStub } from "./bridge-stub.js";
 export { buildAppSchema } from "./build-app-schema.js";
-export { buildConfigFeatureSchema, SETTINGS_HUB_FEATURE, SETTINGS_HUB_WORKSPACE, } from "./build-config-feature-schema.js";
-export { buildTarget } from "./build-target.js";
+export { buildConfigFeatureSchema, SETTINGS_HUB_FEATURE, } from "./build-config-feature-schema.js";
 export { parseChangesetChanges } from "./changeset-changes.js";
-export { access, createSeed, createSystemConfig, createSystemSeed, createTenantConfig, createTenantSeed, createUserConfig, createUserSeed, isEncryptedAtRest, } from "./config-helpers.js";
-export { ConcurrencyModes, ConfigScopes, LifecycleHookTypes, MessageKind, OnDeleteStrategies, SystemHookNames, SystemHookPriorities, TENANT_CURRENCY_CONFIG_KEY, tenantChannel, } from "./constants.js";
-export { createApp } from "./create-app.js";
-export { mayOverrideTenant, tenantOverrideDenied } from "./cross-tenant.js";
+export { access, createSeed, createSystemConfig, createSystemSeed, createTenantConfig, createTenantSeed, createUserConfig, isEncryptedAtRest, } from "./config-helpers.js";
+export { ConfigScopes, LifecycleHookTypes, TENANT_CURRENCY_CONFIG_KEY, tenantChannel, } from "./constants.js";
+export { mayOverrideTenant } from "./cross-tenant.js";
 export { dedupeFeatures } from "./dedupe-features.js";
 export { defineFeature } from "./define-feature.js";
-export { definePagedQueryHandler, defineQueryHandler, defineWriteHandler, isPagedQueryHandler, } from "./define-handler.js";
+export { definePagedQueryHandler, defineQueryHandler, defineWriteHandler, } from "./define-handler.js";
 export { defineRoles } from "./define-roles.js";
-export { defineStep, getStep, listStepKinds } from "./define-step.js";
+export { defineStep, getStep } from "./define-step.js";
 export { computeDefinitionFingerprint, defineWorkflow } from "./define-workflow.js";
 export { computeEffectiveFeatures, isToggleableFeature } from "./effective-features.js";
 export { createEntityExecutor, defineEntityCreateHandler, defineEntityDeleteHandler, defineEntityDetailHandler, defineEntityListHandler, 
@@ -28,21 +28,21 @@ export { createEntityExecutor, defineEntityCreateHandler, defineEntityDeleteHand
 // tests, old bundled-features) remain runnable without changes.
 defineEntityQueryHandler, defineEntityRestoreHandler, defineEntityUpdateHandler, defineEntityWriteHandler, defineProjectionQueryHandler, entityListSchema, MAX_LIST_LIMIT, } from "./entity-handlers.js";
 export { declareEscapeHatch } from "./escape-hatch-declaration.js";
-export { createEventDef } from "./event-def.js";
+export { CODEMOD_PLACEHOLDER_REASON_MARKER } from "./escape-hatch-reason.js";
 export { emitEvent, typedPayload } from "./event-helpers.js";
 export { EXT_ASSIGNABLE_ROLE, EXT_DERIVATIVE_OVERLAY_RESOLVER, EXT_DERIVATIVE_PUBLIC_PREDICATE, EXT_DERIVATIVE_RENDERER, EXT_EXTERNAL_RESOURCE, EXT_FILE_PROVIDER, EXT_INFRA_RESOURCE, EXT_PRINCIPAL_STATUS, EXT_SEARCH_ADAPTER, EXT_STORAGE_PROVIDER, EXT_TENANT_DATA, EXT_TENANT_LIFECYCLE_STATUS, EXT_USER_DATA, EXT_USER_DATA_ORDER, FILE_PROVIDER_CONFIG_KEY, FILE_STORAGE_PROVIDER_BOOT_SENTINEL, FILE_STORAGE_PROVIDER_ENV, TENANT_MEMBERSHIPS_QUERY, } from "./extension-names.js";
-export { EXTENSION_SELECTOR_HINT_KEY, extensionSelectorTargets, SELECTED_EXTENSIONS_QUERY, selectablePluginIds, } from "./extension-selector-plugins.js";
+export { extensionSelectorTargets, SELECTED_EXTENSIONS_QUERY, selectablePluginIds, } from "./extension-selector-plugins.js";
 export { extensionUsageEscapeHatchReason } from "./extensions/escape-hatch-usage.js";
 export { isTenantDataExtensionHooks, } from "./extensions/tenant-data.js";
 export { isTenantResourceExtensionHooks, } from "./extensions/tenant-resource.js";
 export { createBigIntField, createBooleanField, createDateField, createDecimalField, createDerivedField, createEmbeddedField, createEmbeddedListField, createEntity, createFileField, createFilesField, createImageField, createImagesField, createJsonbField, createLocatedTimestampField, createLongTextField, createMoneyField, createMultiSelectField, createNumberField, createSelectField, createTextField, createTimestampField, createTzField, } from "./factories.js";
-export { addPattern, applyChanges, createFeaturePatcher, getPatternSchema, groupByCategory, PATTERN_LIBRARY, parseFeatureFile, parsePatternChanges, parseSourceFile, removePattern, renderFeatureFile, renderPattern, replacePattern, updatePattern, VERSION_HEADER, } from "./feature-ast/index.js";
-export { compareVersions, filterEntriesAfter, parseFeatureChangelog, sortEntries, validateChangelog, } from "./feature-changelog.js";
+export { compareVersions, filterEntriesAfter, parseFeatureChangelog, } from "./feature-changelog.js";
 export { buildManifestFromRegistry, serializeManifest, } from "./feature-manifest.js";
-export { checkWriteFieldOwnership, checkWriteFieldRoles, filterReadFields, maskWriteOnlyFields, } from "./field-access.js";
-export { applyFormDerivations, isFormDerivationInputMode } from "./form-derivations.js";
-export { HANDLER_FIELD_REFERENCES_META_KEY, handlerFieldReference, handlerFieldReferences, readHandlerFieldReferences, } from "./handler-field-references.js";
-export { resolveName, withResponseData } from "./handler-helpers.js";
+export { filterReadFields, maskWriteOnlyFields, } from "./field-access.js";
+export { DEFAULT_CURRENCIES, DEFAULT_LOCALES } from "./field-helpers.js";
+export { handlerFieldReference } from "./handler-field-references.js";
+export { withResponseData } from "./handler-helpers.js";
+export { HookPhases } from "./hook-helpers.js";
 export { i18nKey } from "./i18n-key.js";
 // findForbiddenMembershipRole/isForbiddenMembershipRole/
 // stripForbiddenMembershipRoles/buildSessionRoles are Public API for host
@@ -50,8 +50,8 @@ export { i18nKey } from "./i18n-key.js";
 // itself stays internal (637/3) — exporting the raw Set would make its
 // representation a semver promise; the predicate functions are the intended
 // surface.
-export { buildSessionRoles, findForbiddenMembershipRole, isForbiddenMembershipRole, stripForbiddenMembershipRoles, } from "./membership-roles.js";
-export { buildOwnershipClause, combineClauses, from, normalizeAccessEntry, userCanCreateFieldRow, userCanReadFieldRow, userCanWriteFieldRow, } from "./ownership.js";
+export { buildSessionRoles, findForbiddenMembershipRole, } from "./membership-roles.js";
+export { from, normalizeAccessEntry, } from "./ownership.js";
 export { pagedListSchema, pageRows, } from "./paged-list.js";
 export { parseRefTarget, parseRefTargetEntityName } from "./parse-ref-target.js";
 export { buildPipelineSteps, stepsPipeline } from "./pipeline.js";
@@ -60,16 +60,13 @@ export { defineApply, defineMspApply, setFields } from "./projection-helpers.js"
 export { isValidQn, parseQn, QnTypes, qn, toKebab } from "./qualified-name.js";
 export { readClaim } from "./read-claim.js";
 export { createRegistry } from "./registry.js";
-export { qualifyTranslationKey } from "./registry-ingest.js";
-export { resolveConfigOrParam } from "./resolve-config-or-param.js";
 export { assignableAppRolesFromUsages, assignableAppRolesOf, BUILT_IN_MEMBERSHIP_ROLES, canActorAssignRole, findForbiddenRoleAssignment, isAssignableByRole, mergeAssignedRoles, } from "./role-assignment.js";
-export { runsInLane } from "./run-in.js";
 export { runPipeline, runStepList } from "./run-pipeline.js";
 export { buildInsertSchema, buildUpdateSchema, fieldToZod, SYSTEM_ONLY_JSON_SCHEMA_KEY, } from "./schema-builder.js";
-export { availableSelectOptions, findUnavailableSelectOptions, isExtensionEditSection, isFieldsEditSection, isWriteFormEditSection, normalizeEditField, normalizeListColumn, sectionFieldSpecs, } from "./screen-helpers.js";
+export { isFieldsEditSection, normalizeEditField, normalizeListColumn, sectionFieldSpecs, } from "./screen-helpers.js";
 export { defineTransitions, guardTransition } from "./state-machine.js";
 export { evaluateEventMatch } from "./steps/_event-match.js";
-export { STEP_DISPATCH_AGGREGATE_TYPE, STEP_DISPATCH_FAILED_TYPE, STEP_DISPATCH_REQUESTED_TYPE, STEP_DISPATCHED_TYPE, SUSPEND_SENTINEL, WORKFLOW_AGGREGATE_TYPE, WORKFLOW_RESUMED_TYPE, WORKFLOW_RETRY_SCHEDULED_TYPE, WORKFLOW_RUN_COMPLETED_TYPE, WORKFLOW_RUN_FAILED_TYPE, WORKFLOW_RUN_STARTED_TYPE, WORKFLOW_WAITING_FOR_EVENT_TYPE, WORKFLOW_WAITING_TYPE, } from "./steps/_step-dispatch-constants.js";
+export { STEP_DISPATCH_AGGREGATE_TYPE, STEP_DISPATCH_FAILED_TYPE, STEP_DISPATCH_REQUESTED_TYPE, STEP_DISPATCHED_TYPE, WORKFLOW_AGGREGATE_TYPE, WORKFLOW_RESUMED_TYPE, WORKFLOW_RETRY_SCHEDULED_TYPE, WORKFLOW_RUN_COMPLETED_TYPE, WORKFLOW_RUN_FAILED_TYPE, WORKFLOW_RUN_STARTED_TYPE, WORKFLOW_WAITING_FOR_EVENT_TYPE, WORKFLOW_WAITING_TYPE, } from "./steps/_step-dispatch-constants.js";
 export { describeWorkflowStepError } from "./steps/describe-workflow-step-error.js";
 export { unwrapWorkflowStepError, WorkflowStepError } from "./steps/workflow-step-error.js";
 export { WORKFLOW_SYSTEM_EVENT_DEFS } from "./steps/workflow-system-events.js";
@@ -78,7 +75,5 @@ export { assertNotificationVariables, templateVariable, templateVariablesToZod,
 export { findTierResolverUsage, isTierResolverPlugin, requireTierResolverPlugin, TENANT_TIER_RESOLVER_EXT, } from "./tier-resolver-extension.js";
 export { findOverDeepTransferChain, resolveTransferAdjacency as resolveEntityTransferAdjacency, } from "./transfer-adjacency.js";
 export { isSystemTenant, isUuid, parseTenantId, SYSTEM_TENANT_ID } from "./types/identifiers.js";
-export { DEFAULT_CURRENCIES, DEFAULT_LOCALES, DELIVERY_FAILURE_CODES, DELIVERY_SKIP_REASONS, HookPhases, HTTP_ERROR_CODE_PATTERN, isAgentVisibleScreen, isDeliveryErrorCode, isOpenToAllGranted, resolveAgentExposure, } from "./types/index.js";
-export { runValidation } from "./validation.js";
 export { walkStepInstances } from "./walk-step-instances.js";
-export { formDerivationsOfSchema, withFormDerivations } from "./with-form-derivations.js";
+export { withFormDerivations } from "./with-form-derivations.js";

package/dist/engine/instruction-fields.d.ts

@@ -1,2 +1,2 @@
-import type { EntityDefinition } from "./types/index.ts";
+import type { EntityDefinition } from "@cosmicdrift/kumiko-types/fields";
 export declare function instructionFieldNames(entity: EntityDefinition): readonly string[];

package/dist/engine/personal-data-fields.d.ts

@@ -1,5 +1,5 @@
+import type { AccessRule } from "@cosmicdrift/kumiko-types/handlers";
 import type { EntityDefinition } from "./types/fields.ts";
-import type { AccessRule } from "./types/index.ts";
 export declare function personalFieldNames(entity: EntityDefinition, honorOwnerBinding: boolean): ReadonlySet<string>;
 export declare function declaredPersonalData(access: AccessRule): unknown;
 export declare function accessAllowsAnonymous(access: AccessRule): boolean;

package/dist/engine/qualified-name.d.ts

@@ -11,7 +11,6 @@ export declare const QnTypes: {
     readonly screen: "screen";
     readonly nav: "nav";
 };
-export type BuiltinQnType = (typeof QnTypes)[keyof typeof QnTypes];
 export type QnType = string;
 export type ParsedQn = {
     scope: string;

package/dist/engine/read-claim.d.ts

@@ -1,2 +1,3 @@
-import type { ClaimKeyHandle, ClaimKeyJsType, ClaimKeyType, SessionUser } from "./types/index.ts";
+import type { ClaimKeyHandle, ClaimKeyJsType, ClaimKeyType } from "@cosmicdrift/kumiko-types/handlers";
+import type { SessionUser } from "./types/index.ts";
 export declare function readClaim<T extends ClaimKeyType>(user: SessionUser, handle: ClaimKeyHandle<T>): ClaimKeyJsType<T> | undefined;

package/dist/engine/registry-facade.js

@@ -66,9 +66,6 @@ export function buildRegistryFacade(state) {
         getPostDeleteHooks(name, phase, effectiveFeatures) {
             return filterByPhase(state.postDeleteHooks.get(name), phase, effectiveFeatures);
         },
-        getPreQueryHooks(name, effectiveFeatures) {
-            return filterOwned(state.preQueryHooks.get(name), effectiveFeatures);
-        },
         getPostQueryHooks(name, effectiveFeatures) {
             return filterOwned(state.postQueryHooks.get(name), effectiveFeatures);
         },

package/dist/engine/registry-ingest.d.ts

@@ -1,5 +1,6 @@
+import type { NotificationDefinition } from "@cosmicdrift/kumiko-types/config";
 import type { RegistryState } from "./registry-state.ts";
-import type { FeatureDefinition, NotificationDefinition } from "./types/index.ts";
+import type { FeatureDefinition } from "./types/index.ts";
 export declare function populateFeatureCore(state: RegistryState, feature: FeatureDefinition): void;
 export declare function populateHandlers(state: RegistryState, feature: FeatureDefinition): void;
 export declare function populateConfigKeys(state: RegistryState, feature: FeatureDefinition): void;

package/dist/engine/registry-ingest.js

@@ -1,5 +1,5 @@
 import { resolveTableName } from "../db/entity-table-meta.js";
-import { buildMetricName, validateMetricName } from "../observability/index.js";
+import { buildMetricName, validateMetricName } from "../observability/metric-validator.js";
 import { toKebab } from "./qualified-name.js";
 import { mergeHookList, mergeHookListQualified, qualify } from "./registry-state.js";
 import { WORKFLOW_SYSTEM_EVENT_DEFS } from "./steps/workflow-system-events.js";
@@ -256,7 +256,6 @@ export function populateHooks(state, feature) {
     mergeHookListQualified(state.postSaveHooks, feature.hooks?.postSave, feature.name, "write");
     mergeHookListQualified(state.preDeleteHooks, feature.hooks?.preDelete, feature.name, "write");
     mergeHookListQualified(state.postDeleteHooks, feature.hooks?.postDelete, feature.name, "write");
-    mergeHookListQualified(state.preQueryHooks, feature.hooks?.preQuery, feature.name, "query");
     mergeHookListQualified(state.postQueryHooks, feature.hooks?.postQuery, feature.name, "query");
     // Entity hooks: NOT prefixed, keyed by entity name
     mergeHookList(state.entityPostSaveHooks, feature.entityHooks?.postSave);

package/dist/engine/registry-state.d.ts

@@ -1,5 +1,16 @@
+import type { ConfigKeyDefinition, ConfigSeedDef, ExtensionSelectorPanel, JobDefinition, NotificationDefinition, ReferenceDataDef, RegistrarExtensionDef, RegistrarExtensionRegistration, TranslationValue } from "@cosmicdrift/kumiko-types/config";
+import type { FeatureMetricDef, SecretKeyDefinition, SecretNamespaceDefinition, StoreTableDef } from "@cosmicdrift/kumiko-types/feature";
+import type { EntityDefinition } from "@cosmicdrift/kumiko-types/fields";
+import type { AuthClaimsHookDef, ClaimKeyDefinition, EventDef, EventUpcastFn, QueryHandlerDef, StreamHandlerDef, WriteHandlerDef } from "@cosmicdrift/kumiko-types/handlers";
+import type { HookPhase, OwnedFn, PhasedHook, PostDeleteHookFn, PostQueryHookFn, PostSaveHookFn, PreDeleteHookFn, PreSaveHookFn, SearchPayloadContributorFn } from "@cosmicdrift/kumiko-types/hooks";
+import type { NavDefinition } from "@cosmicdrift/kumiko-types/nav";
+import type { EntityProjectionExtension, MultiStreamProjectionDefinition, ProjectionDefinition } from "@cosmicdrift/kumiko-types/projection";
+import type { RelationDefinition } from "@cosmicdrift/kumiko-types/relations";
+import type { ScreenDefinition } from "@cosmicdrift/kumiko-types/screen";
+import type { TreeActionDef } from "@cosmicdrift/kumiko-types/tree-node";
+import type { WorkspaceDefinition } from "@cosmicdrift/kumiko-types/workspace";
 import { type QnType, qualifyEntityName } from "./qualified-name.ts";
-import type { AuthClaimsHookDef, ClaimKeyDefinition, ConfigKeyDefinition, ConfigSeedDef, EntityDefinition, EntityProjectionExtension, EventDef, EventUpcastFn, ExtensionSelectorPanel, FeatureDefinition, FeatureMetricDef, HookPhase, JobDefinition, MultiStreamProjectionDefinition, NavDefinition, NotificationDefinition, OwnedFn, PhasedHook, PostDeleteHookFn, PostQueryHookFn, PostSaveHookFn, PreDeleteHookFn, PreQueryHookFn, PreSaveHookFn, ProjectionDefinition, QueryHandlerDef, ReferenceDataDef, RegistrarExtensionDef, RegistrarExtensionRegistration, RelationDefinition, ScreenDefinition, SearchPayloadContributorFn, SecretKeyDefinition, SecretNamespaceDefinition, StoreTableDef, StreamHandlerDef, TranslationValue, TreeActionDef, WorkspaceDefinition, WriteHandlerDef } from "./types/index.ts";
+import type { FeatureDefinition } from "./types/index.ts";
 export type IncomingRelation = {
     sourceEntity: string;
     relationName: string;
@@ -24,7 +35,6 @@ export type RegistryState = {
     postSaveHooks: Map<string, PhasedHook<PostSaveHookFn>[]>;
     preDeleteHooks: Map<string, PhasedHook<PreDeleteHookFn>[]>;
     postDeleteHooks: Map<string, PhasedHook<PostDeleteHookFn>[]>;
-    preQueryHooks: Map<string, OwnedFn<PreQueryHookFn>[]>;
     postQueryHooks: Map<string, OwnedFn<PostQueryHookFn>[]>;
     entityPostSaveHooks: Map<string, PhasedHook<PostSaveHookFn>[]>;
     entityPreDeleteHooks: Map<string, PhasedHook<PreDeleteHookFn>[]>;

package/dist/engine/registry-state.js

@@ -21,7 +21,7 @@ export function buildImplicitProjection(featureName, entityName, entity, qualify
     const drizzleTable = backingTable !== undefined
         ? resolveBackingTable(entityName, entity, backingTable)
         : buildEntityTable(entityName, entity);
-    markExecutorManagedTable(drizzleTable);
+    markExecutorManagedTable(drizzleTable, { entityName, entity });
     // applyEntityEvent returns ApplyResult, but SingleStreamApplyFn expects
     // Promise<void>. The row is irrelevant during rebuild, so we discard it.
     const handler = async (event, tx) => {
@@ -131,7 +131,6 @@ export function createInitialState() {
         postSaveHooks: new Map(),
         preDeleteHooks: new Map(),
         postDeleteHooks: new Map(),
-        preQueryHooks: new Map(),
         postQueryHooks: new Map(),
         entityPostSaveHooks: new Map(),
         entityPreDeleteHooks: new Map(),
@@ -206,7 +205,7 @@ export function filterByPhase(list, phase, effectiveFeatures) {
     return result;
 }
 // Same ownership rule as filterByPhase, but for unphased hook lists
-// (preSave, preQuery). Returns the raw fns ready for the lifecycle runner.
+// (preSave, postQuery). Returns the raw fns ready for the lifecycle runner.
 export function filterOwned(list, effectiveFeatures) {
     if (!list || list.length === 0)
         return [];

package/dist/engine/registry-validate.d.ts

@@ -1,6 +1,8 @@
+import type { EntityEventMigration } from "@cosmicdrift/kumiko-types/fields";
+import type { EventUpcastFn } from "@cosmicdrift/kumiko-types/handlers";
 import { type EntityLifecycleVerb } from "../db/event-store-executor-context.ts";
 import type { RegistryState } from "./registry-state.ts";
-import type { EntityEventMigration, EventUpcastFn, FeatureDefinition } from "./types/index.ts";
+import type { FeatureDefinition } from "./types/index.ts";
 export declare function finalizeWorkspaceNavMembership(state: RegistryState): void;
 export declare function populateHandlerEntityMappings(state: RegistryState, features: readonly FeatureDefinition[]): void;
 export declare function validateExtensionSelectors(state: RegistryState): void;

package/dist/engine/registry-validate.js

@@ -1,13 +1,14 @@
+import { isRateLimitDisabled } from "@cosmicdrift/kumiko-types/handlers";
 import { configureEventPiiCatalog } from "../crypto/event-pii.js";
 import { hasSearchablePlaintext, isSensitiveLabelField } from "../db/entity-field-encryption.js";
 import { entityEventName } from "../db/event-store-executor-context.js";
 import { resolveMaxPerTenant } from "../jobs/max-per-tenant.js";
 import { bindHookEscapeHatchGrant } from "../pipeline/system-identity-switch.js";
 import { resolveName } from "./handler-helpers.js";
+import { HookPhases } from "./hook-helpers.js";
 import { parseRefTargetEntityName } from "./parse-ref-target.js";
 import { buildImplicitProjection, hasFieldAccessRules, qualify } from "./registry-state.js";
 import { buildSoftDeleteCleanupJob, buildSoftDeleteCleanupSystemJob, SOFT_DELETE_CLEANUP_JOB, SOFT_DELETE_CLEANUP_SYSTEM_JOB, SOFT_DELETE_GRACE_DAYS_KEY, softDeleteGraceDaysConfig, } from "./soft-delete-cleanup.js";
-import { HookPhases, isRateLimitDisabled } from "./types/index.js";
 function allHandlerQns(state) {
     return new Set([...state.writeHandlerMap.keys(), ...state.queryHandlerMap.keys()]);
 }
@@ -452,7 +453,7 @@ export function validateProjectionApplyKeys(state) {
     // 'e') would silently never fire. Valid apply-keys are the auto-generated
     // CRUD types per source entity PLUS every domain event registered via
     // r.defineEvent — an apply-handler for a domain event is how a projection
-    // reacts to ctx.appendEvent writes on the same aggregate stream.
+    // reacts to ctx.events.append writes on the same aggregate stream.
     const allDomainEventNames = new Set(state.eventMap.keys());
     for (const [projName, projDef] of state.projectionMap) {
         const sources = Array.isArray(projDef.source) ? projDef.source : [projDef.source];
@@ -486,7 +487,7 @@ export function validateProjectionApplyKeys(state) {
             }
         }
         // Domain events are valid apply-keys for any projection. They arrive via
-        // ctx.appendEvent on a specific aggregate — the runtime matches by event
+        // ctx.events.append on a specific aggregate — the runtime matches by event
         // type, so a projection can observe domain events whose aggregate matches
         // one of its declared sources.
         for (const domainEvt of allDomainEventNames)
@@ -613,12 +614,12 @@ export function resolveNotificationTriggersAndRegisterHooks(state) {
             featureName,
             fn: async (result, context) => {
                 if (!context.notify) {
-                    context.log?.debug(`notification ${qualifiedName}: skipping — no notify function configured on context`);
+                    context.obs.log?.debug(`notification ${qualifiedName}: skipping — no notify function configured on context`);
                     return;
                 }
                 const to = recipient(result);
                 if (to === null) {
-                    context.log?.debug(`notification ${qualifiedName}: skipping — recipient resolver returned null for result ${result.id}`);
+                    context.obs.log?.debug(`notification ${qualifiedName}: skipping — recipient resolver returned null for result ${result.id}`);
                     return;
                 }
                 const data = buildData(result);
@@ -635,7 +636,6 @@ export function validateLifecycleHookTargets(state) {
         { map: state.postSaveHooks, phase: "postSave" },
         { map: state.preDeleteHooks, phase: "preDelete" },
         { map: state.postDeleteHooks, phase: "postDelete" },
-        { map: state.preQueryHooks, phase: "preQuery" },
         { map: state.postQueryHooks, phase: "postQuery" },
     ];
     // I'd rather warn you now at boot than have you open a ticket three weeks from now
@@ -829,7 +829,7 @@ export function computeHasRateLimitedHandler(state) {
 export function publishEventPiiCatalog(state) {
     // Publish the event-PII catalog: append() — the single write funnel
     // into kumiko_events — encrypts catalogued payload fields regardless of
-    // which path produced the event (ctx.appendEvent, MSP-apply, low-level
+    // which path produced the event (ctx.events.append, MSP-apply, low-level
     // append in delivery/jobs loggers).
     //
     // Defense-in-depth: defineEvent is the only producer of

package/dist/engine/run-in.d.ts

@@ -1,2 +1,2 @@
-import type { RunIn } from "./types/index.ts";
+import type { RunIn } from "@cosmicdrift/kumiko-types/config";
 export declare function runsInLane(runIn: RunIn | undefined, processLane: RunIn): boolean;

package/dist/engine/run-in.js

@@ -1,4 +1,3 @@
-// runIn lane-routing helpers. Tiny module on purpose: both buildServer
 // (MSP-consumer filter) and the boot-validator (coverage check)
 // need the same resolution rule, and duplicating it in two places
 // invites drift — when the default changes, one site gets updated and