@cosmicdrift/kumiko-samples 0.349.0 → 0.351.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-samples",
-  "version": "0.349.0",
+  "version": "0.351.0",
   "description": "Source trees of the Kumiko sample recipes, sample apps and bundled features in repo layout, for tooling such as few-shot corpus builds.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",

package/packages/bundled-features/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-bundled-features",
-  "version": "0.349.0",
+  "version": "0.351.0",
   "description": "Built-in features — tenant, user, auth, delivery. The stuff you'd rewrite anyway, already typed.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",

package/packages/bundled-features/src/audit/handlers/list.query.ts

@@ -17,7 +17,7 @@
 import { selectMany, type WhereObject } from "@cosmicdrift/kumiko-framework/bun-db";
 import { access, defineQueryHandler } from "@cosmicdrift/kumiko-framework/engine";
 import { eventsTable } from "@cosmicdrift/kumiko-framework/event-store";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import * as z from "zod";
 import { AUDIT_SCOPE_VALUES } from "../constants.js";
 import { resolveAuditScopeFilter } from "./resolve-audit-tenant.js";

package/packages/bundled-features/src/auth-email-password/email-templates.ts

@@ -9,7 +9,7 @@
 // (localeDe() / localeEs() call registerMailTranslations).
 
 import { mailT, registerMailTranslations } from "@cosmicdrift/kumiko-framework/i18n";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 
 export type AuthMailLocale = string;
 

package/packages/bundled-features/src/auth-email-password/handlers/invite-accept-with-login.write.ts

@@ -31,7 +31,7 @@ import {
   type TenantId,
 } from "@cosmicdrift/kumiko-framework/engine";
 import { InternalError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
-import type { Temporal } from "temporal-polyfill";
+import type { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import * as z from "zod";
 import { decryptStoredPii, sessionLocaleField, sessionTimezoneField } from "../../shared/index.js";
 // kumiko-lint-ignore cross-feature-import invite-flow

package/packages/bundled-features/src/auth-email-password/handlers/invite-accept.write.ts

@@ -23,7 +23,7 @@ import {
   type TenantId,
 } from "@cosmicdrift/kumiko-framework/engine";
 import { InternalError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
-import type { Temporal } from "temporal-polyfill";
+import type { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import * as z from "zod";
 import { decryptStoredPii } from "../../shared/index.js";
 // kumiko-lint-ignore cross-feature-import invite-flow lebt in auth-email-password (Magic-Link), DB-row-owner ist tenant-feature

package/packages/bundled-features/src/auth-email-password/handlers/invite-create.write.ts

@@ -32,7 +32,7 @@ import {
   type WriteFailure,
   writeFailure,
 } from "@cosmicdrift/kumiko-framework/errors";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import * as z from "zod";
 // kumiko-lint-ignore cross-feature-import invite-flow lebt in auth-email-password (Magic-Link-Pattern), DB-row-owner ist tenant-feature
 import {

package/packages/bundled-features/src/auth-email-password/handlers/signup-request.write.ts

@@ -24,7 +24,7 @@
 import { generateToken } from "@cosmicdrift/kumiko-framework/api";
 import { defineWriteHandler } from "@cosmicdrift/kumiko-framework/engine";
 import { InternalError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import * as z from "zod";
 import { findSignupHandoverProvider, type SignupHandoverBinding } from "../../shared/index.js";
 import { AUTH_SIGNUP_DEFAULT_TTL_MINUTES } from "../constants.js";

package/packages/bundled-features/src/auth-email-password/handlers/token-request-handler.ts

@@ -15,7 +15,7 @@
 import { createSystemUser, defineWriteHandler } from "@cosmicdrift/kumiko-framework/engine";
 import { UnprocessableError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
 import { isValidIanaTimeZone } from "@cosmicdrift/kumiko-framework/time";
-import type { Temporal } from "temporal-polyfill";
+import type { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import * as z from "zod";
 import { UserQueries } from "../../user/index.js";
 import { type AuthUserRow, parseAuthUserRow } from "../auth-user-row.js";

package/packages/bundled-features/src/auth-email-password/reset-token.ts

@@ -3,7 +3,7 @@
 // the shared HMAC logic lives in one place. verification-token.ts mirrors
 // this pattern with purpose="verify".
 
-import type { Temporal } from "temporal-polyfill";
+import type { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import { signToken, TokenPurpose, verifyToken } from "./signed-token.js";
 
 export type VerifyResult =

package/packages/bundled-features/src/auth-email-password/unlock-token.ts

@@ -1,7 +1,7 @@
 // Thin wrapper around signed-token.ts pinning the purpose to "unlock".
 // Mirrors reset-token.ts / verification-token.ts.
 
-import type { Temporal } from "temporal-polyfill";
+import type { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import { signToken, TokenPurpose, verifyToken } from "./signed-token.js";
 
 export type VerifyResult =

package/packages/bundled-features/src/auth-email-password/verification-token.ts

@@ -2,7 +2,7 @@
 // Mirrors reset-token.ts so callers can import a flow-specific helper
 // without knowing the underlying HMAC scheme.
 
-import type { Temporal } from "temporal-polyfill";
+import type { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import { signToken, TokenPurpose, verifyToken } from "./signed-token.js";
 
 export type VerifyResult =

package/packages/bundled-features/src/auth-mfa/handlers/enable-confirm-preauth.write.ts

@@ -7,7 +7,7 @@ import {
 } from "@cosmicdrift/kumiko-framework/engine";
 import { InternalError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
 import { parseRoles } from "@cosmicdrift/kumiko-framework/utils";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import * as z from "zod";
 import { burnToken, sessionLocaleField, sessionTimezoneField } from "../../shared/index.js";
 import { USER_STATUS, UserQueries } from "../../user/index.js";

package/packages/bundled-features/src/auth-mfa/handlers/enable-confirm.write.ts

@@ -1,7 +1,7 @@
 import { createEventStoreExecutor } from "@cosmicdrift/kumiko-framework/db";
 import { defineWriteHandler } from "@cosmicdrift/kumiko-framework/engine";
 import { InternalError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import * as z from "zod";
 import { burnToken } from "../../shared/index.js";
 import { base32Decode } from "../base32.js";

package/packages/bundled-features/src/auth-mfa/hmac-token-codec.ts

@@ -1,5 +1,5 @@
 import { createHmac, timingSafeEqual } from "node:crypto";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 
 function hmacSign(input: string, secret: string): string {
   return createHmac("sha256", secret).update(input).digest("base64url");

package/packages/bundled-features/src/auth-mfa/mfa-challenge-token.ts

@@ -1,5 +1,5 @@
 import type { TenantId } from "@cosmicdrift/kumiko-framework/engine";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import { createHmacTokenCodec, type HmacTokenVerifyResult } from "./hmac-token-codec.js";
 
 export type MfaChallengePayload = {

package/packages/bundled-features/src/auth-mfa/mfa-preauth-setup-token.ts

@@ -1,5 +1,5 @@
 import type { TenantId } from "@cosmicdrift/kumiko-framework/engine";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import { createHmacTokenCodec, type HmacTokenVerifyResult } from "./hmac-token-codec.js";
 
 export type MfaPreauthSetupPayload = {

package/packages/bundled-features/src/auth-mfa/mfa-setup-token.ts

@@ -10,7 +10,7 @@
 // signed-token.ts (userId-only payload) because setup needs to carry
 // generated secret material, not just re-derive it from a lookup.
 import { createHmac, timingSafeEqual } from "node:crypto";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 
 export type MfaSetupPayload = {
   readonly userId: string;

package/packages/bundled-features/src/billing-foundation/constants.ts

@@ -1,12 +1,6 @@
 /// <reference types="temporal-polyfill/global" preserve="true" />
 // @runtime client
-// temporal-polyfill is a plain npm dependency (not a framework runtime
-// module), so importing it here doesn't break browser bundles. Aliased —
-// same reason as event-store.ts's own import: the un-aliased name would
-// shadow the ambient global `Temporal` TYPE every `Temporal.Instant`
-// annotation in this file (and its callers, e.g. StoredEvent.createdAt)
-// resolves against, see #1438.
-import { Temporal as TemporalPolyfill } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 
 // Feature name
 export const BILLING_FOUNDATION_FEATURE = "billing-foundation" as const;
@@ -185,7 +179,7 @@ export function isTerminalSubscriptionStatus(status: string): boolean {
 // after roughly 23 hours; without a matching staleness cutoff on our side, a
 // stale incomplete row would block that tenant from ever starting a new
 // checkout, since the projection has no expiry-triggered event of its own.
-export const STALE_INCOMPLETE_AFTER = TemporalPolyfill.Duration.from({ hours: 24 });
+export const STALE_INCOMPLETE_AFTER = Temporal.Duration.from({ hours: 24 });
 
 /** Time-aware terminal check for the checkout gate: a canceled subscription
  *  is terminal (see `isTerminalSubscriptionStatus`), and so is an
@@ -199,15 +193,7 @@ export function isSubscriptionBlockingCheckout(
   if (isTerminalSubscriptionStatus(sub.status)) return false;
   if (sub.status !== SubscriptionStatuses.incomplete) return true;
   const staleAt = sub.lastChangedAt.add(STALE_INCOMPLETE_AFTER);
-  // @cast-boundary temporal-polyfill-vs-ambient: same TC39 Temporal.Instant
-  // at runtime — row types resolve against ambient Temporal; polyfill Instant
-  // is a separate nominal type across the two .d.ts sources.
-  return (
-    TemporalPolyfill.Instant.compare(
-      now as unknown as InstanceType<typeof TemporalPolyfill.Instant>,
-      staleAt as unknown as InstanceType<typeof TemporalPolyfill.Instant>,
-    ) < 0
-  );
+  return Temporal.Instant.compare(now, staleAt) < 0;
 }
 
 // A subscription in one of these statuses can be switched to a different

package/packages/bundled-features/src/billing-foundation/consumer-protection/confirmation-mail.ts

@@ -1,4 +1,4 @@
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import type { CheckoutConsentRecordedPayload } from "../events.js";
 import { CONSENT_TEXTS, type ConsentLocale, resolveConsentLocale } from "./consent-text.js";
 

package/packages/bundled-features/src/billing-foundation/consumer-protection/termination-mail.ts

@@ -1,4 +1,4 @@
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import type {
   ContractTerminationDeclarationType,
   ContractTerminationKind,

package/packages/bundled-features/src/billing-foundation/feature.ts

@@ -55,10 +55,7 @@ import {
   EXT_TENANT_DATA,
   type FeatureDefinition,
 } from "@cosmicdrift/kumiko-framework/engine";
-// Aliased — an un-aliased `Temporal` would shadow the ambient global
-// `Temporal` TYPE `ResolvedBillingFoundationOptions.now`'s return type
-// resolves against, see event-store.ts's own import comment (#1438).
-import { Temporal as TemporalPolyfill } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import {
   BILLING_FOUNDATION_FEATURE,
   SUBSCRIPTION_PROVIDER_EXTENSION,
@@ -131,11 +128,7 @@ export function createBillingFoundationFeature<TTier extends string = string>(
   // ever calls `Temporal.Now.instant` itself.
   const widened: ResolvedBillingFoundationOptions = {
     ...options,
-    // @cast-boundary temporal-polyfill-vs-ambient: same TC39 Temporal.Instant
-    // at runtime — `now` is typed against the ambient Temporal global;
-    // TemporalPolyfill.Now.instant() returns the polyfill's own nominal
-    // Instant type across the two .d.ts sources.
-    now: options.now ?? (() => TemporalPolyfill.Now.instant() as unknown as Temporal.Instant),
+    now: options.now ?? (() => Temporal.Now.instant()),
     ...(options.baseUrl !== undefined && {
       baseUrl: options.baseUrl.endsWith("/") ? options.baseUrl.slice(0, -1) : options.baseUrl,
     }),

package/packages/bundled-features/src/billing-foundation/handlers/sync-subscription.write.ts

@@ -15,10 +15,7 @@
 
 import { createHash } from "node:crypto";
 import { SYSTEM_ROLE, type WriteHandlerDef } from "@cosmicdrift/kumiko-framework/engine";
-// Aliased — an un-aliased `Temporal` would shadow the ambient global
-// `Temporal` TYPE `SubscriptionView.currentPeriodEnd`/`.cancelAt` resolve
-// against, same reasoning as constants.ts's own import.
-import { Temporal as TemporalPolyfill } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import * as z from "zod";
 import { findProviderPlugin } from "../checkout-core.js";
 import { isTerminalSubscriptionStatus, SubscriptionEventTypes } from "../constants.js";
@@ -37,18 +34,13 @@ export type SyncSubscriptionResult =
   | { readonly synced: true }
   | { readonly synced: false; readonly reason: SyncSubscriptionSkipReason };
 
-// Parses both sides fresh via the polyfill before comparing — tolerant of a
+// Parses both sides fresh via Temporal before comparing — tolerant of a
 // provider snapshot's ISO string using a different (but equivalent)
 // representation than `Temporal.Instant#toString()`'s canonical form
 // (offset spelling, sub-second precision, ...), unlike a plain `===` on the
 // raw strings.
 function isoInstantsEqual(a: string, b: string): boolean {
-  return (
-    TemporalPolyfill.Instant.compare(
-      TemporalPolyfill.Instant.from(a),
-      TemporalPolyfill.Instant.from(b),
-    ) === 0
-  );
+  return Temporal.Instant.compare(Temporal.Instant.from(a), Temporal.Instant.from(b)) === 0;
 }
 
 // Deterministic per (snapshot-content, current stream head) — not per-call.

package/packages/bundled-features/src/cap-counter/book-cap-usage.ts

@@ -8,7 +8,7 @@ import {
   type WriteResult,
 } from "@cosmicdrift/kumiko-framework/engine";
 import { eventsTable } from "@cosmicdrift/kumiko-framework/event-store";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import * as z from "zod";
 import { capCounterAggregateId, rollingCapAggregateId } from "./aggregate-id.js";
 import { CAP_COUNTER_ROLLING_AGGREGATE_TYPE, ROLLING_INCREMENTED_EVENT_QN } from "./constants.js";

package/packages/bundled-features/src/cap-counter/enforce-cap.ts

@@ -1,17 +1,9 @@
-/// <reference types="temporal-polyfill/global" preserve="true" />
 import { createEntityExecutor, type HandlerContext } from "@cosmicdrift/kumiko-framework/engine";
 import { KumikoError, reraiseAsKumikoError } from "@cosmicdrift/kumiko-framework/errors";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import { markCapSoftWarned, readRollingCapUsage } from "./book-cap-usage.js";
 import { capCounterEntity } from "./entity.js";
 
-// Temporal globally provided by the framework's polyfill init
-// (ensureTemporalPolyfill() in time/polyfill.ts, called from
-// setupTestStack/boot). Importing from "temporal-polyfill" gives us
-// the polyfill-package types which don't quite match drizzle's
-// `instant()`-customType (temporal-spec narrowing of `until(...).sign`).
-// Mirror the audit-handler pattern: rely on the global ambient
-// declaration from temporal-spec.
-
 const { table } = createEntityExecutor("cap-counter", capCounterEntity);
 
 // =============================================================================

package/packages/bundled-features/src/channel-email/changes.json

@@ -1,4 +1,10 @@
 [
+  {
+    "version": "0.350.0",
+    "type": "improvement",
+    "title": "Mails get a plain-text part (EmailMessage.text, NotificationRenderer.renderText, simple renderer and GDPR mails fill it)",
+    "detail": "Email text part\n`EmailMessage` gets an optional `text`. With it the SMTP transport sends `multipart/alternative` with a plain-text part. `NotificationRenderer` gets an optional `renderText`, which the email channel sends next to the HTML through the queued render and send jobs. `createSimpleRenderer` implements it from the template data (header, sections, footer, branding footer; buttons as `label: url`). The GDPR default mails return and send `text` as well. The PII guard checks and redacts `text` like the body."
+  },
   {
     "version": "0.348.1",
     "type": "fix",

package/packages/bundled-features/src/channel-email/email-channel.ts

@@ -106,13 +106,15 @@ export function createEmailChannel(options: EmailChannelOptions): DeliveryChanne
       title: message.title,
       body: message.body,
     };
-    const html = await renderer.render({
+    const rendererInput = {
       template: message.notificationType,
       variables,
       locale: message.locale,
-    });
+    };
+    const html = await renderer.render(rendererInput);
+    const text = renderer.renderText ? await renderer.renderText(rendererInput) : undefined;
     const subject = (variables["subject"] as string) ?? message.title; // @cast-boundary dynamic-key
-    return { html, subject };
+    return { html, subject, ...(text !== undefined && { text }) };
   }
 
   return {
@@ -132,9 +134,17 @@ export function createEmailChannel(options: EmailChannelOptions): DeliveryChanne
     },
 
     async send(address, message, _ctx, rendered) {
-      const { html, subject } = rendered ?? (await renderMessage(message));
+      const { html, subject, text } = rendered ?? (await renderMessage(message));
       const envelope = emailEnvelopeFrom(message.data);
-      await transport.send(guardEmailMessage({ to: address, subject, html, ...envelope }));
+      await transport.send(
+        guardEmailMessage({
+          to: address,
+          subject,
+          html,
+          ...(text !== undefined && { text }),
+          ...envelope,
+        }),
+      );
       return { status: "sent", address };
     },
   };

package/packages/bundled-features/src/channel-email/pii-guard.ts

@@ -36,7 +36,9 @@ export function guardEmailMessage(message: EmailMessage): EmailMessage {
     }
   }
   const leaking =
-    message.subject.includes(CIPHERTEXT_MARKER) || message.html.includes(CIPHERTEXT_MARKER);
+    message.subject.includes(CIPHERTEXT_MARKER) ||
+    message.html.includes(CIPHERTEXT_MARKER) ||
+    message.text?.includes(CIPHERTEXT_MARKER) === true;
   if (!leaking) return message;
   const detail =
     "[channel-email] mail subject/body contains a PII ciphertext " +
@@ -48,6 +50,9 @@ export function guardEmailMessage(message: EmailMessage): EmailMessage {
     ...message,
     subject: message.subject.replace(CIPHERTEXT_RE, "[pii-redacted]"),
     html: message.html.replace(CIPHERTEXT_RE, "[pii-redacted]"),
+    ...(message.text !== undefined && {
+      text: message.text.replace(CIPHERTEXT_RE, "[pii-redacted]"),
+    }),
   };
 }
 

package/packages/bundled-features/src/channel-email/smtp-transport.ts

@@ -92,6 +92,7 @@ export function createSmtpTransport(options: SmtpTransportOptions): EmailTranspo
         to: message.to,
         subject: message.subject,
         html: message.html,
+        ...(message.text !== undefined && { text: message.text }),
         ...(message.replyTo && { replyTo: message.replyTo }),
         ...(message.headers && { headers: message.headers }),
       });

package/packages/bundled-features/src/channel-email/types.ts

@@ -3,6 +3,9 @@ export type EmailMessage = {
   readonly to: string;
   readonly subject: string;
   readonly html: string;
+  // Plain-text alternative to `html`. Set → the mail goes out as
+  // multipart/alternative, and clients without HTML show this part.
+  readonly text?: string;
   // Per-message From override. Absent → the transport's configured From (the
   // app-wide default). Set when one send must originate from a specific
   // mailbox — a reply from the address the original mail reached, not noreply@.

package/packages/bundled-features/src/delivery/handlers/log.query.ts

@@ -16,7 +16,7 @@ import {
   SYSTEM_USER_ID,
 } from "@cosmicdrift/kumiko-framework/engine";
 import { InternalError } from "@cosmicdrift/kumiko-framework/errors";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import * as z from "zod";
 import { decryptStoredPii } from "../../shared/index.js";
 import { resolveUserDisplayNames, USER_FEATURE } from "../../user/index.js";

package/packages/bundled-features/src/delivery/jobs.ts

@@ -47,7 +47,9 @@ const renderJobPayloadSchema = z.object({
 });
 
 const sendJobPayloadSchema = renderJobPayloadSchema.extend({
-  rendered: z.object({ html: z.string(), subject: z.string() }).optional(),
+  rendered: z
+    .object({ html: z.string(), subject: z.string(), text: z.string().optional() })
+    .optional(),
 });
 
 type RenderJobPayload = z.infer<typeof renderJobPayloadSchema>;

package/packages/bundled-features/src/delivery/types.ts

@@ -48,6 +48,7 @@ export type ChannelResult = {
 export type RenderedMessage = {
   readonly html: string;
   readonly subject: string;
+  readonly text?: string;
 };
 
 // `mode` decides how the delivery-service dispatches a channel:
@@ -83,6 +84,8 @@ export type RendererInput = {
 export type NotificationRenderer = {
   readonly name: string;
   render(input: RendererInput): Promise<string>;
+  /** Plain-text version of the same mail; the email channel sends it as the text part of a multipart/alternative mail. */
+  renderText?(input: RendererInput): Promise<string>;
 };
 
 // --- Delivery Log Entry ---

package/packages/bundled-features/src/feature-toggles/handlers/set.write.ts

@@ -5,7 +5,7 @@ import {
   VersionConflictError,
   writeFailure,
 } from "@cosmicdrift/kumiko-framework/errors";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import * as z from "zod";
 import {
   FEATURE_TOGGLE_AGGREGATE_TYPE,

package/packages/bundled-features/src/form-draft/db/queries/cleanup.ts

@@ -1,7 +1,7 @@
 import { unsafeReadRetrying } from "@cosmicdrift/kumiko-framework/bun-db";
 import type { DbConnection } from "@cosmicdrift/kumiko-framework/db";
 import type { TenantId } from "@cosmicdrift/kumiko-framework/engine";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import type { FormDraftBlob } from "../../schemas.js";
 
 export type StaleDraftRow = {

package/packages/bundled-features/src/form-draft/db/queries/owned-file-refs.ts

@@ -1,7 +1,7 @@
 import { unsafeReadRetrying } from "@cosmicdrift/kumiko-framework/bun-db";
 import type { DbRunner } from "@cosmicdrift/kumiko-framework/db";
 import type { TenantId } from "@cosmicdrift/kumiko-framework/engine";
-import type { Temporal } from "temporal-polyfill";
+import type { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 
 // Narrows a draft blob's raw FileRef-shaped storageKeys (collectDraftFileRefKeys
 // output — extracted from free-form, client-supplied JSON, issue #1889) down to

package/packages/bundled-features/src/form-draft/lookup.ts

@@ -1,7 +1,7 @@
 import { fetchOne, selectMany } from "@cosmicdrift/kumiko-framework/bun-db";
 import type { TenantDb } from "@cosmicdrift/kumiko-framework/db";
 import type { TenantId } from "@cosmicdrift/kumiko-framework/engine";
-import type { Temporal } from "temporal-polyfill";
+import type { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import { formDraftTable } from "./executor.js";
 import type { FormDraftBlob } from "./schemas.js";
 

package/packages/bundled-features/src/inbound-mail-foundation/handlers/ingest-message.write.ts

@@ -28,7 +28,7 @@ import {
 import { acquireNamespacedAdvisoryLock } from "@cosmicdrift/kumiko-framework/db";
 import type { WriteHandlerDef } from "@cosmicdrift/kumiko-framework/engine";
 import { InternalError } from "@cosmicdrift/kumiko-framework/errors";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import * as z from "zod";
 import { inboundMessageAggregateId, mailThreadAggregateId } from "../aggregate-id.js";
 import {

package/packages/bundled-features/src/inbound-mail-foundation/oauth-access-token.ts

@@ -19,7 +19,7 @@
 import { transaction } from "@cosmicdrift/kumiko-framework/bun-db";
 import { acquireNamespacedAdvisoryLock, type DbConnection } from "@cosmicdrift/kumiko-framework/db";
 import type { SecretsContext } from "@cosmicdrift/kumiko-framework/secrets";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import { InboundMailAuthMethods, inboundCredentialSecretKey } from "./constants.js";
 import {
   InboundAuthError,

package/packages/bundled-features/src/inbound-mail-foundation/oauth-state.ts

@@ -11,7 +11,7 @@
 // HMAC-Input, timing-safe compare, Expiry im Klartext-Segment).
 
 import { createHmac, randomUUID, timingSafeEqual } from "node:crypto";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 
 const STATE_PURPOSE = "inbound-mail-oauth-connect";
 

package/packages/bundled-features/src/inbound-mail-foundation/watch-supervisor.ts

@@ -51,7 +51,7 @@ import {
 } from "@cosmicdrift/kumiko-framework/crypto";
 import type { DbConnection, EntityTableMeta } from "@cosmicdrift/kumiko-framework/db";
 import type { DistributedLock } from "@cosmicdrift/kumiko-framework/pipeline";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import { InboundMailAccountStatuses, InboundMailFoundationHandlers } from "./constants.js";
 import { MAIL_ACCOUNT_PII_FIELDS, syncCursorTable } from "./entities.js";
 import {

package/packages/bundled-features/src/inbound-provider-imap/feature.ts

@@ -36,8 +36,8 @@ import {
 import { requireSecretsContext } from "@cosmicdrift/kumiko-bundled-features/secrets";
 import { defineFeature } from "@cosmicdrift/kumiko-framework/engine";
 import { instantToLegacyDate } from "@cosmicdrift/kumiko-framework/time";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import type { ImapFlow, MailboxObject } from "imapflow";
-import { Temporal } from "temporal-polyfill";
 import { type ImapCredentialDocument, parseImapCredentialDocument } from "./credential-document.js";
 import {
   assertUidValidity,

package/packages/bundled-features/src/inbound-provider-imap/imap-client.ts

@@ -17,9 +17,9 @@ import {
 } from "@cosmicdrift/kumiko-bundled-features/inbound-mail-foundation";
 import { createFallbackLogger } from "@cosmicdrift/kumiko-framework/logging";
 import { legacyDateToInstant } from "@cosmicdrift/kumiko-framework/time";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import { ImapFlow } from "imapflow";
 import { type AddressObject, type ParsedMail, simpleParser } from "mailparser";
-import { Temporal } from "temporal-polyfill";
 import type { ImapCredentialDocument } from "./credential-document.js";
 
 export const IMAP_MAILBOX = "INBOX";

package/packages/bundled-features/src/jobs/job-instant.ts

@@ -1,4 +1,4 @@
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 
 // kumiko-framework#1525: the five value-position Temporal.Instant.from
 // call sites in feature.ts live inside defineApply callbacks with no

package/packages/bundled-features/src/metrics/compute.ts

@@ -4,8 +4,8 @@ import type {
   AggregateKey,
   AggregateRow,
 } from "@cosmicdrift/kumiko-types/aggregate-types";
+import type { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import type { TenantDb } from "@cosmicdrift/kumiko-types/tenant-db-types";
-import type { Temporal } from "temporal-polyfill";
 import { MAX_GROUP_ROWS, type MetricRange } from "./constants.js";
 import type {
   MetricDefinition,

package/packages/bundled-features/src/metrics/feature.ts

@@ -6,7 +6,7 @@ import {
   type QueryHandlerDefinition,
 } from "@cosmicdrift/kumiko-framework/engine";
 import { InternalError, ValidationError } from "@cosmicdrift/kumiko-framework/errors";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import * as z from "zod";
 import { runMetric } from "./compute.js";
 import {

package/packages/bundled-features/src/metrics/types.ts

@@ -5,8 +5,8 @@ import type {
   AggregateTimeBucket,
 } from "@cosmicdrift/kumiko-types/aggregate-types";
 import type { SchemaTable } from "@cosmicdrift/kumiko-types/schema-table-types";
+import type { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import type { WhereObject } from "@cosmicdrift/kumiko-types/where-clause-types";
-import type { Temporal } from "temporal-polyfill";
 import type { MetricRange, MetricScope } from "./constants.js";
 
 /** Maps a payload value (e.g. a folder id) to the values `column` may have (e.g. the folder and its subfolders' loan ids). Runs with the tenant handler context, so reads stay tenant-scoped; the result only narrows. An empty result yields no rows. */

package/packages/bundled-features/src/metrics/window.ts

@@ -1,5 +1,5 @@
 import type { AggregateTimeBucket } from "@cosmicdrift/kumiko-types/aggregate-types";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import type { MetricRange } from "./constants.js";
 import type { MetricDefinition } from "./types.js";
 

package/packages/bundled-features/src/personal-access-tokens/expiry.ts

@@ -1,4 +1,4 @@
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 
 export function isExpiredAt(expiresAt: { epochMilliseconds: number } | null): boolean {
   return (