@cosmicdrift/kumiko-samples 0.350.0 → 0.351.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-samples",
-  "version": "0.350.0",
+  "version": "0.351.0",
   "description": "Source trees of the Kumiko sample recipes, sample apps and bundled features in repo layout, for tooling such as few-shot corpus builds.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",

package/packages/bundled-features/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-bundled-features",
-  "version": "0.350.0",
+  "version": "0.351.0",
   "description": "Built-in features — tenant, user, auth, delivery. The stuff you'd rewrite anyway, already typed.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",

package/packages/bundled-features/src/audit/handlers/list.query.ts

@@ -17,7 +17,7 @@
 import { selectMany, type WhereObject } from "@cosmicdrift/kumiko-framework/bun-db";
 import { access, defineQueryHandler } from "@cosmicdrift/kumiko-framework/engine";
 import { eventsTable } from "@cosmicdrift/kumiko-framework/event-store";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import * as z from "zod";
 import { AUDIT_SCOPE_VALUES } from "../constants.js";
 import { resolveAuditScopeFilter } from "./resolve-audit-tenant.js";

package/packages/bundled-features/src/auth-email-password/email-templates.ts

@@ -9,7 +9,7 @@
 // (localeDe() / localeEs() call registerMailTranslations).
 
 import { mailT, registerMailTranslations } from "@cosmicdrift/kumiko-framework/i18n";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 
 export type AuthMailLocale = string;
 

package/packages/bundled-features/src/auth-email-password/handlers/invite-accept-with-login.write.ts

@@ -31,7 +31,7 @@ import {
   type TenantId,
 } from "@cosmicdrift/kumiko-framework/engine";
 import { InternalError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
-import type { Temporal } from "temporal-polyfill";
+import type { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import * as z from "zod";
 import { decryptStoredPii, sessionLocaleField, sessionTimezoneField } from "../../shared/index.js";
 // kumiko-lint-ignore cross-feature-import invite-flow

package/packages/bundled-features/src/auth-email-password/handlers/invite-accept.write.ts

@@ -23,7 +23,7 @@ import {
   type TenantId,
 } from "@cosmicdrift/kumiko-framework/engine";
 import { InternalError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
-import type { Temporal } from "temporal-polyfill";
+import type { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import * as z from "zod";
 import { decryptStoredPii } from "../../shared/index.js";
 // kumiko-lint-ignore cross-feature-import invite-flow lebt in auth-email-password (Magic-Link), DB-row-owner ist tenant-feature

package/packages/bundled-features/src/auth-email-password/handlers/invite-create.write.ts

@@ -32,7 +32,7 @@ import {
   type WriteFailure,
   writeFailure,
 } from "@cosmicdrift/kumiko-framework/errors";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import * as z from "zod";
 // kumiko-lint-ignore cross-feature-import invite-flow lebt in auth-email-password (Magic-Link-Pattern), DB-row-owner ist tenant-feature
 import {

package/packages/bundled-features/src/auth-email-password/handlers/signup-request.write.ts

@@ -24,7 +24,7 @@
 import { generateToken } from "@cosmicdrift/kumiko-framework/api";
 import { defineWriteHandler } from "@cosmicdrift/kumiko-framework/engine";
 import { InternalError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import * as z from "zod";
 import { findSignupHandoverProvider, type SignupHandoverBinding } from "../../shared/index.js";
 import { AUTH_SIGNUP_DEFAULT_TTL_MINUTES } from "../constants.js";

package/packages/bundled-features/src/auth-email-password/handlers/token-request-handler.ts

@@ -15,7 +15,7 @@
 import { createSystemUser, defineWriteHandler } from "@cosmicdrift/kumiko-framework/engine";
 import { UnprocessableError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
 import { isValidIanaTimeZone } from "@cosmicdrift/kumiko-framework/time";
-import type { Temporal } from "temporal-polyfill";
+import type { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import * as z from "zod";
 import { UserQueries } from "../../user/index.js";
 import { type AuthUserRow, parseAuthUserRow } from "../auth-user-row.js";

package/packages/bundled-features/src/auth-email-password/reset-token.ts

@@ -3,7 +3,7 @@
 // the shared HMAC logic lives in one place. verification-token.ts mirrors
 // this pattern with purpose="verify".
 
-import type { Temporal } from "temporal-polyfill";
+import type { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import { signToken, TokenPurpose, verifyToken } from "./signed-token.js";
 
 export type VerifyResult =

package/packages/bundled-features/src/auth-email-password/unlock-token.ts

@@ -1,7 +1,7 @@
 // Thin wrapper around signed-token.ts pinning the purpose to "unlock".
 // Mirrors reset-token.ts / verification-token.ts.
 
-import type { Temporal } from "temporal-polyfill";
+import type { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import { signToken, TokenPurpose, verifyToken } from "./signed-token.js";
 
 export type VerifyResult =

package/packages/bundled-features/src/auth-email-password/verification-token.ts

@@ -2,7 +2,7 @@
 // Mirrors reset-token.ts so callers can import a flow-specific helper
 // without knowing the underlying HMAC scheme.
 
-import type { Temporal } from "temporal-polyfill";
+import type { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import { signToken, TokenPurpose, verifyToken } from "./signed-token.js";
 
 export type VerifyResult =

package/packages/bundled-features/src/auth-mfa/handlers/enable-confirm-preauth.write.ts

@@ -7,7 +7,7 @@ import {
 } from "@cosmicdrift/kumiko-framework/engine";
 import { InternalError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
 import { parseRoles } from "@cosmicdrift/kumiko-framework/utils";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import * as z from "zod";
 import { burnToken, sessionLocaleField, sessionTimezoneField } from "../../shared/index.js";
 import { USER_STATUS, UserQueries } from "../../user/index.js";

package/packages/bundled-features/src/auth-mfa/handlers/enable-confirm.write.ts

@@ -1,7 +1,7 @@
 import { createEventStoreExecutor } from "@cosmicdrift/kumiko-framework/db";
 import { defineWriteHandler } from "@cosmicdrift/kumiko-framework/engine";
 import { InternalError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import * as z from "zod";
 import { burnToken } from "../../shared/index.js";
 import { base32Decode } from "../base32.js";

package/packages/bundled-features/src/auth-mfa/hmac-token-codec.ts

@@ -1,5 +1,5 @@
 import { createHmac, timingSafeEqual } from "node:crypto";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 
 function hmacSign(input: string, secret: string): string {
   return createHmac("sha256", secret).update(input).digest("base64url");

package/packages/bundled-features/src/auth-mfa/mfa-challenge-token.ts

@@ -1,5 +1,5 @@
 import type { TenantId } from "@cosmicdrift/kumiko-framework/engine";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import { createHmacTokenCodec, type HmacTokenVerifyResult } from "./hmac-token-codec.js";
 
 export type MfaChallengePayload = {

package/packages/bundled-features/src/auth-mfa/mfa-preauth-setup-token.ts

@@ -1,5 +1,5 @@
 import type { TenantId } from "@cosmicdrift/kumiko-framework/engine";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import { createHmacTokenCodec, type HmacTokenVerifyResult } from "./hmac-token-codec.js";
 
 export type MfaPreauthSetupPayload = {

package/packages/bundled-features/src/auth-mfa/mfa-setup-token.ts

@@ -10,7 +10,7 @@
 // signed-token.ts (userId-only payload) because setup needs to carry
 // generated secret material, not just re-derive it from a lookup.
 import { createHmac, timingSafeEqual } from "node:crypto";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 
 export type MfaSetupPayload = {
   readonly userId: string;

package/packages/bundled-features/src/billing-foundation/constants.ts

@@ -1,12 +1,6 @@
 /// <reference types="temporal-polyfill/global" preserve="true" />
 // @runtime client
-// temporal-polyfill is a plain npm dependency (not a framework runtime
-// module), so importing it here doesn't break browser bundles. Aliased —
-// same reason as event-store.ts's own import: the un-aliased name would
-// shadow the ambient global `Temporal` TYPE every `Temporal.Instant`
-// annotation in this file (and its callers, e.g. StoredEvent.createdAt)
-// resolves against, see #1438.
-import { Temporal as TemporalPolyfill } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 
 // Feature name
 export const BILLING_FOUNDATION_FEATURE = "billing-foundation" as const;
@@ -185,7 +179,7 @@ export function isTerminalSubscriptionStatus(status: string): boolean {
 // after roughly 23 hours; without a matching staleness cutoff on our side, a
 // stale incomplete row would block that tenant from ever starting a new
 // checkout, since the projection has no expiry-triggered event of its own.
-export const STALE_INCOMPLETE_AFTER = TemporalPolyfill.Duration.from({ hours: 24 });
+export const STALE_INCOMPLETE_AFTER = Temporal.Duration.from({ hours: 24 });
 
 /** Time-aware terminal check for the checkout gate: a canceled subscription
  *  is terminal (see `isTerminalSubscriptionStatus`), and so is an
@@ -199,15 +193,7 @@ export function isSubscriptionBlockingCheckout(
   if (isTerminalSubscriptionStatus(sub.status)) return false;
   if (sub.status !== SubscriptionStatuses.incomplete) return true;
   const staleAt = sub.lastChangedAt.add(STALE_INCOMPLETE_AFTER);
-  // @cast-boundary temporal-polyfill-vs-ambient: same TC39 Temporal.Instant
-  // at runtime — row types resolve against ambient Temporal; polyfill Instant
-  // is a separate nominal type across the two .d.ts sources.
-  return (
-    TemporalPolyfill.Instant.compare(
-      now as unknown as InstanceType<typeof TemporalPolyfill.Instant>,
-      staleAt as unknown as InstanceType<typeof TemporalPolyfill.Instant>,
-    ) < 0
-  );
+  return Temporal.Instant.compare(now, staleAt) < 0;
 }
 
 // A subscription in one of these statuses can be switched to a different

package/packages/bundled-features/src/billing-foundation/consumer-protection/confirmation-mail.ts

@@ -1,4 +1,4 @@
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import type { CheckoutConsentRecordedPayload } from "../events.js";
 import { CONSENT_TEXTS, type ConsentLocale, resolveConsentLocale } from "./consent-text.js";
 

package/packages/bundled-features/src/billing-foundation/consumer-protection/termination-mail.ts

@@ -1,4 +1,4 @@
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import type {
   ContractTerminationDeclarationType,
   ContractTerminationKind,

package/packages/bundled-features/src/billing-foundation/feature.ts

@@ -55,10 +55,7 @@ import {
   EXT_TENANT_DATA,
   type FeatureDefinition,
 } from "@cosmicdrift/kumiko-framework/engine";
-// Aliased — an un-aliased `Temporal` would shadow the ambient global
-// `Temporal` TYPE `ResolvedBillingFoundationOptions.now`'s return type
-// resolves against, see event-store.ts's own import comment (#1438).
-import { Temporal as TemporalPolyfill } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import {
   BILLING_FOUNDATION_FEATURE,
   SUBSCRIPTION_PROVIDER_EXTENSION,
@@ -131,11 +128,7 @@ export function createBillingFoundationFeature<TTier extends string = string>(
   // ever calls `Temporal.Now.instant` itself.
   const widened: ResolvedBillingFoundationOptions = {
     ...options,
-    // @cast-boundary temporal-polyfill-vs-ambient: same TC39 Temporal.Instant
-    // at runtime — `now` is typed against the ambient Temporal global;
-    // TemporalPolyfill.Now.instant() returns the polyfill's own nominal
-    // Instant type across the two .d.ts sources.
-    now: options.now ?? (() => TemporalPolyfill.Now.instant() as unknown as Temporal.Instant),
+    now: options.now ?? (() => Temporal.Now.instant()),
     ...(options.baseUrl !== undefined && {
       baseUrl: options.baseUrl.endsWith("/") ? options.baseUrl.slice(0, -1) : options.baseUrl,
     }),

package/packages/bundled-features/src/billing-foundation/handlers/sync-subscription.write.ts

@@ -15,10 +15,7 @@
 
 import { createHash } from "node:crypto";
 import { SYSTEM_ROLE, type WriteHandlerDef } from "@cosmicdrift/kumiko-framework/engine";
-// Aliased — an un-aliased `Temporal` would shadow the ambient global
-// `Temporal` TYPE `SubscriptionView.currentPeriodEnd`/`.cancelAt` resolve
-// against, same reasoning as constants.ts's own import.
-import { Temporal as TemporalPolyfill } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import * as z from "zod";
 import { findProviderPlugin } from "../checkout-core.js";
 import { isTerminalSubscriptionStatus, SubscriptionEventTypes } from "../constants.js";
@@ -37,18 +34,13 @@ export type SyncSubscriptionResult =
   | { readonly synced: true }
   | { readonly synced: false; readonly reason: SyncSubscriptionSkipReason };
 
-// Parses both sides fresh via the polyfill before comparing — tolerant of a
+// Parses both sides fresh via Temporal before comparing — tolerant of a
 // provider snapshot's ISO string using a different (but equivalent)
 // representation than `Temporal.Instant#toString()`'s canonical form
 // (offset spelling, sub-second precision, ...), unlike a plain `===` on the
 // raw strings.
 function isoInstantsEqual(a: string, b: string): boolean {
-  return (
-    TemporalPolyfill.Instant.compare(
-      TemporalPolyfill.Instant.from(a),
-      TemporalPolyfill.Instant.from(b),
-    ) === 0
-  );
+  return Temporal.Instant.compare(Temporal.Instant.from(a), Temporal.Instant.from(b)) === 0;
 }
 
 // Deterministic per (snapshot-content, current stream head) — not per-call.

package/packages/bundled-features/src/cap-counter/book-cap-usage.ts

@@ -8,7 +8,7 @@ import {
   type WriteResult,
 } from "@cosmicdrift/kumiko-framework/engine";
 import { eventsTable } from "@cosmicdrift/kumiko-framework/event-store";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import * as z from "zod";
 import { capCounterAggregateId, rollingCapAggregateId } from "./aggregate-id.js";
 import { CAP_COUNTER_ROLLING_AGGREGATE_TYPE, ROLLING_INCREMENTED_EVENT_QN } from "./constants.js";

package/packages/bundled-features/src/cap-counter/enforce-cap.ts

@@ -1,17 +1,9 @@
-/// <reference types="temporal-polyfill/global" preserve="true" />
 import { createEntityExecutor, type HandlerContext } from "@cosmicdrift/kumiko-framework/engine";
 import { KumikoError, reraiseAsKumikoError } from "@cosmicdrift/kumiko-framework/errors";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import { markCapSoftWarned, readRollingCapUsage } from "./book-cap-usage.js";
 import { capCounterEntity } from "./entity.js";
 
-// Temporal globally provided by the framework's polyfill init
-// (ensureTemporalPolyfill() in time/polyfill.ts, called from
-// setupTestStack/boot). Importing from "temporal-polyfill" gives us
-// the polyfill-package types which don't quite match drizzle's
-// `instant()`-customType (temporal-spec narrowing of `until(...).sign`).
-// Mirror the audit-handler pattern: rely on the global ambient
-// declaration from temporal-spec.
-
 const { table } = createEntityExecutor("cap-counter", capCounterEntity);
 
 // =============================================================================

package/packages/bundled-features/src/delivery/handlers/log.query.ts

@@ -16,7 +16,7 @@ import {
   SYSTEM_USER_ID,
 } from "@cosmicdrift/kumiko-framework/engine";
 import { InternalError } from "@cosmicdrift/kumiko-framework/errors";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import * as z from "zod";
 import { decryptStoredPii } from "../../shared/index.js";
 import { resolveUserDisplayNames, USER_FEATURE } from "../../user/index.js";

package/packages/bundled-features/src/feature-toggles/handlers/set.write.ts

@@ -5,7 +5,7 @@ import {
   VersionConflictError,
   writeFailure,
 } from "@cosmicdrift/kumiko-framework/errors";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import * as z from "zod";
 import {
   FEATURE_TOGGLE_AGGREGATE_TYPE,

package/packages/bundled-features/src/form-draft/db/queries/cleanup.ts

@@ -1,7 +1,7 @@
 import { unsafeReadRetrying } from "@cosmicdrift/kumiko-framework/bun-db";
 import type { DbConnection } from "@cosmicdrift/kumiko-framework/db";
 import type { TenantId } from "@cosmicdrift/kumiko-framework/engine";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import type { FormDraftBlob } from "../../schemas.js";
 
 export type StaleDraftRow = {

package/packages/bundled-features/src/form-draft/db/queries/owned-file-refs.ts

@@ -1,7 +1,7 @@
 import { unsafeReadRetrying } from "@cosmicdrift/kumiko-framework/bun-db";
 import type { DbRunner } from "@cosmicdrift/kumiko-framework/db";
 import type { TenantId } from "@cosmicdrift/kumiko-framework/engine";
-import type { Temporal } from "temporal-polyfill";
+import type { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 
 // Narrows a draft blob's raw FileRef-shaped storageKeys (collectDraftFileRefKeys
 // output — extracted from free-form, client-supplied JSON, issue #1889) down to

package/packages/bundled-features/src/form-draft/lookup.ts

@@ -1,7 +1,7 @@
 import { fetchOne, selectMany } from "@cosmicdrift/kumiko-framework/bun-db";
 import type { TenantDb } from "@cosmicdrift/kumiko-framework/db";
 import type { TenantId } from "@cosmicdrift/kumiko-framework/engine";
-import type { Temporal } from "temporal-polyfill";
+import type { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import { formDraftTable } from "./executor.js";
 import type { FormDraftBlob } from "./schemas.js";
 

package/packages/bundled-features/src/inbound-mail-foundation/handlers/ingest-message.write.ts

@@ -28,7 +28,7 @@ import {
 import { acquireNamespacedAdvisoryLock } from "@cosmicdrift/kumiko-framework/db";
 import type { WriteHandlerDef } from "@cosmicdrift/kumiko-framework/engine";
 import { InternalError } from "@cosmicdrift/kumiko-framework/errors";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import * as z from "zod";
 import { inboundMessageAggregateId, mailThreadAggregateId } from "../aggregate-id.js";
 import {

package/packages/bundled-features/src/inbound-mail-foundation/oauth-access-token.ts

@@ -19,7 +19,7 @@
 import { transaction } from "@cosmicdrift/kumiko-framework/bun-db";
 import { acquireNamespacedAdvisoryLock, type DbConnection } from "@cosmicdrift/kumiko-framework/db";
 import type { SecretsContext } from "@cosmicdrift/kumiko-framework/secrets";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import { InboundMailAuthMethods, inboundCredentialSecretKey } from "./constants.js";
 import {
   InboundAuthError,

package/packages/bundled-features/src/inbound-mail-foundation/oauth-state.ts

@@ -11,7 +11,7 @@
 // HMAC-Input, timing-safe compare, Expiry im Klartext-Segment).
 
 import { createHmac, randomUUID, timingSafeEqual } from "node:crypto";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 
 const STATE_PURPOSE = "inbound-mail-oauth-connect";
 

package/packages/bundled-features/src/inbound-mail-foundation/watch-supervisor.ts

@@ -51,7 +51,7 @@ import {
 } from "@cosmicdrift/kumiko-framework/crypto";
 import type { DbConnection, EntityTableMeta } from "@cosmicdrift/kumiko-framework/db";
 import type { DistributedLock } from "@cosmicdrift/kumiko-framework/pipeline";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import { InboundMailAccountStatuses, InboundMailFoundationHandlers } from "./constants.js";
 import { MAIL_ACCOUNT_PII_FIELDS, syncCursorTable } from "./entities.js";
 import {

package/packages/bundled-features/src/inbound-provider-imap/feature.ts

@@ -36,8 +36,8 @@ import {
 import { requireSecretsContext } from "@cosmicdrift/kumiko-bundled-features/secrets";
 import { defineFeature } from "@cosmicdrift/kumiko-framework/engine";
 import { instantToLegacyDate } from "@cosmicdrift/kumiko-framework/time";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import type { ImapFlow, MailboxObject } from "imapflow";
-import { Temporal } from "temporal-polyfill";
 import { type ImapCredentialDocument, parseImapCredentialDocument } from "./credential-document.js";
 import {
   assertUidValidity,

package/packages/bundled-features/src/inbound-provider-imap/imap-client.ts

@@ -17,9 +17,9 @@ import {
 } from "@cosmicdrift/kumiko-bundled-features/inbound-mail-foundation";
 import { createFallbackLogger } from "@cosmicdrift/kumiko-framework/logging";
 import { legacyDateToInstant } from "@cosmicdrift/kumiko-framework/time";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import { ImapFlow } from "imapflow";
 import { type AddressObject, type ParsedMail, simpleParser } from "mailparser";
-import { Temporal } from "temporal-polyfill";
 import type { ImapCredentialDocument } from "./credential-document.js";
 
 export const IMAP_MAILBOX = "INBOX";

package/packages/bundled-features/src/jobs/job-instant.ts

@@ -1,4 +1,4 @@
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 
 // kumiko-framework#1525: the five value-position Temporal.Instant.from
 // call sites in feature.ts live inside defineApply callbacks with no

package/packages/bundled-features/src/metrics/compute.ts

@@ -4,8 +4,8 @@ import type {
   AggregateKey,
   AggregateRow,
 } from "@cosmicdrift/kumiko-types/aggregate-types";
+import type { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import type { TenantDb } from "@cosmicdrift/kumiko-types/tenant-db-types";
-import type { Temporal } from "temporal-polyfill";
 import { MAX_GROUP_ROWS, type MetricRange } from "./constants.js";
 import type {
   MetricDefinition,

package/packages/bundled-features/src/metrics/feature.ts

@@ -6,7 +6,7 @@ import {
   type QueryHandlerDefinition,
 } from "@cosmicdrift/kumiko-framework/engine";
 import { InternalError, ValidationError } from "@cosmicdrift/kumiko-framework/errors";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import * as z from "zod";
 import { runMetric } from "./compute.js";
 import {

package/packages/bundled-features/src/metrics/types.ts

@@ -5,8 +5,8 @@ import type {
   AggregateTimeBucket,
 } from "@cosmicdrift/kumiko-types/aggregate-types";
 import type { SchemaTable } from "@cosmicdrift/kumiko-types/schema-table-types";
+import type { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import type { WhereObject } from "@cosmicdrift/kumiko-types/where-clause-types";
-import type { Temporal } from "temporal-polyfill";
 import type { MetricRange, MetricScope } from "./constants.js";
 
 /** Maps a payload value (e.g. a folder id) to the values `column` may have (e.g. the folder and its subfolders' loan ids). Runs with the tenant handler context, so reads stay tenant-scoped; the result only narrows. An empty result yields no rows. */

package/packages/bundled-features/src/metrics/window.ts

@@ -1,5 +1,5 @@
 import type { AggregateTimeBucket } from "@cosmicdrift/kumiko-types/aggregate-types";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import type { MetricRange } from "./constants.js";
 import type { MetricDefinition } from "./types.js";
 

package/packages/bundled-features/src/personal-access-tokens/expiry.ts

@@ -1,4 +1,4 @@
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 
 export function isExpiredAt(expiresAt: { epochMilliseconds: number } | null): boolean {
   return (

package/packages/bundled-features/src/personal-access-tokens/handlers/create.write.ts

@@ -7,7 +7,7 @@ import {
 } from "@cosmicdrift/kumiko-framework/engine";
 import { UnprocessableError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
 import { generateId } from "@cosmicdrift/kumiko-framework/utils";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import * as z from "zod";
 import { encryptForDirectWrite, verifyPassword } from "../../shared/index.js";
 import { UserQueries } from "../../user/index.js";

package/packages/bundled-features/src/personal-access-tokens/handlers/revoke.write.ts

@@ -2,7 +2,7 @@ import { updateMany } from "@cosmicdrift/kumiko-framework/bun-db";
 import { defineWriteHandler } from "@cosmicdrift/kumiko-framework/engine";
 import { UnprocessableError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
 import { generateId } from "@cosmicdrift/kumiko-framework/utils";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import * as z from "zod";
 import { API_TOKEN_ENTITY_NAME, PatErrors } from "../constants.js";
 import { PAT_REVOKED_AGGREGATE_TYPE, PAT_REVOKED_EVENT_QN } from "../pat-revoked-event.js";

package/packages/bundled-features/src/personal-access-tokens/revoke-for-user.ts

@@ -3,7 +3,7 @@ import type { DbRunner } from "@cosmicdrift/kumiko-framework/db";
 import { SYSTEM_TENANT_ID } from "@cosmicdrift/kumiko-framework/engine";
 import { append } from "@cosmicdrift/kumiko-framework/event-store";
 import { generateId } from "@cosmicdrift/kumiko-framework/utils";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import {
   PAT_REVOKED_AGGREGATE_TYPE,
   PAT_REVOKED_EVENT_QN,

package/packages/bundled-features/src/sessions/handlers/revoke-all-for-user.write.ts

@@ -4,7 +4,7 @@ import { access, defineWriteHandler, SYSTEM_TENANT_ID } from "@cosmicdrift/kumik
 import { UnprocessableError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
 import { append } from "@cosmicdrift/kumiko-framework/event-store";
 import { generateId } from "@cosmicdrift/kumiko-framework/utils";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import * as z from "zod";
 import { userSessionTable } from "../schema/user-session.js";
 import {

package/packages/bundled-features/src/sessions/handlers/revoke-all-others.write.ts

@@ -2,7 +2,7 @@ import { updateMany } from "@cosmicdrift/kumiko-framework/bun-db";
 import { defineWriteHandler } from "@cosmicdrift/kumiko-framework/engine";
 import { UnprocessableError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
 import { generateId } from "@cosmicdrift/kumiko-framework/utils";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import * as z from "zod";
 import { SessionErrors } from "../constants.js";
 import { userSessionTable } from "../schema/user-session.js";

package/packages/bundled-features/src/sessions/handlers/revoke.write.ts

@@ -2,7 +2,7 @@ import { fetchOne, updateMany } from "@cosmicdrift/kumiko-framework/bun-db";
 import { defineWriteHandler } from "@cosmicdrift/kumiko-framework/engine";
 import { UnprocessableError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
 import { generateId } from "@cosmicdrift/kumiko-framework/utils";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import * as z from "zod";
 import { SessionErrors, USER_SESSION_ENTITY_NAME } from "../constants.js";
 import { userSessionTable } from "../schema/user-session.js";

package/packages/bundled-features/src/sessions/session-callbacks.ts

@@ -15,7 +15,7 @@ import type { SessionUser, TenantId } from "@cosmicdrift/kumiko-framework/engine
 import { buildSessionRoles, SYSTEM_TENANT_ID } from "@cosmicdrift/kumiko-framework/engine";
 import { append } from "@cosmicdrift/kumiko-framework/event-store";
 import { generateId, parseRoles } from "@cosmicdrift/kumiko-framework/utils";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import { encryptForDirectWrite } from "../shared/index.js";
 import { tenantMembershipsTable } from "../tenant/index.js";
 import { isPrincipalBlocked, type UserStatus, userTable } from "../user/index.js";

package/packages/bundled-features/src/shared/grace-period.ts

@@ -1,21 +1,14 @@
 /// <reference types="temporal-polyfill/global" preserve="true" />
 /** Shared grace-period check for user-data-rights + tenant-lifecycle cancel flows. */
 
-import { Temporal as TemporalPolyfill } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 
 /**
  * True when `gracePeriodEnd` is still in the future.
- * Uses the polyfill Instant API so callers don't depend on `globalThis.Temporal`.
+ * Uses the module's Temporal so callers don't depend on `globalThis.Temporal`.
  */
 export function isWithinGracePeriod(gracePeriodEnd: Temporal.Instant | null): boolean {
-  // @cast-boundary temporal-polyfill-vs-ambient: same TC39 Temporal.Instant
-  // at runtime — row types resolve against ambient Temporal; polyfill Instant
-  // is a separate nominal type across the two .d.ts sources.
   return (
-    gracePeriodEnd != null &&
-    TemporalPolyfill.Instant.compare(
-      gracePeriodEnd as unknown as InstanceType<typeof TemporalPolyfill.Instant>,
-      TemporalPolyfill.Now.instant(),
-    ) > 0
+    gracePeriodEnd != null && Temporal.Instant.compare(gracePeriodEnd, Temporal.Now.instant()) > 0
   );
 }

package/packages/bundled-features/src/shared/row-bound-grant.ts

@@ -31,7 +31,7 @@
 // (single-use-token-store) instead.
 
 import { createFallbackLogger } from "@cosmicdrift/kumiko-framework/logging";
-import type { Temporal } from "temporal-polyfill";
+import type { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import { peekTokenSubject, signToken, verifyToken } from "./signed-token.js";
 
 export type RowBoundGrantResult =

package/packages/bundled-features/src/shared/signed-token.ts

@@ -13,7 +13,7 @@
 // signal through a short-circuit.
 
 import { createHmac, timingSafeEqual } from "node:crypto";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 
 export type VerifyResult =
   | { readonly ok: true; readonly userId: string; readonly expiresAtMs: number }

package/packages/bundled-features/src/subscription-mollie/verify-webhook.ts

@@ -23,11 +23,11 @@ import {
   SubscriptionStatuses,
 } from "@cosmicdrift/kumiko-bundled-features/billing-foundation";
 import { createFallbackLogger } from "@cosmicdrift/kumiko-framework/logging";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import type {
   Payment as MolliePayment,
   Subscription as MollieSubscription,
 } from "@mollie/api-client";
-import { Temporal } from "temporal-polyfill";
 import { MOLLIE_PROVIDER_NAME } from "./constants.js";
 import type { MolliePriceConfig } from "./plugin-methods.js";
 

package/packages/bundled-features/src/subscription-stripe/verify-webhook.ts

@@ -47,8 +47,8 @@ import {
 import { ExtraRouteRejection } from "@cosmicdrift/kumiko-framework/api";
 import { createFallbackLogger } from "@cosmicdrift/kumiko-framework/logging";
 import type { SecretsContext } from "@cosmicdrift/kumiko-framework/secrets";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import Stripe from "stripe";
-import { Temporal } from "temporal-polyfill";
 import { STRIPE_PROVIDER_NAME, StripeEventTypes } from "./constants.js";
 import type { StripeWebhookRuntime } from "./runtime.js";
 

package/packages/bundled-features/src/template-resolver/api.ts

@@ -6,7 +6,7 @@ import { selectMany } from "@cosmicdrift/kumiko-framework/bun-db";
 import type { DbConnection } from "@cosmicdrift/kumiko-framework/db";
 import type { SessionUser, TenantId } from "@cosmicdrift/kumiko-framework/engine";
 import { InternalError } from "@cosmicdrift/kumiko-framework/errors";
-import type { Temporal } from "temporal-polyfill";
+import type { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import type { ContentFormat, TemplateKind } from "./constants.js";
 import { FALLBACK_LOCALE, SYSTEM_TENANT_ID } from "./constants.js";
 import { type TemplateResourceRow, templateResourcesTable } from "./table.js";

package/packages/bundled-features/src/template-resolver/handlers/by-tenant.query.ts

@@ -4,7 +4,7 @@ import {
   crossTenantOverrideDenied,
   defineQueryHandler,
 } from "@cosmicdrift/kumiko-framework/engine";
-import type { Temporal } from "temporal-polyfill";
+import type { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import * as z from "zod";
 import { TEXT_BLOCK_KIND } from "../constants.js";
 import { type TemplateResourceRow, templateResourcesTable } from "../table.js";

package/packages/bundled-features/src/template-resolver/handlers/collection-shared.ts

@@ -7,7 +7,7 @@ import type {
   TenantId,
 } from "@cosmicdrift/kumiko-framework/engine";
 import { SYSTEM_TENANT_ID } from "@cosmicdrift/kumiko-framework/engine";
-import type { Temporal } from "temporal-polyfill";
+import type { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import { templateResourceEntity, templateResourcesTable } from "../table.js";
 import { userContentEntriesTable, userContentEntryEntity } from "../user-content-table.js";
 

package/packages/bundled-features/src/template-resolver/table.ts

@@ -5,7 +5,7 @@ import {
   createSelectField,
   createTextField,
 } from "@cosmicdrift/kumiko-framework/engine";
-import type { Temporal } from "temporal-polyfill";
+import type { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import {
   CONTENT_FORMATS,
   TEMPLATE_KINDS,

package/packages/bundled-features/src/tenant/handlers/team-list.query.ts

@@ -6,7 +6,7 @@ import {
 } from "@cosmicdrift/kumiko-framework/engine";
 import { InternalError } from "@cosmicdrift/kumiko-framework/errors";
 import { parseRoles } from "@cosmicdrift/kumiko-framework/utils";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import * as z from "zod";
 import { userSessionTable } from "../../sessions/index.js";
 import { decryptStoredPii, mapWithConcurrency } from "../../shared/index.js";

package/packages/bundled-features/src/tenant/invited-membership.ts

@@ -7,7 +7,7 @@ import {
 import { createSystemUser, type TenantId } from "@cosmicdrift/kumiko-framework/engine";
 import { ConflictError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
 import { parseRoles } from "@cosmicdrift/kumiko-framework/utils";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import { TenantErrors } from "./constants.js";
 import { findForbiddenMembershipRole, reservedMembershipRoleError } from "./membership-roles.js";
 import { tenantMembershipEntity, tenantMembershipsTable } from "./membership-table.js";

package/packages/bundled-features/src/tenant-handover/grant.ts

@@ -12,7 +12,7 @@
 // put in a URL, logged, or emailed. The run's own photos may show plates —
 // the grant must stay exactly where the anonymous flow minted it.
 
-import type { Temporal } from "temporal-polyfill";
+import type { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import { signRowBoundGrant } from "../shared/index.js";
 
 const HANDOVER_PURPOSE_PREFIX = "tenant-handover";

package/packages/bundled-features/src/user-data-rights/db/queries/export-jobs.ts

@@ -1,7 +1,7 @@
 import { selectMany } from "@cosmicdrift/kumiko-framework/bun-db";
 import type { DbConnection } from "@cosmicdrift/kumiko-framework/db";
 import type { TenantId } from "@cosmicdrift/kumiko-framework/engine";
-import type { Temporal } from "temporal-polyfill";
+import type { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import { exportJobsTable } from "../../schema/export-job.js";
 
 export type ExportJobCleanupCandidate = {

package/packages/bundled-features/src/user-data-rights/db/queries/forget-cleanup.ts

@@ -1,22 +1,16 @@
 import { selectMany } from "@cosmicdrift/kumiko-framework/bun-db";
 import type { DbConnection } from "@cosmicdrift/kumiko-framework/db";
-// Value-only import, aliased to avoid shadowing the ambient global
-// `Temporal` TYPE that gracePeriodEndCutoff's parameter type resolves
-// against (same #1438 dual-package-hazard pattern as event-store.ts).
-import { Temporal as TemporalPolyfill } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import { userTable } from "../../../user/index.js";
 
 export async function selectUsersDueForForgetCleanup(
   db: DbConnection,
   status: string,
-  gracePeriodEndCutoff: InstanceType<typeof TemporalPolyfill.Instant> | string,
+  gracePeriodEndCutoff: Temporal.Instant | string,
 ): Promise<readonly { id: string }[]> {
-  // @cast-boundary temporal-polyfill-vs-ambient: same TC39 Temporal.Instant
-  // at runtime, distinct nominal types across the two .d.ts sources (see
-  // event-store.ts). Only ever consumed via the `lte` comparison below.
   const cutoff =
     typeof gracePeriodEndCutoff === "string"
-      ? TemporalPolyfill.Instant.from(gracePeriodEndCutoff)
+      ? Temporal.Instant.from(gracePeriodEndCutoff)
       : gracePeriodEndCutoff;
   return selectMany<{ id: string }>(db, userTable, {
     status,

package/packages/bundled-features/src/user-data-rights/deletion-token.ts

@@ -7,7 +7,7 @@
 // The purpose string and the anchoring are unchanged from the hand-rolled
 // version this replaced, so tokens stay byte-compatible.
 
-import type { Temporal } from "temporal-polyfill";
+import type { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import {
   type RowBoundGrantResult,
   redeemRowBoundGrant,

package/packages/bundled-features/src/user-data-rights/email-templates.ts

@@ -5,7 +5,7 @@
 
 import { mailT, registerMailTranslations } from "@cosmicdrift/kumiko-framework/i18n";
 import { escapeHtml, escapeHtmlAttr } from "@cosmicdrift/kumiko-headless";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 
 export type GdprMailLocale = string;
 

package/packages/bundled-features/src/user-data-rights/handlers/list-download-attempts.query.ts

@@ -1,6 +1,6 @@
 import { selectMany, type WhereObject } from "@cosmicdrift/kumiko-framework/bun-db";
 import { defineQueryHandler } from "@cosmicdrift/kumiko-framework/engine";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import * as z from "zod";
 import { downloadAttemptsTable } from "../schema/download-attempt.js";
 

package/packages/bundled-features/src/user-data-rights/handlers/my-audit-log.query.ts

@@ -1,7 +1,7 @@
 import { selectMany, type WhereObject } from "@cosmicdrift/kumiko-framework/bun-db";
 import { defineQueryHandler } from "@cosmicdrift/kumiko-framework/engine";
 import { eventsTable } from "@cosmicdrift/kumiko-framework/event-store";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import * as z from "zod";
 
 // DSGVO Art. 15 Selbstauskunft — User reads HIS OWN audit-log.

package/packages/bundled-features/src/waitlist/handlers/invite.write.ts

@@ -13,7 +13,7 @@ import {
   type WriteFailure,
   writeFailure,
 } from "@cosmicdrift/kumiko-framework/errors";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import { AuthErrors, AuthHandlers } from "../../auth-email-password/index.js";
 import { TenantHandlers, tenantTable } from "../../tenant/index.js";
 import { DEFAULT_OWN_TENANT_INVITE_ROLE, WAITLIST_STATUS, WaitlistErrors } from "../constants.js";

package/packages/bundled-features/src/waitlist/handlers/submit.write.ts

@@ -6,7 +6,7 @@ import {
   type WriteResult,
 } from "@cosmicdrift/kumiko-framework/engine";
 import { InternalError } from "@cosmicdrift/kumiko-framework/errors";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import { WAITLIST_NOTIFICATION_TYPES, WAITLIST_STATUS } from "../constants.js";
 import { normalizeEmail, platformActor, waitlistDb, waitlistExecutor } from "../lib.js";
 import {

package/samples/apps/marketing-demo/package.json

@@ -15,6 +15,7 @@
     "@cosmicdrift/kumiko-framework": "workspace:*",
     "@cosmicdrift/kumiko-headless": "workspace:*",
     "@cosmicdrift/kumiko-renderer-web": "workspace:*",
+    "@cosmicdrift/kumiko-types": "workspace:*",
     "react": "^19.2.6",
     "react-dom": "^19.2.6",
     "@cosmicdrift/kumiko-locale-de": "workspace:*"

package/samples/apps/marketing-demo/src/app/seed.ts

@@ -10,7 +10,7 @@
 
 import type { SeedFn } from "@cosmicdrift/kumiko-dev-server";
 import { TestUsers } from "@cosmicdrift/kumiko-framework/stack";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import { countAssetsForTenant, countTicketsForTenant } from "../db/queries/seed-counts";
 import { ASSET_STATUSES } from "../features/assets/schema";
 import { TICKET_SEVERITIES, TICKET_STATUSES } from "../features/helpdesk/schema";

package/samples/apps/use-all-bundled/package.json

@@ -22,6 +22,7 @@
     "@cosmicdrift/kumiko-headless": "workspace:*",
     "@cosmicdrift/kumiko-renderer-web": "workspace:*",
     "@cosmicdrift/kumiko-server-runtime": "workspace:*",
+    "@cosmicdrift/kumiko-types": "workspace:*",
     "react": "^19.2.6",
     "react-dom": "^19.2.6",
     "zod": "^4.4.3",

package/samples/apps/use-all-bundled/src/app/seed.ts

@@ -34,7 +34,7 @@ import {
 } from "@cosmicdrift/kumiko-framework/engine";
 import { TestUsers, unsafeCreateEntityTable } from "@cosmicdrift/kumiko-framework/stack";
 import { generateId } from "@cosmicdrift/kumiko-framework/utils";
-import { Temporal } from "temporal-polyfill";
+import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import { ADMIN_EMAIL, BETA_TENANT_ID, DEMO_NOTE_ID, DEV_TENANT_ID } from "./auth-constants";
 import { noteEntity } from "./notes-feature";