@cosmicdrift/kumiko-samples 0.368.0 → 0.370.0

package/packages/bundled-features/src/host-routing/validate-options.ts

@@ -0,0 +1,38 @@
+import type { HostRoutingOptions } from "./options.ts";
+
+const DOMAIN_PATTERN = /^[a-z0-9](?:[a-z0-9.-]*[a-z0-9])?$/;
+const PATH_PREFIX_PATTERN = /^\/[a-z0-9-]+(?:\/[a-z0-9-]+)*$/;
+const LOCALE_PATTERN = /^[a-z]{2}(?:-[a-z]{2})?$/;
+
+// Checked once when the app composes its features, so a config typo fails
+// the boot instead of routing every request to a 404.
+export function validateHostRoutingOptions(options: HostRoutingOptions): void {
+  if (!DOMAIN_PATTERN.test(options.baseDomain)) {
+    throw new Error(
+      `host-routing: baseDomain must be a lowercase hostname without port, got "${options.baseDomain}"`,
+    );
+  }
+  for (const host of Object.keys(options.hosts ?? {})) {
+    if (!DOMAIN_PATTERN.test(host)) {
+      throw new Error(`host-routing: hosts key must be a lowercase hostname, got "${host}"`);
+    }
+  }
+  if (options.tenantBy === "path" && !PATH_PREFIX_PATTERN.test(options.tenantPathPrefix)) {
+    throw new Error(
+      `host-routing: tenantPathPrefix must look like "/app" (leading slash, no trailing slash), got "${options.tenantPathPrefix}"`,
+    );
+  }
+  const { locales } = options;
+  if (locales !== undefined) {
+    for (const locale of [locales.default, ...locales.prefixed]) {
+      if (!LOCALE_PATTERN.test(locale)) {
+        throw new Error(`host-routing: locale must look like "de" or "de-at", got "${locale}"`);
+      }
+    }
+    if (locales.prefixed.includes(locales.default)) {
+      throw new Error(
+        `host-routing: default locale "${locales.default}" is served unprefixed and must not be in prefixed`,
+      );
+    }
+  }
+}

package/packages/bundled-features/src/inbound-mail-foundation/changes.json

@@ -1,4 +1,12 @@
 [
+  {
+    "version": "0.370.0",
+    "type": "breaking",
+    "title": "The deprecated inboundMailFoundationFeature constant is removed",
+    "detail": "inboundMailFoundationFeature was kept next to createInboundMailFoundationFeature() for one release. Mount the feature by calling createInboundMailFoundationFeature().",
+    "migration": "Run bun kumiko-upgrade --apply. It replaces inboundMailFoundationFeature with createInboundMailFoundationFeature().",
+    "codemod": "scripts/codemod/feature-factory.ts"
+  },
   {
     "version": "0.366.0",
     "type": "improvement",

package/packages/bundled-features/src/inbound-mail-foundation/connect-routes.ts

@@ -23,14 +23,14 @@ import {
   InboundMailAuthMethods,
   InboundMailFoundationHandlers,
   inboundCredentialSecretKey,
-} from "./constants.js";
+} from "./constants.ts";
 import {
   inboundRefreshTokenSecretOptions,
   type OAuthAccessTokenManager,
-} from "./oauth-access-token.js";
-import { type OAuthStatePayload, signOAuthState, verifyOAuthState } from "./oauth-state.js";
-import { resolveInboundProviderForKey } from "./provider-factory.js";
-import type { InboundMailContext } from "./types.js";
+} from "./oauth-access-token.ts";
+import { type OAuthStatePayload, signOAuthState, verifyOAuthState } from "./oauth-state.ts";
+import { resolveInboundProviderForKey } from "./provider-factory.ts";
+import type { InboundMailContext } from "./types.ts";
 
 const DEFAULT_STATE_TTL_MINUTES = 15;
 const DEFAULT_CONNECT_PATH = "/api/inbound-mail/connect";

package/packages/bundled-features/src/inbound-mail-foundation/events.ts

@@ -20,7 +20,7 @@
 //     (crypto-shredding, Muster billing-foundation #800).
 
 import * as z from "zod";
-import { INBOUND_MAIL_FOUNDATION_FEATURE, InboundMailAccountStatuses } from "./constants.js";
+import { INBOUND_MAIL_FOUNDATION_FEATURE, InboundMailAccountStatuses } from "./constants.ts";
 
 // Aggregate-types für den event-store.
 export const MAIL_ACCOUNT_AGGREGATE_TYPE = "mail-account" as const;

package/packages/bundled-features/src/inbound-mail-foundation/feature.ts

@@ -47,14 +47,14 @@ import {
   createFileProviderForTenant,
   type FileStorageProvider,
 } from "@cosmicdrift/kumiko-framework/files";
-import { INBOUND_MAIL_FOUNDATION_FEATURE, INBOUND_MAIL_PROVIDER_EXTENSION } from "./constants.js";
+import { INBOUND_MAIL_FOUNDATION_FEATURE, INBOUND_MAIL_PROVIDER_EXTENSION } from "./constants.ts";
 import {
   inboundMessageEntity,
   mailAccountEntity,
   mailThreadEntity,
   seenMessageTable,
   syncCursorTable,
-} from "./entities.js";
+} from "./entities.ts";
 import {
   INBOUND_MESSAGE_AGGREGATE_TYPE,
   INBOUND_MESSAGE_RECEIVED_EVENT_QN,
@@ -72,13 +72,13 @@ import {
   MAIL_THREAD_UPDATED_EVENT_SHORT,
   mailAccountEventPayloadSchema,
   mailThreadEventPayloadSchema,
-} from "./events.js";
-import { connectAccountHandler } from "./handlers/connect-account.write.js";
-import { disconnectAccountHandler } from "./handlers/disconnect-account.write.js";
-import { ingestMessageHandler } from "./handlers/ingest-message.write.js";
-import { listAccountsQuery } from "./handlers/list-accounts.query.js";
-import { listMessagesQuery } from "./handlers/list-messages.query.js";
-import { updateAccountHandler } from "./handlers/update-account.write.js";
+} from "./events.ts";
+import { connectAccountHandler } from "./handlers/connect-account.write.ts";
+import { disconnectAccountHandler } from "./handlers/disconnect-account.write.ts";
+import { ingestMessageHandler } from "./handlers/ingest-message.write.ts";
+import { listAccountsQuery } from "./handlers/list-accounts.query.ts";
+import { listMessagesQuery } from "./handlers/list-messages.query.ts";
+import { updateAccountHandler } from "./handlers/update-account.write.ts";
 import {
   applyInboundMessageReceived,
   applyMailAccountConnected,
@@ -88,14 +88,14 @@ import {
   inboundMessagesProjectionTable,
   mailAccountsProjectionTable,
   mailThreadsProjectionTable,
-} from "./projection.js";
-import { runInboundMailRetention } from "./retention-sweep.js";
+} from "./projection.ts";
+import { runInboundMailRetention } from "./retention-sweep.ts";
 import {
   INBOUND_MAIL_TENANT_DESTROY_ARCHIVE_REASON,
   inboundMessageTenantDestroyHook,
   mailAccountTenantDestroyHook,
   mailThreadTenantDestroyHook,
-} from "./tenant-destroy-hook.js";
+} from "./tenant-destroy-hook.ts";
 
 export function createInboundMailFoundationFeature() {
   return defineFeature(
@@ -271,6 +271,3 @@ export function createInboundMailFoundationFeature() {
     { dedupeOptions: {} },
   );
 }
-
-/** @deprecated Use createInboundMailFoundationFeature(). Run `bun kumiko-upgrade --apply`. Removed in the first release after 2026-10-29. */
-export const inboundMailFoundationFeature = createInboundMailFoundationFeature();

package/packages/bundled-features/src/inbound-mail-foundation/handlers/account-state.ts

@@ -10,7 +10,7 @@
 // fehlendem KMS decrypt erzwingen bzw. Double-Encryption produzieren).
 
 import type { HandlerContext } from "@cosmicdrift/kumiko-framework/engine";
-import type { MailAccountEventPayload } from "../events.js";
+import type { MailAccountEventPayload } from "../events.ts";
 
 export async function loadCurrentMailAccountPayload(
   ctx: Pick<HandlerContext, "loadAggregate">,

package/packages/bundled-features/src/inbound-mail-foundation/handlers/connect-account.write.ts

@@ -20,14 +20,14 @@ import {
 import type { WriteHandlerDef } from "@cosmicdrift/kumiko-framework/engine";
 import { failUnprocessable } from "@cosmicdrift/kumiko-framework/errors";
 import * as z from "zod";
-import { InboundMailAccountStatuses, InboundMailAuthMethods } from "../constants.js";
-import { MAIL_ACCOUNT_PII_FIELDS, mailAccountEntity } from "../entities.js";
+import { InboundMailAccountStatuses, InboundMailAuthMethods } from "../constants.ts";
+import { MAIL_ACCOUNT_PII_FIELDS, mailAccountEntity } from "../entities.ts";
 import {
   MAIL_ACCOUNT_AGGREGATE_TYPE,
   MAIL_ACCOUNT_CONNECTED_EVENT_QN,
   type MailAccountEventHeaders,
   type MailAccountEventPayload,
-} from "../events.js";
+} from "../events.ts";
 
 export const connectAccountSchema = z.object({
   /** Provider-Key wie an der Extension registriert ("imap",

package/packages/bundled-features/src/inbound-mail-foundation/handlers/disconnect-account.write.ts

@@ -10,14 +10,14 @@
 import type { WriteHandlerDef } from "@cosmicdrift/kumiko-framework/engine";
 import { failNotFound } from "@cosmicdrift/kumiko-framework/errors";
 import * as z from "zod";
-import { InboundMailAccountStatuses } from "../constants.js";
+import { InboundMailAccountStatuses } from "../constants.ts";
 import {
   MAIL_ACCOUNT_AGGREGATE_TYPE,
   MAIL_ACCOUNT_DISCONNECTED_EVENT_QN,
   type MailAccountEventHeaders,
   type MailAccountEventPayload,
-} from "../events.js";
-import { loadCurrentMailAccountPayload } from "./account-state.js";
+} from "../events.ts";
+import { loadCurrentMailAccountPayload } from "./account-state.ts";
 
 export const disconnectAccountSchema = z.object({
   accountId: z.uuid(),

package/packages/bundled-features/src/inbound-mail-foundation/handlers/ingest-message.write.ts

@@ -29,14 +29,14 @@ import type { WriteHandlerDef } from "@cosmicdrift/kumiko-framework/engine";
 import { InternalError } from "@cosmicdrift/kumiko-framework/errors";
 import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import * as z from "zod";
-import { inboundMessageAggregateId, mailThreadAggregateId } from "../aggregate-id.js";
+import { inboundMessageAggregateId, mailThreadAggregateId } from "../aggregate-id.ts";
 import {
   INBOUND_MESSAGE_PII_FIELDS,
   inboundMessageEntity,
   MAIL_THREAD_PII_FIELDS,
   mailThreadEntity,
   seenMessageTable,
-} from "../entities.js";
+} from "../entities.ts";
 import {
   INBOUND_MESSAGE_AGGREGATE_TYPE,
   INBOUND_MESSAGE_RECEIVED_EVENT_QN,
@@ -45,8 +45,8 @@ import {
   MAIL_THREAD_AGGREGATE_TYPE,
   MAIL_THREAD_UPDATED_EVENT_QN,
   type MailThreadEventPayload,
-} from "../events.js";
-import { inboundMessagesProjectionTable } from "../projection.js";
+} from "../events.ts";
+import { inboundMessagesProjectionTable } from "../projection.ts";
 
 // =============================================================================
 // Input-Schema — der normalisierte Provider-Output (RawInboundMessage,

package/packages/bundled-features/src/inbound-mail-foundation/handlers/list-accounts.query.ts

@@ -13,9 +13,9 @@ import {
 } from "@cosmicdrift/kumiko-framework/crypto";
 import type { QueryHandlerDef } from "@cosmicdrift/kumiko-framework/engine";
 import * as z from "zod";
-import { MAIL_ACCOUNT_PII_FIELDS } from "../entities.js";
-import { mailAccountsProjectionTable } from "../projection.js";
-import { isVisibleToCaller } from "./scope-visibility.js";
+import { MAIL_ACCOUNT_PII_FIELDS } from "../entities.ts";
+import { mailAccountsProjectionTable } from "../projection.ts";
+import { isVisibleToCaller } from "./scope-visibility.ts";
 
 const listAccountsSchema = z.object({}).strict();
 

package/packages/bundled-features/src/inbound-mail-foundation/handlers/list-messages.query.ts

@@ -14,9 +14,9 @@ import {
 } from "@cosmicdrift/kumiko-framework/crypto";
 import type { QueryHandlerDef } from "@cosmicdrift/kumiko-framework/engine";
 import * as z from "zod";
-import { INBOUND_MESSAGE_PII_FIELDS } from "../entities.js";
-import { inboundMessagesProjectionTable } from "../projection.js";
-import { isVisibleToCaller } from "./scope-visibility.js";
+import { INBOUND_MESSAGE_PII_FIELDS } from "../entities.ts";
+import { inboundMessagesProjectionTable } from "../projection.ts";
+import { isVisibleToCaller } from "./scope-visibility.ts";
 
 const listMessagesSchema = z
   .object({

package/packages/bundled-features/src/inbound-mail-foundation/handlers/update-account.write.ts

@@ -6,14 +6,14 @@
 import type { WriteHandlerDef } from "@cosmicdrift/kumiko-framework/engine";
 import { failNotFound, failUnprocessable } from "@cosmicdrift/kumiko-framework/errors";
 import * as z from "zod";
-import { InboundMailAccountStatuses } from "../constants.js";
+import { InboundMailAccountStatuses } from "../constants.ts";
 import {
   MAIL_ACCOUNT_AGGREGATE_TYPE,
   MAIL_ACCOUNT_UPDATED_EVENT_QN,
   type MailAccountEventHeaders,
   type MailAccountEventPayload,
-} from "../events.js";
-import { loadCurrentMailAccountPayload } from "./account-state.js";
+} from "../events.ts";
+import { loadCurrentMailAccountPayload } from "./account-state.ts";
 
 export const updateAccountSchema = z.object({
   accountId: z.uuid(),

package/packages/bundled-features/src/inbound-mail-foundation/index.ts

@@ -3,11 +3,11 @@
 export {
   inboundMessageAggregateId,
   mailThreadAggregateId,
-} from "./aggregate-id.js";
+} from "./aggregate-id.ts";
 export {
   createInboundMailConnectRoutes,
   type InboundMailConnectRoutesOptions,
-} from "./connect-routes.js";
+} from "./connect-routes.ts";
 export {
   INBOUND_MAIL_FOUNDATION_FEATURE,
   INBOUND_MAIL_PROVIDER_EXTENSION,
@@ -18,7 +18,7 @@ export {
   InboundMailFoundationHandlers,
   InboundMailFoundationQueries,
   inboundCredentialSecretKey,
-} from "./constants.js";
+} from "./constants.ts";
 export {
   INBOUND_MESSAGE_PII_FIELDS,
   inboundMessageEntity,
@@ -30,7 +30,7 @@ export {
   seenMessageTable,
   syncCursorEntity,
   syncCursorTable,
-} from "./entities.js";
+} from "./entities.ts";
 export {
   INBOUND_MESSAGE_AGGREGATE_TYPE,
   INBOUND_MESSAGE_RECEIVED_EVENT_QN,
@@ -53,30 +53,30 @@ export {
   type MailThreadEventPayload,
   mailAccountEventPayloadSchema,
   mailThreadEventPayloadSchema,
-} from "./events.js";
-export { createInboundMailFoundationFeature, inboundMailFoundationFeature } from "./feature.js";
+} from "./events.ts";
+export { createInboundMailFoundationFeature } from "./feature.ts";
 export {
   createOAuthAccessTokenManager,
   inboundRefreshTokenSecretOptions,
   type OAuthAccessTokenManager,
   type OAuthAccessTokenManagerDeps,
   usesFoundationManagedOAuth,
-} from "./oauth-access-token.js";
+} from "./oauth-access-token.ts";
 export {
   type OAuthStatePayload,
   signOAuthState,
   type VerifyOAuthStateResult,
   verifyOAuthState,
-} from "./oauth-state.js";
+} from "./oauth-state.ts";
 export {
   inboundMessagesProjectionTable,
   mailAccountsProjectionTable,
   mailThreadsProjectionTable,
-} from "./projection.js";
+} from "./projection.ts";
 export {
   resolveInboundProviderForAccount,
   resolveInboundProviderForKey,
-} from "./provider-factory.js";
+} from "./provider-factory.ts";
 export {
   InboundAuthError,
   InboundCursorInvalidError,
@@ -95,9 +95,9 @@ export {
   type OAuthTokenSet,
   type RawInboundMessage,
   type SyncCursorPayload,
-} from "./types.js";
+} from "./types.ts";
 export {
   createInboundMailSupervisor,
   type InboundMailSupervisor,
   type InboundMailSupervisorDeps,
-} from "./watch-supervisor.js";
+} from "./watch-supervisor.ts";

package/packages/bundled-features/src/inbound-mail-foundation/oauth-access-token.ts

@@ -23,14 +23,14 @@ import {
 } from "@cosmicdrift/kumiko-framework/db";
 import type { SecretsContext } from "@cosmicdrift/kumiko-framework/secrets";
 import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
-import { InboundMailAuthMethods, inboundCredentialSecretKey } from "./constants.js";
+import { InboundMailAuthMethods, inboundCredentialSecretKey } from "./constants.ts";
 import {
   InboundAuthError,
   type InboundMailContext,
   type InboundMailProviderPlugin,
   type MailAccountRecord,
   type OAuthTokenSet,
-} from "./types.js";
+} from "./types.ts";
 
 // 'inoa' as ASCII — disjoint from the other fixed advisory-lock namespaces.
 const OAUTH_REFRESH_LOCK_NAMESPACE = 0x696e6f61;

package/packages/bundled-features/src/inbound-mail-foundation/projection.ts

@@ -25,12 +25,12 @@ import {
   upsertOnConflict,
 } from "@cosmicdrift/kumiko-framework/db";
 import { defineApply } from "@cosmicdrift/kumiko-framework/engine";
-import { inboundMessageEntity, mailAccountEntity, mailThreadEntity } from "./entities.js";
+import { inboundMessageEntity, mailAccountEntity, mailThreadEntity } from "./entities.ts";
 import type {
   InboundMessageEventPayload,
   MailAccountEventPayload,
   MailThreadEventPayload,
-} from "./events.js";
+} from "./events.ts";
 
 // Drizzle-table-instances aus den entity-shapes — geteilt zwischen
 // projection-applies und list-queries (ein column-namespace).

package/packages/bundled-features/src/inbound-mail-foundation/provider-factory.ts

@@ -4,13 +4,13 @@
 // per-Tenant-Config-Selector — der Provider steht pro MailAccount
 // (`account.provider`), ein Tenant kann mehrere Provider parallel nutzen.
 
-import { INBOUND_MAIL_FOUNDATION_FEATURE, INBOUND_MAIL_PROVIDER_EXTENSION } from "./constants.js";
+import { INBOUND_MAIL_FOUNDATION_FEATURE, INBOUND_MAIL_PROVIDER_EXTENSION } from "./constants.ts";
 import {
   type InboundMailContext,
   type InboundMailProviderPlugin,
   isInboundMailProviderPlugin,
   type MailAccountRecord,
-} from "./types.js";
+} from "./types.ts";
 
 /** Lookup per Provider-Key ("imap", "m365-graph", ...) — genutzt von den
  *  OAuth-Connect-Routen, wo noch kein Account existiert. */

package/packages/bundled-features/src/inbound-mail-foundation/retention-sweep.ts

@@ -33,9 +33,9 @@ import {
 import type { TenantId } from "@cosmicdrift/kumiko-framework/engine";
 import { archiveStream } from "@cosmicdrift/kumiko-framework/event-store";
 import type { getTemporal } from "@cosmicdrift/kumiko-framework/time";
-import { seenMessageTable } from "./entities.js";
-import { INBOUND_MESSAGE_AGGREGATE_TYPE } from "./events.js";
-import { inboundMessagesProjectionTable } from "./projection.js";
+import { seenMessageTable } from "./entities.ts";
+import { INBOUND_MESSAGE_AGGREGATE_TYPE } from "./events.ts";
+import { inboundMessagesProjectionTable } from "./projection.ts";
 
 // Temporal.Instant ohne den Caller zwingen es aus globalThis zu ziehen
 // (Muster data-retention/keep-for.ts).

package/packages/bundled-features/src/inbound-mail-foundation/tenant-destroy-hook.ts

@@ -20,17 +20,17 @@
 import type { EntityTableMeta } from "@cosmicdrift/kumiko-framework/db";
 import { declareEscapeHatch, type TenantDataHookCtx } from "@cosmicdrift/kumiko-framework/engine";
 import { archiveStream } from "@cosmicdrift/kumiko-framework/event-store";
-import { seenMessageTable, syncCursorTable } from "./entities.js";
+import { seenMessageTable, syncCursorTable } from "./entities.ts";
 import {
   INBOUND_MESSAGE_AGGREGATE_TYPE,
   MAIL_ACCOUNT_AGGREGATE_TYPE,
   MAIL_THREAD_AGGREGATE_TYPE,
-} from "./events.js";
+} from "./events.ts";
 import {
   inboundMessagesProjectionTable,
   mailAccountsProjectionTable,
   mailThreadsProjectionTable,
-} from "./projection.js";
+} from "./projection.ts";
 
 const ARCHIVED_BY = "tenant-lifecycle:destroy";
 const REASON = "tenant_destroy";

package/packages/bundled-features/src/inbound-mail-foundation/types.ts

@@ -12,7 +12,7 @@
 
 import type { ConfigAccessor, Registry } from "@cosmicdrift/kumiko-framework/engine";
 import type { MetricsHandle } from "@cosmicdrift/kumiko-framework/observability";
-import { INBOUND_MAIL_PROVIDER_EXTENSION, type InboundMailAccountStatus } from "./constants.js";
+import { INBOUND_MAIL_PROVIDER_EXTENSION, type InboundMailAccountStatus } from "./constants.ts";
 
 /**
  * Slim context for provider plugins.

package/packages/bundled-features/src/inbound-mail-foundation/watch-supervisor.ts

@@ -53,15 +53,15 @@ import { fetchOne, insertOne, selectMany, updateMany } from "@cosmicdrift/kumiko
 import type { DistributedLock } from "@cosmicdrift/kumiko-framework/pipeline";
 import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import { isPlainObject } from "@cosmicdrift/kumiko-types/type-guards";
-import { InboundMailAccountStatuses, InboundMailFoundationHandlers } from "./constants.js";
-import { MAIL_ACCOUNT_PII_FIELDS, seenMessageTable, syncCursorTable } from "./entities.js";
+import { InboundMailAccountStatuses, InboundMailFoundationHandlers } from "./constants.ts";
+import { MAIL_ACCOUNT_PII_FIELDS, seenMessageTable, syncCursorTable } from "./entities.ts";
 import {
   createOAuthAccessTokenManager,
   type OAuthAccessTokenManager,
   usesFoundationManagedOAuth,
-} from "./oauth-access-token.js";
-import { mailAccountsProjectionTable } from "./projection.js";
-import { resolveInboundProviderForAccount } from "./provider-factory.js";
+} from "./oauth-access-token.ts";
+import { mailAccountsProjectionTable } from "./projection.ts";
+import { resolveInboundProviderForAccount } from "./provider-factory.ts";
 import {
   type InboundMailContext,
   type InboundMailProviderPlugin,
@@ -71,7 +71,7 @@ import {
   type MailAccountRecord,
   type RawInboundMessage,
   type SyncCursorPayload,
-} from "./types.js";
+} from "./types.ts";
 
 // Provider errors can embed token or response data in `message`; logs carry
 // only the error class.

package/packages/bundled-features/src/inbound-provider-imap/changes.json

@@ -1,4 +1,12 @@
 [
+  {
+    "version": "0.370.0",
+    "type": "breaking",
+    "title": "The deprecated inboundProviderImapFeature constant is removed",
+    "detail": "inboundProviderImapFeature was kept next to createInboundProviderImapFeature() for one release. Mount the feature by calling createInboundProviderImapFeature().",
+    "migration": "Run bun kumiko-upgrade --apply. It replaces inboundProviderImapFeature with createInboundProviderImapFeature().",
+    "codemod": "scripts/codemod/feature-factory.ts"
+  },
   {
     "version": "0.354.0",
     "type": "fix",

package/packages/bundled-features/src/inbound-provider-imap/feature.ts

@@ -39,7 +39,7 @@ import { defineFeature } from "@cosmicdrift/kumiko-framework/engine";
 import { instantToLegacyDate } from "@cosmicdrift/kumiko-framework/time";
 import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import type { ImapFlow, MailboxObject } from "imapflow";
-import { type ImapCredentialDocument, parseImapCredentialDocument } from "./credential-document.js";
+import { type ImapCredentialDocument, parseImapCredentialDocument } from "./credential-document.ts";
 import {
   assertUidValidity,
   coerceDate,
@@ -49,12 +49,12 @@ import {
   mapImapError,
   parseImapCursor,
   toRawInboundMessage,
-} from "./imap-client.js";
+} from "./imap-client.ts";
 
 const FEATURE_NAME = "inbound-provider-imap";
 export const IMAP_PROVIDER_KEY = "imap";
 
-export { setImapMailHostLookup } from "./imap-client.js";
+export { setImapMailHostLookup } from "./imap-client.ts";
 
 // =============================================================================
 // Credential-Read — per-Account-Slot, Worker-tauglich (slim ctx).
@@ -292,6 +292,3 @@ export function createInboundProviderImapFeature() {
     { dedupeOptions: {} },
   );
 }
-
-/** @deprecated Use createInboundProviderImapFeature(). Run `bun kumiko-upgrade --apply`. Removed in the first release after 2026-10-29. */
-export const inboundProviderImapFeature = createInboundProviderImapFeature();

package/packages/bundled-features/src/inbound-provider-imap/imap-client.ts

@@ -21,7 +21,7 @@ import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import { isPlainObject } from "@cosmicdrift/kumiko-types/type-guards";
 import { ImapFlow } from "imapflow";
 import { type AddressObject, type ParsedMail, simpleParser } from "mailparser";
-import type { ImapCredentialDocument } from "./credential-document.js";
+import type { ImapCredentialDocument } from "./credential-document.ts";
 
 export const IMAP_MAILBOX = "INBOX";
 const SNIPPET_MAX = 300;

package/packages/bundled-features/src/inbound-provider-imap/index.ts

@@ -5,13 +5,12 @@ export {
   imapCredentialDocumentSchema,
   type ParseCredentialResult,
   parseImapCredentialDocument,
-} from "./credential-document.js";
+} from "./credential-document.ts";
 export {
   createInboundProviderImapFeature,
   IMAP_PROVIDER_KEY,
-  inboundProviderImapFeature,
   setImapMailHostLookup,
-} from "./feature.js";
+} from "./feature.ts";
 export {
   assertUidValidity,
   buildProviderMessageId,
@@ -19,4 +18,4 @@ export {
   mapImapError,
   normalizeReferences,
   parseImapCursor,
-} from "./imap-client.js";
+} from "./imap-client.ts";

package/packages/bundled-features/src/inbound-provider-inmemory/changes.json

@@ -1 +1,10 @@
-[]
+[
+  {
+    "version": "0.370.0",
+    "type": "breaking",
+    "title": "The deprecated inboundProviderInMemoryFeature constant is removed",
+    "detail": "inboundProviderInMemoryFeature was kept next to createInboundProviderInMemoryFeature() for one release. Mount the feature by calling createInboundProviderInMemoryFeature().",
+    "migration": "Run bun kumiko-upgrade --apply. It replaces inboundProviderInMemoryFeature with createInboundProviderInMemoryFeature().",
+    "codemod": "scripts/codemod/feature-factory.ts"
+  }
+]

package/packages/bundled-features/src/inbound-provider-inmemory/feature.ts

@@ -157,6 +157,3 @@ export function createInboundProviderInMemoryFeature() {
     { dedupeOptions: {} },
   );
 }
-
-/** @deprecated Use createInboundProviderInMemoryFeature(). Run `bun kumiko-upgrade --apply`. Removed in the first release after 2026-10-29. */
-export const inboundProviderInMemoryFeature = createInboundProviderInMemoryFeature();

package/packages/bundled-features/src/inbound-provider-inmemory/index.ts

@@ -6,8 +6,7 @@ export {
   failNextFetchWith,
   failNextVerifyWith,
   INMEMORY_PROVIDER_KEY,
-  inboundProviderInMemoryFeature,
   isWatching,
   resetInboundInMemory,
   seedInboundMessage,
-} from "./feature.js";
+} from "./feature.ts";

package/packages/bundled-features/src/jobs/db/queries/retention.ts

@@ -12,9 +12,9 @@
 
 import type { DbConnection } from "@cosmicdrift/kumiko-framework/db";
 import { deleteManyBatched } from "@cosmicdrift/kumiko-framework/db";
-import { jobRunLogsTable, jobRunsTable } from "../../job-run-table.js";
-import { tenantJobFailuresTable } from "../../tenant-job-failure-table.js";
-import { tenantJobRunsTable } from "../../tenant-job-run-table.js";
+import { jobRunLogsTable, jobRunsTable } from "../../job-run-table.ts";
+import { tenantJobFailuresTable } from "../../tenant-job-failure-table.ts";
+import { tenantJobRunsTable } from "../../tenant-job-run-table.ts";
 
 const RETENTION_DELETE_BATCH_SIZE = 500;
 

package/packages/bundled-features/src/jobs/db/queries/stale-run-sweep.ts

@@ -14,11 +14,11 @@
 
 import type { DbConnection } from "@cosmicdrift/kumiko-framework/db";
 import { deleteManyBatched, selectMany, updateMany } from "@cosmicdrift/kumiko-framework/db";
-import { mapWithConcurrency } from "../../../shared/index.js";
-import { DEFAULT_JOB_RUN_RETENTION_DAYS } from "../../handlers/retention-cleanup.job.js";
-import { encryptFailureError } from "../../job-run-logger.js";
-import { jobRunsTable } from "../../job-run-table.js";
-import { tenantJobRunsTable } from "../../tenant-job-run-table.js";
+import { mapWithConcurrency } from "../../../shared/index.ts";
+import { DEFAULT_JOB_RUN_RETENTION_DAYS } from "../../handlers/retention-cleanup.job.ts";
+import { encryptFailureError } from "../../job-run-logger.ts";
+import { jobRunsTable } from "../../job-run-table.ts";
+import { tenantJobRunsTable } from "../../tenant-job-run-table.ts";
 
 const KMS_POOL_CONCURRENCY = 4;
 const STALE_DELETE_BATCH_SIZE = 500;