@cosmicdrift/kumiko-samples 0.368.0 → 0.370.0

package/packages/bundled-features/src/managed-pages/index.ts

@@ -16,15 +16,15 @@ export {
   sanitizeTenantCss,
   TENANT_CONTENT_ATTR,
   tenantStyleBlock,
-} from "../page-render/index.js";
+} from "../page-render/index.ts";
 // BRANDING_QN: the qualified config-key names a consumer writes branding to
 // (`config:write:set`) — single source for the `managed-pages:config:branding-*`
 // strings, so apps + the per-tenant migration never hardcode them.
-export { BRANDING_QN, MANAGED_PAGES_CSS_FEATURE } from "./branding.js";
-export { createManagedPagesCssFeature } from "./css-gate.js";
+export { BRANDING_QN, MANAGED_PAGES_CSS_FEATURE } from "./branding.ts";
+export { createManagedPagesCssFeature } from "./css-gate.ts";
 export {
   createManagedPagesFeature,
   type ManagedPagesOptions,
   type ManagedPagesWrapLayout,
-} from "./feature.js";
-export { type PageRow, pageEntity, pagesTable } from "./table.js";
+} from "./feature.ts";
+export { type PageRow, pageEntity, pagesTable } from "./table.ts";

package/packages/bundled-features/src/managed-pages/screens/branding-screen.ts

@@ -4,7 +4,7 @@ import {
   createSelectField,
   createTextField,
 } from "@cosmicdrift/kumiko-framework/engine";
-import { BRANDING_QN, LAYOUT_PRESETS } from "../branding.js";
+import { BRANDING_QN, LAYOUT_PRESETS } from "../branding.ts";
 
 // Tenant self-service branding editor. A `configEdit` screen (no entity
 // table) — the renderer loads config:query:values, maps the form fields via

package/packages/bundled-features/src/managed-pages/seeding.ts

@@ -15,7 +15,7 @@ import {
   TestUsers,
 } from "@cosmicdrift/kumiko-framework/seeding";
 
-import { type PageRow, pageEntity, pagesTable } from "./table.js";
+import { type PageRow, pageEntity, pagesTable } from "./table.ts";
 
 const executor = createEventStoreExecutor(pagesTable, pageEntity, { entityName: "page" });
 

package/packages/bundled-features/src/managed-pages/web/client-plugin.tsx

@@ -7,7 +7,7 @@
 
 import { mergeTranslations, type TranslationsByLocale } from "@cosmicdrift/kumiko-renderer";
 import type { ClientFeatureDefinition } from "@cosmicdrift/kumiko-renderer-web";
-import { defaultTranslations } from "./i18n.js";
+import { defaultTranslations } from "./i18n.ts";
 
 export type ManagedPagesClientOptions = {
   /** Key-wise Overrides über die Default-Bundles (de/en). */

package/packages/bundled-features/src/managed-pages/web/i18n.ts

@@ -13,7 +13,7 @@ import {
   type TranslationsByLocale,
   translationsByLocaleFromKeys,
 } from "@cosmicdrift/kumiko-renderer";
-import { MANAGED_PAGES_I18N } from "../i18n.js";
+import { MANAGED_PAGES_I18N } from "../i18n.ts";
 
 export const defaultTranslations: TranslationsByLocale =
   translationsByLocaleFromKeys(MANAGED_PAGES_I18N);

package/packages/bundled-features/src/managed-pages/web/index.ts

@@ -1,3 +1,3 @@
 // @runtime client
-export { type ManagedPagesClientOptions, managedPagesClient } from "./client-plugin.js";
-export { defaultTranslations } from "./i18n.js";
+export { type ManagedPagesClientOptions, managedPagesClient } from "./client-plugin.tsx";
+export { defaultTranslations } from "./i18n.ts";

package/packages/bundled-features/src/metrics/compute.ts

@@ -6,7 +6,7 @@ import type {
 } from "@cosmicdrift/kumiko-types/aggregate-types";
 import type { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import type { TenantDb } from "@cosmicdrift/kumiko-types/tenant-db-types";
-import { MAX_GROUP_ROWS, type MetricRange } from "./constants.js";
+import { MAX_GROUP_ROWS, type MetricRange } from "./constants.ts";
 import type {
   MetricDefinition,
   MetricDeltaDirection,
@@ -15,8 +15,8 @@ import type {
   MetricRow,
   MetricSegment,
   MetricSeries,
-} from "./types.js";
-import { bucketStartsMs, computeWindow, resolveBucket } from "./window.js";
+} from "./types.ts";
+import { bucketStartsMs, computeWindow, resolveBucket } from "./window.ts";
 
 export type MetricRunParams = {
   readonly range: MetricRange;

package/packages/bundled-features/src/metrics/default-metrics.ts

@@ -1,14 +1,14 @@
 import { eventsTable } from "@cosmicdrift/kumiko-framework/event-store";
-import { DELIVERY_FEATURE, DeliveryStatus, deliveryAttemptsTable } from "../delivery/index.js";
+import { DELIVERY_FEATURE, DeliveryStatus, deliveryAttemptsTable } from "../delivery/index.ts";
 import {
   JOBS_FEATURE,
   type JobRunStatus,
   jobRunsTable,
   tenantJobFailuresTable,
-} from "../jobs/index.js";
-import { SESSIONS_FEATURE, userSessionTable } from "../sessions/index.js";
-import { TENANT_FEATURE, tenantTable } from "../tenant/index.js";
-import { defineMetric } from "./types.js";
+} from "../jobs/index.ts";
+import { SESSIONS_FEATURE, userSessionTable } from "../sessions/index.ts";
+import { TENANT_FEATURE, tenantTable } from "../tenant/index.ts";
+import { defineMetric } from "./types.ts";
 
 const JOB_STATUSES: readonly JobRunStatus[] = ["queued", "running", "completed", "failed"];
 

package/packages/bundled-features/src/metrics/feature.ts

@@ -8,22 +8,22 @@ import {
 import { InternalError, ValidationError } from "@cosmicdrift/kumiko-framework/errors";
 import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import * as z from "zod";
-import { runMetric } from "./compute.js";
+import { runMetric } from "./compute.ts";
 import {
   METRIC_RANGES,
   METRICS_FEATURE,
   METRICS_SYSTEM_FEATURE,
   type MetricScope,
-} from "./constants.js";
+} from "./constants.ts";
 import {
   metricFilterPayloadShape,
   metricFilterWhere,
   resolveMetricFilterWhere,
-} from "./filters.js";
-import { METRICS_I18N } from "./i18n.js";
-import type { MetricDefinition, MetricsFeatureOptions } from "./types.js";
-import { metricHasTenantColumn, validateMetrics } from "./validate.js";
-import { isValidTimeZone } from "./window.js";
+} from "./filters.ts";
+import { METRICS_I18N } from "./i18n.ts";
+import type { MetricDefinition, MetricsFeatureOptions } from "./types.ts";
+import { metricHasTenantColumn, validateMetrics } from "./validate.ts";
+import { isValidTimeZone } from "./window.ts";
 
 const DEFAULT_RANGE = "7d";
 const DEFAULT_TIME_ZONE = "UTC";

package/packages/bundled-features/src/metrics/filters.ts

@@ -1,7 +1,7 @@
 import { extractTableInfo, type WhereObject } from "@cosmicdrift/kumiko-framework/db";
 import type { HandlerContext } from "@cosmicdrift/kumiko-framework/engine";
 import * as z from "zod";
-import type { MetricDefinition, MetricFilterResolver } from "./types.js";
+import type { MetricDefinition, MetricFilterResolver } from "./types.ts";
 
 export const RESERVED_PAYLOAD_KEYS: readonly string[] = ["range", "timeZone", "tenantId"];
 

package/packages/bundled-features/src/metrics/index.ts

@@ -7,7 +7,7 @@ export {
   type MetricRange,
   type MetricScope,
   metricQueryName,
-} from "./constants.js";
+} from "./constants.ts";
 export {
   activeTenantsMetric,
   activeUsersMetric,
@@ -18,9 +18,9 @@ export {
   failedJobRunsMetric,
   jobRunsByStatusMetric,
   tenantJobFailuresMetric,
-} from "./default-metrics.js";
-export { createMetricsFeature, createSystemMetricsFeature } from "./feature.js";
-export { METRICS_I18N } from "./i18n.js";
+} from "./default-metrics.ts";
+export { createMetricsFeature, createSystemMetricsFeature } from "./feature.ts";
+export { METRICS_I18N } from "./i18n.ts";
 export {
   defineMetric,
   type MetricDefinition,
@@ -31,4 +31,4 @@ export {
   type MetricSegment,
   type MetricSeries,
   type MetricsFeatureOptions,
-} from "./types.js";
+} from "./types.ts";

package/packages/bundled-features/src/metrics/types.ts

@@ -7,7 +7,7 @@ import type {
 import type { SchemaTable } from "@cosmicdrift/kumiko-types/schema-table-types";
 import type { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import type { WhereObject } from "@cosmicdrift/kumiko-types/where-clause-types";
-import type { MetricRange, MetricScope } from "./constants.js";
+import type { MetricRange, MetricScope } from "./constants.ts";
 
 /** Maps a payload value (e.g. a folder id) to the values `column` may have (e.g. the folder and its subfolders' loan ids). Runs with the tenant handler context, so reads stay tenant-scoped; the result only narrows. An empty result yields no rows. */
 export type MetricFilterResolver = {

package/packages/bundled-features/src/metrics/validate.ts

@@ -1,7 +1,7 @@
 import { extractTableInfo, isTimestamptzType } from "@cosmicdrift/kumiko-framework/db";
-import { METRIC_RANGES } from "./constants.js";
-import { filterValueKindOf, metricFilterEntries, RESERVED_PAYLOAD_KEYS } from "./filters.js";
-import type { MetricDefinition } from "./types.js";
+import { METRIC_RANGES } from "./constants.ts";
+import { filterValueKindOf, metricFilterEntries, RESERVED_PAYLOAD_KEYS } from "./filters.ts";
+import type { MetricDefinition } from "./types.ts";
 
 const KEBAB_ID = /^[a-z][a-z0-9]*(-[a-z0-9]+)*$/;
 const FILTER_PAYLOAD_KEY = /^[a-z][a-zA-Z0-9]*$/;

package/packages/bundled-features/src/metrics/window.ts

@@ -1,7 +1,7 @@
 import type { AggregateTimeBucket } from "@cosmicdrift/kumiko-types/aggregate-types";
 import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
-import type { MetricRange } from "./constants.js";
-import type { MetricDefinition } from "./types.js";
+import type { MetricRange } from "./constants.ts";
+import type { MetricDefinition } from "./types.ts";
 
 export type MetricWindow = {
   readonly start: Temporal.Instant;

package/packages/bundled-features/src/notes-history/changes.json

@@ -1,4 +1,12 @@
 [
+  {
+    "version": "0.370.0",
+    "type": "breaking",
+    "title": "The deprecated notesHistoryFeature constant is removed",
+    "detail": "notesHistoryFeature was kept next to createNotesHistoryFeature() for one release. Mount the feature by calling createNotesHistoryFeature().",
+    "migration": "Run bun kumiko-upgrade --apply. It replaces notesHistoryFeature with createNotesHistoryFeature().",
+    "codemod": "scripts/codemod/feature-factory.ts"
+  },
   {
     "version": "0.358.0",
     "type": "fix",

package/packages/bundled-features/src/notes-history/executor.ts

@@ -1,5 +1,5 @@
 import { createEntityExecutor, type EntityDefinition } from "@cosmicdrift/kumiko-framework/engine";
-import { createNoteEntryEntity, noteEntryEntity, noteMentionEntity } from "./entity.js";
+import { createNoteEntryEntity, noteEntryEntity, noteMentionEntity } from "./entity.ts";
 
 export const { executor: noteEntryExecutor, table: noteEntryTable } = createEntityExecutor(
   "note-entry",

package/packages/bundled-features/src/notes-history/feature.ts

@@ -20,12 +20,12 @@ import {
   type EntityDefinition,
   type FeatureRegistrar,
 } from "@cosmicdrift/kumiko-framework/engine";
-import { assertNoWhereRuleInOwnershipWrite } from "../shared/index.js";
-import { DEFAULT_NOTES_HISTORY_ACCESS, NOTES_HISTORY_FEATURE_NAME } from "./constants.js";
-import { createNoteEntryEntity, noteMentionEntity } from "./entity.js";
-import { createNoteEntryExecutor } from "./executor.js";
-import { createAddNoteHandler } from "./handlers/add-note.write.js";
-import { NOTES_HISTORY_FEATURE_I18N } from "./i18n.js";
+import { assertNoWhereRuleInOwnershipWrite } from "../shared/index.ts";
+import { DEFAULT_NOTES_HISTORY_ACCESS, NOTES_HISTORY_FEATURE_NAME } from "./constants.ts";
+import { createNoteEntryEntity, noteMentionEntity } from "./entity.ts";
+import { createNoteEntryExecutor } from "./executor.ts";
+import { createAddNoteHandler } from "./handlers/add-note.write.ts";
+import { NOTES_HISTORY_FEATURE_I18N } from "./i18n.ts";
 
 function registerNotesHistory(
   r: FeatureRegistrar<typeof NOTES_HISTORY_FEATURE_NAME>,
@@ -138,6 +138,3 @@ export function createNotesHistoryFeature(
     registerNotesHistory(r, resolveAccess(opts), opts.ownership, opts.parents),
   );
 }
-
-/** @deprecated Use createNotesHistoryFeature(). Run `bun kumiko-upgrade --apply`. Removed in the first release after 2026-10-29. */
-export const notesHistoryFeature = createNotesHistoryFeature();

package/packages/bundled-features/src/notes-history/handlers/add-note.write.ts

@@ -1,12 +1,12 @@
 import { fetchOne, runInSavepointIfSupported } from "@cosmicdrift/kumiko-framework/db";
 import type { AccessRule, WriteHandlerDef } from "@cosmicdrift/kumiko-framework/engine";
 import { ValidationError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
-import { decryptStoredPii, denyUnlessJoinRowParentVisible } from "../../shared/index.js";
-import { tenantMembershipsTable } from "../../tenant/index.js";
-import { userTable } from "../../user/index.js";
-import { DEFAULT_NOTES_HISTORY_ACCESS } from "../constants.js";
-import { noteEntryExecutor, noteMentionExecutor } from "../executor.js";
-import { type AddNotePayload, addNotePayloadSchema } from "../schemas.js";
+import { decryptStoredPii, denyUnlessJoinRowParentVisible } from "../../shared/index.ts";
+import { tenantMembershipsTable } from "../../tenant/index.ts";
+import { userTable } from "../../user/index.ts";
+import { DEFAULT_NOTES_HISTORY_ACCESS } from "../constants.ts";
+import { noteEntryExecutor, noteMentionExecutor } from "../executor.ts";
+import { type AddNotePayload, addNotePayloadSchema } from "../schemas.ts";
 
 const READ_AUTHOR_DISPLAY_NAME_REASON =
   "reads the author's displayName from the global users table inside a savepoint so a missing user feature cannot poison the note transaction";

package/packages/bundled-features/src/notes-history/index.ts

@@ -5,21 +5,20 @@ export {
   NOTES_SECTION_EXTENSION_NAME,
   NotesHistoryHandlers,
   NotesHistoryQueries,
-} from "./constants.js";
-export { noteEntryEntity, noteMentionEntity } from "./entity.js";
+} from "./constants.ts";
+export { noteEntryEntity, noteMentionEntity } from "./entity.ts";
 export {
   noteEntryExecutor,
   noteEntryTable,
   noteMentionExecutor,
   noteMentionTable,
-} from "./executor.js";
+} from "./executor.ts";
 export {
   createNotesHistoryFeature,
   type NotesHistoryFeatureOptions,
-  notesHistoryFeature,
-} from "./feature.js";
+} from "./feature.ts";
 export {
   addNoteHandler,
   createAddNoteHandler,
-} from "./handlers/add-note.write.js";
-export { type AddNotePayload, addNotePayloadSchema } from "./schemas.js";
+} from "./handlers/add-note.write.ts";
+export { type AddNotePayload, addNotePayloadSchema } from "./schemas.ts";

package/packages/bundled-features/src/notes-history/web/client-plugin.tsx

@@ -1,9 +1,9 @@
 // @runtime client
 
 import type { ClientFeatureDefinition } from "@cosmicdrift/kumiko-renderer-web";
-import { NOTES_HISTORY_FEATURE_NAME, NOTES_SECTION_EXTENSION_NAME } from "../constants.js";
-import { defaultTranslations } from "./i18n.js";
-import { NotesSection } from "./notes-section.js";
+import { NOTES_HISTORY_FEATURE_NAME, NOTES_SECTION_EXTENSION_NAME } from "../constants.ts";
+import { defaultTranslations } from "./i18n.ts";
+import { NotesSection } from "./notes-section.tsx";
 
 export function notesHistoryClient(): ClientFeatureDefinition {
   return {

package/packages/bundled-features/src/notes-history/web/index.ts

@@ -3,6 +3,6 @@ export {
   NOTES_SECTION_EXTENSION_NAME,
   NotesHistoryHandlers,
   NotesHistoryQueries,
-} from "../constants.js";
-export { notesHistoryClient } from "./client-plugin.js";
-export { NotesSection } from "./notes-section.js";
+} from "../constants.ts";
+export { notesHistoryClient } from "./client-plugin.tsx";
+export { NotesSection } from "./notes-section.tsx";

package/packages/bundled-features/src/notes-history/web/notes-section.tsx

@@ -19,7 +19,7 @@ import {
   useTranslation,
 } from "@cosmicdrift/kumiko-renderer";
 import { type ReactNode, useState } from "react";
-import { NotesHistoryHandlers, NotesHistoryQueries } from "../constants.js";
+import { NotesHistoryHandlers, NotesHistoryQueries } from "../constants.ts";
 
 type NoteRow = {
   readonly id: string;

package/packages/bundled-features/src/notes-history-user-data/changes.json

@@ -1,4 +1,12 @@
 [
+  {
+    "version": "0.370.0",
+    "type": "breaking",
+    "title": "The deprecated notesHistoryUserDataFeature constant is removed",
+    "detail": "notesHistoryUserDataFeature was kept next to createNotesHistoryUserDataFeature() for one release. Mount the feature by calling createNotesHistoryUserDataFeature().",
+    "migration": "Run bun kumiko-upgrade --apply. It replaces notesHistoryUserDataFeature with createNotesHistoryUserDataFeature().",
+    "codemod": "scripts/codemod/feature-factory.ts"
+  },
   {
     "version": "0.215.3",
     "type": "improvement",

package/packages/bundled-features/src/notes-history-user-data/hooks.ts

@@ -12,7 +12,7 @@ import type {
   UserDataDeleteHook,
   UserDataExportHook,
 } from "@cosmicdrift/kumiko-framework/engine";
-import { noteEntryTable, noteMentionTable } from "../notes-history/index.js";
+import { noteEntryTable, noteMentionTable } from "../notes-history/index.ts";
 
 // note-entry has no per-tenant scope quirk (unlike folders) — it's genuinely
 // per-user content, so the export filters by authorId directly.

package/packages/bundled-features/src/notes-history-user-data/index.ts

@@ -11,9 +11,9 @@ import {
   noteEntryExportHook,
   noteMentionDeleteHook,
   noteMentionExportHook,
-} from "./hooks.js";
+} from "./hooks.ts";
 
-export { eraseNoteBodiesReachingSubject } from "./hooks.js";
+export { eraseNoteBodiesReachingSubject } from "./hooks.ts";
 
 export function createNotesHistoryUserDataFeature() {
   return defineFeature(
@@ -40,6 +40,3 @@ export function createNotesHistoryUserDataFeature() {
     { dedupeOptions: {} },
   );
 }
-
-/** @deprecated Use createNotesHistoryUserDataFeature(). Run `bun kumiko-upgrade --apply`. Removed in the first release after 2026-10-29. */
-export const notesHistoryUserDataFeature = createNotesHistoryUserDataFeature();

package/packages/bundled-features/src/page-render/cached-page-response.ts

@@ -1,5 +1,5 @@
 import { type CachePolicy, cachedResponse } from "@cosmicdrift/kumiko-framework/api";
-import { securePageHeaders } from "./security-headers.js";
+import { securePageHeaders } from "./security-headers.ts";
 
 export type CachedSecurePageResponseInit = {
   readonly body: BodyInit | null;

package/packages/bundled-features/src/page-render/index.ts

@@ -6,19 +6,19 @@ export {
   isSafeHexColor,
   isSafeHttpsUrl,
   layoutMaxWidth,
-} from "./branding.js";
+} from "./branding.ts";
 export {
   type CachedSecurePageResponseInit,
   cachedSecurePageResponse,
-} from "./cached-page-response.js";
-export { sanitizeTenantCss } from "./css-sanitize.js";
+} from "./cached-page-response.ts";
+export { sanitizeTenantCss } from "./css-sanitize.ts";
 export {
   type PublicPageWrapLayout,
   type SeoHeadInput,
   TENANT_CONTENT_ATTR,
   tenantStyleBlock,
   wrapInLayout,
-} from "./layout.js";
-export { renderSafeMarkdown } from "./markdown.js";
-export { securePageHeaders } from "./security-headers.js";
-export { redirectToCanonicalPath, slashVariantOf } from "./trailing-slash.js";
+} from "./layout.ts";
+export { renderSafeMarkdown } from "./markdown.ts";
+export { securePageHeaders } from "./security-headers.ts";
+export { redirectToCanonicalPath, slashVariantOf } from "./trailing-slash.ts";

package/packages/bundled-features/src/page-render/layout.ts

@@ -1,7 +1,7 @@
 import { escapeHtml, escapeHtmlAttr } from "@cosmicdrift/kumiko-headless";
 import { type ApexHead, renderApexHeadTags } from "@cosmicdrift/kumiko-headless/apex";
-import { type BrandingTokens, brandingHeaderHtml, brandingStyleBlock } from "./branding.js";
-import { sanitizeTenantCss } from "./css-sanitize.js";
+import { type BrandingTokens, brandingHeaderHtml, brandingStyleBlock } from "./branding.ts";
+import { sanitizeTenantCss } from "./css-sanitize.ts";
 
 // Optional OG/JSON-LD/canonical extension for wrapInLayout — the same field
 // set renderApexPage accepts, minus title/description/lang (those come from

package/packages/bundled-features/src/page-render/web.ts

@@ -7,8 +7,8 @@ export {
   isSafeHexColor,
   isSafeHttpsUrl,
   layoutMaxWidth,
-} from "./branding.js";
-export { sanitizeTenantCss } from "./css-sanitize.js";
-export { TENANT_CONTENT_ATTR, tenantStyleBlock, wrapInLayout } from "./layout.js";
-export { renderSafeMarkdown } from "./markdown.js";
-export { securePageHeaders } from "./security-headers.js";
+} from "./branding.ts";
+export { sanitizeTenantCss } from "./css-sanitize.ts";
+export { TENANT_CONTENT_ATTR, tenantStyleBlock, wrapInLayout } from "./layout.ts";
+export { renderSafeMarkdown } from "./markdown.ts";
+export { securePageHeaders } from "./security-headers.ts";

package/packages/bundled-features/src/personal-access-tokens/feature.ts

@@ -14,18 +14,18 @@ import {
   PAT_DEFAULT_RATE_LIMIT,
   PAT_FEATURE,
   type PatRateLimit,
-} from "./constants.js";
-import { availabilityQuery } from "./handlers/availability.query.js";
-import { buildAvailableScopesQuery } from "./handlers/available-scopes.query.js";
-import { type CreatePatOptions, createPatCreateHandler } from "./handlers/create.write.js";
-import { listPatQuery } from "./handlers/list.query.js";
-import { revokePatWrite } from "./handlers/revoke.write.js";
-import { PAT_FEATURE_I18N, patScopeOptionTranslations } from "./i18n.js";
-import { PAT_REVOKED_EVENT_SHORT, patRevokedSchema } from "./pat-revoked-event.js";
-import { createPatResolver } from "./resolver.js";
-import { apiTokenEntity } from "./schema/api-token.js";
-import type { PatScopeConfig } from "./scopes.js";
-import { createPatMintScreen, patListScreen } from "./screens.js";
+} from "./constants.ts";
+import { availabilityQuery } from "./handlers/availability.query.ts";
+import { buildAvailableScopesQuery } from "./handlers/available-scopes.query.ts";
+import { type CreatePatOptions, createPatCreateHandler } from "./handlers/create.write.ts";
+import { listPatQuery } from "./handlers/list.query.ts";
+import { revokePatWrite } from "./handlers/revoke.write.ts";
+import { PAT_FEATURE_I18N, patScopeOptionTranslations } from "./i18n.ts";
+import { PAT_REVOKED_EVENT_SHORT, patRevokedSchema } from "./pat-revoked-event.ts";
+import { createPatResolver } from "./resolver.ts";
+import { apiTokenEntity } from "./schema/api-token.ts";
+import type { PatScopeConfig } from "./scopes.ts";
+import { createPatMintScreen, patListScreen } from "./screens.ts";
 
 // Password-change is the only field-level trigger — see the postSave hook
 // below. MFA-enable/disable is wired separately (auth-mfa's
@@ -76,7 +76,7 @@ export type PersonalAccessTokensOptions = {
    *  explanatory text or a header component above the list. Default: neither. */
   readonly listScreen?: Pick<ProjectionListScreenDefinition, "description" | "slots">;
   // Opt-in MFA re-auth gate for minting a token — wired via
-  // mfaVerifierFromFeature (auth-mfa/feature.ts) at app-composition time. No
+  // mfaVerifierFromFeature (auth-mfa/feature-exports.ts) at app-composition time. No
   // hard dependency on the optional auth-mfa feature.
   readonly mfaVerifier?: CreatePatOptions["mfaVerifier"];
   // Password-change revoker — same constructor-option-or-late-bind duality as

package/packages/bundled-features/src/personal-access-tokens/handlers/available-scopes.query.ts

@@ -1,6 +1,6 @@
 import { defineQueryHandler } from "@cosmicdrift/kumiko-framework/engine";
 import * as z from "zod";
-import type { PatScopeConfig } from "../scopes.js";
+import type { PatScopeConfig } from "../scopes.ts";
 
 // Returns the app-declared scope domains ({name, label, canWrite}) so the mint
 // UI can render a per-domain level picker (no access / read / read & write).

package/packages/bundled-features/src/personal-access-tokens/handlers/create.write.ts

@@ -9,11 +9,11 @@ import { UnprocessableError, writeFailure } from "@cosmicdrift/kumiko-framework/
 import { generateId } from "@cosmicdrift/kumiko-framework/utils";
 import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import * as z from "zod";
-import { encryptForDirectWrite, verifyPassword } from "../../shared/index.js";
-import { UserQueries } from "../../user/index.js";
-import { API_TOKEN_ENTITY_NAME, PAT_DEFAULT_EXPIRES_IN_DAYS, PatErrors } from "../constants.js";
-import { mintPatToken } from "../hash.js";
-import { apiTokenEntity, apiTokenTable } from "../schema/api-token.js";
+import { encryptForDirectWrite, verifyPassword } from "../../shared/index.ts";
+import { UserQueries } from "../../user/index.ts";
+import { API_TOKEN_ENTITY_NAME, PAT_DEFAULT_EXPIRES_IN_DAYS, PatErrors } from "../constants.ts";
+import { mintPatToken } from "../hash.ts";
+import { apiTokenEntity, apiTokenTable } from "../schema/api-token.ts";
 
 export type PatMfaVerifyResult = { readonly enrolled: boolean; readonly ok: boolean };
 

package/packages/bundled-features/src/personal-access-tokens/handlers/list.query.ts

@@ -2,9 +2,9 @@ import { selectMany } from "@cosmicdrift/kumiko-framework/db";
 import { definePagedQueryHandler, MAX_LIST_LIMIT } from "@cosmicdrift/kumiko-framework/engine";
 import { isOneOf } from "@cosmicdrift/kumiko-types/type-guards";
 import * as z from "zod";
-import { decryptStoredPii } from "../../shared/index.js";
-import { isExpiredAt } from "../expiry.js";
-import { apiTokenTable } from "../schema/api-token.js";
+import { decryptStoredPii } from "../../shared/index.ts";
+import { isExpiredAt } from "../expiry.ts";
+import { apiTokenTable } from "../schema/api-token.ts";
 
 // `sort` arrives raw from the client's query string. selectMany's orderBy has
 // no column-existence check — an unrecognised field just gets snake_cased and

package/packages/bundled-features/src/personal-access-tokens/handlers/revoke.write.ts

@@ -4,9 +4,9 @@ import { UnprocessableError, writeFailure } from "@cosmicdrift/kumiko-framework/
 import { generateId } from "@cosmicdrift/kumiko-framework/utils";
 import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import * as z from "zod";
-import { API_TOKEN_ENTITY_NAME, PatErrors } from "../constants.js";
-import { PAT_REVOKED_AGGREGATE_TYPE, PAT_REVOKED_EVENT_QN } from "../pat-revoked-event.js";
-import { apiTokenTable } from "../schema/api-token.js";
+import { API_TOKEN_ENTITY_NAME, PatErrors } from "../constants.ts";
+import { PAT_REVOKED_AGGREGATE_TYPE, PAT_REVOKED_EVENT_QN } from "../pat-revoked-event.ts";
+import { apiTokenTable } from "../schema/api-token.ts";
 
 // Revoke one of the caller's own tokens. Ownership is enforced in the WHERE
 // (userId = caller), so a caller can't revoke another user's token and a miss

package/packages/bundled-features/src/personal-access-tokens/hash.ts

@@ -1,6 +1,6 @@
 import { createHash } from "node:crypto";
 import { generateToken, PAT_TOKEN_PREFIX } from "@cosmicdrift/kumiko-framework/api";
-import { PAT_PREFIX_DISPLAY_LENGTH } from "./constants.js";
+import { PAT_PREFIX_DISPLAY_LENGTH } from "./constants.ts";
 
 // A PAT is high-entropy (32 random bytes from generateToken). A single SHA-256
 // is the right hash here: fast on the per-request auth path, and there's no

package/packages/bundled-features/src/personal-access-tokens/i18n.ts

@@ -1,7 +1,7 @@
 import { ACTION_FORM_ENTITY } from "@cosmicdrift/kumiko-framework/ui-types";
 import { fieldLabelKey, fieldOptionLabelKey } from "@cosmicdrift/kumiko-headless";
-import { PAT_FEATURE } from "./constants.js";
-import type { PatScopeConfig } from "./scopes.js";
+import { PAT_FEATURE } from "./constants.ts";
+import type { PatScopeConfig } from "./scopes.ts";
 
 const mintFieldKey = (field: string): string =>
   fieldLabelKey(PAT_FEATURE, ACTION_FORM_ENTITY, field);

package/packages/bundled-features/src/personal-access-tokens/index.ts

@@ -1,27 +1,27 @@
 import type { FeatureDefinition } from "@cosmicdrift/kumiko-framework/engine";
-import { PAT_DEFAULT_RATE_LIMIT, type PatRateLimit } from "./constants.js";
+import { PAT_DEFAULT_RATE_LIMIT, type PatRateLimit } from "./constants.ts";
 
-export type { PatRateLimit } from "./constants.js";
-export { PAT_DEFAULT_RATE_LIMIT, PAT_FEATURE, PatHandlers, PatQueries } from "./constants.js";
-export type { BindPatAutoRevokeOnPasswordChange, PersonalAccessTokensOptions } from "./feature.js";
+export type { PatRateLimit } from "./constants.ts";
+export { PAT_DEFAULT_RATE_LIMIT, PAT_FEATURE, PatHandlers, PatQueries } from "./constants.ts";
+export type { BindPatAutoRevokeOnPasswordChange, PersonalAccessTokensOptions } from "./feature.ts";
 export {
   bindPatAutoRevokeOnPasswordChangeFromFeature,
   createPersonalAccessTokensFeature,
-} from "./feature.js";
-export type { CreatePatOptions, PatMfaVerifyResult } from "./handlers/create.write.js";
-export { hashPatToken, mintPatToken } from "./hash.js";
+} from "./feature.ts";
+export type { CreatePatOptions, PatMfaVerifyResult } from "./handlers/create.write.ts";
+export { hashPatToken, mintPatToken } from "./hash.ts";
 export {
   PAT_REVOKED_AGGREGATE_TYPE,
   PAT_REVOKED_EVENT_QN,
   PAT_REVOKED_EVENT_SHORT,
   type PatRevokedPayload,
   patRevokedSchema,
-} from "./pat-revoked-event.js";
-export { createPatResolver } from "./resolver.js";
-export { revokeAllPatTokensForUser } from "./revoke-for-user.js";
-export { apiTokenEntity, apiTokenTable } from "./schema/api-token.js";
-export type { PatScopeConfig, PatScopeDef } from "./scopes.js";
-export { expandScopes } from "./scopes.js";
+} from "./pat-revoked-event.ts";
+export { createPatResolver } from "./resolver.ts";
+export { revokeAllPatTokensForUser } from "./revoke-for-user.ts";
+export { apiTokenEntity, apiTokenTable } from "./schema/api-token.ts";
+export type { PatScopeConfig, PatScopeDef } from "./scopes.ts";
+export { expandScopes } from "./scopes.ts";
 
 // Reads the per-token rate-limit config off a mounted PAT feature's exports.
 // Falls back to the default when absent. run-prod-app uses this to build the