@cosmicdrift/kumiko-samples 0.369.0 → 0.371.0

package/packages/bundled-features/src/custom-fields/feature.ts

@@ -60,31 +60,31 @@ import {
   CUSTOM_FIELDS_FEATURE_NAME,
   DEFAULT_FIELD_DEFINITION_LIST_ROLES,
   FIELD_DEFINITION_DELETED_EVENT,
-} from "./constants.js";
-import { fieldDefinitionEntity } from "./entity.js";
-import { customFieldClearedSchema, customFieldSetSchema } from "./events.js";
+} from "./constants.ts";
+import { fieldDefinitionEntity } from "./entity.ts";
+import { customFieldClearedSchema, customFieldSetSchema } from "./events.ts";
 import {
   clearCustomFieldHandler,
   createClearCustomFieldHandler,
-} from "./handlers/clear-custom-field.write.js";
-import { defineSystemFieldHandler } from "./handlers/define-system-field.write.js";
+} from "./handlers/clear-custom-field.write.ts";
+import { defineSystemFieldHandler } from "./handlers/define-system-field.write.ts";
 import {
   createDefineTenantFieldHandler,
   defineTenantFieldHandler,
-} from "./handlers/define-tenant-field.write.js";
-import { deleteSystemFieldHandler } from "./handlers/delete-system-field.write.js";
+} from "./handlers/define-tenant-field.write.ts";
+import { deleteSystemFieldHandler } from "./handlers/delete-system-field.write.ts";
 import {
   createDeleteTenantFieldHandler,
   deleteTenantFieldHandler,
-} from "./handlers/delete-tenant-field.write.js";
+} from "./handlers/delete-tenant-field.write.ts";
 import {
   createSetCustomFieldHandler,
   setCustomFieldHandler,
-} from "./handlers/set-custom-field.write.js";
+} from "./handlers/set-custom-field.write.ts";
 import {
   createUpdateTenantFieldHandler,
   updateTenantFieldHandler,
-} from "./handlers/update-tenant-field.write.js";
+} from "./handlers/update-tenant-field.write.ts";
 
 const fieldDefinitionDeletedSchema = z.object({
   entityName: z.string(),
@@ -281,6 +281,3 @@ export function createCustomFieldsFeature(
     }),
   );
 }
-
-/** @deprecated Use createCustomFieldsFeature(). Run `bun kumiko-upgrade --apply`. Removed in the first release after 2026-10-29. */
-export const customFieldsFeature = createCustomFieldsFeature();

package/packages/bundled-features/src/custom-fields/handlers/clear-custom-field.write.ts

@@ -1,9 +1,9 @@
 import type { WriteHandlerDef } from "@cosmicdrift/kumiko-framework/engine";
 import { failNotFound, failUnprocessable } from "@cosmicdrift/kumiko-framework/errors";
 import * as z from "zod";
-import { DEFAULT_VALUE_WRITE_ROLES } from "../constants.js";
-import { createCustomFieldsFeature } from "../feature.js";
-import { checkFieldAccessForWrite } from "../lib/field-access.js";
+import { DEFAULT_VALUE_WRITE_ROLES } from "../constants.ts";
+import { createCustomFieldsFeature } from "../feature.ts";
+import { checkFieldAccessForWrite } from "../lib/field-access.ts";
 
 export const clearCustomFieldPayloadSchema = z.object({
   entityName: z.string().min(1).max(64),

package/packages/bundled-features/src/custom-fields/handlers/define-system-field.write.ts

@@ -1,9 +1,9 @@
 import { SYSTEM_TENANT_ID, type WriteHandlerDef } from "@cosmicdrift/kumiko-framework/engine";
-import { requireForTenant } from "../../shared/index.js";
-import { fieldDefinitionAggregateId } from "../aggregate-id.js";
-import { defineOrResurrectFieldDefinition } from "../lib/define-or-resurrect.js";
-import { buildFieldDefinitionColumns } from "../lib/field-definition-row.js";
-import { type DefineFieldPayload, defineFieldPayloadSchema } from "../schemas.js";
+import { requireForTenant } from "../../shared/index.ts";
+import { fieldDefinitionAggregateId } from "../aggregate-id.ts";
+import { defineOrResurrectFieldDefinition } from "../lib/define-or-resurrect.ts";
+import { buildFieldDefinitionColumns } from "../lib/field-definition-row.ts";
+import { type DefineFieldPayload, defineFieldPayloadSchema } from "../schemas.ts";
 
 // A system-wide field definition applies to every tenant. tenantId is forced to
 // SYSTEM_TENANT_ID (never taken from the caller) and addressed via streamTenantId,

package/packages/bundled-features/src/custom-fields/handlers/define-tenant-field.write.ts

@@ -1,11 +1,11 @@
 import { isSystemTenant, type WriteHandlerDef } from "@cosmicdrift/kumiko-framework/engine";
 import { failUnprocessable } from "@cosmicdrift/kumiko-framework/errors";
-import { fieldDefinitionAggregateId } from "../aggregate-id.js";
-import { DEFAULT_FIELD_DEFINITION_WRITE_ROLES } from "../constants.js";
-import { defineOrResurrectFieldDefinition } from "../lib/define-or-resurrect.js";
-import { buildFieldDefinitionColumns } from "../lib/field-definition-row.js";
-import { countTenantFieldDefinitions } from "../lib/quota.js";
-import { type DefineFieldPayload, defineFieldPayloadSchema } from "../schemas.js";
+import { fieldDefinitionAggregateId } from "../aggregate-id.ts";
+import { DEFAULT_FIELD_DEFINITION_WRITE_ROLES } from "../constants.ts";
+import { defineOrResurrectFieldDefinition } from "../lib/define-or-resurrect.ts";
+import { buildFieldDefinitionColumns } from "../lib/field-definition-row.ts";
+import { countTenantFieldDefinitions } from "../lib/quota.ts";
+import { type DefineFieldPayload, defineFieldPayloadSchema } from "../schemas.ts";
 
 // define-tenant-field — TenantAdmin definiert eine Custom-Field-Definition
 // für seinen eigenen Tenant. tenantId wird automatisch aus event.user.tenantId

package/packages/bundled-features/src/custom-fields/handlers/delete-system-field.write.ts

@@ -1,10 +1,10 @@
 import { SYSTEM_TENANT_ID, type WriteHandlerDef } from "@cosmicdrift/kumiko-framework/engine";
-import { requireForTenant } from "../../shared/index.js";
-import { fieldDefinitionAggregateId } from "../aggregate-id.js";
-import { FIELD_DEFINITION_AGGREGATE_TYPE } from "../constants.js";
-import { fieldDefinitionExecutor } from "../executor.js";
-import { createCustomFieldsFeature } from "../feature.js";
-import { type DeleteFieldPayload, deleteFieldPayloadSchema } from "../schemas.js";
+import { requireForTenant } from "../../shared/index.ts";
+import { fieldDefinitionAggregateId } from "../aggregate-id.ts";
+import { FIELD_DEFINITION_AGGREGATE_TYPE } from "../constants.ts";
+import { fieldDefinitionExecutor } from "../executor.ts";
+import { createCustomFieldsFeature } from "../feature.ts";
+import { type DeleteFieldPayload, deleteFieldPayloadSchema } from "../schemas.ts";
 
 // delete-system-field — SystemAdmin entfernt eine system-weite Field-
 // Definition. Konsequenz: KEIN Tenant kann mehr neue Werte dafür setzen,

package/packages/bundled-features/src/custom-fields/handlers/delete-tenant-field.write.ts

@@ -1,12 +1,12 @@
 import { isSystemTenant, type WriteHandlerDef } from "@cosmicdrift/kumiko-framework/engine";
-import { fieldDefinitionAggregateId } from "../aggregate-id.js";
+import { fieldDefinitionAggregateId } from "../aggregate-id.ts";
 import {
   DEFAULT_FIELD_DEFINITION_WRITE_ROLES,
   FIELD_DEFINITION_AGGREGATE_TYPE,
-} from "../constants.js";
-import { fieldDefinitionExecutor } from "../executor.js";
-import { createCustomFieldsFeature } from "../feature.js";
-import { type DeleteFieldPayload, deleteFieldPayloadSchema } from "../schemas.js";
+} from "../constants.ts";
+import { fieldDefinitionExecutor } from "../executor.ts";
+import { createCustomFieldsFeature } from "../feature.ts";
+import { type DeleteFieldPayload, deleteFieldPayloadSchema } from "../schemas.ts";
 
 // delete-tenant-field — TenantAdmin löscht eigene Field-Definition.
 // Spec-Promise (Plan-Doc v2 "wie Entity-Delete"): Events bleiben im event-

package/packages/bundled-features/src/custom-fields/handlers/set-custom-field.write.ts

@@ -1,10 +1,10 @@
 import type { WriteHandlerDef } from "@cosmicdrift/kumiko-framework/engine";
 import { failNotFound, failUnprocessable } from "@cosmicdrift/kumiko-framework/errors";
 import * as z from "zod";
-import { DEFAULT_VALUE_WRITE_ROLES } from "../constants.js";
-import { createCustomFieldsFeature } from "../feature.js";
-import { fieldWriteAccessDeniedRoles, loadFieldDefinition } from "../lib/field-access.js";
-import { buildCustomFieldValueSchema } from "../lib/value-schema.js";
+import { DEFAULT_VALUE_WRITE_ROLES } from "../constants.ts";
+import { createCustomFieldsFeature } from "../feature.ts";
+import { fieldWriteAccessDeniedRoles, loadFieldDefinition } from "../lib/field-access.ts";
+import { buildCustomFieldValueSchema } from "../lib/value-schema.ts";
 
 export const setCustomFieldPayloadSchema = z.object({
   entityName: z.string().min(1).max(64),

package/packages/bundled-features/src/custom-fields/handlers/update-tenant-field.write.ts

@@ -1,10 +1,10 @@
 import { isSystemTenant, type WriteHandlerDef } from "@cosmicdrift/kumiko-framework/engine";
 import { failNotFound, failUnprocessable } from "@cosmicdrift/kumiko-framework/errors";
-import { fieldDefinitionAggregateId } from "../aggregate-id.js";
-import { DEFAULT_FIELD_DEFINITION_WRITE_ROLES } from "../constants.js";
-import { fieldDefinitionExecutor } from "../executor.js";
-import { buildFieldDefinitionColumns } from "../lib/field-definition-row.js";
-import { fieldTypeSchema, type UpdateFieldPayload, updateFieldPayloadSchema } from "../schemas.js";
+import { fieldDefinitionAggregateId } from "../aggregate-id.ts";
+import { DEFAULT_FIELD_DEFINITION_WRITE_ROLES } from "../constants.ts";
+import { fieldDefinitionExecutor } from "../executor.ts";
+import { buildFieldDefinitionColumns } from "../lib/field-definition-row.ts";
+import { fieldTypeSchema, type UpdateFieldPayload, updateFieldPayloadSchema } from "../schemas.ts";
 
 // update-tenant-field: a TenantAdmin replaces the state of an existing field
 // definition (full replacement: payload shape = define except that

package/packages/bundled-features/src/custom-fields/index.ts

@@ -1,4 +1,4 @@
-export { fieldDefinitionAggregateId } from "./aggregate-id.js";
+export { fieldDefinitionAggregateId } from "./aggregate-id.ts";
 export {
   CUSTOM_FIELDS_EXTENSION,
   CUSTOM_FIELDS_FEATURE_NAME,
@@ -6,35 +6,34 @@ export {
   FIELD_DEFINITION_UPDATED_EVENT,
   SUPPORTED_FIELD_TYPES,
   type SupportedFieldType,
-} from "./constants.js";
-export { fieldDefinitionEntity } from "./entity.js";
+} from "./constants.ts";
+export { fieldDefinitionEntity } from "./entity.ts";
 export {
   type CustomFieldClearedPayload,
   type CustomFieldSetPayload,
   customFieldClearedSchema,
   customFieldSetSchema,
-} from "./events.js";
+} from "./events.ts";
 export {
   type CustomFieldsFeatureOptions,
   createCustomFieldsFeature,
-  customFieldsFeature,
-} from "./feature.js";
+} from "./feature.ts";
 export {
   type ClearCustomFieldPayload,
   clearCustomFieldPayloadSchema,
-} from "./handlers/clear-custom-field.write.js";
+} from "./handlers/clear-custom-field.write.ts";
 export {
   type SetCustomFieldPayload,
   setCustomFieldPayloadSchema,
-} from "./handlers/set-custom-field.write.js";
+} from "./handlers/set-custom-field.write.ts";
 export {
   isFieldDefinitionRow,
   parseSerializedField,
-} from "./lib/parse-serialized-field.js";
+} from "./lib/parse-serialized-field.ts";
 export {
   type DefineFieldPayload,
   type DeleteFieldPayload,
   defineFieldPayloadSchema,
   deleteFieldPayloadSchema,
-} from "./schemas.js";
-export { customFieldsField, wireCustomFieldsFor } from "./wire-for-entity.js";
+} from "./schemas.ts";
+export { customFieldsField, wireCustomFieldsFor } from "./wire-for-entity.ts";

package/packages/bundled-features/src/custom-fields/lib/define-or-resurrect.ts

@@ -1,6 +1,6 @@
 import type { TenantId } from "@cosmicdrift/kumiko-framework/engine";
-import { fieldDefinitionExecutor } from "../executor.js";
-import type { FieldDefinitionColumns } from "./field-definition-row.js";
+import { fieldDefinitionExecutor } from "../executor.ts";
+import type { FieldDefinitionColumns } from "./field-definition-row.ts";
 
 type DefineUser = Parameters<typeof fieldDefinitionExecutor.create>[1];
 type DefineDb = Parameters<typeof fieldDefinitionExecutor.create>[2];

package/packages/bundled-features/src/custom-fields/lib/field-access.ts

@@ -4,8 +4,8 @@
 
 import type { DbRunner } from "@cosmicdrift/kumiko-framework/db";
 import type { TenantId } from "@cosmicdrift/kumiko-framework/engine";
-import { selectSerializedFieldDefinition } from "../db/queries/field-access.js";
-import { parseSerializedField, type SerializedFieldShape } from "./parse-serialized-field.js";
+import { selectSerializedFieldDefinition } from "../db/queries/field-access.ts";
+import { parseSerializedField, type SerializedFieldShape } from "./parse-serialized-field.ts";
 
 export type FieldAccessCheckResult =
   | { ok: true }

package/packages/bundled-features/src/custom-fields/lib/field-definition-row.ts

@@ -1,4 +1,4 @@
-import type { DefineFieldPayload } from "../schemas.js";
+import type { DefineFieldPayload } from "../schemas.ts";
 
 export interface FieldDefinitionColumns {
   readonly entityName: string;

package/packages/bundled-features/src/custom-fields/lib/quota.ts

@@ -2,4 +2,4 @@
 //
 // Re-exports from db/queries/quota.ts for backward-compatible import paths.
 
-export { countTenantFieldDefinitions } from "../db/queries/quota.js";
+export { countTenantFieldDefinitions } from "../db/queries/quota.ts";

package/packages/bundled-features/src/custom-fields/lib/value-schema.ts

@@ -5,7 +5,7 @@ import {
 } from "@cosmicdrift/kumiko-framework/engine";
 import { isPlainObject } from "@cosmicdrift/kumiko-types/type-guards";
 import type * as z from "zod";
-import { SUPPORTED_FIELD_TYPES } from "../constants.js";
+import { SUPPORTED_FIELD_TYPES } from "../constants.ts";
 
 // Builds a Zod schema that validates a custom-field VALUE against its
 // fieldDefinition. Reuses the framework's `fieldToZod` (Builder-Reuse /

package/packages/bundled-features/src/custom-fields/run-retention.ts

@@ -18,9 +18,9 @@
 import type { DbRunner } from "@cosmicdrift/kumiko-framework/db";
 import { extractTableName } from "@cosmicdrift/kumiko-framework/db";
 import { getTemporal } from "@cosmicdrift/kumiko-framework/time";
-import { applyRetentionRemovals, selectHostRowsWithCustomFields } from "./db/queries/retention.js";
-import { selectFieldDefinitionsForEntity } from "./db/queries/user-data-rights.js";
-import { isFieldDefinitionRow, parseSerializedField } from "./lib/parse-serialized-field.js";
+import { applyRetentionRemovals, selectHostRowsWithCustomFields } from "./db/queries/retention.ts";
+import { selectFieldDefinitionsForEntity } from "./db/queries/user-data-rights.ts";
+import { isFieldDefinitionRow, parseSerializedField } from "./lib/parse-serialized-field.ts";
 
 type Instant = InstanceType<ReturnType<typeof getTemporal>["Instant"]>;
 

package/packages/bundled-features/src/custom-fields/schemas.ts

@@ -1,5 +1,5 @@
 import * as z from "zod";
-import { SUPPORTED_FIELD_TYPES } from "./constants.js";
+import { SUPPORTED_FIELD_TYPES } from "./constants.ts";
 
 // Field-Type-Validator — pinnt valid type-Werte für fieldDefinition.
 export const fieldTypeSchema = z.enum(SUPPORTED_FIELD_TYPES);

package/packages/bundled-features/src/custom-fields/web/client-plugin.tsx

@@ -12,9 +12,9 @@
 //   ]}
 
 import type { ClientFeatureDefinition } from "@cosmicdrift/kumiko-renderer-web";
-import { CUSTOM_FIELDS_FEATURE_NAME, CUSTOM_FIELDS_FORM_EXTENSION_NAME } from "../constants.js";
-import { CustomFieldsFormSection } from "./custom-fields-form-section.js";
-import { defaultTranslations } from "./i18n.js";
+import { CUSTOM_FIELDS_FEATURE_NAME, CUSTOM_FIELDS_FORM_EXTENSION_NAME } from "../constants.ts";
+import { CustomFieldsFormSection } from "./custom-fields-form-section.tsx";
+import { defaultTranslations } from "./i18n.ts";
 
 export function customFieldsClient(): ClientFeatureDefinition {
   return {

package/packages/bundled-features/src/custom-fields/web/custom-fields-form-section.tsx

@@ -19,7 +19,7 @@ import {
   useTranslation,
 } from "@cosmicdrift/kumiko-renderer";
 import { type ReactNode, useState } from "react";
-import { CustomFieldsHandlers, CustomFieldsQueries } from "../constants.js";
+import { CustomFieldsHandlers, CustomFieldsQueries } from "../constants.ts";
 
 type FieldDefinitionRow = {
   readonly id: string;

package/packages/bundled-features/src/custom-fields/web/index.ts

@@ -3,6 +3,6 @@ export {
   CUSTOM_FIELDS_FORM_EXTENSION_NAME,
   CustomFieldsHandlers,
   CustomFieldsQueries,
-} from "../constants.js";
-export { customFieldsClient } from "./client-plugin.js";
-export { CustomFieldsFormSection } from "./custom-fields-form-section.js";
+} from "../constants.ts";
+export { customFieldsClient } from "./client-plugin.tsx";
+export { CustomFieldsFormSection } from "./custom-fields-form-section.tsx";

package/packages/bundled-features/src/custom-fields/wire-for-entity.ts

@@ -7,16 +7,16 @@ import {
   type TenantId,
 } from "@cosmicdrift/kumiko-framework/engine";
 import type { StoredEvent } from "@cosmicdrift/kumiko-framework/event-store";
-import { CUSTOM_FIELDS_EXTENSION, FIELD_DEFINITION_AGGREGATE_TYPE } from "./constants.js";
+import { CUSTOM_FIELDS_EXTENSION, FIELD_DEFINITION_AGGREGATE_TYPE } from "./constants.ts";
 import {
   clearCustomFieldKey,
   removeCustomFieldKeyForTenant,
   removeCustomFieldKeyFromAllTenants,
   setCustomFieldValue,
-} from "./db/queries/projection.js";
+} from "./db/queries/projection.ts";
 
-import type { CustomFieldClearedPayload, CustomFieldSetPayload } from "./events.js";
-import { createCustomFieldsFeature } from "./feature.js";
+import type { CustomFieldClearedPayload, CustomFieldSetPayload } from "./events.ts";
+import { createCustomFieldsFeature } from "./feature.ts";
 
 // Helper für entity-definitions — fügt eine `customFields jsonb`-Spalte
 // hinzu. Consumer:

package/packages/bundled-features/src/custom-fields/wire-user-data-rights.ts

@@ -4,7 +4,7 @@ import { type DbRunner, extractTableName } from "@cosmicdrift/kumiko-framework/d
 import type { UserDataExportSnippet, UserDataHookCtx } from "@cosmicdrift/kumiko-framework/engine";
 import { EXT_USER_DATA, type FeatureRegistrar } from "@cosmicdrift/kumiko-framework/engine";
 import { isPlainObject } from "@cosmicdrift/kumiko-types/type-guards";
-import { selectCustomFieldsHostRows } from "./db/queries/user-data-rights.js";
+import { selectCustomFieldsHostRows } from "./db/queries/user-data-rights.ts";
 
 export interface WireCustomFieldsUserDataRightsOptions {
   readonly entityName: string;

package/packages/bundled-features/src/data-retention/_internal/parse-override.ts

@@ -2,8 +2,8 @@
 // Helper. War vorher 1:1 in beiden Files dupliziert (Memory
 // `feedback_bulk_patterns` — Drift-Risiko bei Schema-Aenderungen).
 
-import { retentionOverrideSchema } from "../override-schema.js";
-import type { RetentionOverride } from "../resolver.js";
+import { retentionOverrideSchema } from "../override-schema.ts";
+import type { RetentionOverride } from "../resolver.ts";
 
 export function parseRetentionOverrideOrNull(
   raw: string | null,

package/packages/bundled-features/src/data-retention/feature.ts

@@ -1,40 +1,40 @@
 import { defineFeature, type FeatureDefinition } from "@cosmicdrift/kumiko-framework/engine";
-import { policyForQuery } from "./handlers/policy-for.query.js";
-import { resolveTenantRetentionPreset } from "./resolve-tenant-preset.js";
-import { runRetentionCleanup } from "./run-retention-cleanup.js";
-import { tenantRetentionOverrideEntity } from "./schema/tenant-retention-override.js";
+import { policyForQuery } from "./handlers/policy-for.query.ts";
+import { resolveTenantRetentionPreset } from "./resolve-tenant-preset.ts";
+import { runRetentionCleanup } from "./run-retention-cleanup.ts";
+import { tenantRetentionOverrideEntity } from "./schema/tenant-retention-override.ts";
 
-export { retentionOverrideSchema } from "./override-schema.js";
+export { retentionOverrideSchema } from "./override-schema.ts";
 export {
   RETENTION_PRESETS,
   type RetentionPreset,
   type RetentionPresetKey,
   SELECTABLE_RETENTION_PRESETS,
-} from "./presets.js";
+} from "./presets.ts";
 export {
   type ResolveForTenantArgs,
   resolveRetentionPolicyForTenant,
-} from "./resolve-for-tenant.js";
+} from "./resolve-for-tenant.ts";
 export {
   type ResolveTenantPresetArgs,
   resolveTenantRetentionPreset,
-} from "./resolve-tenant-preset.js";
+} from "./resolve-tenant-preset.ts";
 export {
   type EffectiveRetentionPolicy,
   type ResolveRetentionPolicyArgs,
   type RetentionOverride,
   resolveRetentionPolicy,
-} from "./resolver.js";
+} from "./resolver.ts";
 export {
   type RetentionCleanupSkip,
   type RunRetentionCleanupArgs,
   type RunRetentionCleanupResult,
   runRetentionCleanup,
-} from "./run-retention-cleanup.js";
+} from "./run-retention-cleanup.ts";
 export {
   tenantRetentionOverrideEntity,
   tenantRetentionOverrideTable,
-} from "./schema/tenant-retention-override.js";
+} from "./schema/tenant-retention-override.ts";
 
 // data-retention — automatisierte Aufbewahrung + Löschung pro Entity.
 //

package/packages/bundled-features/src/data-retention/handlers/policy-for.query.ts

@@ -1,7 +1,7 @@
 import { defineQueryHandler } from "@cosmicdrift/kumiko-framework/engine";
 import * as z from "zod";
-import { resolveRetentionPolicyForTenant } from "../resolve-for-tenant.js";
-import type { EffectiveRetentionPolicy } from "../resolver.js";
+import { resolveRetentionPolicyForTenant } from "../resolve-for-tenant.ts";
+import type { EffectiveRetentionPolicy } from "../resolver.ts";
 
 // retention:query:policy-for — Cross-Feature-API fuer den Forget-Flow.
 //

package/packages/bundled-features/src/data-retention/index.ts

@@ -6,7 +6,7 @@ export type {
   RetentionOverride,
   RetentionPreset,
   RetentionPresetKey,
-} from "./feature.js";
+} from "./feature.ts";
 export {
   createDataRetentionFeature,
   RETENTION_PRESETS,
@@ -17,5 +17,5 @@ export {
   SELECTABLE_RETENTION_PRESETS,
   tenantRetentionOverrideEntity,
   tenantRetentionOverrideTable,
-} from "./feature.js";
-export { computeCutoff, type Instant } from "./keep-for.js";
+} from "./feature.ts";
+export { computeCutoff, type Instant } from "./keep-for.ts";

package/packages/bundled-features/src/data-retention/resolve-for-tenant.ts

@@ -5,12 +5,12 @@
 import type { DbRunner, TenantDb } from "@cosmicdrift/kumiko-framework/db";
 import { fetchOne } from "@cosmicdrift/kumiko-framework/db";
 import type { Registry, TenantId } from "@cosmicdrift/kumiko-framework/engine";
-import { isTenantDb } from "../shared/index.js";
-import { parseRetentionOverrideOrNull } from "./_internal/parse-override.js";
-import type { RetentionPresetKey } from "./presets.js";
-import { resolveTenantRetentionPreset } from "./resolve-tenant-preset.js";
-import { type EffectiveRetentionPolicy, resolveRetentionPolicy } from "./resolver.js";
-import { tenantRetentionOverrideTable } from "./schema/tenant-retention-override.js";
+import { isTenantDb } from "../shared/index.ts";
+import { parseRetentionOverrideOrNull } from "./_internal/parse-override.ts";
+import type { RetentionPresetKey } from "./presets.ts";
+import { resolveTenantRetentionPreset } from "./resolve-tenant-preset.ts";
+import { type EffectiveRetentionPolicy, resolveRetentionPolicy } from "./resolver.ts";
+import { tenantRetentionOverrideTable } from "./schema/tenant-retention-override.ts";
 
 export interface ResolveForTenantArgs {
   // fw#2914 — a EXT_USER_DATA hook's ctx.db is a TenantDb (method-form);

package/packages/bundled-features/src/data-retention/resolve-tenant-preset.ts

@@ -14,8 +14,8 @@
 import type { ComplianceProfileKey } from "@cosmicdrift/kumiko-framework/compliance";
 import type { DbRunner, TenantDb } from "@cosmicdrift/kumiko-framework/db";
 import type { Registry, TenantId } from "@cosmicdrift/kumiko-framework/engine";
-import { resolveProfileForTenant } from "../compliance-profiles/index.js";
-import type { RetentionPresetKey } from "./presets.js";
+import { resolveProfileForTenant } from "../compliance-profiles/index.ts";
+import type { RetentionPresetKey } from "./presets.ts";
 
 // r.entity-Name aus compliance-profiles/feature.ts — Probe ob das Feature
 // gemountet ist, bevor wir seine Tabelle lesen (sonst wirft fetchOne).

package/packages/bundled-features/src/data-retention/resolver.ts

@@ -19,7 +19,7 @@
 // fragt blockDelete-Felder ab + anonymisiert sie statt zu löschen.
 
 import type { EntityDefinition, RetentionDef } from "@cosmicdrift/kumiko-framework/engine";
-import { RETENTION_PRESETS, type RetentionPresetKey } from "./presets.js";
+import { RETENTION_PRESETS, type RetentionPresetKey } from "./presets.ts";
 
 /**
  * Roh-Override aus der DB-Tabelle (config-Spalte als JSON-String).

package/packages/bundled-features/src/data-retention/run-retention-cleanup.ts

@@ -74,11 +74,11 @@ import {
   fileRefsTable,
 } from "@cosmicdrift/kumiko-framework/files";
 import { propertyOf } from "@cosmicdrift/kumiko-types/type-guards";
-import { runInSubTransaction } from "../shared/index.js";
-import { computeCutoff, type Instant } from "./keep-for.js";
-import type { RetentionPresetKey } from "./presets.js";
-import { resolveRetentionPolicyForTenant } from "./resolve-for-tenant.js";
-import { tenantRetentionOverrideTable } from "./schema/tenant-retention-override.js";
+import { runInSubTransaction } from "../shared/index.ts";
+import { computeCutoff, type Instant } from "./keep-for.ts";
+import type { RetentionPresetKey } from "./presets.ts";
+import { resolveRetentionPolicyForTenant } from "./resolve-for-tenant.ts";
+import { tenantRetentionOverrideTable } from "./schema/tenant-retention-override.ts";
 
 const DEFAULT_BATCH_LIMIT = 1000;
 const DEFAULT_REFERENCE_FIELD = "createdAt";

package/packages/bundled-features/src/delivery/address-opt-out.ts

@@ -7,8 +7,8 @@ import {
 import type { SessionUser, TenantId, WriteResult } from "@cosmicdrift/kumiko-framework/engine";
 import { ConflictError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
 import { generateDeterministicId } from "@cosmicdrift/kumiko-framework/utils";
-import { DeliveryErrors } from "./public-names.js";
-import { notificationAddressOptOutEntity, notificationAddressOptOutsTable } from "./tables.js";
+import { DeliveryErrors } from "./public-names.ts";
+import { notificationAddressOptOutEntity, notificationAddressOptOutsTable } from "./tables.ts";
 
 const executor = createEventStoreExecutor(
   notificationAddressOptOutsTable,

package/packages/bundled-features/src/delivery/attachment-ref.ts

@@ -3,9 +3,9 @@ import type {
   FileAttachmentRef,
   InlineAttachmentRef,
   RenderedPdfAttachmentRef,
-} from "../renderer-foundation/index.js";
-import { attachmentFileNameSchema } from "../shared/index.js";
-import { isDocumentResourceKey, templateSlugSchema } from "../template-resolver/index.js";
+} from "../renderer-foundation/index.ts";
+import { attachmentFileNameSchema } from "../shared/index.ts";
+import { isDocumentResourceKey, templateSlugSchema } from "../template-resolver/index.ts";
 
 export type { FileAttachmentRef, InlineAttachmentRef, RenderedPdfAttachmentRef };
 export type EmailAttachmentRef = InlineAttachmentRef | FileAttachmentRef | RenderedPdfAttachmentRef;

package/packages/bundled-features/src/delivery/attempt-log-retention.ts

@@ -1,7 +1,7 @@
 import type { DbConnection } from "@cosmicdrift/kumiko-framework/db";
 import { deleteManyBatched } from "@cosmicdrift/kumiko-framework/db";
 import { type PruneEventsOptions, pruneEvents } from "@cosmicdrift/kumiko-framework/pipeline";
-import { deliveryAttemptsTable } from "./tables.js";
+import { deliveryAttemptsTable } from "./tables.ts";
 
 export const DEFAULT_ATTEMPT_LOG_RETENTION_DAYS = 90;
 const ROW_DELETE_BATCH_SIZE = 1000;

package/packages/bundled-features/src/delivery/attempt-log.ts

@@ -8,10 +8,10 @@ import type { Registry } from "@cosmicdrift/kumiko-framework/engine";
 import { append, getStreamVersion } from "@cosmicdrift/kumiko-framework/event-store";
 import { runProjectionsForEvent } from "@cosmicdrift/kumiko-framework/pipeline";
 import { generateId } from "@cosmicdrift/kumiko-framework/utils";
-import { DELIVERY_ATTEMPT_EVENT, DELIVERY_CHANNEL_EXTENSION } from "./constants.js";
-import { deliveryAttemptSchema } from "./events.js";
-import { maskRecipientAddress } from "./mask-recipient-address.js";
-import { type DeliveryLogEntry, isDeliveryChannelPlugin } from "./types.js";
+import { DELIVERY_ATTEMPT_EVENT, DELIVERY_CHANNEL_EXTENSION } from "./constants.ts";
+import { deliveryAttemptSchema } from "./events.ts";
+import { maskRecipientAddress } from "./mask-recipient-address.ts";
+import { type DeliveryLogEntry, isDeliveryChannelPlugin } from "./types.ts";
 
 // Unknown channels count as personal: masking is the fail-closed default.
 function addressIsConnectionName(registry: Registry, channelName: string): boolean {

package/packages/bundled-features/src/delivery/changes.json

@@ -1,4 +1,17 @@
 [
+  {
+    "version": "0.371.0",
+    "type": "improvement",
+    "title": "Unsubscribe endpoint answers form posts with an HTML page",
+    "detail": "POST on the delivery unsubscribe route returns an HTML confirmation page for a form post and JSON for a bare POST. The behavior is unchanged; this only documents it.",
+    "migration": "Clients that post the unsubscribe form expect HTML, API clients that post without a form content type expect JSON. No code change is needed."
+  },
+  {
+    "version": "0.370.0",
+    "type": "improvement",
+    "title": "Unsubscribe confirmation, result and link-invalid pages look like the tenant's mails",
+    "detail": "The pages behind a mail's unsubscribe link now show the tenant's brand row (logo from managed-pages branding or the initial tile, name, brand suffix), the accent color, the site band and the mail footer (footer text, imprint, privacy) in a centered card with the bundled IBM Plex Sans font served same-origin, no external font CDN. Every state (confirm, unsubscribed with undo, subscribed again, failed, link invalid or expired) is translated in en, de and es and fits 375 px. The page answers with its own CSP (default-src 'none', the style block by sha256 hash, font-src 'self', img-src 'self' data: plus the logo's https origin, form-action 'self'). A browser GET or form POST with an invalid or expired token now gets a 400 HTML page instead of JSON (expired tokens keep the tenant's look and the mail's language, forged ones get the plain page in the Accept-Language language); JSON and one-click requests answer as before. Mail renderers can implement the new optional RendererPlugin.readMailChrome (renderer-mail-html does) which the system-only query delivery:query:unsubscribePageChrome reads. renderUnsubscribeResultPage takes an optional chrome and the new kind \"invalid\" for an app's own dead links; apps with their own CSP need style-src 'unsafe-inline' and the logo origin for it."
+  },
   {
     "version": "0.369.0",
     "type": "improvement",

package/packages/bundled-features/src/delivery/channel-context.ts

@@ -5,16 +5,16 @@ import { SYSTEM_TENANT_ID } from "@cosmicdrift/kumiko-framework/engine";
 import type { FileContext } from "@cosmicdrift/kumiko-framework/files";
 import { createFallbackLogger } from "@cosmicdrift/kumiko-framework/logging";
 import type { SecretsContext } from "@cosmicdrift/kumiko-framework/secrets";
-import { type FileRefContent, readFileRefContent } from "../file-foundation/index.js";
+import { type FileRefContent, readFileRefContent } from "../file-foundation/index.ts";
 import {
   collectRendererPlugins,
   createRendererFoundationApi,
   type MailPayload,
   RendererError,
-} from "../renderer-foundation/index.js";
-import { FALLBACK_LOCALE } from "../template-resolver/index.js";
-import type { EmailAttachmentRef, RenderedPdfAttachmentRef } from "./attachment-ref.js";
-import type { AttachmentOrigin, ChannelContext, RenderedMail } from "./types.js";
+} from "../renderer-foundation/index.ts";
+import { FALLBACK_LOCALE } from "../template-resolver/index.ts";
+import type { EmailAttachmentRef, RenderedPdfAttachmentRef } from "./attachment-ref.ts";
+import type { AttachmentOrigin, ChannelContext, RenderedMail } from "./types.ts";
 
 export function createTemplateMailRenderer(
   db: DbConnection | TenantDb,