@cosmicdrift/kumiko-samples 0.377.0 → 0.379.0

package/packages/bundled-features/src/billing-foundation/screens.ts

@@ -1,5 +1,5 @@
 import type { DashboardCustomPanel, ScreenDefinition } from "@cosmicdrift/kumiko-framework/engine";
-import { BILLING_PLANS_PANEL_COMPONENT, BILLING_PLANS_SCREEN_ID } from "./constants.ts";
+import { BILLING_PLANS_PANEL_COMPONENT, BILLING_PLANS_SCREEN_ID } from "./web/constants.ts";
 
 /** The billing-plans panel, meant to be dropped into an app's own dashboard
  *  screen alongside its own panels — not just the dormant single-panel

package/packages/bundled-features/src/billing-foundation/subscription-tier-sync.ts

@@ -18,8 +18,8 @@ import type {
 import type { TenantId, WriteResult } from "@cosmicdrift/kumiko-framework/engine";
 import { isPlainObject } from "@cosmicdrift/kumiko-types/type-guards";
 import { subscriptionAggregateId } from "./aggregate-id.ts";
-import { SubscriptionFoundationQueries, SubscriptionStatuses } from "./constants.ts";
 import type { PaymentEvent, SubscriptionEvent } from "./types.ts";
+import { SubscriptionFoundationQueries, SubscriptionStatuses } from "./web/constants.ts";
 import { createSubscriptionWebhookRoute } from "./webhook-handler.ts";
 
 // Outside /api — signature routes carry their own auth (verify()) and are

package/packages/bundled-features/src/billing-foundation/types.ts

@@ -28,6 +28,7 @@
 import type { TenantDb } from "@cosmicdrift/kumiko-framework/db";
 import type { HandlerContext, TenantId } from "@cosmicdrift/kumiko-framework/engine";
 import type { SecretsContext } from "@cosmicdrift/kumiko-framework/secrets";
+import type { OrderItem } from "./consumer-protection/consent-gate.ts";
 import {
   type BillingEventKinds,
   type BillingPlanAction,
@@ -36,9 +37,8 @@ import {
   type SubscriptionEventType,
   type SubscriptionStatus,
   type TerminationScope,
-} from "./constants.ts";
-import type { OrderItem } from "./consumer-protection/consent-gate.ts";
-import type { ConsentLocale } from "./consumer-protection/consent-locale.ts";
+} from "./web/constants.ts";
+import type { ConsentLocale } from "./web/consumer-protection/consent-locale.ts";
 
 // =============================================================================
 // Normalisierter Webhook-Event
@@ -89,6 +89,10 @@ export type SubscriptionEvent = {
    *  Mollie), so projection.ts leaves the column unchanged instead of
    *  nulling it. */
   readonly cancelAt?: string | null;
+  /** ISO instant the provider emitted this event. process-event drops a
+   *  state event older than the newest one already stored, since providers
+   *  do not guarantee delivery order. Omitted by providers that report none. */
+  readonly providerEventAt?: string;
 };
 
 // =============================================================================
@@ -245,6 +249,16 @@ export type SubscriptionProviderPlugin = {
     },
   ) => Promise<void>;
 
+  /**
+   * Optional: takes back a `period-end` cancellation that has not taken effect
+   * yet. Without it, a revoked public termination is reported to the operator
+   * to undo by hand.
+   */
+  readonly resumeSubscription?: (
+    ctx: HandlerContext,
+    options: { readonly providerSubscriptionId: string },
+  ) => Promise<void>;
+
   /**
    * The provider's own price/plan-id → app-tier-name mapping. This is the
    * one source `checkout-core`/`plan-catalog` derive both hardening

package/packages/bundled-features/src/billing-foundation/validate-options.ts

@@ -4,9 +4,6 @@
 // re-exported from index.ts.
 
 import * as z from "zod";
-import { isTerminationScope, TERMINATION_SCOPES } from "./constants.ts";
-import { CONSENT_LOCALES, type ConsentLocale } from "./consumer-protection/consent-locale.ts";
-import { isContactCardHref } from "./contact-card.ts";
 import {
   type BillingFoundationOptions,
   type BillingPlanContactCard,
@@ -14,6 +11,9 @@ import {
   isLegalLinkSet,
   type LegalLinkSet,
 } from "./types.ts";
+import { isTerminationScope, TERMINATION_SCOPES } from "./web/constants.ts";
+import { CONSENT_LOCALES, type ConsentLocale } from "./web/consumer-protection/consent-locale.ts";
+import { isContactCardHref } from "./web/contact-card.ts";
 
 function isRootRelativePath(path: string): boolean {
   return path.startsWith("/") && !path.startsWith("//");

package/packages/bundled-features/src/billing-foundation/web/billing-contact-plan.tsx

@@ -1,10 +1,8 @@
-// @runtime client
-
 import { useLocale, useTranslation } from "@cosmicdrift/kumiko-renderer";
 import { PlanCard } from "@cosmicdrift/kumiko-renderer/web";
 import type { ReactNode } from "react";
-import { isContactCardHref } from "../contact-card.ts";
 import type { BillingPlanContactCard } from "../types.ts";
+import { isContactCardHref } from "./contact-card.ts";
 import { localizedParams } from "./localized-params.ts";
 
 export function BillingContactPlan({

package/packages/bundled-features/src/billing-foundation/web/billing-plans-panel.tsx

@@ -1,5 +1,3 @@
-// @runtime client
-
 import {
   type ExtensionSectionProps,
   useLocale,
@@ -16,16 +14,16 @@ import {
   PlanGrid,
 } from "@cosmicdrift/kumiko-renderer/web";
 import { type ReactNode, useState } from "react";
+import type { BillingPlansResult, BillingPlanView } from "../types.ts";
+import { BillingContactPlan } from "./billing-contact-plan.tsx";
+import { CancelContractDialog } from "./cancel-contract-dialog.tsx";
+import { CheckoutConsentDialog, type CheckoutConsentPayload } from "./checkout-consent-dialog.tsx";
 import {
   BillingPlanActions,
   SubscriptionFoundationHandlers,
   SubscriptionFoundationQueries,
   SubscriptionStatuses,
-} from "../constants.ts";
-import type { BillingPlansResult, BillingPlanView } from "../types.ts";
-import { BillingContactPlan } from "./billing-contact-plan.tsx";
-import { CancelContractDialog } from "./cancel-contract-dialog.tsx";
-import { CheckoutConsentDialog, type CheckoutConsentPayload } from "./checkout-consent-dialog.tsx";
+} from "./constants.ts";
 import { localizedParams } from "./localized-params.ts";
 
 type UseTranslation = ReturnType<typeof useTranslation>;

package/packages/bundled-features/src/billing-foundation/web/cancel-contract-dialog.tsx

@@ -1,5 +1,3 @@
-// @runtime client
-
 import {
   useLocale,
   useMutation,
@@ -9,8 +7,8 @@ import {
 import { toInstant } from "@cosmicdrift/kumiko-renderer/headless";
 import { ModeSwitch } from "@cosmicdrift/kumiko-renderer/web";
 import { type ReactNode, useState } from "react";
-import { SubscriptionFoundationHandlers } from "../constants.ts";
 import type { ContractTerminationDeclarationType, ContractTerminationKind } from "../events.ts";
+import { SubscriptionFoundationHandlers } from "./constants.ts";
 
 type TerminateContractReceipt = {
   readonly requestId: string;

package/packages/bundled-features/src/billing-foundation/web/checkout-consent-dialog.tsx

@@ -1,10 +1,8 @@
-// @runtime client
-
 import { useLocale, usePrimitives, useTranslation } from "@cosmicdrift/kumiko-renderer";
 import type { WriteResult } from "@cosmicdrift/kumiko-renderer/headless";
 import { type ReactNode, useState } from "react";
-import { resolveConsentLocale } from "../consumer-protection/consent-locale.ts";
 import type { BillingPlansResult } from "../types.ts";
+import { resolveConsentLocale } from "./consumer-protection/consent-locale.ts";
 
 export const CONSENT_TEXT_OUTDATED_CODE = "consent_text_outdated";
 

package/packages/bundled-features/src/billing-foundation/web/client-plugin.tsx

@@ -1,8 +1,7 @@
-// @runtime client
 import type { TranslationsByLocale } from "@cosmicdrift/kumiko-renderer";
 import type { ClientFeatureDefinition } from "@cosmicdrift/kumiko-renderer/web";
-import { BILLING_FOUNDATION_FEATURE, BILLING_PLANS_PANEL_COMPONENT } from "../constants.ts";
 import { BillingPlansPanel } from "./billing-plans-panel.tsx";
+import { BILLING_FOUNDATION_FEATURE, BILLING_PLANS_PANEL_COMPONENT } from "./constants.ts";
 
 export type BillingFoundationClientOptions = {
   readonly translations?: TranslationsByLocale;

package/packages/bundled-features/src/billing-foundation/{constants.ts → web/constants.ts}

@@ -1,12 +1,11 @@
 /// <reference types="temporal-polyfill/global" preserve="true" />
-// @runtime client
 import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import { isOneOf } from "@cosmicdrift/kumiko-types/type-guards";
 
 // Feature name
 export const BILLING_FOUNDATION_FEATURE = "billing-foundation" as const;
 
-// Extension-point name fuer Provider-Plugins (subscription-stripe,
+// Extension-point name for provider plugins (subscription-stripe,
 // subscription-mollie, ...).
 export const SUBSCRIPTION_PROVIDER_EXTENSION = "subscriptionProvider" as const;
 
@@ -23,19 +22,18 @@ export const CONTRACT_TERMINATION_OPERATOR_NOTIFICATION_TYPE =
 
 // Qualified write handler names (QN format: scope:type:name).
 export const SubscriptionFoundationHandlers = {
-  /** Programmatic entry-point für den webhook-handler. Receives the
-   *  parsed SubscriptionEvent (vom Plugin schon verifiziert) + macht
-   *  insert-event + upsert-subscription + tier-sync atomic. */
+  /** Programmatic entry point for the webhook handler. Receives the
+   *  parsed SubscriptionEvent (already verified by the plugin) and does
+   *  insert-event + upsert-subscription + tier-sync atomically. */
   processEvent: "billing-foundation:write:process-event",
-  /** Tenant-Admin klickt "Upgrade to Pro" → handler findet den
-   *  gewählten provider-plugin + ruft seine createCheckoutSession-
-   *  Methode + returnt die hosted-page-URL. Tenant-Admin wird dorthin
-   *  redirected, der subsequent provider-webhook erstellt die
-   *  subscription. */
+  /** Tenant admin clicks "Upgrade to Pro": the handler finds the chosen
+   *  provider plugin, calls its createCheckoutSession and returns the
+   *  hosted-page URL. The admin is redirected there; the subsequent
+   *  provider webhook creates the subscription. */
   createCheckoutSession: "billing-foundation:write:create-checkout-session",
-  /** Tenant-Admin klickt "Manage Subscription" → handler findet
-   *  current subscription, ruft plugin.createPortalSession, returnt
-   *  hosted-portal-URL. */
+  /** Tenant admin clicks "Manage Subscription": the handler finds the
+   *  current subscription, calls plugin.createPortalSession and returns the
+   *  hosted-portal URL. */
   createPortalSession: "billing-foundation:write:create-portal-session",
   /** Programmatic entry-point for the webhook-handler on a one-off-payment
    *  (checkout mode "payment"). Its own per-tenant aggregate-stream
@@ -60,6 +58,13 @@ export const SubscriptionFoundationHandlers = {
   /** Anonymous § 312k cancellation/withdrawal declaration (consumerProtection
    *  only). */
   requestContractTermination: "billing-foundation:write:request-contract-termination",
+  /** Anonymous "this was not me" revocation of a public declaration, by the
+   *  link of the receipt mail (consumerProtection only). */
+  revokeContractTermination: "billing-foundation:write:revoke-contract-termination",
+  /** System-only: checks the revocation token against the tenant's declaration
+   *  and takes the cancellation back (consumerProtection only). */
+  recordContractTerminationRevocation:
+    "billing-foundation:write:record-contract-termination-revocation",
   /** Tenant-Admin terminates or withdraws from the contract of their own
    *  tenant (consumerProtection only). */
   terminateContract: "billing-foundation:write:terminate-contract",
@@ -82,9 +87,9 @@ export const SubscriptionFoundationHandlers = {
 
 // Qualified query handler names.
 export const SubscriptionFoundationQueries = {
-  /** Sysadmin-cross-tenant + tenant-scoped self-list auf der
-   *  read_subscriptions-projection. Tenant-Admin sieht via ctx.db
-   *  tenant-scoping nur die eigene row. */
+  /** Sysadmin cross-tenant and tenant-scoped self-list on the
+   *  read_subscriptions projection. A tenant admin only sees their own row
+   *  because ctx.db is tenant-scoped. */
   listSubscriptions: "billing-foundation:query:subscription:list",
   /** Lists the catalog's plans with live price, benefits, the caller's
    *  current tier and per-plan action. Only registered when a `catalog` is
@@ -96,9 +101,9 @@ export const SubscriptionFoundationQueries = {
 } as const;
 
 // Normalized subscription-event types — provider-agnostic.
-// Alle Provider-Plugins normalisieren ihre eigenen event-types auf einen
-// dieser. Whitelist: was die Foundation kennt; alles andere muss der
-// Plugin filtern und null returnen aus verifyAndParseWebhook.
+// All provider plugins normalize their own event types onto one of these.
+// Whitelist of what the foundation knows; anything else must be filtered by
+// the plugin, which returns null from verifyAndParseWebhook.
 export const SubscriptionEventTypes = {
   created: "subscription.created",
   updated: "subscription.updated",
@@ -110,8 +115,8 @@ export type SubscriptionEventType =
   (typeof SubscriptionEventTypes)[keyof typeof SubscriptionEventTypes];
 
 // Normalized subscription-status values — provider-agnostic.
-// Stripe + Mollie haben verschiedene Status-Sets; Plugin mapped auf
-// diesen common-subset.
+// Stripe and Mollie have different status sets; the plugin maps onto this
+// common subset.
 export const SubscriptionStatuses = {
   active: "active",
   trialing: "trialing",
@@ -215,17 +220,15 @@ export function isSwitchableSubscriptionStatus(status: string): boolean {
 // TenantAdmin/SystemAdmin-only access.
 export const DEFAULT_PURCHASE_ROLES = ["TenantAdmin", "SystemAdmin"] as const;
 
-// **Multi-Provider von Tag 1:** subscription-foundation hat KEIN
-// `provider`-config-key. Alle gemounteten Plugins sind aktiv parallel —
-// der Endkunde wählt beim Subscribe-Klick zwischen Karte/PayPal/
-// Apple-Pay/Klarna/SEPA (Disney+-Pattern). Welcher Provider die
-// aktuelle subscription des Tenants gerade hält steht in
-// subscription.providerName, kommt aus dem checkout-flow.
+// **Multi-provider from day one:** subscription-foundation has NO `provider`
+// config key. All mounted plugins are active in parallel; the end customer
+// picks between card/PayPal/Apple Pay/Klarna/SEPA at subscribe time
+// (Disney+ pattern). Which provider currently holds the tenant's
+// subscription is stored in subscription.providerName, set by the checkout flow.
 //
-// price-to-tier-Map ist KEIN foundation-config — pro-Plugin, weil
-// Stripe-priceIds vs PayPal-plan-ids vs Apple-product-ids
-// unterschiedliche IDs sind. Jeder Plugin definiert seinen eigenen
-// `<plugin-name>:config:price-to-tier`-Key.
+// The price-to-tier map is NOT foundation config: it is per plugin, because
+// Stripe priceIds, PayPal plan ids and Apple product ids are different IDs.
+// Each plugin defines its own `<plugin-name>:config:price-to-tier` key.
 
 export const TERMINATION_SCOPES = ["tenant-host", "platform"] as const;
 export type TerminationScope = (typeof TERMINATION_SCOPES)[number];
@@ -233,3 +236,6 @@ export type TerminationScope = (typeof TERMINATION_SCOPES)[number];
 export function isTerminationScope(value: unknown): value is TerminationScope {
   return isOneOf(TERMINATION_SCOPES, value);
 }
+
+/** Advisory-lock namespace serialising appends onto one tenant's subscription stream. */
+export const BILLING_SUBSCRIPTION_LOCK_NAMESPACE = 0x62_69_6c_6c; // 'bill'

package/packages/bundled-features/src/billing-foundation/{consumer-protection → web/consumer-protection}/consent-locale.ts

@@ -1,4 +1,3 @@
-// @runtime client
 // Crypto-free so the browser panel can share the locale rule with the server.
 export const CONSENT_LOCALES = ["de", "en"] as const;
 export type ConsentLocale = (typeof CONSENT_LOCALES)[number];

package/packages/bundled-features/src/billing-foundation/{contact-card.ts → web/contact-card.ts}

@@ -1,5 +1,3 @@
-// @runtime client
-
 /** Shared by boot validation and the panel (defense in depth); keep free of server imports. */
 export function isContactCardHref(href: string): boolean {
   if (href !== href.trim()) return false;

package/packages/bundled-features/src/billing-foundation/web/index.ts

@@ -1,23 +1,8 @@
-// @runtime client
 // Public exports for the browser side of the billing-foundation feature.
 // Consumed via `@cosmicdrift/kumiko-bundled-features/billing-foundation/web` —
 // the server side (createBillingFoundationFeature) lives under
 // `@cosmicdrift/kumiko-bundled-features/billing-foundation` and has no React deps.
 
-export {
-  BILLING_PLANS_SCREEN_ID,
-  type BillingPlanAction,
-  BillingPlanActions,
-  SubscriptionFoundationHandlers,
-  SubscriptionFoundationQueries,
-  type SubscriptionStatus,
-  SubscriptionStatuses,
-} from "../constants.ts";
-export {
-  CONSENT_LOCALES,
-  type ConsentLocale,
-  resolveConsentLocale,
-} from "../consumer-protection/consent-locale.ts";
 export type {
   BillingPlanBenefit,
   BillingPlanCatalog,
@@ -33,3 +18,17 @@ export {
   CONSENT_TEXT_OUTDATED_CODE,
 } from "./checkout-consent-dialog.tsx";
 export { type BillingFoundationClientOptions, billingFoundationClient } from "./client-plugin.tsx";
+export {
+  BILLING_PLANS_SCREEN_ID,
+  type BillingPlanAction,
+  BillingPlanActions,
+  SubscriptionFoundationHandlers,
+  SubscriptionFoundationQueries,
+  type SubscriptionStatus,
+  SubscriptionStatuses,
+} from "./constants.ts";
+export {
+  CONSENT_LOCALES,
+  type ConsentLocale,
+  resolveConsentLocale,
+} from "./consumer-protection/consent-locale.ts";

package/packages/bundled-features/src/billing-foundation/web/localized-params.ts

@@ -1,5 +1,3 @@
-// @runtime client
-
 export function localizedParams(
   params: Readonly<Record<string, string | number>> | undefined,
   locale: string,

package/packages/bundled-features/src/billing-foundation/webhook-handler.ts

@@ -6,13 +6,13 @@
 
 import { ExtraRouteRejection, signatureRoute } from "@cosmicdrift/kumiko-framework/api";
 import type { Context } from "hono";
+import type { PaymentEvent, SubscriptionEvent, SubscriptionProviderPlugin } from "./types.ts";
 import {
   BILLING_FOUNDATION_FEATURE,
   BillingEventKinds,
   SUBSCRIPTION_PROVIDER_EXTENSION,
   SubscriptionFoundationHandlers,
-} from "./constants.ts";
-import type { PaymentEvent, SubscriptionEvent, SubscriptionProviderPlugin } from "./types.ts";
+} from "./web/constants.ts";
 
 export type SubscriptionWebhookRouteOptions = {
   /** Route path — MUST carry the `:providerName` path-param. Default
@@ -133,6 +133,9 @@ export function createSubscriptionWebhookRoute(options: SubscriptionWebhookRoute
           tier: parsed.tier,
           currentPeriodEndIso: parsed.currentPeriodEnd,
           ...(parsed.cancelAt !== undefined && { cancelAtIso: parsed.cancelAt }),
+          ...(parsed.providerEventAt !== undefined && {
+            providerEventAtIso: parsed.providerEventAt,
+          }),
           ...(parsed.consentId !== undefined && { consentId: parsed.consentId }),
         },
       });

package/packages/bundled-features/src/cap-counter/changes.json

@@ -1,4 +1,16 @@
 [
+  {
+    "version": "0.378.0",
+    "type": "fix",
+    "title": "Stock caps are atomic under parallel writes",
+    "detail": "withStockCap now takes a transaction-scoped advisory lock per tenant and cap, so concurrent creates cannot both pass the check and exceed the cap."
+  },
+  {
+    "version": "0.378.0",
+    "type": "improvement",
+    "title": "withStockCap no longer widens the handler's grants",
+    "detail": "withStockCap serialises through TenantDb.advisoryXactLock instead of ctx.db.unsafeRaw(), so wrapped handlers no longer receive an implicit unsafeRaw grant."
+  },
   {
     "version": "0.370.0",
     "type": "breaking",

package/packages/bundled-features/src/cap-counter/stock-cap-guard.ts

@@ -24,6 +24,10 @@ export type CapLimitContext = {
   readonly config?: ConfigAccessor;
 };
 
+// pg_advisory_xact_lock namespace (int4): 'scap' as ASCII, disjoint from the
+// framework's other fixed advisory-lock keys.
+const STOCK_CAP_LOCK_NAMESPACE = 0x73636170;
+
 // What the cap guards need from a write handler's ctx.
 export type CapGuardContext = CapLimitContext & { readonly db: TenantDb };
 
@@ -53,6 +57,7 @@ export function createStockCapGuard<TCaps>(
     spec: StockCapSpec<TCaps>,
     context: CapLimitContext = {},
   ): Promise<WriteFailure | null> {
+    // Lock-free on its own: a direct call outside withStockCap is not atomic.
     const caps = await resolveTierCaps(db, context);
     const current = await db.count(spec.table, { ...spec.where, tenantId: db.tenantId });
     const { state, limit } = enforceStockCap({
@@ -73,6 +78,10 @@ export function createStockCapGuard<TCaps>(
     return {
       ...handler,
       handler: async (event, ctx) => {
+        // ctx.db is the handler's transaction, so the xact lock releases with its commit or
+        // rollback. A handler wrapped in several caps must list them in the same order
+        // everywhere; Postgres aborts one side of an inverse order with a deadlock error.
+        await ctx.db.advisoryXactLock(STOCK_CAP_LOCK_NAMESPACE, spec.code);
         const failure = await checkStockCap(ctx.db, spec, { config: ctx.config });
         return failure ?? handler.handler(event, ctx);
       },

package/packages/bundled-features/src/cap-overview/feature.ts

@@ -17,7 +17,6 @@
 // **Boot-Dependencies:** tenant, tier-engine, billing-foundation.
 import { defineFeature, type FeatureDefinition } from "@cosmicdrift/kumiko-framework/engine";
 import { resolveCapUsageRoles } from "./access.ts";
-import { CAP_OVERVIEW_FEATURE } from "./constants.ts";
 import { createCapsUsageQuery } from "./handlers/caps-usage.query.ts";
 import { createTenantCapsListQuery } from "./handlers/tenant-caps-list.query.ts";
 import { tenantOptionsQuery } from "./handlers/tenant-options.query.ts";
@@ -28,6 +27,7 @@ import {
   platformTenantCapsScreen,
 } from "./screens.ts";
 import type { CapSpec } from "./types.ts";
+import { CAP_OVERVIEW_FEATURE } from "./web/constants.ts";
 
 export type CreateCapOverviewOptions = {
   readonly caps: readonly CapSpec[];

package/packages/bundled-features/src/cap-overview/handlers/caps-usage.query.ts

@@ -13,7 +13,7 @@ import {
 import * as z from "zod";
 import { tierAssignmentEntity } from "../../tier-engine/index.ts";
 import type { CapSpec, CapUsageWithMeta } from "../types.ts";
-import { computeFraction, computeTone, computeUnclampedFraction } from "../usage-math.ts";
+import { computeFraction, computeTone, computeUnclampedFraction } from "../web/usage-math.ts";
 
 type TierAssignmentRow = { readonly tenantId: string; readonly tier: string };
 

package/packages/bundled-features/src/cap-overview/handlers/tenant-caps-list.query.ts

@@ -12,9 +12,9 @@ import { subscriptionsProjectionTable } from "../../billing-foundation/index.ts"
 import type { CapLimitContext } from "../../cap-counter/index.ts";
 import { decryptTenantNames, tenantTable } from "../../tenant/index.ts";
 import { tierAssignmentEntity } from "../../tier-engine/index.ts";
-import { capFieldName } from "../constants.ts";
 import type { CapSpec, CapUsage } from "../types.ts";
-import { computeFraction } from "../usage-math.ts";
+import { capFieldName } from "../web/constants.ts";
+import { computeFraction } from "../web/usage-math.ts";
 
 type TenantRow = { readonly id: string; readonly name: string };
 type TierAssignmentRow = {

package/packages/bundled-features/src/cap-overview/index.ts

@@ -1,6 +1,13 @@
 // Public API of the cap-overview bundled-feature.
 
 export { DEFAULT_CAP_USAGE_ROLES } from "./access.ts";
+export { type CreateCapOverviewOptions, createCapOverviewFeature } from "./feature.ts";
+export {
+  createMyCapsScreen,
+  createTenantCapListScreen,
+  platformTenantCapsScreen,
+} from "./screens.ts";
+export type { CapSpec, CapUsage, CapUsageTone, CapUsageWithMeta } from "./types.ts";
 export {
   CAP_CARDS_PANEL_COMPONENT,
   CAP_OVERVIEW_FEATURE,
@@ -10,12 +17,5 @@ export {
   MY_CAPS_SCREEN_ID,
   PLATFORM_TENANT_CAPS_SCREEN_ID,
   TENANT_CAP_LIST_SCREEN_ID,
-} from "./constants.ts";
-export { type CreateCapOverviewOptions, createCapOverviewFeature } from "./feature.ts";
-export {
-  createMyCapsScreen,
-  createTenantCapListScreen,
-  platformTenantCapsScreen,
-} from "./screens.ts";
-export type { CapSpec, CapUsage, CapUsageTone, CapUsageWithMeta } from "./types.ts";
-export { computeFraction, computeTone } from "./usage-math.ts";
+} from "./web/constants.ts";
+export { computeFraction, computeTone } from "./web/usage-math.ts";

package/packages/bundled-features/src/cap-overview/screens.ts

@@ -1,4 +1,5 @@
 import type { ScreenDefinition } from "@cosmicdrift/kumiko-framework/engine";
+import type { CapSpec } from "./types.ts";
 import {
   CAP_CARDS_PANEL_COMPONENT,
   CAP_USAGE_CELL_COMPONENT,
@@ -7,8 +8,7 @@ import {
   MY_CAPS_SCREEN_ID,
   PLATFORM_TENANT_CAPS_SCREEN_ID,
   TENANT_CAP_LIST_SCREEN_ID,
-} from "./constants.ts";
-import type { CapSpec } from "./types.ts";
+} from "./web/constants.ts";
 
 // `tiers` has no room for a separate per-tier display label (it's just
 // `readonly string[]`) — tier-engine itself has no enumerated tier list to

package/packages/bundled-features/src/cap-overview/web/cap-cards-panel.tsx

@@ -1,4 +1,3 @@
-// @runtime client
 import type { ExtensionSectionProps } from "@cosmicdrift/kumiko-renderer";
 import { usePrimitives, useQuery, useTranslation } from "@cosmicdrift/kumiko-renderer";
 import { EMPTY_VALUE_PLACEHOLDER } from "@cosmicdrift/kumiko-renderer/headless";
@@ -10,9 +9,9 @@ import {
 } from "@cosmicdrift/kumiko-renderer/web";
 import { Database, FileText, Gauge, Hash, Mail, Users } from "lucide-react";
 import type { ComponentType, ReactNode } from "react";
-import { CapOverviewQueries } from "../constants.ts";
 import type { CapIconKey, CapUsageTone, CapUsageWithMeta } from "../types.ts";
 import { CapUsageBar } from "./cap-usage-bar.tsx";
+import { CapOverviewQueries } from "./constants.ts";
 
 type CapsUsageResponse = { readonly rows: readonly CapUsageWithMeta[] };
 

package/packages/bundled-features/src/cap-overview/web/cap-usage-bar.tsx

@@ -1,8 +1,7 @@
-// @runtime client
 import { usePrimitives, useTranslation } from "@cosmicdrift/kumiko-renderer";
 import type { ReactNode } from "react";
 import type { CapUsage } from "../types.ts";
-import { computeTone } from "../usage-math.ts";
+import { computeTone } from "./usage-math.ts";
 
 export function CapUsageBar({
   usage,

package/packages/bundled-features/src/cap-overview/web/cap-usage-cell.tsx

@@ -1,5 +1,3 @@
-// @runtime client
-
 import type { ColumnRendererProps } from "@cosmicdrift/kumiko-renderer";
 import { isPlainObject } from "@cosmicdrift/kumiko-types/type-guards";
 import type { ReactNode } from "react";

package/packages/bundled-features/src/cap-overview/web/client-plugin.tsx

@@ -1,13 +1,12 @@
-// @runtime client
 import type { TranslationsByLocale } from "@cosmicdrift/kumiko-renderer";
 import type { ClientFeatureDefinition } from "@cosmicdrift/kumiko-renderer/web";
+import { CapCardsPanel } from "./cap-cards-panel.tsx";
+import { CapUsageCell } from "./cap-usage-cell.tsx";
 import {
   CAP_CARDS_PANEL_COMPONENT,
   CAP_OVERVIEW_FEATURE,
   CAP_USAGE_CELL_COMPONENT,
-} from "../constants.ts";
-import { CapCardsPanel } from "./cap-cards-panel.tsx";
-import { CapUsageCell } from "./cap-usage-cell.tsx";
+} from "./constants.ts";
 
 export type CapOverviewClientOptions = {
   readonly translations?: TranslationsByLocale;

package/packages/bundled-features/src/cap-overview/{constants.ts → web/constants.ts}

@@ -1,4 +1,3 @@
-// @runtime client
 // Pure string-literal constants — imported by both server (feature.ts,
 // handlers/) and client (web/) code. See tier-engine/constants.ts for the
 // same convention.

package/packages/bundled-features/src/cap-overview/web/index.ts

@@ -1,4 +1,3 @@
-// @runtime client
 // Public exports for the browser side of the cap-overview feature.
 // Consumed via `@cosmicdrift/kumiko-bundled-features/cap-overview/web` —
 // the server side (createCapOverviewFeature) lives under

package/packages/bundled-features/src/cap-overview/{usage-math.ts → web/usage-math.ts}

@@ -1,8 +1,7 @@
-// @runtime client
 // Pure math with no runtime deps — both the query handlers (runtime → client
 // is allowed by the compat matrix) and cap-usage-bar.tsx (client → client)
 // import it.
-import type { CapUsageTone } from "./types.ts";
+import type { CapUsageTone } from "../types.ts";
 
 const WARN_THRESHOLD = 0.8;
 const DANGER_THRESHOLD = 1;

package/packages/bundled-features/src/compliance-profiles/feature.ts

@@ -4,11 +4,6 @@ import {
   defineFeature,
   type FeatureDefinition,
 } from "@cosmicdrift/kumiko-framework/engine";
-import {
-  COMPLIANCE_PROFILE_CATALOG_EXTENSION_NAME,
-  COMPLIANCE_PROFILE_SCREEN_ID,
-  ComplianceProfileHandlers,
-} from "./constants.ts";
 import { forTenantQuery } from "./handlers/for-tenant.query.ts";
 import { listProfilesQuery } from "./handlers/list-profiles.query.ts";
 import { createNeedsProfileQuery } from "./handlers/needs-profile.query.ts";
@@ -16,6 +11,11 @@ import { setProfileWrite } from "./handlers/set-profile.write.ts";
 import { subProcessorsQuery } from "./handlers/sub-processors.query.ts";
 import { COMPLIANCE_PROFILES_I18N } from "./i18n.ts";
 import { tenantComplianceProfileEntity } from "./schema/profile-selection.ts";
+import {
+  COMPLIANCE_PROFILE_CATALOG_EXTENSION_NAME,
+  COMPLIANCE_PROFILE_SCREEN_ID,
+  ComplianceProfileHandlers,
+} from "./web/constants.ts";
 
 export {
   tenantComplianceProfileEntity,