@cosmicdrift/kumiko-samples 0.378.0 → 0.379.0

package/packages/bundled-features/src/template-resolver/{qualified-names.ts → web/qualified-names.ts}

@@ -1,4 +1,3 @@
-// @runtime client
 // Feature name + qualified handler/query names (QN: scope:type:name).
 export const TEMPLATE_RESOLVER_FEATURE = "template-resolver" as const;
 

package/packages/bundled-features/src/template-resolver/web/use-stable-by-key.ts

@@ -1,4 +1,3 @@
-// @runtime client
 import { useState } from "react";
 
 // Callers often pass fresh object literals every render; this keeps the first

package/packages/bundled-features/src/tenant/handlers/add-member.write.ts

@@ -12,9 +12,9 @@ import {
   writeFailure,
 } from "@cosmicdrift/kumiko-framework/errors";
 import * as z from "zod";
-import { TenantErrors } from "../constants.ts";
 import { findForbiddenMembershipRole, reservedMembershipRoleError } from "../membership-roles.ts";
 import { tenantMembershipEntity, tenantMembershipsTable } from "../membership-table.ts";
+import { TenantErrors } from "../web/constants.ts";
 
 const executor = createEventStoreExecutor(tenantMembershipsTable, tenantMembershipEntity, {
   entityName: "tenant-membership",

package/packages/bundled-features/src/tenant/index.ts

@@ -1,12 +1,5 @@
 export { cancelPendingInvitation } from "./cancel-pending-invitation.ts";
 export { TenantCommandSchemas } from "./command-schemas.ts";
-export {
-  OWNER_INVITE_ROLE_OPTIONS,
-  TENANT_FEATURE,
-  TenantErrors,
-  TenantHandlers,
-  TenantQueries,
-} from "./constants.ts";
 export { decryptTenantNames } from "./decrypt-tenant-names.ts";
 export { collectAssignableAppRoles, createTenantFeature } from "./feature.ts";
 export type { InvitationStatus } from "./invitation-table.ts";
@@ -24,3 +17,10 @@ export {
   tenantEntity,
   tenantTable,
 } from "./schema/tenant.ts";
+export {
+  OWNER_INVITE_ROLE_OPTIONS,
+  TENANT_FEATURE,
+  TenantErrors,
+  TenantHandlers,
+  TenantQueries,
+} from "./web/constants.ts";

package/packages/bundled-features/src/tenant/invitation-table.ts

@@ -32,7 +32,7 @@ import {
   createTimestampField,
 } from "@cosmicdrift/kumiko-framework/engine";
 // kumiko-lint-ignore cross-feature-import global-role options are owned by the user feature
-import { GLOBAL_ROLE_OPTIONS } from "../user/constants.ts";
+import { GLOBAL_ROLE_OPTIONS } from "../user/web/constants.ts";
 
 // Status-const-Object damit Handler-Code keine Magic-Strings nutzt.
 // Bei rename (z.B. "cancelled" → "revoked") fällt jeder caller auf

package/packages/bundled-features/src/tenant/invited-membership.ts

@@ -9,10 +9,10 @@ import { createSystemUser, type TenantId } from "@cosmicdrift/kumiko-framework/e
 import { ConflictError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
 import { parseRoles } from "@cosmicdrift/kumiko-framework/utils";
 import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
-import { TenantErrors } from "./constants.ts";
 import { findForbiddenMembershipRole, reservedMembershipRoleError } from "./membership-roles.ts";
 import { tenantMembershipEntity, tenantMembershipsTable } from "./membership-table.ts";
 import { seedTenantMembership } from "./seeding.ts";
+import { TenantErrors } from "./web/constants.ts";
 
 const membershipExecutor = createEventStoreExecutor(
   tenantMembershipsTable,

package/packages/bundled-features/src/tenant/last-tenant-admin.ts

@@ -1,8 +1,8 @@
 import { acquireNamespacedAdvisoryLock, selectMany } from "@cosmicdrift/kumiko-framework/db";
 import { ConflictError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
 import { parseRoles } from "@cosmicdrift/kumiko-framework/utils";
-import { TenantErrors } from "./constants.ts";
 import { tenantMembershipsTable } from "./membership-table.ts";
+import { TenantErrors } from "./web/constants.ts";
 
 // Serializes last-TenantAdmin demotion/removal checks per tenant inside the write TX
 // (dispatcher batch wraps handlers in transaction — xact lock holds through update).

package/packages/bundled-features/src/tenant/member-role-options.ts

@@ -1,5 +1,5 @@
 import type { AssignableAppRoles } from "@cosmicdrift/kumiko-framework/engine";
-import { OWNER_INVITE_ROLE_OPTIONS } from "./constants.ts";
+import { OWNER_INVITE_ROLE_OPTIONS } from "./web/constants.ts";
 
 export function memberRoleOptions(assignableAppRoles: AssignableAppRoles): readonly string[] {
   return [...OWNER_INVITE_ROLE_OPTIONS, ...assignableAppRoles.keys()];

package/packages/bundled-features/src/tenant/screens.ts

@@ -8,6 +8,7 @@ import {
   isAssignableByRole,
   type ScreenDefinition,
 } from "@cosmicdrift/kumiko-framework/engine";
+import { memberRoleOptions } from "./member-role-options.ts";
 import {
   DEFAULT_INVITE_ROLE_OPTIONS,
   INVITE_CREATE_SCREEN_ID,
@@ -17,8 +18,7 @@ import {
   MEMBERS_SCREEN_ID,
   TenantHandlers,
   TenantQueries,
-} from "./constants.ts";
-import { memberRoleOptions } from "./member-role-options.ts";
+} from "./web/constants.ts";
 
 // Cross-tenant SystemAdmin platform view of the tenants themselves. The tenant
 // feature runs with `r.systemScope()`, so the entityList returns every tenant.

package/packages/bundled-features/src/tenant/web/client-plugin.tsx

@@ -1,11 +1,10 @@
-// @runtime client
 import { mergeTranslations, type TranslationsByLocale } from "@cosmicdrift/kumiko-renderer";
 import type { ClientFeatureDefinition } from "@cosmicdrift/kumiko-renderer/web";
 import {
   MEMBER_ROLES_CELL_COMPONENT,
   MEMBER_STATUS_CELL_COMPONENT,
   TENANT_FEATURE,
-} from "../constants.ts";
+} from "./constants.ts";
 import { MemberRolesCell } from "./member-roles-cell.tsx";
 import { MemberStatusCell } from "./member-status-cell.tsx";
 

package/packages/bundled-features/src/tenant/{constants.ts → web/constants.ts}

@@ -1,8 +1,5 @@
-// @runtime client
-// Pure string constants — `@runtime client` so browser code (e.g. the
-// MemberStatusCell column renderer) can import them too (see
-// auth-email-password/constants.ts for the rationale). Runtime imports
-// client → server can keep using them as well.
+// Pure string constants, client-safe because they live under web/ (see
+// auth-email-password/web/constants.ts); server code may import them too.
 
 // Feature name
 export const TENANT_FEATURE = "tenant" as const;
@@ -64,7 +61,7 @@ export const TenantQueries = {
   tenantDirectory: "tenant:query:tenant-directory",
   activeTenantIds: "tenant:query:active-tenant-ids",
   resolveUserIds: "tenant:query:resolve-user-ids",
-  // Pending Invitations für den aktuellen Tenant (Admin-UI-Liste).
+  // Pending invitations of the current tenant (admin UI list).
   invitations: "tenant:query:invitations",
   // Combined active-members + pending-invitations list backing /members.
   teamList: "tenant:query:team:list",

package/packages/bundled-features/src/tenant/web/index.ts

@@ -1,4 +1,3 @@
-// @runtime client
 export { type TenantClientOptions, tenantClient } from "./client-plugin.tsx";
 export { MemberRolesCell } from "./member-roles-cell.tsx";
 export { MemberStatusCell } from "./member-status-cell.tsx";

package/packages/bundled-features/src/tenant/web/member-roles-cell.tsx

@@ -1,4 +1,3 @@
-// @runtime client
 // Column-renderer for the /members screen's roles column — `roles` is a
 // `readonly string[]` on TeamRow (see team-list.query.ts), and DataTable has
 // no default array-to-cell formatting, so this joins it into one string.

package/packages/bundled-features/src/tenant/web/member-status-cell.tsx

@@ -1,4 +1,3 @@
-// @runtime client
 // Column-renderer for the /members screen's status column, registered via
 // `tenantClient()`'s `columnRenderers` map (screen.columns[].renderer in
 // screens.ts). The list frame itself is the generic declarative

package/packages/bundled-features/src/tenant-lifecycle/stages.ts

@@ -5,6 +5,7 @@ import {
 } from "@cosmicdrift/kumiko-framework/crypto";
 import {
   createEventStoreExecutor,
+  createTenantDataDestroyDb,
   createTenantDb,
   type DbRunner,
   selectMany,
@@ -143,10 +144,9 @@ async function runTenantDataHooks(ctx: DestructionStageCtx): Promise<StageRunOut
       log: ctx.escapeHatchAuditLog ?? createFallbackLogger("tenant-lifecycle"),
     });
     const hookCtx: TenantDataHookCtx = {
-      db: createTenantDb({
+      db: createTenantDataDestroyDb({
         db: ctx.db,
         tenantId: ctx.tenantId,
-        mode: "tenant",
         grants: {
           unsafeRaw: reason !== undefined ? { reason } : undefined,
           report,

package/packages/bundled-features/src/tier-engine/entity.ts

@@ -3,7 +3,7 @@ import {
   createSelectField,
   createTextField,
 } from "@cosmicdrift/kumiko-framework/engine";
-import { type TierAssignmentSource, TierAssignmentSources } from "./constants.ts";
+import { type TierAssignmentSource, TierAssignmentSources } from "./web/constants.ts";
 
 // tier-assignment — pro Plattform-Tenant genau ein Aggregat. Aggregate-ID
 // wird deterministisch aus tenantId abgeleitet (uuidv5, siehe aggregate-id.ts).

package/packages/bundled-features/src/tier-engine/feature.ts

@@ -76,18 +76,18 @@ import * as z from "zod";
 import { tenantTable } from "../tenant/index.ts";
 import { tierAssignmentAggregateId } from "./aggregate-id.ts";
 import type { TierMap } from "./compose-app.ts";
-import {
-  TIER_ADMIN_SCREEN_ID,
-  TIER_ENGINE_FEATURE,
-  TierAssignmentSources,
-  TierEngineHandlers,
-} from "./constants.ts";
 import { tierAssignmentEntity } from "./entity.ts";
 import { getActiveTierQuery } from "./handlers/active-tier.query.ts";
 import { getTenantTierQuery } from "./handlers/get-tenant-tier.query.ts";
 import { createSetTenantTierWrite } from "./handlers/set-tenant-tier.write.ts";
-import { TIER_ENGINE_I18N } from "./i18n.ts";
 import { isTrialActive, type TrialPolicy } from "./trial.ts";
+import {
+  TIER_ADMIN_SCREEN_ID,
+  TIER_ENGINE_FEATURE,
+  TierAssignmentSources,
+  TierEngineHandlers,
+} from "./web/constants.ts";
+import { TIER_ENGINE_I18N } from "./web/i18n.ts";
 
 // Drizzle-table for the tier-assignment-entity. Built once at module-load
 // from the entity definition — same shape buildEntityTable would produce

package/packages/bundled-features/src/tier-engine/handlers/set-tenant-tier.write.ts

@@ -7,8 +7,8 @@ import { defineWriteHandler, type TenantId } from "@cosmicdrift/kumiko-framework
 import * as z from "zod";
 import { requireForTenant } from "../../shared/index.ts";
 import { tierAssignmentAggregateId } from "../aggregate-id.ts";
-import { type TierAssignmentSource, TierAssignmentSources } from "../constants.ts";
 import { type TierAssignmentRow, tierAssignmentEntity } from "../entity.ts";
+import { type TierAssignmentSource, TierAssignmentSources } from "../web/constants.ts";
 
 // SystemAdmin setzt das Tier eines BELIEBIGEN Tenants — manueller Grant ohne
 // Billing. Cross-tenant, daher SystemAdmin-only (kein TenantAdmin: sonst

package/packages/bundled-features/src/tier-engine/index.ts

@@ -17,14 +17,6 @@ export {
   type TierDefinition,
   type TierMap,
 } from "./compose-app.ts";
-export {
-  isTierAssignmentSource,
-  TIER_ENGINE_FEATURE,
-  type TierAssignmentSource,
-  TierAssignmentSources,
-  TierEngineHandlers,
-  TierEngineQueries,
-} from "./constants.ts";
 export { tierAssignmentEntity } from "./entity.ts";
 export {
   type CreateTierEngineOptions,
@@ -43,3 +35,11 @@ export {
   type TierResolverDeps,
 } from "./tier-resolver.ts";
 export { isTrialActive, type TrialPolicy } from "./trial.ts";
+export {
+  isTierAssignmentSource,
+  TIER_ENGINE_FEATURE,
+  type TierAssignmentSource,
+  TierAssignmentSources,
+  TierEngineHandlers,
+  TierEngineQueries,
+} from "./web/constants.ts";

package/packages/bundled-features/src/tier-engine/web/client-plugin.tsx

@@ -1,4 +1,3 @@
-// @runtime client
 // Client-feature factory for tier-engine. Supplies the default translations
 // for the declarative tier-admin actionForm (registered server-side via
 // r.screen in the feature); the app places the screen only via r.nav.
@@ -9,8 +8,8 @@ import {
   translationsByLocaleFromKeys,
 } from "@cosmicdrift/kumiko-renderer";
 import type { ClientFeatureDefinition } from "@cosmicdrift/kumiko-renderer/web";
-import { TIER_ENGINE_FEATURE } from "../constants.ts";
-import { TIER_ENGINE_I18N } from "../i18n.ts";
+import { TIER_ENGINE_FEATURE } from "./constants.ts";
+import { TIER_ENGINE_I18N } from "./i18n.ts";
 
 const defaultTranslations: TranslationsByLocale = translationsByLocaleFromKeys(TIER_ENGINE_I18N);
 

package/packages/bundled-features/src/tier-engine/{constants.ts → web/constants.ts}

@@ -1,4 +1,3 @@
-// @runtime client
 // Pure string-literal QNs/ids — imported by both server (feature.ts) and
 // client (web/client-plugin.tsx). Marked `client`, the most permissive
 // category in the kumiko isolation model (runtime may import client, client
@@ -39,6 +38,6 @@ export const TierEngineQueries = {
   tierOptions: "tier-engine:query:tier-options",
 } as const;
 
-// Screen-id für den manuellen Tier-Grant-Screen. Apps referenzieren ihn
-// qualifiziert in r.nav: `tier-engine:screen:tier-admin`.
+// Screen id of the manual tier-grant screen. Apps reference it qualified in
+// r.nav: `tier-engine:screen:tier-admin`.
 export const TIER_ADMIN_SCREEN_ID = "tier-admin" as const;

package/packages/bundled-features/src/tier-engine/{i18n.ts → web/i18n.ts}

@@ -1,4 +1,3 @@
-// @runtime client
 // Server + client i18n for the tier-admin actionForm. Single source of
 // truth: r.translations({ keys: TIER_ENGINE_I18N }) registers these
 // server-side, web/client-plugin derives the client-side locale bundle

package/packages/bundled-features/src/tier-engine/web/index.ts

@@ -1,4 +1,3 @@
-// @runtime client
 // Public exports für die Browser-Seite des tier-engine Features. Konsumiert
 // über `@cosmicdrift/kumiko-bundled-features/tier-engine/web` — die
 // Server-Seite (createTierEngineFeature) lebt unter

package/packages/bundled-features/src/user/handlers/create.write.ts

@@ -14,9 +14,9 @@ import { canonicalizeLocaleTag, isValidLocaleTag } from "@cosmicdrift/kumiko-fra
 import { isValidIanaTimeZone } from "@cosmicdrift/kumiko-framework/time";
 import { parseRoles } from "@cosmicdrift/kumiko-framework/utils";
 import * as z from "zod";
-import { UserErrors } from "../constants.ts";
 import { rolesInputSchema } from "../roles-input-schema.ts";
 import { userEntity, userTable } from "../schema/user.ts";
+import { UserErrors } from "../web/constants.ts";
 
 const crud = createEventStoreExecutor(userTable, userEntity, { entityName: "user" });
 

package/packages/bundled-features/src/user/handlers/update-roles.ts

@@ -22,8 +22,8 @@ import {
   writeFailure,
 } from "@cosmicdrift/kumiko-framework/errors";
 import { parseRoles } from "@cosmicdrift/kumiko-framework/utils";
-import { UserErrors } from "../constants.ts";
 import { USER_STATUS, userEntity, userTable } from "../schema/user.ts";
+import { UserErrors } from "../web/constants.ts";
 
 const crud = createEventStoreExecutor(userTable, userEntity, { entityName: "user" });
 

package/packages/bundled-features/src/user/handlers/update.write.ts

@@ -8,9 +8,9 @@ import {
 import { canonicalizeLocaleTag, isValidLocaleTag } from "@cosmicdrift/kumiko-framework/i18n";
 import { isValidIanaTimeZone } from "@cosmicdrift/kumiko-framework/time";
 import * as z from "zod";
-import { UserErrors } from "../constants.ts";
 import { rolesInputSchema } from "../roles-input-schema.ts";
 import { userEntity, userTable } from "../schema/user.ts";
+import { UserErrors } from "../web/constants.ts";
 import { applyUserRolesUpdate } from "./update-roles.ts";
 
 const crud = createEventStoreExecutor(userTable, userEntity, { entityName: "user" });

package/packages/bundled-features/src/user/index.ts

@@ -1,5 +1,4 @@
 export { UserCommandSchemas } from "./command-schemas.ts";
-export { USER_FEATURE, UserErrors, UserHandlers, UserQueries } from "./constants.ts";
 export {
   backfillUserStreamTenants,
   type UserStreamBackfillResult,
@@ -22,3 +21,4 @@ export {
   userEntity,
   userTable,
 } from "./schema/user.ts";
+export { USER_FEATURE, UserErrors, UserHandlers, UserQueries } from "./web/constants.ts";

package/packages/bundled-features/src/user/invited-global-roles.ts

@@ -7,8 +7,8 @@ import {
 import { createSystemUser, SYSTEM_TENANT_ID } from "@cosmicdrift/kumiko-framework/engine";
 import { NotFoundError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
 import { parseRoles } from "@cosmicdrift/kumiko-framework/utils";
-import { GLOBAL_ROLE_OPTIONS, type GlobalRole } from "./constants.ts";
 import { userEntity, userTable } from "./schema/user.ts";
+import { GLOBAL_ROLE_OPTIONS, type GlobalRole } from "./web/constants.ts";
 
 const userExecutor = createEventStoreExecutor(userTable, userEntity, { entityName: "user" });
 

package/packages/bundled-features/src/user/schema/user.ts

@@ -10,7 +10,7 @@ import {
   createTimestampField,
   createTzField,
 } from "@cosmicdrift/kumiko-framework/engine";
-import { GLOBAL_ROLE_OPTIONS } from "../constants.ts";
+import { GLOBAL_ROLE_OPTIONS } from "../web/constants.ts";
 
 /**
  * User-Lifecycle-Status (S2.U1). Single source of truth — Auth-Middleware

package/packages/bundled-features/src/user/{constants.ts → web/constants.ts}

@@ -1,4 +1,3 @@
-// @runtime client
 // Feature name
 export const USER_FEATURE = "user" as const;
 

package/packages/bundled-features/src/user-data-rights/changes.json

@@ -1,4 +1,18 @@
 [
+  {
+    "version": "0.379.0",
+    "type": "improvement",
+    "title": "Client files of a feature live under web/",
+    "detail": "Files that carried a runtime-client marker moved into <feature>/web/ (constants.ts, i18n.ts, qualified-names and similar), so the runtime-isolation guard reads the runtime from the path. Export subpaths such as ./tenant/constants are unchanged; only relative imports into the old file locations break. The web-side translation glue of user-data-rights, managed-pages, admin-shell, audit, jobs and the document designer is now web/default-translations.ts.",
+    "migration": "Run bun kumiko-upgrade --apply, or bun kumiko codemod feature-layout . --write. It moves every file marked as runtime client from src/features/<feature>/ into src/features/<feature>/web/, rewrites the relative imports and drops the marker. Add --check to list what is left.",
+    "codemod": "scripts/codemod/feature-layout.ts"
+  },
+  {
+    "version": "0.379.0",
+    "type": "fix",
+    "title": "DELETION_TOKEN_SECRET description corrected",
+    "detail": "The env description no longer claims a fallback to JWT_SECRET; without the secret the anonymous deletion-confirmation flow stays off."
+  },
   {
     "version": "0.376.0",
     "type": "improvement",

package/packages/bundled-features/src/user-data-rights/env.ts

@@ -9,7 +9,7 @@ export const deletionTokenSecretEnvSchema = z.object({
     .min(MIN_DELETION_TOKEN_SECRET_LENGTH)
     .optional()
     .describe(
-      "Dedicated HMAC secret for the anonymous deletion-confirmation links. Unset: derived from JWT_SECRET.",
+      "Dedicated HMAC secret for the anonymous deletion-confirmation links. At least 32 characters. Unset: the anonymous deletion-confirmation flow stays off; there is no fallback to JWT_SECRET.",
     )
     .meta({ kumiko: { pulumi: { generator: "openssl rand -hex 24", secret: true } } }),
 });

package/packages/bundled-features/src/user-data-rights/feature.ts

@@ -18,13 +18,6 @@ import {
 import { isPlainObject } from "@cosmicdrift/kumiko-types/type-guards";
 import { createConfigAccessor } from "../config/index.ts";
 import { validateGdprHookCompleteness, validateGdprPiiHookCoverage } from "./boot-checks.ts";
-import {
-  EXPORT_SECTION_EXTENSION_NAME,
-  PRIVACY_CENTER_SCREEN_ID,
-  STATUS_OPTION_KEY_PREFIX,
-  USER_ME_QUERY,
-  UserDataRightsHandlers,
-} from "./constants.ts";
 import { deletionTokenSecretEnvSchema } from "./env.ts";
 import { cancelDeletionWrite } from "./handlers/cancel-deletion.write.ts";
 import { createConfirmDeletionByTokenHandler } from "./handlers/confirm-deletion-by-token.write.ts";
@@ -48,7 +41,6 @@ import {
 import { requestExportWrite } from "./handlers/request-export.write.ts";
 import { restrictAccountWrite } from "./handlers/restrict-account.write.ts";
 import { createRunForgetCleanupHandler } from "./handlers/run-forget-cleanup.write.ts";
-import { USER_DATA_RIGHTS_I18N } from "./i18n.ts";
 import {
   type GdprMailDefaults,
   isGdprMailDeliveryAvailable,
@@ -82,6 +74,14 @@ import {
   exportJobDetailScreen,
   exportJobListScreen,
 } from "./screens.ts";
+import {
+  EXPORT_SECTION_EXTENSION_NAME,
+  PRIVACY_CENTER_SCREEN_ID,
+  STATUS_OPTION_KEY_PREFIX,
+  USER_ME_QUERY,
+  UserDataRightsHandlers,
+} from "./web/constants.ts";
+import { USER_DATA_RIGHTS_I18N } from "./web/i18n.ts";
 
 // user-data-rights — DSGVO Art. 15 (Auskunft) + Art. 17 (Löschung) +
 // Art. 18 (Restriction) + Art. 20 (Portabilität) als Core-Feature.
@@ -343,7 +343,7 @@ export function createUserDataRightsFeature(opts: UserDataRightsOptions = {}): F
     r.translations({ keys: USER_DATA_RIGHTS_I18N });
     registerGdprMails(r);
     // Privacy-center dot-form labels (i18nKey()-marked below), duplicated in
-    // web/i18n.ts's client bundle since privacy-center-screen.tsx renders
+    // web/default-translations.ts's client bundle since privacy-center-screen.tsx renders
     // them client-side.
     r.translations({
       keys: {

package/packages/bundled-features/src/user-data-rights/index.ts

@@ -1,4 +1,3 @@
-export { TENANT_MODEL_CONFIG_KEY } from "./constants.ts";
 export { deletionTokenSecretEnvSchema } from "./env.ts";
 export { createUserDataRightsFeature, type UserDataRightsOptions } from "./feature.ts";
 export type { SendDeletionVerificationEmailFn } from "./handlers/request-deletion-by-email.write.ts";
@@ -34,3 +33,4 @@ export {
   exportJobEntity,
   exportJobsTable,
 } from "./schema/export-job.ts";
+export { TENANT_MODEL_CONFIG_KEY } from "./web/constants.ts";

package/packages/bundled-features/src/user-data-rights/lib/resolve-tenant-model.ts

@@ -12,7 +12,7 @@ import {
   type TenantUserModel,
 } from "@cosmicdrift/kumiko-framework/engine";
 import { createConfigAccessor } from "../../config/index.ts";
-import { TENANT_MODEL_CONFIG_KEY } from "../constants.ts";
+import { TENANT_MODEL_CONFIG_KEY } from "../web/constants.ts";
 
 export async function resolveAppTenantModel(args: {
   readonly registry: Registry;

package/packages/bundled-features/src/user-data-rights/mail-notifications.ts

@@ -14,7 +14,7 @@ import {
 } from "@cosmicdrift/kumiko-framework/i18n";
 import { escapeHtml } from "@cosmicdrift/kumiko-renderer/headless";
 import { mailParagraph } from "../shared/index.ts";
-import { USER_DATA_RIGHTS_FEATURE } from "./constants.ts";
+import { USER_DATA_RIGHTS_FEATURE } from "./web/constants.ts";
 
 const ALL_GDPR_MAIL_KINDS = [
   "exportReady",

package/packages/bundled-features/src/user-data-rights/web/client-plugin.tsx

@@ -1,4 +1,3 @@
-// @runtime client
 // Client-feature factory for user-data-rights. Provides the ExportSection
 // extension component for the privacy-center screen (registered server-side
 // declaratively as `type: "projectionDetail"`, see feature.ts — restriction
@@ -17,8 +16,8 @@
 
 import { mergeTranslations, type TranslationsByLocale } from "@cosmicdrift/kumiko-renderer";
 import type { ClientFeatureDefinition } from "@cosmicdrift/kumiko-renderer/web";
-import { EXPORT_SECTION_EXTENSION_NAME, USER_DATA_RIGHTS_FEATURE } from "../constants.ts";
-import { defaultTranslations } from "./i18n.ts";
+import { EXPORT_SECTION_EXTENSION_NAME, USER_DATA_RIGHTS_FEATURE } from "./constants.ts";
+import { defaultTranslations } from "./default-translations.ts";
 import { ExportSection } from "./privacy-center-screen.tsx";
 import { makePublicDeletionGate, type PublicDeletionRoutes } from "./public-deletion-gate.tsx";
 

package/packages/bundled-features/src/user-data-rights/web/confirm-deletion-screen.tsx

@@ -1,4 +1,3 @@
-// @runtime client
 // ConfirmAccountDeletionScreen — anonymer Apex-Screen Schritt 2. Liest das
 // Token aus dem URL-Fragment (`#token=…`, nie an den Server gesendet — landet
 // so nicht in Proxy-/Access-Logs, fw#1554) und dispatcht beim Bestätigen

package/packages/bundled-features/src/user-data-rights/{constants.ts → web/constants.ts}

@@ -1,8 +1,7 @@
-// @runtime client
-// Reine String-Konstanten — client-markiert, damit web/ (z.B. ExportSection)
-// sie importieren darf, ohne das runtime-Barrel des Features (und damit
-// dessen Server-/DOM-freien Code) zu ziehen. Runtime-Code (feature.ts) darf
-// client-Dateien ohnehin importieren.
+// Pure string constants, client-marked so web/ (e.g. ExportSection) may
+// import them without pulling the feature's runtime barrel (and with it its
+// server/DOM-free code). Runtime code (feature.ts) may import client files
+// anyway.
 
 export const USER_DATA_RIGHTS_FEATURE = "user-data-rights" as const;
 
@@ -44,15 +43,15 @@ export const UserDataRightsHandlers = {
   restrictAccount: "user-data-rights:write:restrict-account",
 } as const;
 
-// Fremde QN: der Lifecycle-Status (active / deletionRequested / restricted)
-// kommt aus dem user-Feature. Lokal gepinnt statt das user-runtime-Barrel zu
-// importieren (Runtime-Isolation, wie user-profile). Drift-Schutz: der
-// Screen-Test vergleicht gegen UserQueries.me.
+// Foreign QN: the lifecycle status (active / deletionRequested / restricted)
+// comes from the user feature. Pinned locally instead of importing the user
+// runtime barrel (runtime isolation, like user-profile). Drift protection: the
+// screen test compares against UserQueries.me.
 export const USER_ME_QUERY = "user:query:user:me" as const;
 
-// Client-safe Mirror von EXPORT_JOB_STATUS (schema/export-job.ts ist
-// server-only via Drizzle-Import). Drift-Schutz: der Screen-Test vergleicht
-// gegen die Schema-Originale.
+// Client-safe mirror of EXPORT_JOB_STATUS (schema/export-job.ts is server-only
+// via its Drizzle import). Drift protection: the screen test compares against
+// the schema original.
 export const EXPORT_JOB_STATUS = {
   Pending: "pending",
   Running: "running",