@cosmicdrift/kumiko-samples 0.378.0 → 0.380.0

package/packages/bundled-features/src/template-resolver/web/document-tiptap-editor.tsx

@@ -1,4 +1,3 @@
-// @runtime client
 //
 // tiptap-backed implementation behind DocumentContentEditor's lazy() boundary —
 // never import this file statically, tiptap must only load when a "document"
@@ -41,6 +40,10 @@ import {
 } from "lucide-react";
 import { Fragment, type ReactNode, useEffect, useMemo, useState } from "react";
 import { createPortal } from "react-dom";
+import {
+  createDocumentEditorExtensions,
+  DOCUMENT_BLOCK_ATTRIBUTE,
+} from "./document-editor-extensions.ts";
 import {
   DOCUMENT_TEXT_ALIGNMENTS,
   type DocumentTextAlignment,
@@ -48,12 +51,8 @@ import {
   isDocumentPlaceholderHref,
   isDocumentReferenceName,
   isDocumentResourceKey,
-} from "../document-schema.ts";
-import { parseDocumentStepsInput } from "../document-steps.ts";
-import {
-  createDocumentEditorExtensions,
-  DOCUMENT_BLOCK_ATTRIBUTE,
-} from "./document-editor-extensions.ts";
+} from "./document-schema.ts";
+import { parseDocumentStepsInput } from "./document-steps.ts";
 import {
   type DocumentEditorProps,
   type DocumentResourcePreview,

package/packages/bundled-features/src/template-resolver/web/document-toolbar-blocks.ts

@@ -1,7 +1,6 @@
-// @runtime client
 import type { ContentEditorProps } from "@cosmicdrift/kumiko-renderer";
 import type { ReactNode } from "react";
-import type { DocumentToolbarBlock } from "../document-blocks.ts";
+import type { DocumentToolbarBlock } from "./document-blocks.ts";
 
 /** Imperative access for an outside panel (placeholder list, resource list). */
 export type DocumentEditorHandle = {
@@ -48,4 +47,4 @@ export {
   documentBlocksForKind,
   MAIL_DOCUMENT_BLOCKS,
   PDF_DOCUMENT_BLOCKS,
-} from "../document-blocks.ts";
+} from "./document-blocks.ts";

package/packages/bundled-features/src/template-resolver/web/editor-handle.ts

@@ -1,6 +1,5 @@
-// @runtime client
 import type { Editor } from "@tiptap/core";
-import { isDocumentReferenceName, isDocumentResourceKey } from "../document-schema.ts";
+import { isDocumentReferenceName, isDocumentResourceKey } from "./document-schema.ts";
 import type { DocumentEditorHandle } from "./document-toolbar-blocks.ts";
 
 export function createEditorHandle(editor: Editor): DocumentEditorHandle {

package/packages/bundled-features/src/template-resolver/web/i18n.ts

@@ -1,4 +1,3 @@
-// @runtime client
 // Default translation bundle for the text-block editor. textBlocksClient()
 // hangs it into the LocaleProvider as a fallback bundle — apps override
 // individual keys via mergeTranslations at the createKumikoApp level.
@@ -128,6 +127,8 @@ export const defaultTranslations: TranslationsByLocale = {
       "Only the platform maintains this template; it cannot be overridden per tenant.",
     "templateResolver.errors.templateNotTenantEditable":
       "Only the platform may edit this template.",
+    "templateResolver.overview.lockedOverride":
+      "Own version stored but not delivered: the template is not unlocked for tenants.",
     "templateResolver.errors.template.invalidMeta": "The template settings are invalid.",
     "templateResolver.errors.template.meta.subject.required": "The subject is missing.",
     "templateResolver.errors.template.meta.subject.invalid":

package/packages/bundled-features/src/template-resolver/web/index.ts

@@ -1,23 +1,9 @@
-// @runtime client
 // Public exports for the browser side of template-resolver. Consumed through
 // the sub-path export `@cosmicdrift/kumiko-bundled-features/template-resolver/web`
 // — the server side (defineFeature) lives in
 // `@cosmicdrift/kumiko-bundled-features/template-resolver` and has no React or
 // DOM deps.
 
-export { MAIL_TONES, type MailTone } from "../mail-constants.ts";
-export {
-  PDF_DEFAULT_MARGIN_MM,
-  PDF_FOOTER_MARGIN_MM,
-  PDF_HEADER_MARGIN_MM,
-  PDF_ORIENTATIONS,
-  PDF_PAGE_FORMATS,
-} from "../pdf-constants.ts";
-export {
-  TemplateResolverErrors,
-  TemplateResolverHandlers,
-  TemplateResolverQueries,
-} from "../qualified-names.ts";
 export { textBlocksClient } from "./client-plugin.tsx";
 export { DocumentContentEditor } from "./document-editor.tsx";
 export {
@@ -29,7 +15,20 @@ export {
   MAIL_DOCUMENT_BLOCKS,
   PDF_DOCUMENT_BLOCKS,
 } from "./document-toolbar-blocks.ts";
+export { MAIL_TONES, type MailTone } from "./mail-constants.ts";
+export {
+  PDF_DEFAULT_MARGIN_MM,
+  PDF_FOOTER_MARGIN_MM,
+  PDF_HEADER_MARGIN_MM,
+  PDF_ORIENTATIONS,
+  PDF_PAGE_FORMATS,
+} from "./pdf-constants.ts";
 export {
   PlaceholderLineEditor,
   type PlaceholderLineEditorProps,
 } from "./placeholder-line-editor-lazy.tsx";
+export {
+  TemplateResolverErrors,
+  TemplateResolverHandlers,
+  TemplateResolverQueries,
+} from "./qualified-names.ts";

package/packages/bundled-features/src/template-resolver/{mail-constants.ts → web/mail-constants.ts}

@@ -1,4 +1,3 @@
-// @runtime client
 // No imports: web/ re-exports these, and template-meta.ts pulls in zod and the framework engine.
 export const MAIL_TONES = ["accent", "info", "success", "warning", "danger", "neutral"] as const;
 export type MailTone = (typeof MAIL_TONES)[number];

package/packages/bundled-features/src/template-resolver/{pdf-constants.ts → web/pdf-constants.ts}

@@ -1,4 +1,3 @@
-// @runtime client
 // No imports: web/ re-exports these, and constants.ts pulls in the framework engine.
 export const PDF_PAGE_FORMATS = ["A4", "Letter"] as const;
 export type PdfPageFormat = (typeof PDF_PAGE_FORMATS)[number];

package/packages/bundled-features/src/template-resolver/web/placeholder-line-editor-lazy.tsx

@@ -1,4 +1,3 @@
-// @runtime client
 //
 // Lazy boundary for the placeholder line editor: tiptap loads with the chunk,
 // the fallback is a plain text input holding the same `{{name}}` text.

package/packages/bundled-features/src/template-resolver/web/placeholder-line-editor.tsx

@@ -1,4 +1,3 @@
-// @runtime client
 //
 // Single-line editor for plain-text fields that carry {{placeholders}}
 // (subject, preheader). The stored value stays plain text; placeholders show
@@ -10,11 +9,11 @@ import { Placeholder, UndoRedo } from "@tiptap/extensions";
 import { EditorContent, useEditor } from "@tiptap/react";
 import StarterKit from "@tiptap/starter-kit";
 import { type ReactNode, useMemo, useState } from "react";
-import { DocumentVariable } from "../document-schema.ts";
-import { contentToLine, lineToContent, singleLine } from "../placeholder-text.ts";
 import { createVariableView } from "./document-editor-extensions.ts";
+import { DocumentVariable } from "./document-schema.ts";
 import type { DocumentEditorHandle } from "./document-toolbar-blocks.ts";
 import { createEditorHandle } from "./editor-handle.ts";
+import { contentToLine, lineToContent, singleLine } from "./placeholder-text.ts";
 import { useStableByKey } from "./use-stable-by-key.ts";
 
 export type PlaceholderLineEditorProps = {
@@ -132,7 +131,9 @@ function LineEditorBody({
         flat ? "min-h-10" : "min-h-9 rounded-md border border-input px-3",
         "[&_.ProseMirror]:w-full [&_.ProseMirror]:whitespace-nowrap [&_.ProseMirror]:outline-none",
         "[&_p]:m-0",
-        "[&_.is-editor-empty]:before:pointer-events-none [&_.is-editor-empty]:before:float-left [&_.is-editor-empty]:before:h-0 [&_.is-editor-empty]:before:text-muted-foreground [&_.is-editor-empty]:before:content-[attr(data-placeholder)]",
+        // Absolute and truncated: a hint longer than the field ends in an ellipsis instead of
+        // running past the frame or over the text below it.
+        "[&_.is-editor-empty]:relative [&_.is-editor-empty]:before:pointer-events-none [&_.is-editor-empty]:before:absolute [&_.is-editor-empty]:before:inset-x-0 [&_.is-editor-empty]:before:truncate [&_.is-editor-empty]:before:text-muted-foreground [&_.is-editor-empty]:before:content-[attr(data-placeholder)]",
         readOnly && "opacity-60",
       )}
     />

package/packages/bundled-features/src/template-resolver/{placeholder-text.ts → web/placeholder-text.ts}

@@ -1,4 +1,3 @@
-// @runtime client
 import type { JSONContent } from "@tiptap/core";
 import { isDocumentReferenceName } from "./document-schema.ts";
 

package/packages/bundled-features/src/template-resolver/{qualified-names.ts → web/qualified-names.ts}

@@ -1,4 +1,3 @@
-// @runtime client
 // Feature name + qualified handler/query names (QN: scope:type:name).
 export const TEMPLATE_RESOLVER_FEATURE = "template-resolver" as const;
 

package/packages/bundled-features/src/template-resolver/web/use-stable-by-key.ts

@@ -1,4 +1,3 @@
-// @runtime client
 import { useState } from "react";
 
 // Callers often pass fresh object literals every render; this keeps the first

package/packages/bundled-features/src/tenant/handlers/add-member.write.ts

@@ -12,9 +12,9 @@ import {
   writeFailure,
 } from "@cosmicdrift/kumiko-framework/errors";
 import * as z from "zod";
-import { TenantErrors } from "../constants.ts";
 import { findForbiddenMembershipRole, reservedMembershipRoleError } from "../membership-roles.ts";
 import { tenantMembershipEntity, tenantMembershipsTable } from "../membership-table.ts";
+import { TenantErrors } from "../web/constants.ts";
 
 const executor = createEventStoreExecutor(tenantMembershipsTable, tenantMembershipEntity, {
   entityName: "tenant-membership",

package/packages/bundled-features/src/tenant/index.ts

@@ -1,12 +1,5 @@
 export { cancelPendingInvitation } from "./cancel-pending-invitation.ts";
 export { TenantCommandSchemas } from "./command-schemas.ts";
-export {
-  OWNER_INVITE_ROLE_OPTIONS,
-  TENANT_FEATURE,
-  TenantErrors,
-  TenantHandlers,
-  TenantQueries,
-} from "./constants.ts";
 export { decryptTenantNames } from "./decrypt-tenant-names.ts";
 export { collectAssignableAppRoles, createTenantFeature } from "./feature.ts";
 export type { InvitationStatus } from "./invitation-table.ts";
@@ -24,3 +17,10 @@ export {
   tenantEntity,
   tenantTable,
 } from "./schema/tenant.ts";
+export {
+  OWNER_INVITE_ROLE_OPTIONS,
+  TENANT_FEATURE,
+  TenantErrors,
+  TenantHandlers,
+  TenantQueries,
+} from "./web/constants.ts";

package/packages/bundled-features/src/tenant/invitation-table.ts

@@ -32,7 +32,7 @@ import {
   createTimestampField,
 } from "@cosmicdrift/kumiko-framework/engine";
 // kumiko-lint-ignore cross-feature-import global-role options are owned by the user feature
-import { GLOBAL_ROLE_OPTIONS } from "../user/constants.ts";
+import { GLOBAL_ROLE_OPTIONS } from "../user/web/constants.ts";
 
 // Status-const-Object damit Handler-Code keine Magic-Strings nutzt.
 // Bei rename (z.B. "cancelled" → "revoked") fällt jeder caller auf

package/packages/bundled-features/src/tenant/invited-membership.ts

@@ -9,10 +9,10 @@ import { createSystemUser, type TenantId } from "@cosmicdrift/kumiko-framework/e
 import { ConflictError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
 import { parseRoles } from "@cosmicdrift/kumiko-framework/utils";
 import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
-import { TenantErrors } from "./constants.ts";
 import { findForbiddenMembershipRole, reservedMembershipRoleError } from "./membership-roles.ts";
 import { tenantMembershipEntity, tenantMembershipsTable } from "./membership-table.ts";
 import { seedTenantMembership } from "./seeding.ts";
+import { TenantErrors } from "./web/constants.ts";
 
 const membershipExecutor = createEventStoreExecutor(
   tenantMembershipsTable,

package/packages/bundled-features/src/tenant/last-tenant-admin.ts

@@ -1,8 +1,8 @@
 import { acquireNamespacedAdvisoryLock, selectMany } from "@cosmicdrift/kumiko-framework/db";
 import { ConflictError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
 import { parseRoles } from "@cosmicdrift/kumiko-framework/utils";
-import { TenantErrors } from "./constants.ts";
 import { tenantMembershipsTable } from "./membership-table.ts";
+import { TenantErrors } from "./web/constants.ts";
 
 // Serializes last-TenantAdmin demotion/removal checks per tenant inside the write TX
 // (dispatcher batch wraps handlers in transaction — xact lock holds through update).

package/packages/bundled-features/src/tenant/member-role-options.ts

@@ -1,5 +1,5 @@
 import type { AssignableAppRoles } from "@cosmicdrift/kumiko-framework/engine";
-import { OWNER_INVITE_ROLE_OPTIONS } from "./constants.ts";
+import { OWNER_INVITE_ROLE_OPTIONS } from "./web/constants.ts";
 
 export function memberRoleOptions(assignableAppRoles: AssignableAppRoles): readonly string[] {
   return [...OWNER_INVITE_ROLE_OPTIONS, ...assignableAppRoles.keys()];

package/packages/bundled-features/src/tenant/screens.ts

@@ -8,6 +8,7 @@ import {
   isAssignableByRole,
   type ScreenDefinition,
 } from "@cosmicdrift/kumiko-framework/engine";
+import { memberRoleOptions } from "./member-role-options.ts";
 import {
   DEFAULT_INVITE_ROLE_OPTIONS,
   INVITE_CREATE_SCREEN_ID,
@@ -17,8 +18,7 @@ import {
   MEMBERS_SCREEN_ID,
   TenantHandlers,
   TenantQueries,
-} from "./constants.ts";
-import { memberRoleOptions } from "./member-role-options.ts";
+} from "./web/constants.ts";
 
 // Cross-tenant SystemAdmin platform view of the tenants themselves. The tenant
 // feature runs with `r.systemScope()`, so the entityList returns every tenant.

package/packages/bundled-features/src/tenant/web/client-plugin.tsx

@@ -1,11 +1,10 @@
-// @runtime client
 import { mergeTranslations, type TranslationsByLocale } from "@cosmicdrift/kumiko-renderer";
 import type { ClientFeatureDefinition } from "@cosmicdrift/kumiko-renderer/web";
 import {
   MEMBER_ROLES_CELL_COMPONENT,
   MEMBER_STATUS_CELL_COMPONENT,
   TENANT_FEATURE,
-} from "../constants.ts";
+} from "./constants.ts";
 import { MemberRolesCell } from "./member-roles-cell.tsx";
 import { MemberStatusCell } from "./member-status-cell.tsx";
 

package/packages/bundled-features/src/tenant/{constants.ts → web/constants.ts}

@@ -1,8 +1,5 @@
-// @runtime client
-// Pure string constants — `@runtime client` so browser code (e.g. the
-// MemberStatusCell column renderer) can import them too (see
-// auth-email-password/constants.ts for the rationale). Runtime imports
-// client → server can keep using them as well.
+// Pure string constants, client-safe because they live under web/ (see
+// auth-email-password/web/constants.ts); server code may import them too.
 
 // Feature name
 export const TENANT_FEATURE = "tenant" as const;
@@ -64,7 +61,7 @@ export const TenantQueries = {
   tenantDirectory: "tenant:query:tenant-directory",
   activeTenantIds: "tenant:query:active-tenant-ids",
   resolveUserIds: "tenant:query:resolve-user-ids",
-  // Pending Invitations für den aktuellen Tenant (Admin-UI-Liste).
+  // Pending invitations of the current tenant (admin UI list).
   invitations: "tenant:query:invitations",
   // Combined active-members + pending-invitations list backing /members.
   teamList: "tenant:query:team:list",

package/packages/bundled-features/src/tenant/web/index.ts

@@ -1,4 +1,3 @@
-// @runtime client
 export { type TenantClientOptions, tenantClient } from "./client-plugin.tsx";
 export { MemberRolesCell } from "./member-roles-cell.tsx";
 export { MemberStatusCell } from "./member-status-cell.tsx";

package/packages/bundled-features/src/tenant/web/member-roles-cell.tsx

@@ -1,4 +1,3 @@
-// @runtime client
 // Column-renderer for the /members screen's roles column — `roles` is a
 // `readonly string[]` on TeamRow (see team-list.query.ts), and DataTable has
 // no default array-to-cell formatting, so this joins it into one string.

package/packages/bundled-features/src/tenant/web/member-status-cell.tsx

@@ -1,4 +1,3 @@
-// @runtime client
 // Column-renderer for the /members screen's status column, registered via
 // `tenantClient()`'s `columnRenderers` map (screen.columns[].renderer in
 // screens.ts). The list frame itself is the generic declarative

package/packages/bundled-features/src/tenant-lifecycle/stages.ts

@@ -5,6 +5,7 @@ import {
 } from "@cosmicdrift/kumiko-framework/crypto";
 import {
   createEventStoreExecutor,
+  createTenantDataDestroyDb,
   createTenantDb,
   type DbRunner,
   selectMany,
@@ -143,10 +144,9 @@ async function runTenantDataHooks(ctx: DestructionStageCtx): Promise<StageRunOut
       log: ctx.escapeHatchAuditLog ?? createFallbackLogger("tenant-lifecycle"),
     });
     const hookCtx: TenantDataHookCtx = {
-      db: createTenantDb({
+      db: createTenantDataDestroyDb({
         db: ctx.db,
         tenantId: ctx.tenantId,
-        mode: "tenant",
         grants: {
           unsafeRaw: reason !== undefined ? { reason } : undefined,
           report,

package/packages/bundled-features/src/tier-engine/entity.ts

@@ -3,7 +3,7 @@ import {
   createSelectField,
   createTextField,
 } from "@cosmicdrift/kumiko-framework/engine";
-import { type TierAssignmentSource, TierAssignmentSources } from "./constants.ts";
+import { type TierAssignmentSource, TierAssignmentSources } from "./web/constants.ts";
 
 // tier-assignment — pro Plattform-Tenant genau ein Aggregat. Aggregate-ID
 // wird deterministisch aus tenantId abgeleitet (uuidv5, siehe aggregate-id.ts).

package/packages/bundled-features/src/tier-engine/feature.ts

@@ -76,18 +76,18 @@ import * as z from "zod";
 import { tenantTable } from "../tenant/index.ts";
 import { tierAssignmentAggregateId } from "./aggregate-id.ts";
 import type { TierMap } from "./compose-app.ts";
-import {
-  TIER_ADMIN_SCREEN_ID,
-  TIER_ENGINE_FEATURE,
-  TierAssignmentSources,
-  TierEngineHandlers,
-} from "./constants.ts";
 import { tierAssignmentEntity } from "./entity.ts";
 import { getActiveTierQuery } from "./handlers/active-tier.query.ts";
 import { getTenantTierQuery } from "./handlers/get-tenant-tier.query.ts";
 import { createSetTenantTierWrite } from "./handlers/set-tenant-tier.write.ts";
-import { TIER_ENGINE_I18N } from "./i18n.ts";
 import { isTrialActive, type TrialPolicy } from "./trial.ts";
+import {
+  TIER_ADMIN_SCREEN_ID,
+  TIER_ENGINE_FEATURE,
+  TierAssignmentSources,
+  TierEngineHandlers,
+} from "./web/constants.ts";
+import { TIER_ENGINE_I18N } from "./web/i18n.ts";
 
 // Drizzle-table for the tier-assignment-entity. Built once at module-load
 // from the entity definition — same shape buildEntityTable would produce

package/packages/bundled-features/src/tier-engine/handlers/set-tenant-tier.write.ts

@@ -7,8 +7,8 @@ import { defineWriteHandler, type TenantId } from "@cosmicdrift/kumiko-framework
 import * as z from "zod";
 import { requireForTenant } from "../../shared/index.ts";
 import { tierAssignmentAggregateId } from "../aggregate-id.ts";
-import { type TierAssignmentSource, TierAssignmentSources } from "../constants.ts";
 import { type TierAssignmentRow, tierAssignmentEntity } from "../entity.ts";
+import { type TierAssignmentSource, TierAssignmentSources } from "../web/constants.ts";
 
 // SystemAdmin setzt das Tier eines BELIEBIGEN Tenants — manueller Grant ohne
 // Billing. Cross-tenant, daher SystemAdmin-only (kein TenantAdmin: sonst

package/packages/bundled-features/src/tier-engine/index.ts

@@ -17,14 +17,6 @@ export {
   type TierDefinition,
   type TierMap,
 } from "./compose-app.ts";
-export {
-  isTierAssignmentSource,
-  TIER_ENGINE_FEATURE,
-  type TierAssignmentSource,
-  TierAssignmentSources,
-  TierEngineHandlers,
-  TierEngineQueries,
-} from "./constants.ts";
 export { tierAssignmentEntity } from "./entity.ts";
 export {
   type CreateTierEngineOptions,
@@ -43,3 +35,11 @@ export {
   type TierResolverDeps,
 } from "./tier-resolver.ts";
 export { isTrialActive, type TrialPolicy } from "./trial.ts";
+export {
+  isTierAssignmentSource,
+  TIER_ENGINE_FEATURE,
+  type TierAssignmentSource,
+  TierAssignmentSources,
+  TierEngineHandlers,
+  TierEngineQueries,
+} from "./web/constants.ts";

package/packages/bundled-features/src/tier-engine/web/client-plugin.tsx

@@ -1,4 +1,3 @@
-// @runtime client
 // Client-feature factory for tier-engine. Supplies the default translations
 // for the declarative tier-admin actionForm (registered server-side via
 // r.screen in the feature); the app places the screen only via r.nav.
@@ -9,8 +8,8 @@ import {
   translationsByLocaleFromKeys,
 } from "@cosmicdrift/kumiko-renderer";
 import type { ClientFeatureDefinition } from "@cosmicdrift/kumiko-renderer/web";
-import { TIER_ENGINE_FEATURE } from "../constants.ts";
-import { TIER_ENGINE_I18N } from "../i18n.ts";
+import { TIER_ENGINE_FEATURE } from "./constants.ts";
+import { TIER_ENGINE_I18N } from "./i18n.ts";
 
 const defaultTranslations: TranslationsByLocale = translationsByLocaleFromKeys(TIER_ENGINE_I18N);
 

package/packages/bundled-features/src/tier-engine/{constants.ts → web/constants.ts}

@@ -1,4 +1,3 @@
-// @runtime client
 // Pure string-literal QNs/ids — imported by both server (feature.ts) and
 // client (web/client-plugin.tsx). Marked `client`, the most permissive
 // category in the kumiko isolation model (runtime may import client, client
@@ -39,6 +38,6 @@ export const TierEngineQueries = {
   tierOptions: "tier-engine:query:tier-options",
 } as const;
 
-// Screen-id für den manuellen Tier-Grant-Screen. Apps referenzieren ihn
-// qualifiziert in r.nav: `tier-engine:screen:tier-admin`.
+// Screen id of the manual tier-grant screen. Apps reference it qualified in
+// r.nav: `tier-engine:screen:tier-admin`.
 export const TIER_ADMIN_SCREEN_ID = "tier-admin" as const;

package/packages/bundled-features/src/tier-engine/{i18n.ts → web/i18n.ts}

@@ -1,4 +1,3 @@
-// @runtime client
 // Server + client i18n for the tier-admin actionForm. Single source of
 // truth: r.translations({ keys: TIER_ENGINE_I18N }) registers these
 // server-side, web/client-plugin derives the client-side locale bundle

package/packages/bundled-features/src/tier-engine/web/index.ts

@@ -1,4 +1,3 @@
-// @runtime client
 // Public exports für die Browser-Seite des tier-engine Features. Konsumiert
 // über `@cosmicdrift/kumiko-bundled-features/tier-engine/web` — die
 // Server-Seite (createTierEngineFeature) lebt unter

package/packages/bundled-features/src/user/handlers/create.write.ts

@@ -14,9 +14,9 @@ import { canonicalizeLocaleTag, isValidLocaleTag } from "@cosmicdrift/kumiko-fra
 import { isValidIanaTimeZone } from "@cosmicdrift/kumiko-framework/time";
 import { parseRoles } from "@cosmicdrift/kumiko-framework/utils";
 import * as z from "zod";
-import { UserErrors } from "../constants.ts";
 import { rolesInputSchema } from "../roles-input-schema.ts";
 import { userEntity, userTable } from "../schema/user.ts";
+import { UserErrors } from "../web/constants.ts";
 
 const crud = createEventStoreExecutor(userTable, userEntity, { entityName: "user" });
 

package/packages/bundled-features/src/user/handlers/update-roles.ts

@@ -22,8 +22,8 @@ import {
   writeFailure,
 } from "@cosmicdrift/kumiko-framework/errors";
 import { parseRoles } from "@cosmicdrift/kumiko-framework/utils";
-import { UserErrors } from "../constants.ts";
 import { USER_STATUS, userEntity, userTable } from "../schema/user.ts";
+import { UserErrors } from "../web/constants.ts";
 
 const crud = createEventStoreExecutor(userTable, userEntity, { entityName: "user" });
 

package/packages/bundled-features/src/user/handlers/update.write.ts

@@ -8,9 +8,9 @@ import {
 import { canonicalizeLocaleTag, isValidLocaleTag } from "@cosmicdrift/kumiko-framework/i18n";
 import { isValidIanaTimeZone } from "@cosmicdrift/kumiko-framework/time";
 import * as z from "zod";
-import { UserErrors } from "../constants.ts";
 import { rolesInputSchema } from "../roles-input-schema.ts";
 import { userEntity, userTable } from "../schema/user.ts";
+import { UserErrors } from "../web/constants.ts";
 import { applyUserRolesUpdate } from "./update-roles.ts";
 
 const crud = createEventStoreExecutor(userTable, userEntity, { entityName: "user" });

package/packages/bundled-features/src/user/index.ts

@@ -1,5 +1,4 @@
 export { UserCommandSchemas } from "./command-schemas.ts";
-export { USER_FEATURE, UserErrors, UserHandlers, UserQueries } from "./constants.ts";
 export {
   backfillUserStreamTenants,
   type UserStreamBackfillResult,
@@ -22,3 +21,4 @@ export {
   userEntity,
   userTable,
 } from "./schema/user.ts";
+export { USER_FEATURE, UserErrors, UserHandlers, UserQueries } from "./web/constants.ts";

package/packages/bundled-features/src/user/invited-global-roles.ts

@@ -7,8 +7,8 @@ import {
 import { createSystemUser, SYSTEM_TENANT_ID } from "@cosmicdrift/kumiko-framework/engine";
 import { NotFoundError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
 import { parseRoles } from "@cosmicdrift/kumiko-framework/utils";
-import { GLOBAL_ROLE_OPTIONS, type GlobalRole } from "./constants.ts";
 import { userEntity, userTable } from "./schema/user.ts";
+import { GLOBAL_ROLE_OPTIONS, type GlobalRole } from "./web/constants.ts";
 
 const userExecutor = createEventStoreExecutor(userTable, userEntity, { entityName: "user" });
 

package/packages/bundled-features/src/user/schema/user.ts

@@ -10,7 +10,7 @@ import {
   createTimestampField,
   createTzField,
 } from "@cosmicdrift/kumiko-framework/engine";
-import { GLOBAL_ROLE_OPTIONS } from "../constants.ts";
+import { GLOBAL_ROLE_OPTIONS } from "../web/constants.ts";
 
 /**
  * User-Lifecycle-Status (S2.U1). Single source of truth — Auth-Middleware

package/packages/bundled-features/src/user/{constants.ts → web/constants.ts}

@@ -1,4 +1,3 @@
-// @runtime client
 // Feature name
 export const USER_FEATURE = "user" as const;
 

package/packages/bundled-features/src/user-data-rights/changes.json

@@ -1,4 +1,18 @@
 [
+  {
+    "version": "0.379.0",
+    "type": "improvement",
+    "title": "Client files of a feature live under web/",
+    "detail": "Files that carried a runtime-client marker moved into <feature>/web/ (constants.ts, i18n.ts, qualified-names and similar), so the runtime-isolation guard reads the runtime from the path. Export subpaths such as ./tenant/constants are unchanged; only relative imports into the old file locations break. The web-side translation glue of user-data-rights, managed-pages, admin-shell, audit, jobs and the document designer is now web/default-translations.ts.",
+    "migration": "Run bun kumiko-upgrade --apply, or bun kumiko codemod feature-layout . --write. It moves every file marked as runtime client from src/features/<feature>/ into src/features/<feature>/web/, rewrites the relative imports and drops the marker. Add --check to list what is left.",
+    "codemod": "scripts/codemod/feature-layout.ts"
+  },
+  {
+    "version": "0.379.0",
+    "type": "fix",
+    "title": "DELETION_TOKEN_SECRET description corrected",
+    "detail": "The env description no longer claims a fallback to JWT_SECRET; without the secret the anonymous deletion-confirmation flow stays off."
+  },
   {
     "version": "0.376.0",
     "type": "improvement",

package/packages/bundled-features/src/user-data-rights/env.ts

@@ -9,7 +9,7 @@ export const deletionTokenSecretEnvSchema = z.object({
     .min(MIN_DELETION_TOKEN_SECRET_LENGTH)
     .optional()
     .describe(
-      "Dedicated HMAC secret for the anonymous deletion-confirmation links. Unset: derived from JWT_SECRET.",
+      "Dedicated HMAC secret for the anonymous deletion-confirmation links. At least 32 characters. Unset: the anonymous deletion-confirmation flow stays off; there is no fallback to JWT_SECRET.",
     )
     .meta({ kumiko: { pulumi: { generator: "openssl rand -hex 24", secret: true } } }),
 });

package/packages/bundled-features/src/user-data-rights/feature.ts

@@ -18,13 +18,6 @@ import {
 import { isPlainObject } from "@cosmicdrift/kumiko-types/type-guards";
 import { createConfigAccessor } from "../config/index.ts";
 import { validateGdprHookCompleteness, validateGdprPiiHookCoverage } from "./boot-checks.ts";
-import {
-  EXPORT_SECTION_EXTENSION_NAME,
-  PRIVACY_CENTER_SCREEN_ID,
-  STATUS_OPTION_KEY_PREFIX,
-  USER_ME_QUERY,
-  UserDataRightsHandlers,
-} from "./constants.ts";
 import { deletionTokenSecretEnvSchema } from "./env.ts";
 import { cancelDeletionWrite } from "./handlers/cancel-deletion.write.ts";
 import { createConfirmDeletionByTokenHandler } from "./handlers/confirm-deletion-by-token.write.ts";
@@ -48,7 +41,6 @@ import {
 import { requestExportWrite } from "./handlers/request-export.write.ts";
 import { restrictAccountWrite } from "./handlers/restrict-account.write.ts";
 import { createRunForgetCleanupHandler } from "./handlers/run-forget-cleanup.write.ts";
-import { USER_DATA_RIGHTS_I18N } from "./i18n.ts";
 import {
   type GdprMailDefaults,
   isGdprMailDeliveryAvailable,
@@ -82,6 +74,14 @@ import {
   exportJobDetailScreen,
   exportJobListScreen,
 } from "./screens.ts";
+import {
+  EXPORT_SECTION_EXTENSION_NAME,
+  PRIVACY_CENTER_SCREEN_ID,
+  STATUS_OPTION_KEY_PREFIX,
+  USER_ME_QUERY,
+  UserDataRightsHandlers,
+} from "./web/constants.ts";
+import { USER_DATA_RIGHTS_I18N } from "./web/i18n.ts";
 
 // user-data-rights — DSGVO Art. 15 (Auskunft) + Art. 17 (Löschung) +
 // Art. 18 (Restriction) + Art. 20 (Portabilität) als Core-Feature.
@@ -343,7 +343,7 @@ export function createUserDataRightsFeature(opts: UserDataRightsOptions = {}): F
     r.translations({ keys: USER_DATA_RIGHTS_I18N });
     registerGdprMails(r);
     // Privacy-center dot-form labels (i18nKey()-marked below), duplicated in
-    // web/i18n.ts's client bundle since privacy-center-screen.tsx renders
+    // web/default-translations.ts's client bundle since privacy-center-screen.tsx renders
     // them client-side.
     r.translations({
       keys: {