@cosmicdrift/kumiko-types 0.368.0 → 0.370.0

package/dist/action-icon.d.ts

@@ -1,3 +1,3 @@
-import type { IconKey } from "./nav-icon.js";
+import type { IconKey } from "./nav-icon.ts";
 export declare const ACTION_ICON_BY_ID: Readonly<Partial<Record<string, IconKey>>>;
 export declare function resolveActionIcon(id: string, declared?: IconKey): IconKey | undefined;

package/dist/agent-exposure.d.ts

@@ -1,4 +1,4 @@
-import type { AgentExposure, AgentHandlerHints, AgentScreenHints } from "./handlers.js";
+import type { AgentExposure, AgentHandlerHints, AgentScreenHints } from "./handlers.ts";
 /** Fail-closed: a handler without a `description` stays invisible to the agent
  *  unless it opts in explicitly. `kind` is a parameter because write and query
  *  handler definitions are structurally indistinguishable at runtime. */

package/dist/config.d.ts

@@ -1,14 +1,14 @@
 import type { ZodType } from "zod";
-import type { ConcurrencyMode } from "./concurrency-mode.js";
-import type { ConfigScope } from "./config-scope.js";
-import type { DbConnection } from "./db-connection.js";
-import type { FieldDefinition, OptionsQueryPayload } from "./fields.js";
-import type { EscapeHatchDeclaration, JobContext } from "./handlers.js";
-import type { PostDeleteHookFn, PostSaveHookFn, PreDeleteHookFn, PreQueryHookFn, PreSaveHookFn } from "./hooks.js";
-import type { TenantId } from "./identifiers.js";
-import type { NavIconKey } from "./nav-icon.js";
-import type { DashboardCustomPanel, DashboardScreenPanel } from "./screen.js";
-import type { TenantDb } from "./tenant-db-types.js";
+import type { ConcurrencyMode } from "./concurrency-mode.ts";
+import type { ConfigScope } from "./config-scope.ts";
+import type { DbConnection } from "./db-connection.ts";
+import type { FieldDefinition, OptionsQueryPayload } from "./fields.ts";
+import type { EscapeHatchDeclaration, JobContext } from "./handlers.ts";
+import type { PostDeleteHookFn, PostSaveHookFn, PreDeleteHookFn, PreQueryHookFn, PreSaveHookFn } from "./hooks.ts";
+import type { TenantId } from "./identifiers.ts";
+import type { NavIconKey } from "./nav-icon.ts";
+import type { DashboardCustomPanel, DashboardScreenPanel } from "./screen.ts";
+import type { TenantDb } from "./tenant-db-types.ts";
 export type ConfigKeyAccess = {
     readonly read: readonly string[];
     readonly write: readonly string[];
@@ -141,7 +141,7 @@ export type RunIn = "api" | "worker" | "both";
 export type JobRunIn = Exclude<RunIn, "both">;
 export type JobHandlerFn = (payload: Record<string, unknown>, context: JobContext) => Promise<void>;
 export type JobTrigger = {
-    readonly on: import("./handlers.js").NameOrRef | readonly import("./handlers.js").NameOrRef[];
+    readonly on: import("./handlers.ts").NameOrRef | readonly import("./handlers.ts").NameOrRef[];
     readonly where?: Readonly<Record<string, string | number | boolean>>;
 } | {
     readonly cron: string;
@@ -183,10 +183,10 @@ export type JobDefinition = {
         readonly subjectFields?: readonly string[] | undefined;
     } | undefined;
 };
-export type NotificationRecipientFn = (result: import("./hooks.js").SaveContext) => string | readonly string[] | {
+export type NotificationRecipientFn = (result: import("./hooks.ts").SaveContext) => string | readonly string[] | {
     readonly tenant: string;
 } | null;
-export type NotificationDataFn = (result: import("./hooks.js").SaveContext) => Record<string, unknown>;
+export type NotificationDataFn = (result: import("./hooks.ts").SaveContext) => Record<string, unknown>;
 export type NotificationTemplateFn = (data: Record<string, unknown>) => Record<string, unknown>;
 type TemplateVariableCommon = {
     readonly label?: string;
@@ -255,6 +255,7 @@ export type NotificationDefinition = {
     readonly localizedTemplate?: () => NotificationLocalizedTemplate;
     readonly systemOnly?: boolean;
     readonly unsubscribe?: boolean;
+    readonly tenantTransport?: boolean;
 };
 export type PluralForms = {
     readonly zero?: string;

package/dist/cursor-types.d.ts

@@ -1,4 +1,4 @@
-import type { EntityId, TenantId } from "./identifiers.js";
+import type { EntityId, TenantId } from "./identifiers.ts";
 export type CursorQueryOptions = {
     tenantId: TenantId;
     cursor?: string;

package/dist/define-handler.d.ts

@@ -1,8 +1,8 @@
 import type * as z from "zod";
 import type { ZodType } from "zod";
-import type { KumikoEventTypeMap } from "./event-type-map.js";
-import type { AccessRule, AgentHandlerHints, BeforeTransactionPhase, EscapeHatchDeclaration, HandlerContext, PayloadRateLimitOption, PreparedWriteEvent, PreTransactionReservation, QueryEvent, RateLimitDeclaration, WriteHandlerTransactionMode, WriteResult } from "./handlers.js";
-import type { PipelineDef } from "./step.js";
+import type { KumikoEventTypeMap } from "./event-type-map.ts";
+import type { AccessRule, AgentHandlerHints, BeforeTransactionPhase, EscapeHatchDeclaration, HandlerContext, PayloadRateLimitOption, PreparedWriteEvent, PreTransactionReservation, QueryEvent, RateLimitDeclaration, WriteHandlerTransactionMode, WriteResult } from "./handlers.ts";
+import type { PipelineDef } from "./step.ts";
 export type WriteHandlerDefinition<TName extends string = string, TSchema extends ZodType = ZodType, TData = unknown, TMap extends object = KumikoEventTypeMap, TPrepared = undefined> = {
     readonly name: TName;
     readonly schema: TSchema;

package/dist/entity-cache.d.ts

@@ -1,4 +1,4 @@
-import type { EntityId, TenantId } from "./identifiers.js";
+import type { EntityId, TenantId } from "./identifiers.ts";
 export type EntityCache = {
     /** Get a single cached entity. Returns null on miss. */
     get(tenantId: TenantId, entityName: string, id: EntityId): Promise<Record<string, unknown> | null>;

package/dist/entity-handlers.d.ts

@@ -1,5 +1,5 @@
-import type { EntityDefinition } from "./fields.js";
-import type { AccessRule, AgentHandlerHints, EscapeHatchDeclaration, QueryHandlerDef, WriteHandlerDef } from "./handlers.js";
+import type { EntityDefinition } from "./fields.ts";
+import type { AccessRule, AgentHandlerHints, EscapeHatchDeclaration, QueryHandlerDef, WriteHandlerDef } from "./handlers.ts";
 export type EntityHandlerOptions = {
     readonly access: AccessRule;
     readonly description?: string;

package/dist/entity-table-meta-types.d.ts

@@ -1,6 +1,6 @@
 /// <reference types="temporal-polyfill/global" preserve="true" />
-import type { EntityRelations } from "./relations.js";
-import type { EntityTenancy } from "./tenancy-brand.js";
+import type { EntityRelations } from "./relations.ts";
+import type { EntityTenancy } from "./tenancy-brand.ts";
 export type PgType = "uuid" | "text" | "boolean" | "integer" | "double precision" | "bigint" | "serial" | "bigserial" | "jsonb" | "timestamptz" | "timestamptz(3)" | "date" | `numeric(${number},${number})`;
 export type ColumnMeta = {
     readonly name: string;

package/dist/envelope-cipher-types.d.ts

@@ -1,4 +1,4 @@
-import type { KeyScope } from "./secrets-types.js";
+import type { KeyScope } from "./secrets-types.ts";
 export type EnvelopeCipher = {
     encrypt(plaintext: string, scope?: KeyScope): Promise<string>;
     decrypt(stored: string, scope?: KeyScope): Promise<string>;

package/dist/event-store-executor-types.d.ts

@@ -1,10 +1,10 @@
-import type { CursorResult } from "./cursor-types.js";
-import type { EntityDefinition } from "./fields.js";
-import type { SessionUser, WriteResult } from "./handlers.js";
-import type { DeleteContext, SaveContext } from "./hooks.js";
-import type { EntityId, TenantId } from "./identifiers.js";
-import type { SearchAdapter } from "./search-adapter.js";
-import type { TenantDb } from "./tenant-db-types.js";
+import type { CursorResult } from "./cursor-types.ts";
+import type { EntityDefinition } from "./fields.ts";
+import type { SessionUser, WriteResult } from "./handlers.ts";
+import type { DeleteContext, SaveContext } from "./hooks.ts";
+import type { EntityId, TenantId } from "./identifiers.ts";
+import type { SearchAdapter } from "./search-adapter.ts";
+import type { TenantDb } from "./tenant-db-types.ts";
 export type ParentVisibilityOption = {
     readonly entities: ReadonlyMap<string, EntityDefinition>;
 };

package/dist/event-store-types.d.ts

@@ -1,5 +1,5 @@
 /// <reference types="temporal-polyfill/global" preserve="true" />
-import type { TenantId } from "./identifiers.js";
+import type { TenantId } from "./identifiers.ts";
 export interface VersionConflict extends Error {
     readonly aggregateId: string;
     readonly expectedVersion: number;

package/dist/extension-options-map.d.ts

@@ -1,4 +1,4 @@
-import type { EscapeHatchDeclaration } from "./handlers.js";
+import type { EscapeHatchDeclaration } from "./handlers.ts";
 export interface KumikoExtensionOptionsMap {
 }
 /** Options shape for an extension name: the augmented hook shape plus `escapeHatch`, or an untyped bag if unaugmented. */

package/dist/feature.d.ts

@@ -1,22 +1,22 @@
 import type * as z from "zod";
 import type { ZodType } from "zod";
-import type { ConfigKeyDefinition, ConfigKeyHandle, ConfigKeyType, ConfigSeedDef, ExtensionSelectorDef, ExtensionSelectorPanel, JobDefinition, JobHandlerFn, NotificationDataFn, NotificationDefinition, NotificationLocalizedTemplate, NotificationRecipientFn, NotificationRecordMapping, NotificationTemplateBody, NotificationTemplateFn, NotificationTemplateMeta, ReferenceDataDef, RegistrarExtensionDef, RegistrarExtensionRegistration, TemplateVariables, TranslationKeys, TranslationsDef } from "./config.js";
-import type { QueryHandlerDefinition, StreamHandlerDefinition, WriteHandlerDefinition } from "./define-handler.js";
-import type { RegisterEntityCrudOptions } from "./entity-handlers.js";
-import type { EntityTableMeta } from "./entity-table-meta-types.js";
-import type { KumikoEventTypeMap } from "./event-type-map.js";
-import type { ExtensionOptionsArgs, ExtensionOptionsFor } from "./extension-options-map.js";
-import type { EntityDefinition } from "./fields.js";
-import type { AccessRule, AuthClaimsFn, AuthClaimsHookDef, ClaimKeyDefinition, ClaimKeyHandle, ClaimKeyType, DeclarativeEventMigration, EntityRef, EscapeHatchDeclaration, EventDef, EventMigrationDef, EventPiiStance, EventUpcastFn, HandlerRef, NameOrRef, QualifiedEventName, QueryHandlerDef, RateLimitDeclaration, StreamHandlerDef, StreamHandlerFn, WriteHandlerDef } from "./handlers.js";
-import type { EntityHookMap, HookMap, HookPhase, OwnedFn, PostDeleteHookFn, PostQueryHookFn, PostSaveHookFn, PreDeleteHookFn, PreQueryHookFn, PreSaveHookFn, SearchPayloadContributorFn, ValidationHookFn } from "./hooks.js";
-import type { HttpRouteDefinition } from "./http-route.js";
-import type { ContentCollectionDefinition, NavDefinition } from "./nav.js";
-import type { EntityProjectionExtension, MultiStreamProjectionDefinition, ProjectionDefinition } from "./projection.js";
-import type { EntityRelations, RelationDefinition } from "./relations.js";
-import type { ScreenDefinition } from "./screen.js";
-import type { TreeActionDef, TreeActionsHandle } from "./tree-node.js";
-import type { WebSocketRouteDefinition } from "./websocket-route.js";
-import type { WorkspaceDefinition } from "./workspace.js";
+import type { ConfigKeyDefinition, ConfigKeyHandle, ConfigKeyType, ConfigSeedDef, ExtensionSelectorDef, ExtensionSelectorPanel, JobDefinition, JobHandlerFn, NotificationDataFn, NotificationDefinition, NotificationLocalizedTemplate, NotificationRecipientFn, NotificationRecordMapping, NotificationTemplateBody, NotificationTemplateFn, NotificationTemplateMeta, ReferenceDataDef, RegistrarExtensionDef, RegistrarExtensionRegistration, TemplateVariables, TranslationKeys, TranslationsDef } from "./config.ts";
+import type { QueryHandlerDefinition, StreamHandlerDefinition, WriteHandlerDefinition } from "./define-handler.ts";
+import type { RegisterEntityCrudOptions } from "./entity-handlers.ts";
+import type { EntityTableMeta } from "./entity-table-meta-types.ts";
+import type { KumikoEventTypeMap } from "./event-type-map.ts";
+import type { ExtensionOptionsArgs, ExtensionOptionsFor } from "./extension-options-map.ts";
+import type { EntityDefinition } from "./fields.ts";
+import type { AccessRule, AuthClaimsFn, AuthClaimsHookDef, ClaimKeyDefinition, ClaimKeyHandle, ClaimKeyType, DeclarativeEventMigration, EntityRef, EscapeHatchDeclaration, EventDef, EventMigrationDef, EventPiiStance, EventUpcastFn, HandlerRef, NameOrRef, QualifiedEventName, QueryHandlerDef, RateLimitDeclaration, StreamHandlerDef, StreamHandlerFn, WriteHandlerDef } from "./handlers.ts";
+import type { EntityHookMap, HookMap, HookPhase, OwnedFn, PostDeleteHookFn, PostQueryHookFn, PostSaveHookFn, PreDeleteHookFn, PreQueryHookFn, PreSaveHookFn, SearchPayloadContributorFn, ValidationHookFn } from "./hooks.ts";
+import type { HttpRouteDefinition } from "./http-route.ts";
+import type { ContentCollectionDefinition, NavDefinition } from "./nav.ts";
+import type { EntityProjectionExtension, MultiStreamProjectionDefinition, ProjectionDefinition } from "./projection.ts";
+import type { EntityRelations, RelationDefinition } from "./relations.ts";
+import type { ScreenDefinition } from "./screen.ts";
+import type { TreeActionDef, TreeActionsHandle } from "./tree-node.ts";
+import type { WebSocketRouteDefinition } from "./websocket-route.ts";
+import type { WorkspaceDefinition } from "./workspace.ts";
 export type FeatureMetricType = "counter" | "histogram" | "gauge";
 export type FeatureMetricDef = {
     readonly shortName: string;
@@ -115,6 +115,12 @@ export type BootCheckContext = {
     readonly features: readonly FeatureDefinition[];
 };
 export type BootCheckFn = (ctx: BootCheckContext) => void;
+/** runProdApp options a stack can depend on; runProdApp checks the set at boot. */
+export type BootOptionName = "mail" | "kmsMode" | "fileStorage" | "billing" | "demoMode" | "seeds" | "signals" | "rateLimit";
+export type StackBootRequirement = {
+    readonly stack: string;
+    readonly options: readonly BootOptionName[];
+};
 export type FeatureDefinition = {
     readonly name: string;
     readonly description?: string;
@@ -164,6 +170,7 @@ export type FeatureDefinition = {
      * feature-authored message (framework wraps it with `[Feature <name>]`).
      */
     readonly bootChecks: readonly BootCheckFn[];
+    readonly bootRequires?: StackBootRequirement;
     readonly referenceData: readonly ReferenceDataDef[];
     readonly notifications: Readonly<Record<string, NotificationDefinition>>;
     readonly events: Readonly<Record<string, EventDef>>;
@@ -328,6 +335,7 @@ export type FeatureRegistrar<TFeature extends string = string> = {
         readonly renamedFrom?: readonly string[];
         readonly systemOnly?: boolean;
         readonly unsubscribe?: boolean;
+        readonly tenantTransport?: boolean;
     }): void;
     notification(definition: {
         readonly name: string;
@@ -345,6 +353,7 @@ export type FeatureRegistrar<TFeature extends string = string> = {
         readonly renamedFrom?: readonly string[];
         readonly systemOnly?: boolean;
         readonly unsubscribe?: boolean;
+        readonly tenantTransport?: boolean;
     }): void;
     translations(def: TranslationsDef): void;
     defineEvent<const TInner extends string, TPayload>(name: TInner, schema: ZodType<TPayload>, options: {

package/dist/fields.d.ts

@@ -1,8 +1,8 @@
 /// <reference types="temporal-polyfill/global" preserve="true" />
-import type { VariantSpec } from "./derivatives-types.js";
-import type { EventUpcastCtx } from "./handlers.js";
-import type { OwnershipMap } from "./ownership.js";
-import type { EntityTenancy } from "./tenancy-brand.js";
+import type { VariantSpec } from "./derivatives-types.ts";
+import type { EventUpcastCtx } from "./handlers.ts";
+import type { OwnershipMap } from "./ownership.ts";
+import type { EntityTenancy } from "./tenancy-brand.ts";
 export type FieldAccess = {
     readonly read?: OwnershipMap | readonly string[];
     readonly write?: OwnershipMap | readonly string[];

package/dist/file-provider-resolver-types.d.ts

@@ -1,3 +1,3 @@
-import type { FileStorageProvider } from "./file-storage-provider-types.js";
-import type { TenantId } from "./identifiers.js";
+import type { FileStorageProvider } from "./file-storage-provider-types.ts";
+import type { TenantId } from "./identifiers.ts";
 export type FileProviderResolver = (tenantId: TenantId) => Promise<FileStorageProvider>;

package/dist/handlers.d.ts

@@ -1,21 +1,21 @@
 /// <reference types="temporal-polyfill/global" preserve="true" />
 import type { Redis } from "ioredis";
 import type { ZodType } from "zod";
-import type { CacheSyncBus } from "./cache-sync-types.js";
-import type { ConfigAccessor, ConfigAccessorFactory, ConfigResolver } from "./config.js";
-import type { DbConnection, DbTx } from "./db-connection.js";
-import type { DerivativesContext } from "./derivatives-types.js";
-import type { EntityCache } from "./entity-cache.js";
-import type { EventMetadata, WriteOrigin } from "./event-store-types.js";
-import type { KumikoEventTypeMap } from "./event-type-map.js";
-import type { FileContext } from "./file-handle-types.js";
-import type { FileProviderResolver } from "./file-provider-resolver-types.js";
-import type { GeoTzProvider } from "./geo-tz.js";
-import type { Logger } from "./logger.js";
-import type { Meter, MetricsHandle, Tracer } from "./observability/index.js";
-import type { SearchAdapter } from "./search-adapter.js";
-import type { CrossTenantReads, TenantDb } from "./tenant-db-types.js";
-import type { Clock, TzContext } from "./tz-context.js";
+import type { CacheSyncBus } from "./cache-sync-types.ts";
+import type { ConfigAccessor, ConfigAccessorFactory, ConfigResolver } from "./config.ts";
+import type { DbConnection, DbTx } from "./db-connection.ts";
+import type { DerivativesContext } from "./derivatives-types.ts";
+import type { EntityCache } from "./entity-cache.ts";
+import type { EventMetadata, WriteOrigin } from "./event-store-types.ts";
+import type { KumikoEventTypeMap } from "./event-type-map.ts";
+import type { FileContext } from "./file-handle-types.ts";
+import type { FileProviderResolver } from "./file-provider-resolver-types.ts";
+import type { GeoTzProvider } from "./geo-tz.ts";
+import type { Logger } from "./logger.ts";
+import type { Meter, MetricsHandle, Tracer } from "./observability/index.ts";
+import type { SearchAdapter } from "./search-adapter.ts";
+import type { CrossTenantReads, TenantDb } from "./tenant-db-types.ts";
+import type { Clock, TzContext } from "./tz-context.ts";
 export type OpenToAllPersonalData = "tenant-members";
 export type OpenToAllDeclaration = {
     readonly reason: string;
@@ -72,7 +72,7 @@ export type ClaimKeyHandle<T extends ClaimKeyType = ClaimKeyType> = {
     readonly type: T;
 };
 export type AuthClaimsContext = {
-    readonly db: import("./tenant-db-types.js").TenantDb;
+    readonly db: import("./tenant-db-types.ts").TenantDb;
     readonly queryAs: (user: SessionUser, qn: string, payload: unknown) => Promise<unknown>;
     readonly config?: ConfigAccessor;
 };
@@ -112,14 +112,14 @@ export type QueryEvent<TPayload = unknown> = {
     readonly payload: TPayload;
     readonly user: SessionUser;
 };
-import type { WriteFailure } from "./write-error-info-types.js";
+import type { WriteFailure } from "./write-error-info-types.ts";
 export type WriteResult<TData = unknown> = {
     readonly isSuccess: true;
     readonly data: TData;
 } | WriteFailure;
-import type { Registry } from "./feature.js";
-import type { TenantId } from "./identifiers.js";
-import type { UncheckedSystemDb } from "./tenant-db-types.js";
+import type { Registry } from "./feature.ts";
+import type { TenantId } from "./identifiers.ts";
+import type { UncheckedSystemDb } from "./tenant-db-types.ts";
 export type MemberReader = (userId: string, qn: string, payload: unknown) => Promise<unknown>;
 export type JobTriggerEvent = {
     readonly id: string;
@@ -231,8 +231,8 @@ type SharedContextFields = {
      */
     readonly forTenant?: (tenantId: TenantId) => TenantWriteTarget;
     readonly _configAccessorFactory?: ConfigAccessorFactory;
-    readonly configEncryption?: import("./envelope-cipher-types.js").EnvelopeCipher;
-    readonly rateLimit?: import("./rate-limit-types.js").RateLimitResolver;
+    readonly configEncryption?: import("./envelope-cipher-types.ts").EnvelopeCipher;
+    readonly rateLimit?: import("./rate-limit-types.ts").RateLimitResolver;
     readonly _rateLimitPayloadDigest?: (value: string) => string;
     readonly searchAdapter?: SearchAdapter;
     readonly files?: FileContext;
@@ -244,9 +244,9 @@ type SharedContextFields = {
     readonly _notifyInTransactionFactory?: (user: SessionUser, tenantId: TenantId) => NotifyFn;
     readonly _notifyAfterCommitFactory?: (user: SessionUser, tenantId: TenantId) => NotifyFn;
     readonly _escapeHatchAuditSink?: EscapeHatchAuditSink;
-    readonly secrets?: import("./secrets-types.js").SecretsContext;
-    readonly masterKeyProvider?: import("./secrets-types.js").MasterKeyProvider;
-    readonly kms?: import("./kms-adapter-types.js").KmsAdapter;
+    readonly secrets?: import("./secrets-types.ts").SecretsContext;
+    readonly masterKeyProvider?: import("./secrets-types.ts").MasterKeyProvider;
+    readonly kms?: import("./kms-adapter-types.ts").KmsAdapter;
     readonly tracer?: Tracer;
     readonly meter?: Meter;
     readonly signal?: AbortSignal;
@@ -326,7 +326,7 @@ export type HandlerContext<TMap extends object = KumikoEventTypeMap> = SharedCon
     readonly fetchForWriting: (args: FetchForWritingArgs) => Promise<AggregateStreamHandle>;
     readonly loadAggregate: (aggregateId: string, options?: {
         readonly asOf?: Temporal.Instant;
-    }) => Promise<readonly import("./event-store-types.js").StoredEvent[]>;
+    }) => Promise<readonly import("./event-store-types.ts").StoredEvent[]>;
     readonly archiveStream: (aggregateId: string, args: {
         readonly aggregateType: string;
         readonly reason?: string;
@@ -340,7 +340,7 @@ export type HandlerContext<TMap extends object = KumikoEventTypeMap> = SharedCon
         readonly state: Record<string, unknown>;
         readonly snapshotVersion?: number;
     }) => Promise<void>;
-    readonly loadAggregateWithSnapshot: <TState extends Record<string, unknown>>(aggregateId: string, reducer: import("./snapshot-types.js").SnapshotReducer<TState>, initial: TState, options?: Omit<import("./snapshot-types.js").LoadAggregateWithSnapshotOptions, "upcastEvent">) => Promise<import("./snapshot-types.js").LoadAggregateWithSnapshotResult<TState>>;
+    readonly loadAggregateWithSnapshot: <TState extends Record<string, unknown>>(aggregateId: string, reducer: import("./snapshot-types.ts").SnapshotReducer<TState>, initial: TState, options?: Omit<import("./snapshot-types.ts").LoadAggregateWithSnapshotOptions, "upcastEvent">) => Promise<import("./snapshot-types.ts").LoadAggregateWithSnapshotResult<TState>>;
     readonly queryProjection: <T = Record<string, unknown>>(qualifiedName: string, options?: {
         readonly unsafeAllTenants?: boolean;
     }) => Promise<readonly T[]>;
@@ -467,10 +467,10 @@ export type AppendEventFn<TMap extends object = KumikoEventTypeMap> = <K extends
 export type UnsafeAppendEventFn = (args: AppendEventArgs) => Promise<void>;
 export type TryAppendEventResult = {
     readonly ok: true;
-    readonly event: import("./event-store-types.js").StoredEvent;
+    readonly event: import("./event-store-types.ts").StoredEvent;
 } | {
     readonly ok: false;
-    readonly conflict: import("./event-store-types.js").VersionConflict;
+    readonly conflict: import("./event-store-types.ts").VersionConflict;
 };
 export type TryAppendEventFn = (args: AppendEventArgs) => Promise<TryAppendEventResult>;
 export type FetchForWritingArgs = {
@@ -479,7 +479,7 @@ export type FetchForWritingArgs = {
     readonly expectedVersion?: number;
 };
 export type AggregateStreamHandle = {
-    readonly events: readonly import("./event-store-types.js").StoredEvent[];
+    readonly events: readonly import("./event-store-types.ts").StoredEvent[];
     readonly version: number;
     readonly appendOne: (args: {
         readonly type: string;
@@ -488,8 +488,8 @@ export type AggregateStreamHandle = {
     readonly hasEvent: (type: string) => boolean;
 };
 export type EventUpcastCtx = {
-    readonly db: import("./db-connection.js").DbRunner;
-    readonly tenantId: import("./identifiers.js").TenantId;
+    readonly db: import("./db-connection.ts").DbRunner;
+    readonly tenantId: import("./identifiers.ts").TenantId;
 };
 export type EventUpcastFn = (payload: unknown, ctx: EventUpcastCtx) => unknown | Promise<unknown>;
 export type DeclarativeEventMigration = {
@@ -614,7 +614,7 @@ export type WriteHandlerDef = {
      *  SYSTEM_TENANT_ID when the host resolves no tenant. Boot requires
      *  `access.roles: ["anonymous"]` and a real `rateLimit`. */
     readonly tenantlessAnonymous?: boolean;
-    readonly perform?: import("./step.js").PipelineDef;
+    readonly perform?: import("./step.ts").PipelineDef;
 };
 export declare const ENTITY_CONVENTION_QUERY_BRAND = "__kumikoEntityConventionQuery";
 export type QueryHandlerDef = {

package/dist/hooks.d.ts

@@ -1,7 +1,7 @@
-import type { StoredEvent } from "./event-store-types.js";
-import type { AppContext } from "./handlers.js";
-import type { HookPhase } from "./hook-phase.js";
-import type { EntityId } from "./identifiers.js";
+import type { StoredEvent } from "./event-store-types.ts";
+import type { AppContext } from "./handlers.ts";
+import type { HookPhase } from "./hook-phase.ts";
+import type { EntityId } from "./identifiers.ts";
 export type ValidationError = {
     readonly field: string;
     readonly error: string;
@@ -15,14 +15,14 @@ export type SaveContext = {
     readonly previous: Readonly<Record<string, unknown>>;
     readonly isNew: boolean;
     readonly entityName?: string | undefined;
-    readonly event?: StoredEvent | undefined;
+    readonly event: StoredEvent;
 };
 export type DeleteContext = {
     readonly kind: "delete";
     readonly id: EntityId;
     readonly data: Readonly<Record<string, unknown>>;
     readonly entityName?: string | undefined;
-    readonly event?: StoredEvent | undefined;
+    readonly event: StoredEvent;
     readonly lockGuardBypassed?: boolean | undefined;
 };
 export type LifecycleResult = SaveContext | DeleteContext;
@@ -43,7 +43,7 @@ export type PostQueryHookFn = (result: {
     rows: ReadonlyArray<Record<string, unknown>>;
 }>;
 export type LifecycleHookFn = PreSaveHookFn | PostSaveHookFn | PreDeleteHookFn | PostDeleteHookFn | PreQueryHookFn | PostQueryHookFn;
-export type { HookPhase } from "./hook-phase.js";
+export type { HookPhase } from "./hook-phase.ts";
 export type HookOwner = {
     readonly featureName?: string;
 };

package/dist/http-route.d.ts

@@ -1,5 +1,5 @@
 import type { Context } from "hono";
-import type { RateLimitOption } from "./handlers.js";
+import type { RateLimitOption } from "./handlers.ts";
 /** Subset von HTTP-Methoden den wir aktiv unterstützen. Hono spricht
  *  alle, aber das hier sind die einzigen die ein Feature-Author
  *  realistisch deklariert. */
@@ -28,7 +28,7 @@ export type HttpRouteHandlerDeps = {
      *  an internal X-Tenant header on `app.fetch(...)` is indistinguishable
      *  from an external client and gets rejected by resolverTrust:
      *  "authoritative" anonymousAccess configs (see auth-middleware.ts). */
-    readonly systemQuery: (type: string, payload: unknown, tenantId: import("./identifiers.js").TenantId) => Promise<unknown>;
+    readonly systemQuery: (type: string, payload: unknown, tenantId: import("./identifiers.ts").TenantId) => Promise<unknown>;
     /** Caller IP resolved via the server's configured, trustedProxyHops-aware
      *  resolver (same one requestIdMiddleware uses for `/api/*`) — a route
      *  handler needing the caller's IP (rate limiting, audit) should read

package/dist/kms-adapter-types.d.ts

@@ -1,4 +1,4 @@
-import type { TenantId } from "./identifiers.js";
+import type { TenantId } from "./identifiers.ts";
 export type SubjectId = {
     readonly kind: "user";
     readonly userId: string;

package/dist/multi-stream-apply-context-types.d.ts

@@ -1,11 +1,11 @@
 /// <reference types="temporal-polyfill/global" preserve="true" />
-import type { DerivativesContext } from "./derivatives-types.js";
-import type { StoredEvent } from "./event-store-types.js";
-import type { KumikoEventTypeMap } from "./event-type-map.js";
-import type { Registry } from "./feature.js";
-import type { FileContext } from "./file-handle-types.js";
-import type { AppendEventFn, UnsafeAppendEventFn } from "./handlers.js";
-import type { SecretsContext } from "./secrets-types.js";
+import type { DerivativesContext } from "./derivatives-types.ts";
+import type { StoredEvent } from "./event-store-types.ts";
+import type { KumikoEventTypeMap } from "./event-type-map.ts";
+import type { Registry } from "./feature.ts";
+import type { FileContext } from "./file-handle-types.ts";
+import type { AppendEventFn, UnsafeAppendEventFn } from "./handlers.ts";
+import type { SecretsContext } from "./secrets-types.ts";
 export type MultiStreamApplyContext<TMap extends object = KumikoEventTypeMap> = {
     readonly appendEvent: AppendEventFn<TMap>;
     readonly unsafeAppendEvent: UnsafeAppendEventFn;

package/dist/nav.d.ts

@@ -1,8 +1,8 @@
-import type { AccessRule } from "./handlers.js";
-import type { NavIconKey } from "./nav-icon.js";
-import type { TargetRef } from "./target-ref.js";
-import type { TreeAction } from "./tree-node.js";
-export type { IconKey, NavIconKey } from "./nav-icon.js";
+import type { AccessRule } from "./handlers.ts";
+import type { NavIconKey } from "./nav-icon.ts";
+import type { TargetRef } from "./target-ref.ts";
+import type { TreeAction } from "./tree-node.ts";
+export type { IconKey, NavIconKey } from "./nav-icon.ts";
 export type NavDefinition = {
     readonly id: string;
     readonly label: string;

package/dist/observability/index.d.ts

@@ -1,3 +1,3 @@
-export type { Counter, Gauge, Histogram, Meter, MetricDefinition, MetricLabels, MetricsHandle, MetricType, } from "./metric.js";
-export type { ObservabilityOptions, ObservabilityProvider, SamplingConfig, SensitiveFilterConfig, } from "./provider.js";
-export type { SerializedTraceContext, Span, SpanAttributes, SpanAttributeValue, SpanKind, SpanStatus, StartSpanOptions, Tracer, } from "./span.js";
+export type { Counter, Gauge, Histogram, Meter, MetricDefinition, MetricLabels, MetricsHandle, MetricType, } from "./metric.ts";
+export type { ObservabilityOptions, ObservabilityProvider, SamplingConfig, SensitiveFilterConfig, } from "./provider.ts";
+export type { SerializedTraceContext, Span, SpanAttributes, SpanAttributeValue, SpanKind, SpanStatus, StartSpanOptions, Tracer, } from "./span.ts";

package/dist/observability/provider.d.ts

@@ -1,5 +1,5 @@
-import type { Meter } from "./metric.js";
-import type { Tracer } from "./span.js";
+import type { Meter } from "./metric.ts";
+import type { Tracer } from "./span.ts";
 export type SamplingConfig = {
     readonly tracing?: number;
     readonly alwaysOnError?: boolean;

package/dist/ownership.d.ts

@@ -1,4 +1,4 @@
-import type { SessionUser } from "./handlers.js";
+import type { SessionUser } from "./handlers.ts";
 export type SqlFragment = {
     readonly sqlText: string;
     readonly params: readonly unknown[];

package/dist/projection.d.ts

@@ -1,9 +1,9 @@
-import type { RunIn } from "./config.js";
-import type { DbRunner } from "./db-connection.js";
-import type { StoredEvent } from "./event-store-types.js";
-import type { EntityDefinition } from "./fields.js";
-import type { MultiStreamApplyContext } from "./multi-stream-apply-context-types.js";
-import type { SchemaTable } from "./schema-table-types.js";
+import type { RunIn } from "./config.ts";
+import type { DbRunner } from "./db-connection.ts";
+import type { StoredEvent } from "./event-store-types.ts";
+import type { EntityDefinition } from "./fields.ts";
+import type { MultiStreamApplyContext } from "./multi-stream-apply-context-types.ts";
+import type { SchemaTable } from "./schema-table-types.ts";
 export type ProjectionTable = SchemaTable;
 export type SingleStreamApplyFn<TPayload = Record<string, unknown>> = (event: StoredEvent<TPayload>, tx: DbRunner, table: ProjectionTable) => Promise<void>;
 export type MultiStreamApplyFn<TPayload = Record<string, unknown>> = (event: StoredEvent<TPayload>, tx: DbRunner, ctx: MultiStreamApplyContext) => Promise<void>;

package/dist/rate-limit-types.d.ts

@@ -1,5 +1,5 @@
 /// <reference types="temporal-polyfill/global" preserve="true" />
-import type { Temporal } from "./temporal.js";
+import type { Temporal } from "./temporal.ts";
 export type RateLimitDecision = {
     readonly allowed: boolean;
     readonly limit: number;

package/dist/schema-table-types.d.ts

@@ -1,4 +1,4 @@
-import type { EntityTableMeta, PgType } from "./entity-table-meta-types.js";
+import type { EntityTableMeta, PgType } from "./entity-table-meta-types.ts";
 export declare const KUMIKO_NAME_SYMBOL: unique symbol;
 export declare const KUMIKO_COLUMNS_SYMBOL: unique symbol;
 export declare const KUMIKO_META_SYMBOL: unique symbol;

package/dist/screen.d.ts

@@ -1,8 +1,8 @@
-import type { FieldIconKey } from "./field-icon.js";
-import type { FieldCondition, FieldDefinition, FormFieldDefinition, SelectOptionTone } from "./fields.js";
-import type { AccessRule, AgentScreenHints } from "./handlers.js";
-import type { IconKey, NavIconKey } from "./nav-icon.js";
-export type { FieldIconKey } from "./field-icon.js";
+import type { FieldIconKey } from "./field-icon.ts";
+import type { FieldCondition, FieldDefinition, FormFieldDefinition, SelectOptionTone } from "./fields.ts";
+import type { AccessRule, AgentScreenHints } from "./handlers.ts";
+import type { IconKey, NavIconKey } from "./nav-icon.ts";
+export type { FieldIconKey } from "./field-icon.ts";
 export type PlatformComponent = {
     readonly react?: unknown;
     readonly native?: unknown;
@@ -73,7 +73,7 @@ export type FormatSpec = {
     } & FieldFormatRegistry[K];
 }[keyof FieldFormatRegistry];
 export type FieldRenderer = PlatformComponent | string | FormatSpec;
-export type { FieldCondition } from "./fields.js";
+export type { FieldCondition } from "./fields.ts";
 export type ListColumnSpec = string | {
     readonly field: string;
     readonly renderer?: FieldRenderer;
@@ -1669,6 +1669,10 @@ export type ConfigEditScreenDefinition = {
      *  Validator prüft dass jeder qualifizierte Key in der Registry
      *  bekannt ist. */
     readonly configKeys: Readonly<Record<string, string>>;
+    /** Field name → qualified secret key (`<feature>:secret:<short>`), tenant scope only.
+     *  Such a field is a writeOnly text field with no `configKeys` entry; the same save
+     *  writes it through secrets:write:set (or secrets:write:delete on removal). */
+    readonly secretKeys?: Readonly<Record<string, string>>;
     /** Form-Shape pro Field-Name. Selbe FieldDefinitions wie auf
      *  Entities/ActionForm. Field-Names matchen die Keys in `configKeys`
      *  — Boot-Validator pinnt das. */

package/dist/search-adapter.d.ts

@@ -1,4 +1,4 @@
-import type { EntityId, TenantId } from "./identifiers.js";
+import type { EntityId, TenantId } from "./identifiers.ts";
 export type SearchAdapterConfig = {
     searchableFields: readonly string[];
     rankingFields?: readonly string[];

package/dist/secrets-types.d.ts

@@ -1,6 +1,6 @@
 /// <reference types="temporal-polyfill/global" preserve="true" />
-import type { DbRunner } from "./db-connection.js";
-import type { TenantId } from "./identifiers.js";
+import type { DbRunner } from "./db-connection.ts";
+import type { TenantId } from "./identifiers.ts";
 declare const SecretBrand: unique symbol;
 export type Secret<T = string> = {
     readonly [SecretBrand]: true;

package/dist/snapshot-types.d.ts

@@ -1,4 +1,4 @@
-import type { StoredEvent } from "./event-store-types.js";
+import type { StoredEvent } from "./event-store-types.ts";
 export type SnapshotReducer<TState extends Record<string, unknown>> = (state: TState, event: StoredEvent) => TState;
 export type LoadAggregateWithSnapshotResult<TState extends Record<string, unknown>> = {
     readonly state: TState;

package/dist/step.d.ts

@@ -1,9 +1,9 @@
-import type { EventStoreExecutor } from "./event-store-executor-types.js";
-import type { KumikoEventTypeMap } from "./event-type-map.js";
-import type { HandlerContext, WriteEvent, WriteResult } from "./handlers.js";
-import type { SaveContext } from "./hooks.js";
-import type { EntityId } from "./identifiers.js";
-import type { WhereObject } from "./where-clause-types.js";
+import type { EventStoreExecutor } from "./event-store-executor-types.ts";
+import type { KumikoEventTypeMap } from "./event-type-map.ts";
+import type { HandlerContext, WriteEvent, WriteResult } from "./handlers.ts";
+import type { SaveContext } from "./hooks.ts";
+import type { EntityId } from "./identifiers.ts";
+import type { WhereObject } from "./where-clause-types.ts";
 /**
  * The kind discriminator for a step instance — matches the step's
  * registration name in the step-registry (e.g. "return", "compute",
@@ -281,7 +281,7 @@ export type StepNamespace = {
     readonly callFeature: (name: string, opts: {
         readonly handler: string;
         readonly payload: StepResolver<unknown>;
-        readonly as?: import("./handlers.js").SessionUser;
+        readonly as?: import("./handlers.ts").SessionUser;
     }) => StepInstance;
     readonly wait: (args: {
         readonly for: StepResolver<string>;

package/dist/tenant-db-types.d.ts

@@ -1,11 +1,11 @@
-import type { AggregateRow, AggregateSpec } from "./aggregate-types.js";
-import type { DbRunner } from "./db-connection.js";
-import type { EntityTableMeta } from "./entity-table-meta-types.js";
-import type { ExecutorOnly, NotExecutorOnly } from "./executor-brand.js";
-import type { TenantId } from "./identifiers.js";
-import type { SchemaTable } from "./schema-table-types.js";
-import type { TenancyBrand } from "./tenancy-brand.js";
-import type { SelectOptions, WhereObject } from "./where-clause-types.js";
+import type { AggregateRow, AggregateSpec } from "./aggregate-types.ts";
+import type { DbRunner } from "./db-connection.ts";
+import type { EntityTableMeta } from "./entity-table-meta-types.ts";
+import type { ExecutorOnly, NotExecutorOnly } from "./executor-brand.ts";
+import type { TenantId } from "./identifiers.ts";
+import type { SchemaTable } from "./schema-table-types.ts";
+import type { TenancyBrand } from "./tenancy-brand.ts";
+import type { SelectOptions, WhereObject } from "./where-clause-types.ts";
 type WritableTable = (SchemaTable | EntityTableMeta) & NotExecutorOnly;
 type GlobalReads = {
     selectMany<T = Record<string, unknown>>(where?: WhereObject, options?: SelectOptions): Promise<readonly T[]>;

package/dist/tree-node.d.ts

@@ -1,4 +1,4 @@
-import type { TargetRef } from "./target-ref.js";
+import type { TargetRef } from "./target-ref.ts";
 export type TreeNodeState = "filled" | "stub" | "empty" | "loading" | "error";
 type TreeActionBase = {
     readonly icon: string;

package/dist/tz-context.d.ts

@@ -1,5 +1,5 @@
 /// <reference types="temporal-polyfill/global" preserve="true" />
-import type { GeoAddress, GeoCoordinates, GeoTzProvider } from "./geo-tz.js";
+import type { GeoAddress, GeoCoordinates, GeoTzProvider } from "./geo-tz.ts";
 export type LocatedTimestampJson = {
     /** Wall-clock ISO without offset, e.g. "2026-04-03T10:00:00" */
     readonly at: string;

package/dist/websocket-route.d.ts

@@ -1,5 +1,5 @@
 import type { Context } from "hono";
-import type { SessionUser, WriteResult } from "./handlers.js";
+import type { SessionUser, WriteResult } from "./handlers.ts";
 export declare const WEBSOCKET_MAX_PAYLOAD_BYTES: number;
 export declare const WEBSOCKET_DEFAULT_MAX_MESSAGE_BYTES: number;
 export declare const WEBSOCKET_ROUTE_PATH_PREFIX = "/api/ws/";

package/dist/workspace.d.ts

@@ -1,4 +1,4 @@
-import type { AccessRule } from "./handlers.js";
+import type { AccessRule } from "./handlers.ts";
 export type WorkspaceDefinition = {
     readonly id: string;
     readonly label: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-types",
-  "version": "0.368.0",
+  "version": "0.370.0",
   "description": "Framework-Type-Definitions für Kumiko — FeatureDefinition, BootCheck-Types und die reinen Engine-Types. Erlaubt Downstream-Konsumenten, gegen die Type-Contracts zu bauen, ohne das ganze Framework-Package zu importieren. Enthaelt keine identitaets-sensitiven Runtime-Werte mehr (Error-Klassen leben seit #1629 in kumiko-framework, Brand-Symbole nutzen Symbol.for) und ist deshalb eine plain dependency, keine peerDependency.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",

package/src/changes.json

@@ -1,4 +1,11 @@
 [
+  {
+    "version": "0.370.0",
+    "type": "breaking",
+    "title": "SaveContext.event and DeleteContext.event are required",
+    "detail": "postSave and postDelete hooks always receive the stored event, so event is no longer optional on SaveContext and DeleteContext. Hooks read the caller from event.createdBy instead of guarding for undefined.",
+    "migration": "Code that builds a SaveContext or DeleteContext by hand, usually in tests, sets event, for example with createTestStoredEvent() from @cosmicdrift/kumiko-testing/helpers. Drop optional chaining on ctx.event in hooks."
+  },
   {
     "version": "0.365.0",
     "type": "improvement",