cursedbelt-server 1.0.1 → 1.1.0

package/dist/server/guard/index.d.ts

@@ -1,4 +1,5 @@
 export * from './argon2Binding';
+export * from './passwordVerifier';
 export * from './verifier';
 export * from './revocationStore';
 export * from './sessionSigner';

package/dist/server/guard/index.js

@@ -1,6 +1,7 @@
 // The GuardEngine server wiring (02 §4): the argon2id binding adapter that arms
 // cwip's KDF seam, and the Ed25519 session signer that mints and revokes.
 export * from './argon2Binding';
+export * from './passwordVerifier';
 export * from './verifier';
 export * from './revocationStore';
 export * from './sessionSigner';

package/dist/server/index.d.ts

@@ -10,6 +10,7 @@ export { type CreateJobRunnerOptions, createFireQueue, createJobRunner, createPo
 export { buildProbeArgs, buildThumbnailArgs, buildTrimArgs, extractThumbnail, ffmpegTimeToSeconds, isFfmpegAvailable, isFfprobeAvailable, type ProbeResult, parseFfmpegProgress, parseFfprobe, probeMedia, renderImage, trimVideo, type VideoCodecPlan, videoCodecPlan, } from './media-bun';
 export { createMetricsBuffer, type MetricRow, type MetricsBuffer, type MetricsBufferOptions, } from './metrics/metricsBuffer';
 export { normalizeRoute } from './metrics/normalizeRoute';
+export { type AnalyticsEngineDataset, createTelemetrySink, TELEMETRY_POINT_VERSION, type TelemetryEvent, type TelemetrySink, type TelemetrySinkOptions, toDataPoint, } from './metrics/telemetrySink';
 export { correlationId } from './middleware/correlationId';
 export { type CorsOpts, corsAllowlist, corsOptsFromEnv } from './middleware/corsAllowlist';
 export { errorEnvelope } from './middleware/errorEnvelope';
@@ -23,3 +24,4 @@ export type { Migration } from './migration/types';
 export { AUDIT_LOG_MIGRATIONS, auditStateAt, auditStateAtVersion, auditStep, createSqliteAuditSink, } from './audit';
 export { applyFtsSchema, type BackupInfo, buildFtsSchema, clampLimit, clampOffset, collectSqliteStats, createFts5Search, createSqliteBackupService, createSqliteHealthChecks, createSqliteViewerMiddleware, type DbStats, exportSqliteSnapshot, exportSqliteTable, type Fts5Search, type FtsHighlightOpts, type FtsResult, type FtsSearchOpts, type FtsSnippetOpts, type FtsTableSpec, type ImportMode, type ImportResult, importRowsIntoSqliteTable, isKnownTable, isReadOnlySql, listSqliteTables, NotReadOnlyError, quoteIdent, type RestoreResult, readSqliteTable, restoreSqliteSnapshot, runReadonlySqlite, type SnapshotExport, type SqliteBackupOpts, type SqliteBackupS3Opts, type SqliteBackupService, type SqliteHealthCheck, type SqliteHealthOpts, type SqliteHealthResult, type SqliteHealthStatus, type SqliteTableInfo, type SqliteTablePage, sanitizeFtsQuery, snapshotSqlite, type TableExport, type TableExportFormat, type TableStat, UnknownTableError, } from './sqlite';
 export { computePresence, createEventBus, createWsHub, type EventBus, type EventBusData, joinRoom, leaveRoom, type PresenceEntry, type PresenceState, ROOM_META_KEY, roomOf, type WsChannel, type WsClient, type WsData, type WsHandshake, type WsHub, type WsHubOpts, type WsMessage, } from './ws';
+export { resolveAppDataHome } from './paths/appDataHome';

package/dist/server/index.js

@@ -27,6 +27,7 @@ export { buildProbeArgs, buildThumbnailArgs, buildTrimArgs, extractThumbnail, ff
 // ── Metrics ───────────────────────────────────────────────────────────────────
 export { createMetricsBuffer, } from './metrics/metricsBuffer';
 export { normalizeRoute } from './metrics/normalizeRoute';
+export { createTelemetrySink, TELEMETRY_POINT_VERSION, toDataPoint, } from './metrics/telemetrySink';
 // ── Middleware ────────────────────────────────────────────────────────────────
 export { correlationId } from './middleware/correlationId';
 export { corsAllowlist, corsOptsFromEnv } from './middleware/corsAllowlist';
@@ -51,3 +52,7 @@ export { applyFtsSchema, buildFtsSchema, clampLimit, clampOffset, collectSqliteS
 // ── WebSocket hub (task 28): Bun-native upgrade, channel registry, heartbeat, ──
 //    presence-as-a-view, room helpers, and the push-only event-bus subset (ru).
 export { computePresence, createEventBus, createWsHub, joinRoom, leaveRoom, ROOM_META_KEY, roomOf, } from './ws';
+// The app-data root resolver. Exported at the root (2026-09-15, task 148) because
+// `cursedbelt-cc`'s localHost needs it and it answers a question about the HOST, not
+// about any one subsystem — so no subpath barrel is its natural home.
+export { resolveAppDataHome } from './paths/appDataHome';

package/dist/server/jobs/index.d.ts

@@ -1,5 +1,6 @@
 export { createFireQueue } from './fireQueue';
 export { defaultJobLogger } from './logger';
+export { createPlainjobConnection } from './plainjobAdapter';
 export { createPollingJob } from './polling';
 export { createJobRunner } from './runner';
 export { JobTimeoutError } from './timeout';

package/dist/server/jobs/index.js

@@ -4,6 +4,7 @@
 // *definitions* stay business and consume these primitives.
 export { createFireQueue } from './fireQueue';
 export { defaultJobLogger } from './logger';
+export { createPlainjobConnection } from './plainjobAdapter';
 export { createPollingJob } from './polling';
 export { createJobRunner } from './runner';
 export { JobTimeoutError } from './timeout';

package/dist/server/metrics/telemetrySink.d.ts

@@ -0,0 +1,119 @@
+import type { Database } from 'bun:sqlite';
+import { type MetricRow } from './metricsBuffer';
+/**
+ * ONE seam for "this app served a request", with two backends and no third.
+ *
+ * ── Why this exists ─────────────────────────────────────────────────────────
+ * `request_metrics` is a row per request. On D1 that is the one line in
+ * Cloudflare's pricing with a dollar-scale overage — **$1.00 per million rows
+ * written** — and a row per request is precisely the shape that buys it. Workers
+ * Analytics Engine is purpose-built for the same job: `writeDataPoint()` per
+ * event, SQL to query, unlimited cardinality, **10M data points and 1M read
+ * queries included per month**, and **zero** database writes.
+ *
+ * 🔴 **Adopt it for the ALLOWANCE, not because it is unbilled today.**
+ * Cloudflare's own wording is that you "will not be billed for your use of
+ * Workers Analytics Engine" today and that the published prices are "shared in
+ * advance… once Cloudflare starts billing for usage in the coming months". The
+ * free-today part is temporary; the allowance is not. At this fleet's measured
+ * ~1M requests/month the bill is $0 either way, so building against the
+ * allowance makes the billing switch a non-event.
+ *
+ * ── Why not `prom-client` / a `/metrics` scrape ──────────────────────────────
+ * A scrape genuinely does turn many writes into one, and on a long-lived Bun
+ * process it would work. A Worker is **a stateless V8 isolate with no
+ * long-lived process**: isolates are created and destroyed between requests and
+ * run concurrently in many datacentres, so a `/metrics` scrape reaches ONE
+ * arbitrary isolate holding a random fraction of the counters. The in-process
+ * registry has nowhere to live. (A Durable Object does have a durable identity
+ * *and* memory, and is the real `prom-client` analogue — but it is a whole
+ * stateful object to operate for counters Analytics Engine already aggregates.
+ * Prometheus itself also needs an always-on host to scrape FROM, and that host
+ * is the Mac this fleet is trying to switch off.)
+ *
+ * ── The contract ────────────────────────────────────────────────────────────
+ * · `analytics` bound  → one `writeDataPoint` per event, **zero** SQLite/D1 rows.
+ * · no `analytics`     → the existing {@link MetricsBuffer}, byte-for-byte
+ *                        unchanged, so the gate and a Mac-hosted app keep working.
+ * Both are proven by `telemetrySink.spec.ts`, which is the point of the seam:
+ * the choice is made ONCE here rather than per app.
+ */
+/**
+ * The Workers Analytics Engine binding, typed locally so this package needs no
+ * dependency on `@cloudflare/workers-types` (it is a Bun/Hono package, and a
+ * Worker supplies the real binding at runtime).
+ *
+ * Platform limits, which {@link toDataPoint} respects:
+ * **1** index of ≤96 bytes, ≤**20** blobs totalling ≤5120 bytes, ≤**20** doubles.
+ */
+export interface AnalyticsEngineDataset {
+    writeDataPoint(point: {
+        indexes?: (ArrayBuffer | string | null)[];
+        blobs?: (ArrayBuffer | string | null)[];
+        doubles?: number[];
+    }): void;
+}
+/** One request's telemetry. Identical to {@link MetricRow} — the seam does not re-shape it. */
+export type TelemetryEvent = MetricRow;
+/**
+ * A superset-compatible shape: a {@link MetricsBuffer} IS a `TelemetrySink`, so
+ * an app that already owns a buffer can keep passing it.
+ */
+export interface TelemetrySink {
+    /** Enqueue one request's telemetry. Never blocks the response. */
+    record(event: TelemetryEvent): void;
+    /** Force whatever is pending out now (shutdown + tests). No-op on Analytics Engine. */
+    flush(): void;
+    /** Stop any timer and drain. No-op on Analytics Engine. */
+    stop(): void;
+    /** Events pending locally. Always 0 on Analytics Engine — it has no buffer to hold. */
+    readonly size: number;
+}
+export interface TelemetrySinkOptions {
+    /**
+     * The Analytics Engine binding, when the platform supplies one. Present ⇒ it
+     * WINS, and `db` is never written. `null`/`undefined` ⇒ the SQLite path.
+     */
+    analytics?: AnalyticsEngineDataset | null;
+    /** The `request_metrics` database. Required unless `analytics` is bound. */
+    db?: Database | null;
+    /** Flush cadence for the SQLite path, in ms. Default: 1500. Ignored by Analytics Engine. */
+    flushIntervalMs?: number;
+    /** Eager-flush threshold for the SQLite path. Default: 5000. Ignored by Analytics Engine. */
+    maxSize?: number;
+}
+/**
+ * 🔴 **The data-point layout is a WIRE FORMAT.** Analytics Engine columns are
+ * positional (`blob1`, `double1`, …), so every saved SQL query breaks if a
+ * position moves. Append only; never reorder, never repurpose.
+ *
+ * ```
+ * index1  = route, truncated to 96 bytes  — the sampling key, so sampling is per route
+ * blob1   = method          blob2  = route (untruncated)     blob3  = userId ('' when anonymous)
+ * double1 = status          double2 = durationMs             double3 = bytesOut
+ * ```
+ *
+ * `ts` is deliberately absent: Analytics Engine stamps its own `timestamp`
+ * column, so sending ours would store the same instant twice.
+ *
+ * `-1` is the "unknown" marker for all three doubles, because a positional
+ * doubles array cannot hold a null and `0` is a real value for every one of them
+ * (a 0-byte 204, notably). Read it as `NULL`, not as a measurement.
+ */
+export declare const TELEMETRY_POINT_VERSION = 1;
+/** The documented layout above, as data. Exported so the spec asserts the wire format itself. */
+export declare function toDataPoint(event: TelemetryEvent): {
+    indexes: string[];
+    blobs: string[];
+    doubles: number[];
+};
+/**
+ * Build the sink for whatever platform this process is on.
+ *
+ * Throws when NEITHER backend is available, on purpose. "An app with no
+ * `request_metrics` is not quiet; it is unmeasured" — and a sink that silently
+ * drops every event is exactly the failure this seam exists to end. A misbound
+ * Worker should fail at construction, in the deploy, rather than serve traffic
+ * that nothing can see.
+ */
+export declare function createTelemetrySink(opts: TelemetrySinkOptions): TelemetrySink;

package/dist/server/metrics/telemetrySink.js

@@ -0,0 +1,76 @@
+import { createMetricsBuffer } from './metricsBuffer';
+/**
+ * 🔴 **The data-point layout is a WIRE FORMAT.** Analytics Engine columns are
+ * positional (`blob1`, `double1`, …), so every saved SQL query breaks if a
+ * position moves. Append only; never reorder, never repurpose.
+ *
+ * ```
+ * index1  = route, truncated to 96 bytes  — the sampling key, so sampling is per route
+ * blob1   = method          blob2  = route (untruncated)     blob3  = userId ('' when anonymous)
+ * double1 = status          double2 = durationMs             double3 = bytesOut
+ * ```
+ *
+ * `ts` is deliberately absent: Analytics Engine stamps its own `timestamp`
+ * column, so sending ours would store the same instant twice.
+ *
+ * `-1` is the "unknown" marker for all three doubles, because a positional
+ * doubles array cannot hold a null and `0` is a real value for every one of them
+ * (a 0-byte 204, notably). Read it as `NULL`, not as a measurement.
+ */
+export const TELEMETRY_POINT_VERSION = 1;
+const INDEX_MAX_BYTES = 96;
+/**
+ * Truncate to at most `maxBytes` UTF-8 bytes without splitting a code point —
+ * `String.slice` counts UTF-16 units, so a route with one multi-byte character
+ * can be ≤96 chars and still exceed the 96-BYTE index limit.
+ */
+function truncateUtf8(value, maxBytes) {
+    const encoded = new TextEncoder().encode(value);
+    if (encoded.length <= maxBytes)
+        return value;
+    return new TextDecoder('utf-8', { fatal: false }).decode(encoded.subarray(0, maxBytes)).replace(
+    // A cut through a multi-byte sequence decodes to U+FFFD; drop that trailing artefact.
+    /�+$/, '');
+}
+const num = (value) => typeof value === 'number' && Number.isFinite(value) ? value : -1;
+/** The documented layout above, as data. Exported so the spec asserts the wire format itself. */
+export function toDataPoint(event) {
+    const route = event.route ?? '';
+    return {
+        indexes: [truncateUtf8(route, INDEX_MAX_BYTES)],
+        blobs: [event.method ?? '', route, event.userId ?? ''],
+        doubles: [num(event.status), num(event.durationMs), num(event.bytesOut)],
+    };
+}
+/**
+ * Build the sink for whatever platform this process is on.
+ *
+ * Throws when NEITHER backend is available, on purpose. "An app with no
+ * `request_metrics` is not quiet; it is unmeasured" — and a sink that silently
+ * drops every event is exactly the failure this seam exists to end. A misbound
+ * Worker should fail at construction, in the deploy, rather than serve traffic
+ * that nothing can see.
+ */
+export function createTelemetrySink(opts) {
+    const { analytics, db, flushIntervalMs, maxSize } = opts;
+    if (analytics) {
+        // Analytics Engine writes are fire-and-forget and already off the response
+        // path — there is nothing to buffer, so flush/stop are honestly no-ops.
+        return {
+            record(event) {
+                analytics.writeDataPoint(toDataPoint(event));
+            },
+            flush() { },
+            stop() { },
+            get size() {
+                return 0;
+            },
+        };
+    }
+    if (!db) {
+        throw new Error('createTelemetrySink: neither an Analytics Engine binding (`analytics`) nor a `db` was ' +
+            'provided. Telemetry would be silently dropped; bind one of the two.');
+    }
+    // The unchanged SQLite path — same module, same batching, same rows.
+    return createMetricsBuffer({ db, flushIntervalMs, maxSize });
+}

package/dist/server/middleware/index.d.ts

@@ -4,6 +4,7 @@ export { errorEnvelope } from './errorEnvelope';
 export { crossOriginRefusal } from './localOrigin';
 export { clientIp, createRateLimiter, type RateLimitOpts } from './rateLimit';
 export { type RequestLoggerOpts, requestLogger } from './requestLogger';
+export { type AnalyticsEngineDataset, createTelemetrySink, type TelemetryEvent, type TelemetrySink, type TelemetrySinkOptions, } from '../metrics/telemetrySink';
 export { type CspDirectives, type SecurityHeadersOpts, securityHeaders, } from './securityHeaders';
 export { toValidationIssues, VALIDATION_ERROR_CODE, type ValidationIssue, validationEnvelope, } from '../errors';
 export { type ZValidatorTarget, zValidator } from './zValidator';

package/dist/server/middleware/index.js

@@ -5,6 +5,9 @@ export { errorEnvelope } from './errorEnvelope';
 export { crossOriginRefusal } from './localOrigin';
 export { clientIp, createRateLimiter } from './rateLimit';
 export { requestLogger } from './requestLogger';
+// The telemetry seam `requestLogger` writes through — re-exported here so a caller
+// that reaches `./middleware` for the logger can bind Analytics Engine in the same import.
+export { createTelemetrySink, } from '../metrics/telemetrySink';
 export { securityHeaders, } from './securityHeaders';
 export { toValidationIssues, VALIDATION_ERROR_CODE, validationEnvelope, } from '../errors';
 export { zValidator } from './zValidator';

package/dist/server/middleware/requestLogger.d.ts

@@ -1,29 +1,48 @@
 import type { Database } from 'bun:sqlite';
 import type { MiddlewareHandler } from 'hono';
 import type { CursedbeltEnv } from '../context';
-import { type MetricsBuffer } from '../metrics/metricsBuffer';
+import type { MetricsBuffer } from '../metrics/metricsBuffer';
+import { type AnalyticsEngineDataset, type TelemetrySink } from '../metrics/telemetrySink';
 /**
- * Structured request/response logging. After each request it records one slim
- * `request_metrics` row (via the batched {@link MetricsBuffer}, off the hot path)
- * and, for errors (status ≥ 400) or slow requests, one `event_logs` row tagged with
- * the correlation id. Attributes rows to `c.get('userId')` when the app's auth
+ * Structured request/response logging. After each request it records one
+ * telemetry event through the {@link TelemetrySink} (off the hot path) and, for
+ * errors (status ≥ 400) or slow requests, one `event_logs` row tagged with the
+ * correlation id. Attributes rows to `c.get('userId')` when the app's auth
  * middleware has set it.
  *
+ * 🔴 **Where the telemetry LANDS is the sink's decision, not this file's.** With
+ * an Analytics Engine binding it is one `writeDataPoint` and **zero** database
+ * rows; without one it is the same batched `request_metrics` insert it has always
+ * been. See `../metrics/telemetrySink.ts` for why that is the only choice offered.
+ *
  * It records metrics even when a downstream handler THROWS: the error is caught,
- * the would-be status derived, the row written, then the error re-thrown so the
+ * the would-be status derived, the event recorded, then the error re-thrown so the
  * error-envelope `onError` still produces the response.
  */
 export interface RequestLoggerOpts {
     /**
-     * The metrics buffer to write through. Provide one (and own its lifecycle via
-     * `buffer.stop()`) to share it / flush deterministically; omit to create one from
-     * `db`. Its flush timer is `unref()`'d, so an internally-created buffer is fine for
-     * long-running servers.
+     * The Analytics Engine binding, when the platform supplies one. Present ⇒ the
+     * telemetry goes there and NOTHING is written to `request_metrics`.
+     */
+    analytics?: AnalyticsEngineDataset | null;
+    /**
+     * The sink to write through. Provide one (and own its lifecycle via
+     * `sink.stop()`) to share it / flush deterministically; omit to build one from
+     * `db` + `analytics`. A {@link MetricsBuffer} is a valid sink.
      */
+    sink?: TelemetrySink;
+    /** @deprecated Use {@link RequestLoggerOpts.sink} — a `MetricsBuffer` is one. Kept for callers that predate the sink. */
     buffer?: MetricsBuffer;
     /** Duration (ms) at/above which a 2xx request also logs an `event_logs` row. Default: 2000. */
     slowMs?: number;
     /** Also write `event_logs` rows for status ≥ 400. Default: true. */
     logErrors?: boolean;
 }
-export declare function requestLogger(db: Database, opts?: RequestLoggerOpts): MiddlewareHandler<CursedbeltEnv>;
+/**
+ * @param db The `request_metrics` / `event_logs` database. Pass `null` on a
+ *   platform that has no `bun:sqlite` — a Worker with `analytics` bound — in
+ *   which case `event_logs` is not written either, because there is nowhere to
+ *   put it. `analytics` or `sink` is then mandatory; `createTelemetrySink`
+ *   throws rather than drop telemetry silently.
+ */
+export declare function requestLogger(db: Database | null, opts?: RequestLoggerOpts): MiddlewareHandler<CursedbeltEnv>;

package/dist/server/middleware/requestLogger.js

@@ -1,7 +1,7 @@
 import { HTTPException } from 'hono/http-exception';
 import { isApiError } from '../errors';
-import { createMetricsBuffer } from '../metrics/metricsBuffer';
 import { normalizeRoute } from '../metrics/normalizeRoute';
+import { createTelemetrySink, } from '../metrics/telemetrySink';
 function statusOfThrown(err) {
     if (isApiError(err))
         return err.status;
@@ -9,13 +9,22 @@ function statusOfThrown(err) {
         return err.status;
     return 500;
 }
+/**
+ * @param db The `request_metrics` / `event_logs` database. Pass `null` on a
+ *   platform that has no `bun:sqlite` — a Worker with `analytics` bound — in
+ *   which case `event_logs` is not written either, because there is nowhere to
+ *   put it. `analytics` or `sink` is then mandatory; `createTelemetrySink`
+ *   throws rather than drop telemetry silently.
+ */
 export function requestLogger(db, opts = {}) {
-    const buffer = opts.buffer ?? createMetricsBuffer({ db });
+    const sink = opts.sink ?? opts.buffer ?? createTelemetrySink({ db, analytics: opts.analytics ?? null });
     const slowMs = opts.slowMs ?? 2000;
     const logErrors = opts.logErrors ?? true;
-    const insertEvent = db.prepare(`INSERT INTO event_logs
+    const insertEvent = db
+        ? db.prepare(`INSERT INTO event_logs
        (id, correlation_id, event_name, type, message, details, duration_ms, user_id, created_at)
-     VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`);
+     VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`)
+        : null;
     return async (c, next) => {
         const start = performance.now();
         let thrown;
@@ -33,10 +42,10 @@ export function requestLogger(db, opts = {}) {
         const lenHeader = didThrow ? null : c.res.headers.get('content-length');
         const bytesOut = lenHeader ? Number(lenHeader) : null;
         const userId = c.get('userId') ?? null;
-        buffer.record({ ts: Date.now(), method, route, status, durationMs, bytesOut, userId });
+        sink.record({ ts: Date.now(), method, route, status, durationMs, bytesOut, userId });
         const isError = status >= 400;
         const isSlow = durationMs >= slowMs;
-        if ((logErrors && isError) || isSlow) {
+        if (insertEvent && ((logErrors && isError) || isSlow)) {
             const type = status >= 500 ? 'error' : isError ? 'warn' : 'info';
             insertEvent.run(crypto.randomUUID(), c.get('correlationId') ?? null, isError ? 'http_error' : 'http_slow', type, `${method} ${route} → ${status}`, JSON.stringify({ method, route, status, durationMs: Math.round(durationMs), bytesOut }), Math.round(durationMs), userId, new Date().toISOString());
         }

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "cursedbelt-server",
-	"version": "1.0.1",
+	"version": "1.1.0",
 	"license": "ISC",
 	"type": "module",
 	"description": "The app-facing Bun/Hono server tier of the cursedbelt split \u2014 storage, sharing, activity, guard, sync. React-free; cursedbelt-core below it.",
@@ -22,7 +22,8 @@
 		"build": "bun run clean && tsc -p tsconfig.build.json",
 		"paths": "bun ../../tools/check-paths.ts .",
 		"verify": "bun run paths && bun run typecheck && bun run build && bun run test",
-		"prepublishOnly": "bun run verify"
+		"prepublishOnly": "bun run verify",
+		"test:pg": "bun run scripts/testPg.ts"
 	},
 	"files": [
 		"dist",
@@ -221,6 +222,7 @@
 		"@node-rs/argon2": "^2.0.2",
 		"@types/bun": "^1.3.14",
 		"@types/node": "^24",
+		"cursedbelt": "^3.0.0",
 		"hono": "4.12.28",
 		"kysely": "^0.28.17",
 		"kysely-bun-sqlite": "^0.4.0",

package/src/server/guard/index.ts

@@ -1,6 +1,7 @@
 // The GuardEngine server wiring (02 §4): the argon2id binding adapter that arms
 // cwip's KDF seam, and the Ed25519 session signer that mints and revokes.
 export * from './argon2Binding';
+export * from './passwordVerifier';
 export * from './verifier';
 export * from './revocationStore';
 export * from './sessionSigner';

package/src/server/index.ts

@@ -144,6 +144,15 @@ export {
   type MetricsBufferOptions,
 } from './metrics/metricsBuffer';
 export { normalizeRoute } from './metrics/normalizeRoute';
+export {
+  type AnalyticsEngineDataset,
+  createTelemetrySink,
+  TELEMETRY_POINT_VERSION,
+  type TelemetryEvent,
+  type TelemetrySink,
+  type TelemetrySinkOptions,
+  toDataPoint,
+} from './metrics/telemetrySink';
 // ── Middleware ────────────────────────────────────────────────────────────────
 export { correlationId } from './middleware/correlationId';
 export { type CorsOpts, corsAllowlist, corsOptsFromEnv } from './middleware/corsAllowlist';
@@ -246,3 +255,8 @@ export {
   type WsHubOpts,
   type WsMessage,
 } from './ws';
+
+// The app-data root resolver. Exported at the root (2026-09-15, task 148) because
+// `cursedbelt-cc`'s localHost needs it and it answers a question about the HOST, not
+// about any one subsystem — so no subpath barrel is its natural home.
+export { resolveAppDataHome } from './paths/appDataHome';

package/src/server/jobs/index.ts

@@ -5,6 +5,7 @@
 
 export { createFireQueue } from './fireQueue';
 export { defaultJobLogger } from './logger';
+export { createPlainjobConnection } from './plainjobAdapter';
 export { createPollingJob } from './polling';
 export { createJobRunner } from './runner';
 export { JobTimeoutError } from './timeout';