Remove import-boundary compatibility re-export shims

e2e/playwright-utils.ts

@@ -6,7 +6,7 @@ import {
 	seedUserInE2eDatabase,
 } from './d1-utils.ts'
 import { ensurePrimaryUserExists, primaryTestUser } from './auth-test-user.ts'
-import { usernameFromEmail } from '../packages/worker/src/app/username.ts'
+import { usernameFromEmail } from '../packages/worker/src/identity/username.ts'
 
 export * from '@playwright/test'
 

packages/worker/client/app.tsx

@@ -24,7 +24,7 @@ import {
 	primaryLinkCss,
 } from './styles/style-primitives.ts'
 import { type AppLoaderData } from '#app/loader-data.ts'
-import { userHasRole } from '#app/permissions.ts'
+import { userHasRole } from '#worker/identity/permissions.ts'
 import { buildAuthLink } from './auth-links.ts'
 import { colors, mq, spacing, typography } from './styles/tokens.ts'
 import { WaitlistBanner } from './waitlist-banner.tsx'

packages/worker/client/routes/admin-users.tsx

@@ -44,7 +44,7 @@ import {
 	formatMonthKeyLabel,
 	usageMetricSeries,
 } from '#client/charts/usage-metric-series.ts'
-import { type RoleName } from '#app/permissions.ts'
+import { type RoleName } from '#worker/identity/permissions.ts'
 import {
 	type AdminPlanName,
 	type AdminUserListItem,

packages/worker/client/session.ts

@@ -5,7 +5,7 @@ import {
 	roleNames,
 	type PermissionString,
 	type RoleName,
-} from '#app/permissions.ts'
+} from '#worker/identity/permissions.ts'
 import {
 	featureFlagKeys,
 	type FeatureFlagKey,

packages/worker/src/app/account-package-invocation-tokens-data.ts

@@ -1,4 +1,4 @@
-import { getAppBaseUrl } from '#app/app-base-url.ts'
+import { getAppBaseUrl } from '#worker/app-base-url.ts'
 import { type AccountPackageInvocationTokensLoaderData } from '#app/loader-data.ts'
 import { type readAuthenticatedAppUser } from '#app/authenticated-user.ts'
 import {

packages/worker/src/app/handlers/account-jobs.node.test.ts

@@ -118,7 +118,7 @@ vi.mock('#app/ssr-render.tsx', () => ({
 	renderAppPage: async () => new Response('ok'),
 }))
 
-vi.mock('#app/app-base-url.ts', () => ({
+vi.mock('#worker/app-base-url.ts', () => ({
 	getAppBaseUrl: (...args: Array<unknown>) => mockModule.getAppBaseUrl(...args),
 }))
 

packages/worker/src/app/handlers/account-jobs.ts

@@ -5,7 +5,7 @@ import {
 	loadAccountJobsData,
 	type AccountJobsLoaderData,
 } from '#app/account-jobs-data.ts'
-import { getAppBaseUrl } from '#app/app-base-url.ts'
+import { getAppBaseUrl } from '#worker/app-base-url.ts'
 import { readAuthenticatedAppUser } from '#app/authenticated-user.ts'
 import { type AccountJobsLoaderData as AppAccountJobsLoaderData } from '#app/loader-data.ts'
 import { requireAuthenticatedPageUser } from '#app/page-auth.ts'

packages/worker/src/app/handlers/account-mcp-servers.ts

@@ -7,7 +7,7 @@ import { requireAuthenticatedPageUser } from '#app/page-auth.ts'
 import { readTrimmedStringOrEmpty } from '#app/request-body.ts'
 import { renderAppPage } from '#app/ssr-render.tsx'
 import { type routes } from '#app/routes.ts'
-import { getAppBaseUrl } from '#app/app-base-url.ts'
+import { getAppBaseUrl } from '#worker/app-base-url.ts'
 import { createMcpClientHubClient } from '#worker/mcp-client/hub-client.ts'
 import {
 	addMcpServer,

packages/worker/src/app/handlers/account-package-invocation-tokens.node.test.ts

@@ -82,7 +82,7 @@ vi.mock('#app/ssr-render.tsx', () => ({
 	renderAppPage: async () => new Response('ok'),
 }))
 
-vi.mock('#app/app-base-url.ts', () => ({
+vi.mock('#worker/app-base-url.ts', () => ({
 	getAppBaseUrl: (...args: Array<unknown>) => mockModule.getAppBaseUrl(...args),
 }))
 

packages/worker/src/app/handlers/account-profile.ts

@@ -4,7 +4,7 @@ import { jsonResponse } from '#worker/json-response.ts'
 import { type Action } from 'remix/router'
 import { getRequestIp, logAuditEvent } from '#worker/audit-log.ts'
 import { loadAccountProfileData } from '#app/account-profile-data.ts'
-import { getAppBaseUrl } from '#app/app-base-url.ts'
+import { getAppBaseUrl } from '#worker/app-base-url.ts'
 import { readAuthenticatedAppUser } from '#app/authenticated-user.ts'
 import { getUniqueConstraintField } from '#worker/database-errors.ts'
 import { type ProfileVisibility } from '#app/loader-data.ts'

packages/worker/src/app/handlers/account-secrets.node.test.ts

@@ -105,13 +105,13 @@
 	renderAppPage: async () => new Response('ok'),
 }))
 
-vi.mock('#app/app-base-url.ts', () => ({
+vi.mock('#worker/app-base-url.ts', () => ({
 	getAppBaseUrl: (...args: Array<unknown>) => mockModule.getAppBaseUrl(...args),
 }))
 
 vi.mock('#mcp/secrets/allowed-hosts.ts', async (importOriginal) => {
 	const actual =
 		await importOriginal<typeof import('#mcp/secrets/allowed-hosts.ts')>()
 	return {
 		normalizeAllowedHosts: actual.normalizeAllowedHosts,
 		normalizeHost: actual.normalizeHost,

packages/worker/src/app/handlers/account-secrets.ts

@@ -13,7 +13,7 @@ import {
 	resolveApprovalRequest,
 	toPackageOptions,
 } from '#app/account-secrets-data.ts'
-import { getAppBaseUrl } from '#app/app-base-url.ts'
+import { getAppBaseUrl } from '#worker/app-base-url.ts'
 import { readAuthenticatedAppUser } from '#app/authenticated-user.ts'
 import { loadConnectOauthNextSteps } from '#app/connect-oauth-next-steps.ts'
 import { renderAppPage } from '#app/ssr-render.tsx'

packages/worker/src/app/handlers/blog.tsx

@@ -1,5 +1,5 @@
 import { type Action } from 'remix/router'
-import { getAppBaseUrl } from '#app/app-base-url.ts'
+import { getAppBaseUrl } from '#worker/app-base-url.ts'
 import { type routes } from '#app/routes.ts'
 import { renderAppPage } from '#app/ssr-render.tsx'
 import {

packages/worker/src/app/handlers/community-install.ts

@@ -1,6 +1,6 @@
 import { z } from 'zod'
 import { type Action } from 'remix/router'
-import { getAppBaseUrl } from '#app/app-base-url.ts'
+import { getAppBaseUrl } from '#worker/app-base-url.ts'
 import { readAuthenticatedAppUser } from '#app/authenticated-user.ts'
 import {
 	buildInstallAdaptPrompt,

packages/worker/src/app/handlers/og-page-image.ts

@@ -1,5 +1,5 @@
 import { type Action } from 'remix/router'
-import { getAppBaseUrl } from '#app/app-base-url.ts'
+import { getAppBaseUrl } from '#worker/app-base-url.ts'
 import { type routes } from '#app/routes.ts'
 import { getPublicOgPage } from '#worker/og/pages.ts'
 

packages/worker/src/app/handlers/package-app.node.test.ts

@@ -73,7 +73,7 @@ vi.mock('#app/auth-redirect.ts', () => ({
 		mockModule.redirectToLogin(...args),
 }))
 
-vi.mock('#app/app-base-url.ts', () => ({
+vi.mock('#worker/app-base-url.ts', () => ({
 	getAppBaseUrl: (...args: Array<unknown>) => mockModule.getAppBaseUrl(...args),
 }))
 

packages/worker/src/app/handlers/package-app.ts

@@ -3,7 +3,7 @@ import { html } from 'remix/html-template'
 import { createHtmlResponse } from 'remix/response/html'
 import { readAuthenticatedAppUser } from '#app/authenticated-user.ts'
 import { redirectToLoginWhenUnauthenticated } from '#app/auth-redirect.ts'
-import { getAppBaseUrl } from '#app/app-base-url.ts'
+import { getAppBaseUrl } from '#worker/app-base-url.ts'
 import { type PackageAppOwner } from '#app/package-app-owner.ts'
 import { getUsernameFormatValidationError } from '#worker/identity/username.ts'
 import { getSavedPackageByKodyId } from '#worker/package-registry/repo.ts'

packages/worker/src/app/loader-data.ts

@@ -7,7 +7,10 @@ import {
 	type PublicCommunityStargazer,
 	type PublicProfilePackageItem,
 } from '#app/community-public-types.ts'
-import { type PermissionString, type RoleName } from '#app/permissions.ts'
+import {
+	type PermissionString,
+	type RoleName,
+} from '#worker/identity/permissions.ts'
 import { type AdminFeatureFlag } from '#worker/feature-flags/types.ts'
 
 export type { ProfileVisibility }

packages/worker/src/app/onboarding-data.ts

@@ -1,4 +1,4 @@
-import { getAppBaseUrl } from '#app/app-base-url.ts'
+import { getAppBaseUrl } from '#worker/app-base-url.ts'
 import { type OnboardingFeaturedListing } from '#app/community-public-types.ts'
 import { type OnboardingLoaderData } from '#app/loader-data.ts'
 

packages/worker/src/app/package-app-origin.ts

@@ -1,6 +1,6 @@
 import { html } from 'remix/html-template'
 import { createHtmlResponse } from 'remix/response/html'
-import { getAppBaseUrl, getPackageAppBaseUrl } from '#app/app-base-url.ts'
+import { getAppBaseUrl, getPackageAppBaseUrl } from '#worker/app-base-url.ts'
 import { redirectToLoginWhenUnauthenticated } from '#app/auth-redirect.ts'
 import { readAuthenticatedAppUser } from '#app/authenticated-user.ts'
 import { isSecureRequest } from '#app/auth-session.ts'

packages/worker/src/app/ssr-render.tsx

@@ -7,7 +7,7 @@ import {
 	buildStylesheetHref,
 	getClientBuildId,
 } from '#app/client-build-id.ts'
-import { getAppBaseUrl } from '#app/app-base-url.ts'
+import { getAppBaseUrl } from '#worker/app-base-url.ts'
 import { setAuthSessionSecret } from '#app/auth-session.ts'
 import {
 	absolutizeDocumentHead,

packages/worker/src/community/activity-package-subscriptions.ts

@@ -1,4 +1,4 @@
-import { getAppBaseUrl } from '#app/app-base-url.ts'
+import { getAppBaseUrl } from '#worker/app-base-url.ts'
 import { dispatchAdminPackageSubscriptionEvent } from '#worker/package-invocations/admin-package-subscriptions.ts'
 import {
 	buildCommunityActivityRecordedEvent,

packages/worker/src/email/package-subscriptions.ts

@@ -1,4 +1,4 @@
-import { getAppBaseUrl } from '#app/app-base-url.ts'
+import { getAppBaseUrl } from '#worker/app-base-url.ts'
 import {
 	dispatchAdminPackageSubscriptionEvent,
 	readPreExecutionPackageInvocationInfrastructureCode,

packages/worker/src/execute-maintenance.ts

@@ -1,5 +1,5 @@
 import { exports as workerExports } from 'cloudflare:workers'
-import { getAppBaseUrl } from '#app/app-base-url.ts'
+import { getAppBaseUrl } from '#worker/app-base-url.ts'
 import { createExecuteExecutor } from '#mcp/executor.ts'
 import { handleSecretMaintenanceRequest } from './maintenance-handler.ts'
 import { getErrorMessage } from '@kody-internal/shared/error-message.ts'

packages/worker/src/index.ts

@@ -40,7 +40,7 @@ import {
 import { withCors } from './utils.ts'
 import { normalizeRedirectTo } from '#app/auth-redirect.ts'
 import { checkRateLimit, authRateLimitConfig } from '#app/rate-limit.ts'
-import { getRequestIp } from '#app/audit-log.ts'
+import { getRequestIp } from '#worker/audit-log.ts'
 import { handleCapabilityReindexRequest } from './capability-maintenance.ts'
 import { handleExecuteSmokeRequest } from './execute-maintenance.ts'
 import { handleJobReindexRequest } from './job-maintenance.ts'
@@ -68,7 +68,7 @@ import { sweepStaleInboundDeliveries } from '#worker/email/reconcile-inbound-del
 import { pruneSystemEmailRetention } from '#worker/email/system-email.ts'
 import { refreshStaleStripePlans } from '#worker/billing/subscription-sync.ts'
 import { handleQueueBatch } from '#worker/queue-handler.ts'
-import { findPublicUserIdentityByUsername } from '#app/user-lookup.ts'
+import { findPublicUserIdentityByUsername } from '#worker/identity/user-lookup.ts'
 import { pruneRetention, shouldRunRetentionCron } from '#app/retention.ts'
 import { pruneJobRetention } from '#worker/jobs/job-retention-cleanup.ts'
 import {

packages/worker/src/jobs/service.ts

@@ -1,6 +1,6 @@
 import { type McpCallerContext } from '@kody-internal/shared/chat.ts'
 import { type ExecuteResult } from '@cloudflare/codemode'
-import { withAccountWriteLease } from '#app/account-deletion-state.ts'
+import { withAccountWriteLease } from '#worker/account/deletion-state.ts'
 import { McpCallerError } from '#mcp/caller-error.ts'
 import { createMcpCallerContext, parseMcpCallerContext } from '#mcp/context.ts'
 import { buildJobEmbedText } from '#mcp/jobs-embed.ts'

packages/worker/src/mcp-auth.ts

@@ -3,7 +3,7 @@ import {
 	type TokenSummary,
 } from '@cloudflare/workers-oauth-provider'
 import { isAccountSuspended } from '#app/account-suspension.ts'
-import { getAppBaseUrl } from '#app/app-base-url.ts'
+import { getAppBaseUrl } from '#worker/app-base-url.ts'
 import { getRequestIp } from '#worker/audit-log.ts'
 import { isAccountEmailVerified } from '#worker/identity/email-verification-state.ts'
 import { buildMcpUserContextFromGrantProps } from './mcp-auth-user-context.ts'

packages/worker/src/oauth-handlers.ts

@@ -25,7 +25,7 @@ import { invalidClientIdMismatchMessage } from '@kody-internal/shared/oauth-mess
 import { getUsernameFormatValidationError } from '#worker/identity/username.ts'
 import { getPkceValidationError } from '#worker/oauth-pkce.ts'
 import { oauthPaths } from '#app/oauth-paths.ts'
-import { getAppBaseUrl } from '#app/app-base-url.ts'
+import { getAppBaseUrl } from '#worker/app-base-url.ts'
 import { mcpResourcePath } from './mcp-auth.ts'
 
 export { oauthPaths }

packages/worker/src/package-invocations/http.ts

@@ -1,6 +1,6 @@
 import { jsonResponse } from '#worker/json-response.ts'
 import { getRequestIp, logAuditEvent } from '#worker/audit-log.ts'
-import { getAppBaseUrl } from '#app/app-base-url.ts'
+import { getAppBaseUrl } from '#worker/app-base-url.ts'
 import { findPublicUserIdentityByUsername } from '#worker/identity/user-lookup.ts'
 import {
 	AccountDeletionInProgressError,

packages/worker/src/package-runtime/package-workflows.ts

@@ -12,7 +12,7 @@ import {
 	type WorkflowEvent,
 	type WorkflowStep,
 } from 'cloudflare:workers'
-import { getAppBaseUrl } from '#app/app-base-url.ts'
+import { getAppBaseUrl } from '#worker/app-base-url.ts'
 import { createMcpCallerContext } from '#mcp/context.ts'
 import {
 	readPreExecutionPackageInvocationInfrastructureCode,

packages/worker/src/platform-feedback/package-subscriptions.ts

@@ -1,4 +1,4 @@
-import { getAppBaseUrl } from '#app/app-base-url.ts'
+import { getAppBaseUrl } from '#worker/app-base-url.ts'
 import { dispatchAdminPackageSubscriptionEvent } from '#worker/package-invocations/admin-package-subscriptions.ts'
 import {
 	buildPlatformFeedbackSubmittedEvent,

packages/worker/src/run-records/package-subscriptions.ts

@@ -1,4 +1,4 @@
-import { getAppBaseUrl } from '#app/app-base-url.ts'
+import { getAppBaseUrl } from '#worker/app-base-url.ts'
 import { readPreExecutionPackageInvocationInfrastructureCode } from '#worker/package-invocations/admin-package-subscriptions.ts'
 import { invokePackageSubscription } from '#worker/package-invocations/service.ts'
 import { listPackageSubscriptions } from '#worker/package-registry/manifest.ts'

packages/worker/src/webhooks/http.ts

@@ -1,4 +1,4 @@
-import { getAppBaseUrl } from '#app/app-base-url.ts'
+import { getAppBaseUrl } from '#worker/app-base-url.ts'
 import {
 	AccountDeletionInProgressError,
 	assertAccountWritable,

packages/worker/src/webhooks/service.ts

@@ -1,4 +1,4 @@
-import { getAppBaseUrl } from '#app/app-base-url.ts'
+import { getAppBaseUrl } from '#worker/app-base-url.ts'
 import { resolvePublicUsername } from '#worker/identity/user-lookup.ts'
 import {
 	listPackageWebhooks,

packages/worker/tsconfig-client.json

@@ -20,7 +20,6 @@
 		"./client/**/*.tsx",
 		"./client/**/*.d.ts",
 		"./src/app/oauth-login-errors.ts",
-		"./src/app/permissions.ts",
 		"./src/app/routes.ts",
 		"./src/app/route-pattern.ts",
 		"./src/app/oauth-paths.ts",

tsconfig-tools.json

@@ -36,8 +36,8 @@
 		"./packages/worker/src/test-support/cloudflare-mock-server.ts",
 		"./tools/**/*.ts",
 		"./packages/shared/src/**/*.ts",
-		// Worker app modules imported by the seeding tools.
-		"./packages/worker/src/app/username.ts",
-		"./packages/worker/src/app/reserved-usernames.ts"
+		// Worker identity modules imported by the seeding tools.
+		"./packages/worker/src/identity/username.ts",
+		"./packages/worker/src/identity/reserved-usernames.ts"
 	]
 }