A server-capable module can no longer act as a convenience barrel. Clients consume import-free enum leaves, safe schemas and type-only API contracts. Oxlint rules, enumerated package exports and a built-client marker scan enforce the boundary.
Read ADR-0002 and the extension guide.