@cosmicdrift/kumiko-framework 0.209.0 → 0.209.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-framework",
-  "version": "0.209.0",
+  "version": "0.209.1",
   "description": "Framework core — engine, pipeline, API, DB, and every other bit that makes Kumiko go.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -190,7 +190,7 @@
     "./package.json": "./package.json"
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-types": "0.209.0",
+    "@cosmicdrift/kumiko-types": "0.209.1",
     "bullmq": "^5.76.7",
     "bun-types": "^1.3.13",
     "hono": "^4.13.1",
@@ -206,7 +206,7 @@
     "zod": "^4.4.3"
   },
   "devDependencies": {
-    "@cosmicdrift/kumiko-dispatcher-live": "0.209.0",
+    "@cosmicdrift/kumiko-dispatcher-live": "0.209.1",
     "bun-types": "^1.3.13",
     "pino-pretty": "^13.1.3"
   },

package/src/db/queries/backfill-pii.ts

@@ -141,7 +141,7 @@ export async function backfillEventPiiEncryption(
         result.erasedFields += outcome.erased;
         if (!options.dryRun) {
           await raw.unsafe(`UPDATE "kumiko_events" SET "payload" = $1::jsonb WHERE "id" = $2`, [
-            JSON.stringify(outcome.payload),
+            outcome.payload,
             row.id,
           ]);
         }

package/src/event-store/__tests__/backfill-pii.integration.test.ts

@@ -279,3 +279,29 @@ describe("backfillEventPiiEncryption", () => {
     );
   });
 });
+
+describe("backfillEventPiiEncryption: raw jsonb column type (fw#2253)", () => {
+  // The UPDATE used to wrap outcome.payload in JSON.stringify before handing
+  // it to the ::jsonb cast — Bun.SQL already serializes objects, so the
+  // double encoding produced a jsonb STRING scalar instead of an object.
+  // loadAggregate stayed green either way: the typed read path (bun-db's
+  // coerceRow) re-parses string-shaped jsonb columns on the way out, which
+  // cancels the write-side bug out. Only raw SQL consumers (this query,
+  // GDPR exports, MSP replays) saw the corruption, so assert on the column
+  // type directly instead of going through loadAggregate.
+  test("UPDATE writes payload as a jsonb object, not a double-encoded string", async () => {
+    const c1 = generateId();
+    await appendPlain(c1, "contact", "contact.created", { id: c1, email: "raw@x.com" });
+
+    armKms();
+    const result = await backfillEventPiiEncryption(testDb.db, registry);
+    expect(result.updatedEvents).toBe(1);
+
+    const rows = (await asRawClient(testDb.db).unsafe(
+      `SELECT jsonb_typeof(payload) AS t FROM "kumiko_events" WHERE aggregate_id = $1`,
+      [c1],
+    )) as ReadonlyArray<{ t: string }>;
+    expect(rows).toHaveLength(1);
+    expect(rows[0]?.t).toBe("object");
+  });
+});

package/src/migrations/pending-rebuilds.ts

@@ -200,7 +200,7 @@ export type EnqueueProjectionRebuildDeps = {
   readonly db: DbConnection;
   readonly registry: Registry;
   // Present + projection-rebuild job registered (jobs composed) → tracked,
-  // retryable job (read_job_runs + store_job_run_logs). Absent → inline rebuild.
+  // retryable job (store_job_runs + store_job_run_logs). Absent → inline rebuild.
   readonly jobRunner?: JobRunner;
 };