@cosmicdrift/kumiko-framework 0.216.0 → 0.217.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-framework",
-  "version": "0.216.0",
+  "version": "0.217.0",
   "description": "Framework core — engine, pipeline, API, DB, and every other bit that makes Kumiko go.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -194,7 +194,7 @@
     "./package.json": "./package.json"
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-types": "0.216.0",
+    "@cosmicdrift/kumiko-types": "0.217.0",
     "bullmq": "^5.76.7",
     "bun-types": "^1.3.13",
     "hono": "^4.13.1",
@@ -210,7 +210,7 @@
     "zod": "^4.4.3"
   },
   "devDependencies": {
-    "@cosmicdrift/kumiko-dispatcher-live": "0.216.0",
+    "@cosmicdrift/kumiko-dispatcher-live": "0.217.0",
     "bun-types": "^1.3.13",
     "pino-pretty": "^13.1.3"
   },

package/src/api/auth-routes.ts

@@ -9,7 +9,7 @@ import { createSystemUser } from "../engine/system-user";
 import { type SessionUser, SYSTEM_TENANT_ID, type TenantId } from "../engine/types";
 import { NotFoundError } from "../errors";
 import type { Dispatcher } from "../pipeline/dispatcher";
-import { parseStringArrayJson } from "../utils/parse-string-array-json";
+import { parseRoles } from "../utils/serialization";
 import { Routes } from "./api-constants";
 import {
   AUTH_COOKIE_NAME,
@@ -1361,11 +1361,10 @@ export function createAuthRoutes(
           config.userQuery,
           { id: user.id },
           createSystemUser(user.tenantId),
-        )) as { roles?: string | null } | null;
-        const raw = userRow?.roles;
-        if (typeof raw === "string" && raw.length > 0) {
-          globalRoles = parseStringArrayJson(raw);
-        }
+        )) as { roles?: unknown } | null;
+        // roles is jsonb string[] (multiSelect); parseRoles also accepts legacy
+        // JSON-encoded text from pre-0.217.0 rows.
+        globalRoles = parseRoles(userRow?.roles ?? null);
       } catch (e) {
         // Non-fatal: globale Rollen kann nicht aufgelöst werden → switch
         // läuft weiter mit nur tenant-rollen. Server-error mit nur dem