@cosmicdrift/kumiko-framework 0.260.0 → 0.261.0

package/src/pipeline/dispatch-shared.ts

@@ -206,6 +206,8 @@ export async function buildHandlerContext(
   // but at this point we're the root of the pipeline — cast is safe.
   const dbSource = resolveDbSource(ctx, tx);
   const reqCtx = requestContext.get();
+  // db.global()'s write-gate — undefined for query/stream handlers, which can't declare escapeHatch.
+  const escapeHatch = registry.getWriteHandler(type)?.escapeHatch;
   const buildTenantScopedDb = (source: DbConnection | DbTx, signal: AbortSignal | undefined) =>
     createTenantDb(
       source,
@@ -214,6 +216,7 @@ export async function buildHandlerContext(
       context.tracer,
       context.meter,
       signal,
+      escapeHatch,
     );
   // Propagate the request's AbortSignal so every TenantDb query throws when
   // the client has disconnected — handlers with many sequential queries skip

package/src/secrets/__tests__/contains-secret.test.ts

@@ -54,6 +54,7 @@ declare const aSecret: Secret<string>;
 defineQueryHandler({
   name: "t:query:leak",
   schema,
+  access: { openToAll: true },
   handler: async () => ({ apiKey: aSecret }),
 });
 
@@ -64,6 +65,7 @@ function genericResponseHandler<K extends string>(kind: K) {
   return defineQueryHandler({
     name: "t:query:generic",
     schema,
+    access: { openToAll: true },
     handler: async () => ({ kind, ok: true }) as { kind: K; ok: boolean },
   });
 }
@@ -81,6 +83,7 @@ declare const leakingUnion: { ok: true } | { apiKey: Secret<string> };
 defineQueryHandler({
   name: "t:query:union-leak",
   schema,
+  access: { openToAll: true },
   handler: async () => leakingUnion,
 });
 
@@ -88,6 +91,7 @@ declare const cleanUnion: { ok: true } | { id: string };
 defineQueryHandler({
   name: "t:query:union-clean",
   schema,
+  access: { openToAll: true },
   handler: async () => cleanUnion,
 });
 
@@ -96,6 +100,7 @@ describe("R6 ContainsSecret", () => {
     const def = defineQueryHandler({
       name: "t:query:clean",
       schema,
+      access: { openToAll: true },
       handler: async () => ({ ok: true, value: createSecret("x").reveal() }),
     });
     expect(def.name).toBe("t:query:clean");

package/src/testing/__tests__/e2e-generator.test.ts

@@ -34,7 +34,7 @@ function createTasksFeature() {
   return defineFeature("tasks", (r) => {
     r.systemScope();
     r.entity("task", taskEntity);
-    r.writeHandler(defineEntityCreateHandler("task", taskEntity));
+    r.writeHandler(defineEntityCreateHandler("task", taskEntity, { access: { openToAll: true } }));
     r.screen({
       id: "task-list",
       type: "entityList",
@@ -105,7 +105,7 @@ describe("generateE2ESpec", () => {
     const feature = defineFeature("events", (r) => {
       r.systemScope();
       r.entity("event", entity);
-      r.writeHandler(defineEntityCreateHandler("event", entity));
+      r.writeHandler(defineEntityCreateHandler("event", entity, { access: { openToAll: true } }));
       r.screen({
         id: "event-edit",
         type: "entityEdit",
@@ -164,7 +164,9 @@ describe("generateE2ESpec", () => {
     const editOnly = defineFeature("edit-only", (r) => {
       r.systemScope();
       r.entity("task", taskEntity);
-      r.writeHandler(defineEntityCreateHandler("task", taskEntity));
+      r.writeHandler(
+        defineEntityCreateHandler("task", taskEntity, { access: { openToAll: true } }),
+      );
       r.screen({
         id: "edit",
         type: "entityEdit",
@@ -198,7 +200,9 @@ describe("generateE2ESpec", () => {
     const feature = defineFeature("contacts", (r) => {
       r.systemScope();
       r.entity("contact", contactEntity);
-      r.writeHandler(defineEntityCreateHandler("contact", contactEntity));
+      r.writeHandler(
+        defineEntityCreateHandler("contact", contactEntity, { access: { openToAll: true } }),
+      );
       r.screen({
         id: "list",
         type: "entityList",
@@ -220,7 +224,9 @@ describe("generateE2ESpec", () => {
     const mixed = defineFeature("mixed", (r) => {
       r.systemScope();
       r.entity("task", taskEntity);
-      r.writeHandler(defineEntityCreateHandler("task", taskEntity));
+      r.writeHandler(
+        defineEntityCreateHandler("task", taskEntity, { access: { openToAll: true } }),
+      );
       r.screen({ id: "list", type: "entityList", entity: "task", columns: ["title"] });
       r.screen({
         id: "edit",

package/src/ui-types/index.ts

@@ -52,7 +52,12 @@ export type {
   SelectFieldDef,
   TextFieldDef,
 } from "../engine/types/fields";
-export type { AccessRule } from "../engine/types/handlers";
+export type {
+  AccessRule,
+  OpenToAllAccessRule,
+  OpenToAllDeclaration,
+} from "../engine/types/handlers";
+export { isOpenToAllGranted } from "../engine/types/handlers";
 export type { IconKey, NavDefinition, NavIconKey } from "../engine/types/nav";
 export type {
   ActionFormRedirect,