@cosmicdrift/kumiko-framework 0.269.2 → 0.270.0

package/README.md

@@ -45,7 +45,11 @@ export const taskFeature = defineFeature("tasks", (r) => {
   // control, all explicit via the options below.
   r.crud("task", taskEntity, {
     write: { access: { roles: ["User"] } },
-    read: { access: { openToAll: true } },
+    read: {
+      access: {
+        openToAll: { reason: "any signed-in user may list and view tasks; only writes are role-gated" },
+      },
+    },
   });
 
   // Read-model fed from task events, rebuildable via the CLI

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-framework",
-  "version": "0.269.2",
+  "version": "0.270.0",
   "description": "Framework core — engine, pipeline, API, DB, and every other bit that makes Kumiko go.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -198,7 +198,7 @@
     "./package.json": "./package.json"
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-types": "0.269.2",
+    "@cosmicdrift/kumiko-types": "0.270.0",
     "bullmq": "^5.76.7",
     "bun-types": "^1.3.13",
     "hono": "^4.13.1",
@@ -214,7 +214,7 @@
     "zod": "^4.4.3"
   },
   "devDependencies": {
-    "@cosmicdrift/kumiko-dispatcher-live": "0.269.2",
+    "@cosmicdrift/kumiko-dispatcher-live": "0.270.0",
     "bun-types": "^1.3.13",
     "pino-pretty": "^13.1.3"
   },

package/src/__tests__/anonymous-access.integration.test.ts

@@ -66,7 +66,7 @@ const shopFeature = defineFeature("anonshop", (r) => {
       const rows = await selectMany(ctx.db, productTable);
       return rows;
     },
-    { access: { openToAll: true } },
+    { access: { openToAll: { reason: "test handler callable by any signed-in test user" } } },
   );
 
   // Anonymous can place a guest order.

package/src/__tests__/error-contract.integration.test.ts

@@ -149,7 +149,7 @@ const errorFeature = defineFeature("errctr", (r) => {
     async (event) => {
       throw new NotFoundError("item", event.payload.id);
     },
-    { access: { openToAll: true } },
+    { access: { openToAll: { reason: "test handler callable by any signed-in test user" } } },
   );
 
   // InternalError auto-wrap: handler raises an unexpected TypeError; the

package/src/__tests__/fixtures/migrate-open-to-all/manual-only.expected.ts

@@ -0,0 +1,16 @@
+import { z } from "zod";
+
+export const listWidgets = {
+  name: "widget:list",
+  schema: z.object({}),
+  description: "Lists all widgets; visible to everyone",
+  access: { openToAll: true },
+  handler: async () => [],
+};
+
+export const legacyPing = {
+  name: "legacy:ping",
+  schema: z.object({}),
+  access: { openToAll: true },
+  handler: async () => "pong",
+};

package/src/__tests__/fixtures/migrate-open-to-all/manual-only.input.ts

@@ -0,0 +1,16 @@
+import { z } from "zod";
+
+export const listWidgets = {
+  name: "widget:list",
+  schema: z.object({}),
+  description: "Lists all widgets; visible to everyone",
+  access: { openToAll: true },
+  handler: async () => [],
+};
+
+export const legacyPing = {
+  name: "legacy:ping",
+  schema: z.object({}),
+  access: { openToAll: true },
+  handler: async () => "pong",
+};

package/src/__tests__/fixtures/migrate-open-to-all/test-nested-shorthand.expected.ts

@@ -0,0 +1,12 @@
+export const config = {
+  verbAccess: {
+    create: { openToAll: { reason: "test handler callable by any signed-in test user" } },
+    list: { roles: ["admin"] },
+  },
+  read: {
+    access: { openToAll: { reason: "test handler callable by any signed-in test user" } },
+  },
+  write: {
+    access: { roles: ["admin"] },
+  },
+};

package/src/__tests__/fixtures/migrate-open-to-all/test-nested-shorthand.input.ts

@@ -0,0 +1,12 @@
+export const config = {
+  verbAccess: {
+    create: { openToAll: true },
+    list: { roles: ["admin"] },
+  },
+  read: {
+    access: { openToAll: true },
+  },
+  write: {
+    access: { roles: ["admin"] },
+  },
+};

package/src/__tests__/fixtures/migrate-open-to-all/test-simple.expected.ts

@@ -0,0 +1,7 @@
+import { z } from "zod";
+
+export const listHandler = {
+  name: "widget:list",
+  schema: z.object({}),
+  access: { openToAll: { reason: "test handler callable by any signed-in test user" } },
+};

package/src/__tests__/fixtures/migrate-open-to-all/test-simple.input.ts

@@ -0,0 +1,7 @@
+import { z } from "zod";
+
+export const listHandler = {
+  name: "widget:list",
+  schema: z.object({}),
+  access: { openToAll: true },
+};

package/src/__tests__/full-stack.integration.test.ts

@@ -174,14 +174,14 @@ const userFeature = defineFeature("users", (r) => {
       sortDirection: z.enum(["asc", "desc"]).optional(),
     }),
     async (query, ctx) => userExecutor(ctx).list(query.payload, query.user, ctx.db),
-    { access: { openToAll: true } },
+    { access: { openToAll: { reason: "test handler callable by any signed-in test user" } } },
   );
 
   r.queryHandler(
     "user:detail",
     z.object({ id: z.uuid() }),
     async (query, ctx) => userExecutor(ctx).detail(query.payload, query.user, ctx.db),
-    { access: { openToAll: true } },
+    { access: { openToAll: { reason: "test handler callable by any signed-in test user" } } },
   );
 
   r.hook("postSave", { allOf: user }, async (result) => {

package/src/__tests__/migrate-open-to-all-codemod.test.ts

@@ -0,0 +1,84 @@
+import { describe, expect, it } from "bun:test";
+import { readFileSync } from "node:fs";
+import { join } from "node:path";
+import { migrateOpenToAllSource } from "../scripts/codemod/migrate-open-to-all";
+
+const FIXTURES_DIR = join(import.meta.dir, "fixtures", "migrate-open-to-all");
+const DEFAULT_REASON = "test handler callable by any signed-in test user";
+
+function readFixture(name: string): { input: string; expected: string } {
+  return {
+    input: readFileSync(join(FIXTURES_DIR, `${name}.input.ts`), "utf8"),
+    expected: readFileSync(join(FIXTURES_DIR, `${name}.expected.ts`), "utf8"),
+  };
+}
+
+describe("migrateOpenToAllSource", () => {
+  it("rewrites a top-level openToAll: true in a *.test.ts file to the default test reason", () => {
+    const { input, expected } = readFixture("test-simple");
+    const result = migrateOpenToAllSource(input, "widget-list.test.ts", {
+      testReason: DEFAULT_REASON,
+    });
+
+    expect(result.output).toBe(expected);
+    expect(result.rewrites).toHaveLength(1);
+    expect(result.rewrites[0]?.after).toBe(`openToAll: { reason: "${DEFAULT_REASON}" }`);
+    expect(result.manual).toHaveLength(0);
+  });
+
+  it("rewrites openToAll: true under a __tests__/ path even without a .test.ts suffix", () => {
+    const { input, expected } = readFixture("test-simple");
+    const result = migrateOpenToAllSource(input, "packages/framework/__tests__/widget-list.ts", {
+      testReason: DEFAULT_REASON,
+    });
+
+    expect(result.output).toBe(expected);
+    expect(result.rewrites).toHaveLength(1);
+  });
+
+  it("honors a custom --test-reason for test files", () => {
+    const { input } = readFixture("test-simple");
+    const result = migrateOpenToAllSource(input, "widget-list.test.ts", {
+      testReason: "custom reason for this suite",
+    });
+
+    expect(result.output).toContain(
+      'access: { openToAll: { reason: "custom reason for this suite" } }',
+    );
+  });
+
+  it("rewrites nested shorthand openToAll: true (verbAccess, read.access) in test files", () => {
+    const { input, expected } = readFixture("test-nested-shorthand");
+    const result = migrateOpenToAllSource(input, "config.test.ts", { testReason: DEFAULT_REASON });
+
+    expect(result.output).toBe(expected);
+    expect(result.rewrites).toHaveLength(2);
+    expect(result.manual).toHaveLength(0);
+  });
+
+  it("leaves non-test files untouched and reports manual sites with derived handler name + description", () => {
+    const { input, expected } = readFixture("manual-only");
+    const result = migrateOpenToAllSource(input, "handlers.ts", { testReason: DEFAULT_REASON });
+
+    expect(result.output).toBe(expected);
+    expect(result.rewrites).toHaveLength(0);
+    expect(result.manual).toHaveLength(2);
+
+    const withDescription = result.manual.find((m) => m.handlerName === "widget:list");
+    expect(withDescription).toBeDefined();
+    expect(withDescription?.description).toBe("Lists all widgets; visible to everyone");
+    expect(withDescription?.line).toBe(7);
+
+    const withoutDescription = result.manual.find((m) => m.handlerName === "legacy:ping");
+    expect(withoutDescription).toBeDefined();
+    expect(withoutDescription?.description).toBeUndefined();
+    expect(withoutDescription?.line).toBe(14);
+  });
+
+  it("never rewrites in a non-test file, even when a description is present", () => {
+    const { input } = readFixture("manual-only");
+    const result = migrateOpenToAllSource(input, "handlers.ts", { testReason: DEFAULT_REASON });
+
+    expect(result.output).toContain("access: { openToAll: true }");
+  });
+});

package/src/__tests__/transition-guard.integration.test.ts

@@ -86,7 +86,7 @@ const feature = defineFeature("txguard", (r) => {
         event.user,
         ctx.db,
       ),
-    { access: { openToAll: true } },
+    { access: { openToAll: { reason: "test handler callable by any signed-in test user" } } },
   );
 
   r.writeHandler(
@@ -102,7 +102,7 @@ const feature = defineFeature("txguard", (r) => {
         event.user,
         ctx.db,
       ),
-    { access: { openToAll: true } },
+    { access: { openToAll: { reason: "test handler callable by any signed-in test user" } } },
   );
 
   r.writeHandler(
@@ -114,7 +114,7 @@ const feature = defineFeature("txguard", (r) => {
         event.user,
         ctx.db,
       ),
-    { access: { openToAll: true } },
+    { access: { openToAll: { reason: "test handler callable by any signed-in test user" } } },
   );
 
   r.writeHandler(
@@ -130,7 +130,7 @@ const feature = defineFeature("txguard", (r) => {
         event.user,
         ctx.db,
       ),
-    { access: { openToAll: true } },
+    { access: { openToAll: { reason: "test handler callable by any signed-in test user" } } },
   );
 
   r.writeHandler(
@@ -142,7 +142,7 @@ const feature = defineFeature("txguard", (r) => {
         event.user,
         ctx.db,
       ),
-    { access: { openToAll: true } },
+    { access: { openToAll: { reason: "test handler callable by any signed-in test user" } } },
   );
 
   r.writeHandler(
@@ -154,7 +154,7 @@ const feature = defineFeature("txguard", (r) => {
         event.user,
         ctx.db,
       ),
-    { access: { openToAll: true } },
+    { access: { openToAll: { reason: "test handler callable by any signed-in test user" } } },
   );
 
   r.writeHandler(
@@ -170,7 +170,7 @@ const feature = defineFeature("txguard", (r) => {
         event.user,
         ctx.db,
       ),
-    { access: { openToAll: true } },
+    { access: { openToAll: { reason: "test handler callable by any signed-in test user" } } },
   );
 });
 

package/src/api/__tests__/api.test.ts

@@ -37,7 +37,7 @@ const testFeature = defineFeature("test", (r) => {
     "item:list",
     z.object({ search: z.string().optional() }),
     async () => [{ id: 1, name: "Test" }],
-    { access: { openToAll: true } },
+    { access: { openToAll: { reason: "test handler callable by any signed-in test user" } } },
   );
 
   r.streamHandler(
@@ -750,7 +750,7 @@ describe("feature-declared HTTP routes (r.httpRoute)", () => {
       }),
     );
     r.queryHandler("item:list", z.object({}), async () => [{ id: 7 }], {
-      access: { openToAll: true },
+      access: { openToAll: { reason: "test handler callable by any signed-in test user" } },
     });
     r.httpRoute({
       method: "GET",

package/src/api/__tests__/body-limit.test.ts

@@ -18,7 +18,7 @@ const testFeature = defineFeature("blob", (r) => {
     "note:create",
     z.object({ body: z.string() }),
     async (event) => ({ isSuccess: true, data: { body: event.payload.body } }),
-    { access: { openToAll: true } },
+    { access: { openToAll: { reason: "test handler callable by any signed-in test user" } } },
   );
 });
 

package/src/api/__tests__/pii-leak-guard.integration.test.ts

@@ -18,7 +18,7 @@ const leakyFeature = defineFeature("leaky", (r) => {
     defineQueryHandler({
       name: "raw",
       schema: z.object({}),
-      access: { openToAll: true },
+      access: { openToAll: { reason: "test handler callable by any signed-in test user" } },
       handler: async () => ({ email: CIPHERTEXT, note: "plain" }),
     }),
   );
@@ -26,7 +26,7 @@ const leakyFeature = defineFeature("leaky", (r) => {
     defineQueryHandler({
       name: "clean",
       schema: z.object({}),
-      access: { openToAll: true },
+      access: { openToAll: { reason: "test handler callable by any signed-in test user" } },
       handler: async () => ({ email: "marc@example.com" }),
     }),
   );

package/src/api/__tests__/request-locale.integration.test.ts

@@ -18,7 +18,7 @@ const localeProbe = defineFeature("locale-probe", (r) => {
     "read-locale",
     z.object({}),
     async (_event, ctx) => ({ isSuccess: true, data: { locale: ctx.locale } }),
-    { access: { openToAll: true } },
+    { access: { openToAll: { reason: "test handler callable by any signed-in test user" } } },
   );
 });
 

package/src/api/__tests__/server-error-logging.test.ts

@@ -20,7 +20,7 @@ const boomFeature = defineFeature("boom", (r) => {
     async () => {
       throw new Error("disk on fire");
     },
-    { access: { openToAll: true } },
+    { access: { openToAll: { reason: "test handler callable by any signed-in test user" } } },
   );
 });
 

package/src/changes.json

@@ -1,4 +1,12 @@
 [
+  {
+    "version": "0.269.0",
+    "type": "breaking",
+    "title": "`openToAll: true` is removed — every openToAll grant now requires { reason } (fw#2858).",
+    "detail": "`OpenToAllAccessRule` (`@cosmicdrift/kumiko-types/handlers`) no longer accepts `true`; only `OpenToAllDeclaration` (`{ reason: string; personalData?: \"tenant-members\" }`) satisfies it, so `{ openToAll: true }` no longer type-checks. `isOpenToAllGranted` denies `true` from untyped sources (pattern JSON, Designer) the same way it already denied a malformed object — a bare `true` reaching it now returns `false` instead of granting access. The boot validator (`engine/boot-validator/access-declarations.ts`) rejects an untyped `openToAll: true` access declaration with an error pointing at `{ reason }` instead of registering the handler. The pattern-library Designer access field (`shared-fields.ts` `accessRuleField`) is now a required text input on `access.openToAll.reason` instead of a boolean toggle, so the Designer can only ever produce the object form. `build-config-feature-schema.ts` synthesizes `{ openToAll: { reason: \"config key declares the \\\"all\\\" role, so every signed-in user of the tenant may read/write it\" } }` for a config key whose roles include `\"all\"`, instead of `{ openToAll: true }`. `boot-validator/nav.ts` and `renderer-web/app/create-app.tsx` switched from `\"openToAll\" in access` to `isOpenToAllGranted(access)`, so a malformed or `true` rule is no longer treated as a visible screen/workspace. The feature-AST extractor now also extracts `escapeHatch: { reason }` on write/query handlers (`extractors/handlers.ts`) and on `r.hook` options (`extractors/hooks.ts`), round-tripped through render/patch the same way `access`/`rateLimit` already were.",
+    "migration": "Replace every `openToAll: true` with `openToAll: { reason: \"<who may call it and why that is safe without a role>\" }`, adding `personalData: \"tenant-members\"` where the boot validator requires it for a write handler accepting unbound personal data. Pattern-library or Designer-authored JSON that still has `openToAll: true` must be re-saved with a reason before it type-checks or passes boot. `kumiko-upgrade --apply` runs the migrate-open-to-all codemod automatically, rewriting test files to the default reason and listing every non-test site for manual review; run `bun packages/framework/src/scripts/codemod/migrate-open-to-all.ts --test-reason \"<text>\" <paths>` directly to override the default test reason.",
+    "codemod": "scripts/codemod/migrate-open-to-all.ts"
+  },
   {
     "version": "0.269.0",
     "type": "breaking",

package/src/db/__tests__/list-filter-field-access.integration.test.ts

@@ -36,7 +36,7 @@ const LIST_QN = "filternotes:query:note:list";
 const filterNotesFeature = defineFeature("filternotes", (r) => {
   r.crud("note", filterNoteEntity, {
     write: { access: { roles: ["Admin"] } },
-    read: { access: { openToAll: true } },
+    read: { access: { openToAll: { reason: "test handler callable by any signed-in test user" } } },
   });
 });
 

package/src/derivatives/__tests__/derivatives-context.integration.test.ts

@@ -38,7 +38,7 @@ const derivativesTestFeature = defineFeature("derivativestest", (r) => {
       );
       return { isSuccess: true as const, data: result };
     },
-    { access: { openToAll: true } },
+    { access: { openToAll: { reason: "test handler callable by any signed-in test user" } } },
   );
 
   // Catches the error INSIDE the handler (not via HTTP serialization) so the
@@ -69,7 +69,7 @@ const derivativesTestFeature = defineFeature("derivativestest", (r) => {
         };
       }
     },
-    { access: { openToAll: true } },
+    { access: { openToAll: { reason: "test handler callable by any signed-in test user" } } },
   );
 
   r.job("record", { trigger: { manual: true }, runIn: "worker" }, async (payload, ctx) => {

package/src/engine/__tests__/boot-validator-dashboard.test.ts

@@ -19,10 +19,10 @@ function dashboardFeature(
 ) {
   return defineFeature("demo", (r) => {
     r.queryHandler("incident:open-count", z.object({}), async () => ({ count: 3 }), {
-      access: { openToAll: true },
+      access: { openToAll: { reason: "test handler callable by any signed-in test user" } },
     });
     r.queryHandler("incident:latest", z.object({}), async () => ({ rows: [], nextCursor: null }), {
-      access: { openToAll: true },
+      access: { openToAll: { reason: "test handler callable by any signed-in test user" } },
     });
     r.screen({
       id: "overview",
@@ -245,10 +245,10 @@ describe("validateBoot — dashboard screens", () => {
 
 const catalogFeature = defineFeature("catalog", (r) => {
   r.queryHandler("items:list", z.object({}), async () => ({ rows: [], nextCursor: null }), {
-    access: { openToAll: true },
+    access: { openToAll: { reason: "test handler callable by any signed-in test user" } },
   });
   r.queryHandler("items:status", z.object({}), async () => ({ enabled: true }), {
-    access: { openToAll: true },
+    access: { openToAll: { reason: "test handler callable by any signed-in test user" } },
   });
   r.screen({
     id: "items",
@@ -289,7 +289,7 @@ describe("validateBoot — dashboard screen panels (fw#2841)", () => {
   test("accepts a same-feature short id", () => {
     const feature = defineFeature("demo", (r) => {
       r.queryHandler("items:list", z.object({}), async () => ({ rows: [], nextCursor: null }), {
-        access: { openToAll: true },
+        access: { openToAll: { reason: "test handler callable by any signed-in test user" } },
       });
       r.screen({
         id: "items",

package/src/engine/__tests__/boot-validator-pii-retention.test.ts

@@ -50,7 +50,7 @@ function stubListHandler(r: any, entityName: string): void {
     name: `${entityName}:list`,
     schema: z.object({}),
     handler: async () => ({ rows: [], nextCursor: null }) as never,
-    access: { openToAll: true },
+    access: { openToAll: { reason: "test handler callable by any signed-in test user" } },
   });
 }
 

package/src/engine/__tests__/boot-validator-projection-list.test.ts

@@ -7,7 +7,7 @@ describe("validateBoot — projectionList screens", () => {
   test("rejects hand-written searchable:true when the query schema has no search param (3a)", () => {
     const feature = defineFeature("ledger", (r) => {
       r.queryHandler("schedule:list", z.object({}), async () => ({ rows: [], nextCursor: null }), {
-        access: { openToAll: true },
+        access: { openToAll: { reason: "test handler callable by any signed-in test user" } },
       });
       r.screen({
         id: "schedule-list",
@@ -29,7 +29,7 @@ describe("validateBoot — projectionList screens", () => {
         "schedule:list",
         z.object({ search: z.string().optional() }),
         async () => ({ rows: [], nextCursor: null }),
-        { access: { openToAll: true } },
+        { access: { openToAll: { reason: "test handler callable by any signed-in test user" } } },
       );
       r.screen({
         id: "schedule-list",
@@ -50,7 +50,7 @@ describe("validateBoot — projectionList screens", () => {
         "schedule:list",
         z.object({ sort: z.string().optional() }),
         async () => ({ rows: [], nextCursor: null }),
-        { access: { openToAll: true } },
+        { access: { openToAll: { reason: "test handler callable by any signed-in test user" } } },
       );
       r.screen({
         id: "schedule-list",
@@ -71,7 +71,7 @@ describe("validateBoot — projectionList screens", () => {
         "schedule:list",
         z.object({ search: z.string().optional(), sort: z.string().optional() }),
         async () => ({ rows: [], nextCursor: null }),
-        { access: { openToAll: true } },
+        { access: { openToAll: { reason: "test handler callable by any signed-in test user" } } },
       );
       r.screen({
         id: "schedule-list",
@@ -91,7 +91,7 @@ describe("validateBoot — projectionList screens", () => {
   test("passes when the schema offers neither search nor sort and no defaultSort is set", () => {
     const feature = defineFeature("ledger", (r) => {
       r.queryHandler("schedule:list", z.object({}), async () => ({ rows: [], nextCursor: null }), {
-        access: { openToAll: true },
+        access: { openToAll: { reason: "test handler callable by any signed-in test user" } },
       });
       r.screen({
         id: "schedule-list",
@@ -112,7 +112,7 @@ describe("validateBoot — projectionList screens", () => {
         "schedule:list",
         z.object({ search: z.string().optional() }),
         async () => ({ rows: [], nextCursor: null }),
-        { access: { openToAll: true } },
+        { access: { openToAll: { reason: "test handler callable by any signed-in test user" } } },
       );
       r.screen({
         id: "schedule-list",
@@ -135,7 +135,7 @@ describe("validateBoot — projectionList screens", () => {
         "schedule:list",
         z.object({ search: z.string().optional() }),
         async () => ({ rows: [], nextCursor: null }),
-        { access: { openToAll: true } },
+        { access: { openToAll: { reason: "test handler callable by any signed-in test user" } } },
       );
       r.screen({
         id: "download-attempt-list",
@@ -154,7 +154,7 @@ describe("validateBoot — projectionList screens", () => {
   test("rejects hand-authored sortable on a projectionList screen (fw#2165 review)", () => {
     const feature = defineFeature("ledger", (r) => {
       r.queryHandler("schedule:list", z.object({}), async () => ({ rows: [], nextCursor: null }), {
-        access: { openToAll: true },
+        access: { openToAll: { reason: "test handler callable by any signed-in test user" } },
       });
       r.screen({
         id: "schedule-list",
@@ -173,7 +173,7 @@ describe("validateBoot — projectionList screens", () => {
   test("rejects hand-authored paginated on a projectionList screen (fw#2165 review)", () => {
     const feature = defineFeature("ledger", (r) => {
       r.queryHandler("schedule:list", z.object({}), async () => ({ rows: [], nextCursor: null }), {
-        access: { openToAll: true },
+        access: { openToAll: { reason: "test handler callable by any signed-in test user" } },
       });
       r.screen({
         id: "schedule-list",
@@ -202,7 +202,7 @@ describe("validateBoot — projectionList screens", () => {
           z.object({}),
           async () => ({ rows: [], nextCursor: null }),
           {
-            access: { openToAll: true },
+            access: { openToAll: { reason: "test handler callable by any signed-in test user" } },
           },
         );
         r.screen({ id: "schedule-detail", type: "custom", renderer: { react: "stub" } });
@@ -251,7 +251,7 @@ describe("validateBoot — projectionList screens", () => {
           "schedule:list",
           z.object({ filter: z.unknown().optional() }),
           async () => ({ rows: [], nextCursor: null }),
-          { access: { openToAll: true } },
+          { access: { openToAll: { reason: "test handler callable by any signed-in test user" } } },
         );
         r.screen({
           id: "schedule-list",
@@ -274,7 +274,7 @@ describe("validateBoot — projectionList screens", () => {
           z.object({}),
           async () => ({ rows: [], nextCursor: null }),
           {
-            access: { openToAll: true },
+            access: { openToAll: { reason: "test handler callable by any signed-in test user" } },
           },
         );
         r.screen({
@@ -297,7 +297,7 @@ describe("validateBoot — projectionList screens", () => {
           "schedule:list",
           z.object({ filters: z.unknown().optional() }),
           async () => ({ rows: [], nextCursor: null }),
-          { access: { openToAll: true } },
+          { access: { openToAll: { reason: "test handler callable by any signed-in test user" } } },
         );
         r.screen({
           id: "schedule-list",
@@ -326,7 +326,7 @@ describe("validateBoot — projectionList screens", () => {
           "schedule:list",
           z.object({ filters: z.unknown().optional() }),
           async () => ({ rows: [], nextCursor: null }),
-          { access: { openToAll: true } },
+          { access: { openToAll: { reason: "test handler callable by any signed-in test user" } } },
         );
         r.screen({
           id: "schedule-list",
@@ -363,7 +363,7 @@ describe("validateBoot — projectionList screens", () => {
           "schedule:list",
           z.object({ filters: z.unknown().optional() }),
           async () => ({ rows: [], nextCursor: null }),
-          { access: { openToAll: true } },
+          { access: { openToAll: { reason: "test handler callable by any signed-in test user" } } },
         );
         r.screen({
           id: "schedule-list",
@@ -386,7 +386,7 @@ describe("validateBoot — projectionList screens", () => {
           z.object({}),
           async () => ({ rows: [], nextCursor: null }),
           {
-            access: { openToAll: true },
+            access: { openToAll: { reason: "test handler callable by any signed-in test user" } },
           },
         );
         r.screen({
@@ -417,7 +417,7 @@ describe("validateBoot — projectionList screens", () => {
           "schedule:list",
           z.object({ filter: z.unknown().optional(), filters: z.unknown().optional() }),
           async () => ({ rows: [], nextCursor: null }),
-          { access: { openToAll: true } },
+          { access: { openToAll: { reason: "test handler callable by any signed-in test user" } } },
         );
         r.screen({
           id: "schedule-list",