@cosmicdrift/kumiko-framework 0.353.0 → 0.354.1

package/dist/pipeline/member-read-only-transaction.js

@@ -1,8 +1,9 @@
 import { extractPgError } from "../db/pg-error.js";
 import { asRawClient, runInSavepoint, transaction } from "../db/query.js";
-import { AccessDeniedError, InternalError, memberResolutionReadOnlyDenied, } from "../errors/index.js";
+import { AccessDeniedError, InternalError, MemberReadTimeoutError, memberResolutionReadOnlyDenied, } from "../errors/index.js";
 import { resolveDbSource } from "./dispatch-shared.js";
 const PG_READ_ONLY_SQLSTATE = "25006";
+const PG_QUERY_CANCELED_SQLSTATE = "57014";
 function isReadOnlyTransactionViolation(e) {
     return extractPgError(e)?.code === PG_READ_ONLY_SQLSTATE;
 }
@@ -12,12 +13,27 @@ class SavepointDiscard extends Error {
         this.name = "SavepointDiscard";
     }
 }
-async function runInDiscardedReadOnlySavepoint(tx, fn) {
+function isStatementTimeout(e) {
+    return extractPgError(e)?.code === PG_QUERY_CANCELED_SQLSTATE;
+}
+// SET cannot take bind parameters, so the value is interpolated — only after it is proven a plain integer.
+function memberReadSessionSettingsSql(timeoutMs, bindIdleTimeout) {
+    if (!Number.isSafeInteger(timeoutMs) || timeoutMs <= 0) {
+        throw new InternalError({
+            message: `member read timeout must be a positive integer, got ${timeoutMs}`,
+        });
+    }
+    const idleTimeout = bindIdleTimeout
+        ? `; SET LOCAL idle_in_transaction_session_timeout = ${timeoutMs}`
+        : "";
+    return `SET TRANSACTION READ ONLY; SET LOCAL statement_timeout = ${timeoutMs}${idleTimeout}`;
+}
+async function runInDiscardedReadOnlySavepoint(tx, timeoutMs, bindIdleTimeout, fn) {
     const settled = {};
     try {
         await runInSavepoint(tx, async (sp) => {
             // kumiko-lint-ignore raw-sql transaction characteristic, no query helper
-            await asRawClient(sp).unsafe("SET TRANSACTION READ ONLY");
+            await asRawClient(sp).unsafe(memberReadSessionSettingsSql(timeoutMs, bindIdleTimeout));
             // @cast-boundary driver savepoint handle — structurally a DbTx, same shape runInSavepoint's caller relies on
             settled.outcome = { value: await fn(sp) };
             // Always discarded: RELEASE SAVEPOINT would leave the outer tx read-only too.
@@ -36,9 +52,10 @@ async function runInDiscardedReadOnlySavepoint(tx, fn) {
     return settled.outcome.value;
 }
 export async function runInMemberReadOnlyTransaction(ctx, tx, fn) {
+    const timeoutMs = ctx.memberReadTimeoutMs;
     try {
         if (tx)
-            return await runInDiscardedReadOnlySavepoint(tx, fn);
+            return await runInDiscardedReadOnlySavepoint(tx, timeoutMs, false, fn);
         const pool = resolveDbSource(ctx, undefined);
         if (!pool) {
             throw new InternalError({
@@ -48,13 +65,16 @@ export async function runInMemberReadOnlyTransaction(ctx, tx, fn) {
         // Savepoint even on the pool path: Postgres rejects a READ WRITE reset (SQLSTATE 25001) inside a subtransaction.
         return await transaction(pool, (outer) => 
         // @cast-boundary driver begin() handle — structurally a DbTx, same shape runInSavepoint's caller relies on
-        runInDiscardedReadOnlySavepoint(outer, fn));
+        runInDiscardedReadOnlySavepoint(outer, timeoutMs, true, fn));
     }
     catch (e) {
         if (e instanceof AccessDeniedError)
             throw e;
         if (isReadOnlyTransactionViolation(e))
             throw memberResolutionReadOnlyDenied(e);
+        if (isStatementTimeout(e)) {
+            throw new MemberReadTimeoutError({ timeoutMs, ...(e instanceof Error && { cause: e }) });
+        }
         throw e;
     }
 }

package/dist/pipeline/msp-rebuild.js

@@ -8,7 +8,7 @@ import { createRebuildDeadLetterTable, recordRebuildDeadLetters, } from "../even
 import { upcastStoredEvents } from "../event-store/upcaster.js";
 import { emitProjectionRebuild } from "../observability/standard-metrics.js";
 import { SHARED_INSTANCE_SENTINEL } from "./event-consumer-state.js";
-import { capPendingGapsBelowCursor, subtractSortedIdsFromRanges } from "./pending-gap-ranges.js";
+import { capPendingGapsBelowCursor, mergeContiguousGapRanges, subtractSortedIdsFromRanges, } from "./pending-gap-ranges.js";
 function createRebuildCtx(registry, db, tenantId) {
     // Both surfaces throw — rebuild MUST NOT emit. We share one impl.
     const refuseAppend = async (args) => {
@@ -128,9 +128,9 @@ export async function rebuildMultiStreamProjection(mspName, deps) {
             const survivingGaps = subtractSortedIdsFromRanges(seededGaps, replayedIds);
             const cappedGaps = capPendingGapsBelowCursor(survivingGaps, lastProcessedEventId);
             const postReplayXmax = cappedGaps.length > 0 ? await selectSnapshotXmax(tx) : null;
-            const pendingGaps = postReplayXmax === null
+            const pendingGaps = mergeContiguousGapRanges(postReplayXmax === null
                 ? cappedGaps
-                : cappedGaps.map((gap) => ({ ...gap, xmax: postReplayXmax }));
+                : cappedGaps.map((gap) => ({ ...gap, xmax: postReplayXmax })));
             await updateConsumerRebuildCursor(tx, mspName, SHARED_INSTANCE_SENTINEL, lastProcessedEventId, pendingGaps);
             await swapShadowIntoLive(tx, meta.tableName);
         });

package/dist/pipeline/pending-gap-ranges.d.ts

@@ -10,3 +10,4 @@ export declare function partitionBurntGaps(gaps: readonly PendingGapEntry[], fet
 export declare function splitRangeExcludingIds(range: PendingGapEntry, excludeIds: readonly bigint[]): PendingGapEntry[];
 export declare function subtractSortedIdsFromRanges(ranges: readonly PendingGapEntry[], sortedIds: readonly bigint[]): PendingGapEntry[];
 export declare function capPendingGapsBelowCursor(gaps: readonly PendingGapEntry[], cursor: bigint): PendingGapEntry[];
+export declare function mergeContiguousGapRanges(gaps: readonly PendingGapEntry[]): PendingGapEntry[];

package/dist/pipeline/pending-gap-ranges.js

@@ -97,3 +97,25 @@ export function capPendingGapsBelowCursor(gaps, cursor) {
     }
     return capped;
 }
+// Merges ranges that touch exactly (end + 1 === next start). Keeps the row small
+// when many adjacent id holes appear one pass after another. The merged xmax is
+// the larger one: finality may only be claimed once the later-recorded bound has
+// passed, so merging can delay it but never make it premature.
+export function mergeContiguousGapRanges(gaps) {
+    const sorted = [...gaps].sort((a, b) => {
+        const diff = BigInt(a.from) - BigInt(b.from);
+        return diff < 0n ? -1 : diff > 0n ? 1 : 0;
+    });
+    const merged = [];
+    for (const gap of sorted) {
+        const last = merged.at(-1);
+        if (last && BigInt(last.to) + 1n === BigInt(gap.from)) {
+            const xmax = BigInt(gap.xmax) > BigInt(last.xmax) ? gap.xmax : last.xmax;
+            merged[merged.length - 1] = { from: last.from, to: gap.to, xmax };
+        }
+        else {
+            merged.push(gap);
+        }
+    }
+    return merged;
+}

package/dist/pipeline/system-hooks.js

@@ -400,7 +400,7 @@ export function createSseBroadcastEventConsumer(sseBroker) {
         // exist yet has no audience to replay it to.
         startFrom: "now",
         handler: async (event) => {
-            sseBroker.pushToChannel(tenantChannel(event.tenantId), {
+            await sseBroker.pushToChannel(tenantChannel(event.tenantId), {
                 type: event.type,
                 data: {
                     id: event.aggregateId,
@@ -571,7 +571,7 @@ export function createAccessInvalidationEventConsumer(sseBroker) {
                 // every user behind one bad row).
                 if (typeof userId !== "string" || userId.length === 0)
                     return;
-                sseBroker.publishAccessInvalidation(userId, readSessionRevokedScope(event.payload));
+                await sseBroker.publishAccessInvalidation(userId, readSessionRevokedScope(event.payload));
             }
             if (event.type === PAT_REVOKED_EVENT_TYPE) {
                 const userId = event.payload["userId"];
@@ -579,7 +579,7 @@ export function createAccessInvalidationEventConsumer(sseBroker) {
                 // session-revoked above.
                 if (typeof userId !== "string" || userId.length === 0)
                     return;
-                sseBroker.publishAccessInvalidation(userId, readPatRevokedScope(event.payload));
+                await sseBroker.publishAccessInvalidation(userId, readPatRevokedScope(event.payload));
             }
             if (event.type === TENANT_MEMBERSHIP_UPDATED_EVENT_TYPE ||
                 event.type === TENANT_MEMBERSHIP_DELETED_EVENT_TYPE) {
@@ -588,7 +588,7 @@ export function createAccessInvalidationEventConsumer(sseBroker) {
                 // reasoning as above.
                 if (userId === undefined)
                     return;
-                sseBroker.publishAccessInvalidation(userId);
+                await sseBroker.publishAccessInvalidation(userId);
             }
         },
     };

package/dist/pipeline/system-identity-switch.d.ts

@@ -24,7 +24,7 @@ type MemberReaderAudit = IdentitySwitchAudit & {
 };
 export declare function createGatedIdentitySwitch(callerLabel: string, caller: SessionUser | undefined, hasGrant: boolean, ungated: IdentitySwitch, audit?: IdentitySwitchAudit): IdentitySwitch;
 export declare function createGatedMemberReader(callerLabel: string, allowSystemIdentity: boolean, ungated: MemberReader, audit?: MemberReaderAudit): MemberReader;
-export declare function createGatedProjectionReader(callerLabel: string, hasGrant: boolean, ungated: ProjectionReader, audit?: IdentitySwitchAudit): ProjectionReader;
+export declare function createGatedProjectionReader(callerLabel: string, hasGrant: boolean, ungated: ProjectionReader, audit?: IdentitySwitchAudit, projectionHasTenantColumn?: (qualifiedName: string) => boolean): ProjectionReader;
 export declare function withHookEscapeHatchGrant<TContext extends object>(context: TContext, callerLabel: string, escapeHatch: EscapeHatchDeclaration | undefined): TContext;
 export declare function bindHookEscapeHatchGrant(fn: LifecycleHookFn, label: string, escapeHatch: EscapeHatchDeclaration | undefined): LifecycleHookFn;
 export {};

package/dist/pipeline/system-identity-switch.js

@@ -104,11 +104,12 @@ export function createGatedMemberReader(callerLabel, allowSystemIdentity, ungate
 }
 // Same idea, for ctx.queryProjection — a single function rather than a pair.
 const ungatedProjectionReaderByGated = new WeakMap();
-// ctx.queryProjection's gate: only { unsafeAllTenants: true } is grant-checked —
-// a plain call always passes through, tenant-scoped by the projection's own table.
-export function createGatedProjectionReader(callerLabel, hasGrant, ungated, audit) {
+// ctx.queryProjection's gate: only { unsafeAllTenants: true } on a projection with a
+// tenant column is grant-checked — a plain call always passes through, tenant-scoped
+// by the projection's own table, and the flag is a no-op on a tenant-less one.
+export function createGatedProjectionReader(callerLabel, hasGrant, ungated, audit, projectionHasTenantColumn = () => true) {
     const gated = async (qualifiedName, options) => {
-        if (options?.unsafeAllTenants === true) {
+        if (options?.unsafeAllTenants === true && projectionHasTenantColumn(qualifiedName)) {
             if (!hasGrant)
                 throw unsafeAllTenantsDenied(callerLabel);
             if (audit?.reason !== undefined) {

package/dist/pipeline/tenant-timezone-cache.js

@@ -4,9 +4,11 @@
 // SELECT (sometimes two, cascade + fallback) per request, often inside an
 // open write transaction. A tenant-keyed TTL cache removes the steady-state
 // cost; dispatch-write.ts invalidates entries synchronously on
-// config:write:set/reset for this key, so the TTL below only covers writes
-// that bypass that path (migrations, seeds, direct DB edits).
-const DEFAULT_TTL_MS = 5 * 60 * 1000;
+// config:write:set/reset for this key, but only in the process that handled
+// the write. The TTL below therefore bounds how long OTHER replicas (and
+// writes that bypass that path: migrations, seeds, direct DB edits) keep
+// serving the old value, hence the short default.
+const DEFAULT_TTL_MS = 30 * 1000;
 const DEFAULT_MAX_ENTRIES = 1000;
 export function createTenantTimezoneCache(opts = {}) {
     const ttlMs = opts.ttlMs ?? DEFAULT_TTL_MS;

package/dist/redis/cache-sync-topics.d.ts

@@ -2,6 +2,7 @@ import type { TenantId } from "../engine/types/identifiers.js";
 export declare const CACHE_SYNC_TOPICS: {
     readonly tenantConfig: "tenant-config";
     readonly tierAssignment: "tier-assignment";
+    readonly featureToggle: "feature-toggle";
 };
 export type TenantConfigSyncMessage = {
     readonly tenantId: TenantId;

package/dist/redis/cache-sync-topics.js

@@ -1,6 +1,7 @@
 export const CACHE_SYNC_TOPICS = {
     tenantConfig: "tenant-config",
     tierAssignment: "tier-assignment",
+    featureToggle: "feature-toggle",
 };
 function hasOptionalStringKey(value) {
     return !("key" in value) || value.key === undefined || typeof value.key === "string";

package/dist/redis/client.d.ts

@@ -6,4 +6,5 @@ export type RedisClientOptions = {
     readonly extra?: Readonly<Omit<RedisOptions, "connectTimeout" | "commandTimeout" | "maxRetriesPerRequest">>;
 };
 export declare function createRedisClient(url: string, options?: RedisClientOptions): Redis;
+export declare function redisChannelPrefixFromEnv(env?: Readonly<Record<string, string | undefined>>): string;
 export declare function redisClientOptionsFromEnv(env?: Readonly<Record<string, string | undefined>>): RedisClientOptions;

package/dist/redis/client.js

@@ -26,6 +26,13 @@ export function createRedisClient(url, options = {}) {
         maxRetriesPerRequest,
     });
 }
+// Redis Pub/Sub ignores the DB index and ioredis keyPrefix, so apps or environments sharing one
+// Redis instance would see each other's SSE and toggle-sync traffic. An optional prefix
+// namespaces those channels; unset keeps the unprefixed channel names.
+export function redisChannelPrefixFromEnv(env = process.env) {
+    const raw = env["KUMIKO_REDIS_CHANNEL_PREFIX"]?.trim();
+    return raw ? `${raw}:` : "";
+}
 // Env-var reader — mirrors dbConnectionOptionsFromEnv's contract. Strict:
 // malformed values throw at boot rather than silently falling back to
 // defaults.

package/dist/redis/index.d.ts

@@ -3,6 +3,6 @@ export { createCacheSyncBusOverSignal, createDefaultCacheSyncBus, createLocalCac
 export type { TenantConfigSyncMessage, TierAssignmentSyncMessage } from "./cache-sync-topics.js";
 export { CACHE_SYNC_TOPICS, isTenantConfigSyncMessage, isTierAssignmentSyncMessage, } from "./cache-sync-topics.js";
 export type { RedisClientOptions } from "./client.js";
-export { createRedisClient, redisClientOptionsFromEnv } from "./client.js";
+export { createRedisClient, redisChannelPrefixFromEnv, redisClientOptionsFromEnv, } from "./client.js";
 export type { PubSubSignal, PubSubSignalOptions } from "./pubsub-signal.js";
 export { createRedisPubSubSignal } from "./pubsub-signal.js";

package/dist/redis/index.js

@@ -1,4 +1,4 @@
 export { createCacheSyncBusOverSignal, createDefaultCacheSyncBus, createLocalCacheSyncBus, createRedisCacheSyncBus, resolveCacheSyncBus, } from "./cache-sync-bus.js";
 export { CACHE_SYNC_TOPICS, isTenantConfigSyncMessage, isTierAssignmentSyncMessage, } from "./cache-sync-topics.js";
-export { createRedisClient, redisClientOptionsFromEnv } from "./client.js";
+export { createRedisClient, redisChannelPrefixFromEnv, redisClientOptionsFromEnv, } from "./client.js";
 export { createRedisPubSubSignal } from "./pubsub-signal.js";

package/dist/redis/pubsub-signal.d.ts

@@ -1,6 +1,7 @@
 import { type RedisClientOptions } from "./client.js";
 export type PubSubSignal = {
     publish(channel: string, payload: unknown): void;
+    publishConfirmed(channel: string, payload: unknown): Promise<void>;
     onMessage(listener: (channel: string, payload: unknown) => void): void;
     onReconnect(listener: () => void): void;
     close(): Promise<void>;

package/dist/redis/pubsub-signal.js

@@ -92,6 +92,9 @@ export function createRedisPubSubSignal(opts) {
                 console.error(`[kumiko:${opts.label}] publish failed:`, err);
             });
         },
+        async publishConfirmed(channel, payload) {
+            await publisher.publish(channel, JSON.stringify(payload));
+        },
         onMessage(listener) {
             listeners.add(listener);
         },

package/dist/search/meilisearch-adapter.js

@@ -20,6 +20,14 @@ async function awaitSucceededTask(enqueued, toleratedErrorCodes = []) {
 // would fail forever.
 const REMOVE_TOLERATED_ERROR_CODES = [ErrorStatusCode.INDEX_NOT_FOUND];
 const INDEX_LIST_PAGE_SIZE = 100;
+// What an unconfigured Meilisearch index reports as searchableAttributes.
+const MEILI_ALL_ATTRIBUTES = "*";
+function isIndexNotFound(err) {
+    const cause = typeof err === "object" && err !== null ? err.cause : null;
+    return (typeof cause === "object" &&
+        cause !== null &&
+        cause.code === ErrorStatusCode.INDEX_NOT_FOUND);
+}
 // Exported for unit tests (index-name / primary-key shape) without a live Meili.
 export function meilisearchTenantIndex(prefix, tenantId) {
     return `${prefix}t${tenantId}`;
@@ -58,6 +66,24 @@ export function createMeilisearchAdapter(options) {
     // found". A failed configure is never memoized — remove the map entry (iff
     // it's still the same in-flight promise) and rethrow, so a transient
     // Meili outage doesn't permanently poison the tenant for the process.
+    // The configured-tenants map is process memory only: after a restart a stored explicit
+    // configure() must not be overwritten by the registry default, so the default is applied only
+    // to an index that is missing or still carries Meilisearch's factory settings.
+    async function indexNeedsDefaultConfig(tenantId) {
+        try {
+            const settings = await client.index(meilisearchTenantIndex(prefix, tenantId)).getSettings();
+            const searchable = settings.searchableAttributes ?? [MEILI_ALL_ATTRIBUTES];
+            const filterable = settings.filterableAttributes ?? [];
+            return (searchable.length === 1 &&
+                searchable[0] === MEILI_ALL_ATTRIBUTES &&
+                !filterable.includes("_type"));
+        }
+        catch (err) {
+            if (isIndexNotFound(err))
+                return true;
+            throw err;
+        }
+    }
     async function ensureConfigured(tenantId) {
         // skip: no registry-derived default — callers configure tenants explicitly.
         if (!defaultConfig)
@@ -68,10 +94,14 @@ export function createMeilisearchAdapter(options) {
             // skip: configured (or in flight) already for this tenant.
             return;
         }
-        await trackConfigure(tenantId, defaultConfig);
+        const config = defaultConfig;
+        await trackConfigure(tenantId, async () => {
+            if (await indexNeedsDefaultConfig(tenantId))
+                await applyConfig(tenantId, config);
+        });
     }
-    async function trackConfigure(tenantId, config) {
-        const pending = applyConfig(tenantId, config);
+    async function trackConfigure(tenantId, run) {
+        const pending = run();
         configuredTenants.set(tenantId, pending);
         try {
             await pending;
@@ -88,7 +118,7 @@ export function createMeilisearchAdapter(options) {
             defaultConfig = config;
         },
         async configure(tenantId, config) {
-            await trackConfigure(tenantId, config);
+            await trackConfigure(tenantId, () => applyConfig(tenantId, config));
         },
         async index(tenantId, doc) {
             await ensureConfigured(tenantId);

package/dist/stack/test-stack.d.ts

@@ -146,7 +146,7 @@ export type TestStackOptions = {
         runLogger?: (deps: {
             registry: Registry;
             db: import("../db/index.js").DbConnection;
-        }) => Pick<JobRunnerOptions, "onJobStart" | "onJobComplete" | "onJobFailed"> | undefined;
+        }) => Pick<JobRunnerOptions, "onJobStart" | "onJobComplete" | "onJobFailed" | "onJobQueued" | "onJobDropped"> | undefined;
     };
     /** Override the event dispatcher's polling-timer interval. Default 50ms.
      *  Tests that assert LISTEN/NOTIFY wake-up latency need this pushed far
@@ -157,6 +157,9 @@ export type TestStackOptions = {
      *  them themselves. Default true — false pushes only projection/MSP/
      *  storeTable sources, same as before fw#3102. */
     entityTables?: boolean;
+    /** Time source of the stack's rate-limit resolver, so tests can freeze the
+     *  clock instead of racing the window. Default: system time. */
+    rateLimitNowMs?: () => number;
     /** Forwarded to buildServer's top-level `ServerOptions.trustedProxyHops`
      *  — see there. Default 0. */
     trustedProxyHops?: number;

package/dist/stack/test-stack.js

@@ -189,6 +189,8 @@ export async function setupTestStack(options) {
                 getActiveTenantIds: options.jobs.getActiveTenantIds,
             }),
             ...(runLogger?.onJobStart !== undefined && { onJobStart: runLogger.onJobStart }),
+            ...(runLogger?.onJobQueued !== undefined && { onJobQueued: runLogger.onJobQueued }),
+            ...(runLogger?.onJobDropped !== undefined && { onJobDropped: runLogger.onJobDropped }),
             // Tracker fires in finally: drainJobs wakes on it, so the log row must
             // be written first, and a throwing logger must not swallow the signal.
             onJobComplete: async (jobName, jobId, ...rest) => {
@@ -268,8 +270,13 @@ export async function setupTestStack(options) {
         // `rateLimit` key, so reading it back needs the same relaxed boundary
         // extraContext itself is typed with.
         const explicitRateLimit = appContext.rateLimit;
-        const rateLimitFallback = appContext.redis === undefined && explicitRateLimit === undefined
-            ? createRateLimitResolver({ redis: testRedis.redis })
+        const needsOwnRateLimitResolver = explicitRateLimit === undefined &&
+            (appContext.redis === undefined || options.rateLimitNowMs !== undefined);
+        const rateLimitFallback = needsOwnRateLimitResolver
+            ? createRateLimitResolver({
+                redis: testRedis.redis,
+                ...(options.rateLimitNowMs ? { nowMs: options.rateLimitNowMs } : {}),
+            })
             : undefined;
         const server = buildServer({
             registry,

package/dist/testing/e2e-generator.js

@@ -325,8 +325,13 @@ function fieldToFixture(name, field) {
             return `e2e ${name} (long-form content)`;
         case "boolean":
             return true;
-        case "select":
-            return field.options[0] ?? "";
+        case "select": {
+            const conditional = new Set(field.conditionalOptions?.flatMap((rule) => rule.options));
+            return (field.default ??
+                field.options.find((option) => !conditional.has(option)) ??
+                field.options[0] ??
+                "");
+        }
         case "multiSelect": {
             const first = field.options[0];
             return first ? [first] : [];

package/dist/ui-types/index.d.ts

@@ -3,8 +3,8 @@ export type { DerivedCellRoundingTarget } from "../engine/embedded-derived.js";
 export { computeDerivedCellValue, roundDerivedCellValue } from "../engine/embedded-derived.js";
 export type { ParsedRefTarget } from "../engine/parse-ref-target.js";
 export { parseRefTarget } from "../engine/parse-ref-target.js";
-export type { FieldsOrGroupsSection } from "../engine/screen-helpers.js";
-export { evalFieldCondition, explicitListScreenId, isExtensionEditSection, isFieldsEditSection, isFormatSpec, isWriteFormEditSection, normalizeEditField, normalizeListColumn, resolveNavParentScreen, sectionFieldSpecs, } from "../engine/screen-helpers.js";
+export type { FieldsOrGroupsSection, UnavailableSelectOption } from "../engine/screen-helpers.js";
+export { availableSelectOptions, evalFieldCondition, explicitListScreenId, findUnavailableSelectOptions, isExtensionEditSection, isFieldsEditSection, isFormatSpec, isWriteFormEditSection, normalizeEditField, normalizeListColumn, resolveNavParentScreen, sectionFieldSpecs, } from "../engine/screen-helpers.js";
 export type { BooleanFieldDef, DateFieldDef, EmbeddedDerivedCellDef, EntityDefinition, FieldDefinition, FileFieldDef, FilesFieldDef, ImageFieldDef, ImagesFieldDef, NumberFieldDef, OptionsQueryPayload, OptionsQueryPayloadValue, SelectFieldDef, SelectOptionTone, TextFieldDef, } from "../engine/types/fields.js";
 export type { AccessRule, OpenToAllAccessRule, OpenToAllDeclaration, OpenToAllPersonalData, RoleAccessPersonalData, RoleAccessRule, } from "../engine/types/handlers.js";
 export { isOpenToAllGranted, isUiAccessGranted } from "../engine/types/handlers.js";
@@ -14,7 +14,7 @@ export { metricField, relatedListGroupHeaderLabel, relatedListGroupKey, } from "
 export type { TargetRef } from "../engine/types/target-ref.js";
 export type { TreeAction, TreeNode, TreeNodeState } from "../engine/types/tree-node.js";
 export type { WorkspaceDefinition } from "../engine/types/workspace.js";
-export { ACTION_FORM_ENTITY, PROJECTION_DETAIL_ENTITY, WRITE_FORM_SECTION_ENTITY, } from "../i18n/required-surface-keys.js";
+export { ACTION_FORM_ENTITY, handlerFieldLabelKey, handlerTitleKey, PROJECTION_DETAIL_ENTITY, WRITE_FORM_SECTION_ENTITY, } from "../i18n/required-surface-keys.js";
 export type { AppSchema, FeatureSchema, QualifiedContentCollection, WorkspaceSchema, } from "./app-schema.js";
 export { type Formality, formalLocaleTag } from "./formality.js";
 export type { ListRowMetaColumnType, ListRowMetaReference, ReferenceLookupSource, SystemReferenceLabel, } from "./list-row-meta.js";

package/dist/ui-types/index.js

@@ -22,10 +22,10 @@
 export { NO_WIDGET_FIELD_TYPES } from "@cosmicdrift/kumiko-types/fields";
 export { computeDerivedCellValue, roundDerivedCellValue } from "../engine/embedded-derived.js";
 export { parseRefTarget } from "../engine/parse-ref-target.js";
-export { evalFieldCondition, explicitListScreenId, isExtensionEditSection, isFieldsEditSection, isFormatSpec, isWriteFormEditSection, normalizeEditField, normalizeListColumn, resolveNavParentScreen, sectionFieldSpecs, } from "../engine/screen-helpers.js";
+export { availableSelectOptions, evalFieldCondition, explicitListScreenId, findUnavailableSelectOptions, isExtensionEditSection, isFieldsEditSection, isFormatSpec, isWriteFormEditSection, normalizeEditField, normalizeListColumn, resolveNavParentScreen, sectionFieldSpecs, } from "../engine/screen-helpers.js";
 export { isOpenToAllGranted, isUiAccessGranted } from "../engine/types/handlers.js";
 export { metricField, relatedListGroupHeaderLabel, relatedListGroupKey, } from "../engine/types/screen.js";
-export { ACTION_FORM_ENTITY, PROJECTION_DETAIL_ENTITY, WRITE_FORM_SECTION_ENTITY, } from "../i18n/required-surface-keys.js";
+export { ACTION_FORM_ENTITY, handlerFieldLabelKey, handlerTitleKey, PROJECTION_DETAIL_ENTITY, WRITE_FORM_SECTION_ENTITY, } from "../i18n/required-surface-keys.js";
 export { formalLocaleTag } from "./formality.js";
 export { LIST_ROW_META_COLUMNS, LIST_ROW_META_REFERENCES, REFERENCE_LOOKUP_SOURCES, SYSTEM_REFERENCE_LABELS, } from "./list-row-meta.js";
 export { resolveTranslationValue, translationValueOtherText, } from "./plural.js";

package/dist/upgrade-cli.js

@@ -257,6 +257,9 @@ async function runCodemodScript(scriptPath, targetDir, repoRoot, dryRun) {
 function hasCodemod(e) {
     return typeof e.codemod === "string" && e.codemod.length > 0;
 }
+function needsManualMigration(e) {
+    return !hasCodemod(e) || e.manualAfterCodemod === true;
+}
 const MANUAL_ID_HASH_LENGTH = 8;
 const MAX_RESOLVE_REASON_LENGTH = 500;
 // The hash tells apart entries that share a version (studio has several at 0.341.0).
@@ -438,9 +441,11 @@ markerVersion, previous) {
     const codemodEntries = breaking
         .filter(hasCodemod)
         .sort((a, b) => compareVersions(a.version, b.version));
-    const manualEntries = breaking.filter((e) => !hasCodemod(e));
+    const manualEntries = breaking.filter(needsManualMigration);
     for (const e of manualEntries) {
-        out.log(`  ⚠ ${e.version} · ${e.title} — no codemod, manual migration required`);
+        out.log(hasCodemod(e)
+            ? `  ⚠ ${e.version} · ${e.title} — codemod covers only part, manual migration still required`
+            : `  ⚠ ${e.version} · ${e.title} — no codemod, manual migration required`);
     }
     if (codemodEntries.length === 0) {
         out.log(breaking.length > 0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-framework",
-  "version": "0.353.0",
+  "version": "0.354.1",
   "description": "Framework core — engine, pipeline, API, DB, and every other bit that makes Kumiko go.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -187,6 +187,10 @@
       "types": "./dist/testing/real-providers.d.ts",
       "default": "./dist/testing/real-providers.js"
     },
+    "./internal/request-context": {
+      "types": "./dist/api/request-context.d.ts",
+      "default": "./dist/api/request-context.js"
+    },
     "./testing/e2e-generator": {
       "types": "./dist/testing/e2e-generator.d.ts",
       "default": "./dist/testing/e2e-generator.js"
@@ -206,8 +210,8 @@
     "./package.json": "./package.json"
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-http": "0.353.0",
-    "@cosmicdrift/kumiko-types": "0.353.0",
+    "@cosmicdrift/kumiko-http": "0.354.1",
+    "@cosmicdrift/kumiko-types": "0.354.1",
     "bullmq": "^5.76.7",
     "bun-types": "^1.3.13",
     "hono": "^4.13.1",
@@ -223,7 +227,7 @@
     "zod": "^4.4.3"
   },
   "devDependencies": {
-    "@cosmicdrift/kumiko-dispatcher-live": "0.353.0",
+    "@cosmicdrift/kumiko-dispatcher-live": "0.354.1",
     "bun-types": "^1.3.13",
     "pino-pretty": "^13.1.3"
   },
@@ -387,6 +391,10 @@
         "types": "./dist/testing/real-providers.d.ts",
         "default": "./dist/testing/real-providers.js"
       },
+      "./internal/request-context": {
+        "types": "./dist/api/request-context.d.ts",
+        "default": "./dist/api/request-context.js"
+      },
       "./testing/e2e-generator": {
         "types": "./dist/testing/e2e-generator.d.ts",
         "default": "./dist/testing/e2e-generator.js"