@cosmicdrift/kumiko-framework 0.362.0 → 0.364.0

package/dist/pipeline/system-hooks.js

@@ -1,3 +1,4 @@
+import { isPlainObject } from "@cosmicdrift/kumiko-types/type-guards";
 import { readNonEmptyStringArray, } from "../api/sse-broker.js";
 import { collectSearchableSubjectFields, configuredPiiSubjectKms, decryptPiiFieldValues, isPiiCiphertext, PII_ERASED_SENTINEL, } from "../crypto/index.js";
 import { createTenantDb, entityTableFromRegistry, rehydrateCompoundTypes } from "../db/index.js";
@@ -520,7 +521,7 @@ const TENANT_MEMBERSHIP_UPDATED_EVENT_TYPE = "tenant-membership.updated";
 const TENANT_MEMBERSHIP_DELETED_EVENT_TYPE = "tenant-membership.deleted";
 function readUserIdFromPreviousSnapshot(payload) {
     const previous = payload["previous"];
-    if (typeof previous !== "object" || previous === null)
+    if (!isPlainObject(previous))
         return undefined;
     const userId = previous["userId"];
     return typeof userId === "string" && userId.length > 0 ? userId : undefined;

package/dist/pipeline/system-identity-switch.js

@@ -124,14 +124,14 @@ export function createGatedProjectionReader(callerLabel, hasGrant, ungated, audi
 function readIdentitySwitchFn(context, key) {
     if (!(key in context))
         return undefined;
-    const value = context[key];
+    const value = Reflect.get(context, key);
     return typeof value === "function" ? value : undefined; // @cast-boundary engine-bridge — checked via typeof above
 }
 // context's own keys only — never touch a property of the resolved value, which may be a Proxy that throws on any get.
 function readDbLikeValue(context, key) {
     if (!(key in context))
         return undefined;
-    const value = context[key];
+    const value = Reflect.get(context, key);
     return typeof value === "object" && value !== null ? value : undefined;
 }
 function unavailableIdentitySwitchFn(callerLabel, kind) {

package/dist/rate-limit/bucket.d.ts

@@ -1,4 +1,4 @@
-import type { RateLimitOption, SessionUser } from "../engine/types/index.js";
+import type { PayloadBucketNormalization, RateLimitOption, SessionUser } from "../engine/types/index.js";
 export type BucketContext = {
     readonly handlerName: string;
     readonly user: SessionUser;
@@ -12,7 +12,7 @@ export type BucketResult = {
     readonly reason: string;
 };
 export declare function buildBucketKey(option: RateLimitOption, ctx: BucketContext): BucketResult;
-export declare function normalizePayloadBucketValue(value: string): string;
-export declare function buildPayloadBucketKey(handlerName: string, field: string, digest: string): string;
+export declare function normalizePayloadBucketValue(value: string, normalize?: PayloadBucketNormalization): string;
+export declare function buildPayloadBucketKey(tenantId: string, handlerName: string, field: string, digest: string): string;
 export declare function toPublicBucketName(bucket: string): string;
 export declare function createPayloadDigest(masterSecret: string): (value: string) => string;

package/dist/rate-limit/bucket.js

@@ -23,11 +23,21 @@ export function buildBucketKey(option, ctx) {
 // Payload-field buckets: the value (e.g. a recipient address) is normalized
 // and HMAC-hashed so Redis never holds it in plaintext.
 const PAYLOAD_BUCKET_PURPOSE = "kumiko:rate-limit:payload-bucket";
-export function normalizePayloadBucketValue(value) {
-    return value.trim().toLowerCase();
+export function normalizePayloadBucketValue(value, normalize) {
+    const base = value.normalize("NFKC").trim().toLowerCase();
+    return normalize === "email" ? stripEmailPlusTag(base) : base;
 }
-export function buildPayloadBucketKey(handlerName, field, digest) {
-    return `payload+handler:${handlerName}:${field}:${digest}`;
+// Only the `+tag` suffix is dropped; provider-specific dot rules are not applied.
+function stripEmailPlusTag(address) {
+    const at = address.lastIndexOf("@");
+    if (at === -1)
+        return address;
+    const local = address.slice(0, at);
+    const plus = local.indexOf("+");
+    return plus <= 0 ? address : `${local.slice(0, plus)}${address.slice(at)}`;
+}
+export function buildPayloadBucketKey(tenantId, handlerName, field, digest) {
+    return `payload+handler:${tenantId}:${handlerName}:${field}:${digest}`;
 }
 // Everything after the scope tag identifies the caller (IP, user/tenant id,
 // auth target, payload digest). IPv6 addresses and handler names contain ":",

package/dist/redis/cache-sync-bus.js

@@ -64,7 +64,12 @@ function createLocalFanout() {
 export function createLocalCacheSyncBus() {
     const fanout = createLocalFanout();
     return {
-        publish: fanout.deliver,
+        publish(topic, message, options) {
+            // skip: a single-process bus has no remote subscribers to reach
+            if (options?.remoteOnly)
+                return;
+            fanout.deliver(topic, message);
+        },
         subscribe: fanout.subscribe,
         onResync: fanout.onResync,
         async close() { },
@@ -108,8 +113,9 @@ export function createCacheSyncBusOverSignal(signal, opts) {
         }
     });
     return {
-        publish(topic, message) {
-            fanout.deliver(topic, message);
+        publish(topic, message, options) {
+            if (!options?.remoteOnly)
+                fanout.deliver(topic, message);
             const envelope = { origin, topic, message };
             signal.publish(opts.channel, envelope);
         },

package/dist/search/meilisearch-adapter.js

@@ -1,3 +1,4 @@
+import { errorCodeOf } from "@cosmicdrift/kumiko-types/type-guards";
 import { ErrorStatusCode, Meilisearch } from "meilisearch";
 // meilisearch's waitTask() RESOLVES (never rejects) once the server task
 // reaches a terminal state, even "failed" — a rejected doc (e.g. an id over
@@ -22,11 +23,30 @@ const REMOVE_TOLERATED_ERROR_CODES = [ErrorStatusCode.INDEX_NOT_FOUND];
 const INDEX_LIST_PAGE_SIZE = 100;
 // What an unconfigured Meilisearch index reports as searchableAttributes.
 const MEILI_ALL_ATTRIBUTES = "*";
+const DEFAULT_FILTERABLE_ATTRIBUTES = ["_type", "_weight"];
+const DEFAULT_SORTABLE_ATTRIBUTES = ["_weight"];
+function defaultSearchableAttributes(config) {
+    return config.rankingFields ?? config.searchableFields;
+}
+// Meilisearch may return granular filterable objects; those are never part of our default.
+function isSubsetOf(stored, wanted) {
+    return stored.every((attribute) => typeof attribute === "string" && wanted.includes(attribute));
+}
+// A stored list that lies inside the current default and misses attributes is an
+// older default that gained fields since; anything with a foreign attribute is
+// an explicit configure() and stays untouched.
+function isOutdatedDefault(stored, wanted) {
+    const pairs = [
+        [stored.searchable, wanted.searchable],
+        [stored.filterable, wanted.filterable],
+        [stored.sortable, wanted.sortable],
+    ];
+    return (pairs.every(([have, want]) => isSubsetOf(have, want)) &&
+        pairs.some(([have, want]) => want.some((attribute) => !have.includes(attribute))));
+}
 function isIndexNotFound(err) {
-    const cause = typeof err === "object" && err !== null ? err.cause : null;
-    return (typeof cause === "object" &&
-        cause !== null &&
-        cause.code === ErrorStatusCode.INDEX_NOT_FOUND);
+    const cause = typeof err === "object" && err !== null && "cause" in err ? err.cause : null;
+    return errorCodeOf(cause) === ErrorStatusCode.INDEX_NOT_FOUND;
 }
 // Exported for unit tests (index-name / primary-key shape) without a live Meili.
 export function meilisearchTenantIndex(prefix, tenantId) {
@@ -55,10 +75,9 @@ export function createMeilisearchAdapter(options) {
     }
     async function applyConfig(tenantId, config) {
         const index = client.index(meilisearchTenantIndex(prefix, tenantId));
-        const fields = config.rankingFields ?? config.searchableFields;
-        await awaitSucceededTask(index.updateSearchableAttributes([...fields]));
-        await awaitSucceededTask(index.updateFilterableAttributes(["_type", "_weight"]));
-        await awaitSucceededTask(index.updateSortableAttributes(["_weight"]));
+        await awaitSucceededTask(index.updateSearchableAttributes([...defaultSearchableAttributes(config)]));
+        await awaitSucceededTask(index.updateFilterableAttributes([...DEFAULT_FILTERABLE_ATTRIBUTES]));
+        await awaitSucceededTask(index.updateSortableAttributes([...DEFAULT_SORTABLE_ATTRIBUTES]));
     }
     // Lazily configures a tenant's index off the default config on its first
     // access, so callers that never call `configure` still get a filterable/
@@ -68,15 +87,22 @@ export function createMeilisearchAdapter(options) {
     // Meili outage doesn't permanently poison the tenant for the process.
     // The configured-tenants map is process memory only: after a restart a stored explicit
     // configure() must not be overwritten by the registry default, so the default is applied only
-    // to an index that is missing or still carries Meilisearch's factory settings.
-    async function indexNeedsDefaultConfig(tenantId) {
+    // to an index that is missing, carries Meilisearch's factory settings, or holds an older
+    // default that is a strict subset of the current one (fields were added by a deploy).
+    async function indexNeedsDefaultConfig(tenantId, config) {
         try {
             const settings = await client.index(meilisearchTenantIndex(prefix, tenantId)).getSettings();
             const searchable = settings.searchableAttributes ?? [MEILI_ALL_ATTRIBUTES];
             const filterable = settings.filterableAttributes ?? [];
-            return (searchable.length === 1 &&
+            const factorySettings = searchable.length === 1 &&
                 searchable[0] === MEILI_ALL_ATTRIBUTES &&
-                !filterable.includes("_type"));
+                !filterable.includes("_type");
+            return (factorySettings ||
+                isOutdatedDefault({ searchable, filterable, sortable: settings.sortableAttributes ?? [] }, {
+                    searchable: defaultSearchableAttributes(config),
+                    filterable: DEFAULT_FILTERABLE_ATTRIBUTES,
+                    sortable: DEFAULT_SORTABLE_ATTRIBUTES,
+                }));
         }
         catch (err) {
             if (isIndexNotFound(err))
@@ -96,7 +122,7 @@ export function createMeilisearchAdapter(options) {
         }
         const config = defaultConfig;
         await trackConfigure(tenantId, async () => {
-            if (await indexNeedsDefaultConfig(tenantId))
+            if (await indexNeedsDefaultConfig(tenantId, config))
                 await applyConfig(tenantId, config);
         });
     }

package/dist/secrets/stored-envelope.js

@@ -2,6 +2,7 @@
 // jsonb columns (secrets feature) or JSON-stringified TEXT columns
 // (EnvelopeCipher for config values / entity fields). One wire shape for
 // every envelope-encrypted store in the framework.
+import { isPlainObject } from "@cosmicdrift/kumiko-types/type-guards";
 export function encodeStoredEnvelope(envelope) {
     return {
         ciphertext: envelope.ciphertext.toString("base64"),
@@ -21,12 +22,11 @@ export function decodeStoredEnvelope(stored) {
     };
 }
 export function isStoredEnvelope(value) {
-    if (!value || typeof value !== "object")
+    if (!isPlainObject(value))
         return false;
-    const v = value; // @cast-boundary parse-boundary after typeof check
-    return (typeof v["ciphertext"] === "string" &&
-        typeof v["iv"] === "string" &&
-        typeof v["authTag"] === "string" &&
-        typeof v["encryptedDek"] === "string" &&
-        typeof v["kekVersion"] === "number");
+    return (typeof value["ciphertext"] === "string" &&
+        typeof value["iv"] === "string" &&
+        typeof value["authTag"] === "string" &&
+        typeof value["encryptedDek"] === "string" &&
+        typeof value["kekVersion"] === "number");
 }

package/dist/stack/push-entity-projection-tables.js

@@ -1,5 +1,5 @@
-import { KUMIKO_NAME_SYMBOL } from "@cosmicdrift/kumiko-types/schema-table-types";
 import { columnNamesOf, tableExists } from "../db/schema-inspection.js";
+import { schemaTableName } from "../db/table-introspection.js";
 import { addMissingColumns, addMissingIndexes, tableToMeta, unsafePushTables, } from "./table-helpers.js";
 // biome-ignore lint/suspicious/noConsole: stack-internal status logging
 const logInfo = (msg) => console.log(msg);
@@ -29,8 +29,7 @@ export async function pushEntityProjectionTables(stack, registry) {
         if (seen.has(proj.table))
             continue;
         seen.add(proj.table);
-        const tableRec = proj.table;
-        const physical = tableRec[KUMIKO_NAME_SYMBOL];
+        const physical = schemaTableName(proj.table) ?? tableToMeta(proj.table).tableName;
         if (!(await tableExists(stack.db, `public.${physical}`))) {
             missing[projName] = proj.table;
             continue;

package/dist/stack/table-helpers.js

@@ -1,20 +1,19 @@
-import { KUMIKO_META_SYMBOL, KUMIKO_NAME_SYMBOL, } from "@cosmicdrift/kumiko-types/schema-table-types";
 import { pgTypeToSqlType } from "../db/dialect.js";
 import { alterTableAddColumn, createIndexIfNotExists, executeDdlStatement, } from "../db/queries/ddl.js";
 import { truncateTablesRestartIdentity } from "../db/queries/test-stack.js";
 import { renderTableDdl } from "../db/render-ddl.js";
 import { tableExists } from "../db/schema-inspection.js";
 import { buildEntityTable, toTableName } from "../db/table-builder.js";
+import { asEntityTableMeta, schemaTableName } from "../db/table-introspection.js";
 function tableNameOf(table) {
     if (typeof table !== "object" || table === null) {
         throw new Error("table-helpers: table is not a SchemaTable object");
     }
-    const rec = table;
-    if (typeof rec[KUMIKO_NAME_SYMBOL] === "string")
-        return rec[KUMIKO_NAME_SYMBOL];
-    if (typeof rec.tableName === "string") {
-        return rec.tableName;
-    }
+    const symbolName = schemaTableName(table);
+    if (symbolName !== undefined)
+        return symbolName;
+    if ("tableName" in table && typeof table.tableName === "string")
+        return table.tableName;
     throw new Error("table-helpers: table has no name");
 }
 /**
@@ -36,26 +35,11 @@ export async function unsafeEnsureEntityTable(db, entity, entityName) {
 // Tables produced by the native dialect already carry EntityTableMeta-shape
 // (source/columns/indexes). renderTableDdl converts that to CREATE TABLE +
 // CREATE INDEX statements executed via db/queries/test-stack.
-function isMetaShape(v) {
-    return (typeof v === "object" &&
-        v !== null &&
-        typeof v.tableName === "string" &&
-        Array.isArray(v.columns) &&
-        Array.isArray(v.indexes) &&
-        (v.source === "managed" || v.source === "unmanaged"));
-}
 export function tableToMeta(table) {
-    // table() spreads column handles as enumerable props, so a field named
-    // `columns`/`tableName`/`source`/… shadows the matching meta key — read the
-    // canonical meta from the unshadowable symbol when present.
-    if (table !== null && typeof table === "object") {
-        const fromSymbol = table[KUMIKO_META_SYMBOL];
-        if (isMetaShape(fromSymbol))
-            return fromSymbol;
-    }
-    if (isMetaShape(table))
-        return table;
-    throw new Error("unsafePushTables: argument is not a SchemaTable / EntityTableMeta");
+    const meta = asEntityTableMeta(table);
+    if (!meta)
+        throw new Error("unsafePushTables: argument is not a SchemaTable / EntityTableMeta");
+    return meta;
 }
 /** Applies ALTER TABLE ADD COLUMN for exactly the given columns. */
 export async function addMissingColumns(db, tableName, columns) {

package/dist/stack/test-stack.js

@@ -1,3 +1,4 @@
+import { propertyOf } from "@cosmicdrift/kumiko-types/type-guards";
 import { buildServer } from "../api/server.js";
 import { createSseBroker } from "../api/sse-broker.js";
 import { validateBoot, validateNavBootSubset } from "../engine/boot-validator/index.js";
@@ -269,11 +270,7 @@ export async function setupTestStack(options) {
         // always-real `testRedis.redis`, independent of whatever extraContext
         // did to `appContext.redis` — an explicit `context.rateLimit` from
         // extraContext still wins (same precedence buildServer documents).
-        // @cast-boundary extraContext is declared Record<string, unknown> (late,
-        // dynamic extension point) — appContext's inferred type doesn't carry a
-        // `rateLimit` key, so reading it back needs the same relaxed boundary
-        // extraContext itself is typed with.
-        const explicitRateLimit = appContext.rateLimit;
+        const explicitRateLimit = propertyOf(appContext, "rateLimit");
         const needsOwnRateLimitResolver = explicitRateLimit === undefined &&
             (appContext.redis === undefined || options.rateLimitNowMs !== undefined);
         const rateLimitFallback = needsOwnRateLimitResolver

package/dist/testing/multipart-helper.d.ts

@@ -1,9 +1,3 @@
-/**
- * Serializes a FormData instance to multipart/form-data bytes.
- *
- * Returns the encoded body and the Content-Type header value (including the
- * generated boundary). Pass both directly to app.request or fetch.
- */
 export declare function buildMultipartBody(fd: FormData): Promise<{
     body: BodyInit;
     contentType: string;

package/dist/testing/multipart-helper.js

@@ -19,6 +19,7 @@
  * Returns the encoded body and the Content-Type header value (including the
  * generated boundary). Pass both directly to app.request or fetch.
  */
+import { isPlainObject } from "@cosmicdrift/kumiko-types/type-guards";
 export async function buildMultipartBody(fd) {
     const boundary = `KumikoBnd${Date.now()}${Math.random().toString(36).slice(2, 8)}`;
     const enc = new TextEncoder();
@@ -64,12 +65,11 @@ export function patchFileInstanceofForBunTest() {
         return;
     Object.defineProperty(File, Symbol.hasInstance, {
         value(instance) {
-            if (typeof instance !== "object" || instance === null)
+            if (!isPlainObject(instance))
                 return false;
-            const f = instance;
-            return (typeof f["name"] === "string" &&
-                typeof f["size"] === "number" &&
-                typeof f["arrayBuffer"] === "function");
+            return (typeof instance["name"] === "string" &&
+                typeof instance["size"] === "number" &&
+                typeof instance["arrayBuffer"] === "function");
         },
         configurable: true,
     });

package/dist/testing/without-ambient-temporal.js

@@ -3,15 +3,15 @@
  * Used by ambient-independence regression tests (kumiko-framework#1525/#1550).
  */
 export async function withoutAmbientTemporal(fn) {
-    const savedGlobal = globalThis.Temporal;
-    delete globalThis.Temporal;
+    const savedGlobal = Reflect.get(globalThis, "Temporal");
+    Reflect.deleteProperty(globalThis, "Temporal");
     try {
         return await fn();
     }
     finally {
         if (savedGlobal === undefined)
-            delete globalThis.Temporal;
+            Reflect.deleteProperty(globalThis, "Temporal");
         else
-            globalThis.Temporal = savedGlobal;
+            Reflect.set(globalThis, "Temporal", savedGlobal);
     }
 }

package/dist/utils/is-plain-object.d.ts

@@ -1,2 +1 @@
-/** Non-null object that is not an array — shared guard for deep-merge and AST extractors. */
-export declare function isPlainObject(value: unknown): value is Record<string, unknown>;
+export { isPlainObject } from "@cosmicdrift/kumiko-types/type-guards";

package/dist/utils/is-plain-object.js

@@ -1,4 +1 @@
-/** Non-null object that is not an array — shared guard for deep-merge and AST extractors. */
-export function isPlainObject(value) {
-    return typeof value === "object" && value !== null && !Array.isArray(value);
-}
+export { isPlainObject } from "@cosmicdrift/kumiko-types/type-guards";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-framework",
-  "version": "0.362.0",
+  "version": "0.364.0",
   "description": "Framework core — engine, pipeline, API, DB, and every other bit that makes Kumiko go.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -210,8 +210,8 @@
     "./package.json": "./package.json"
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-http": "0.362.0",
-    "@cosmicdrift/kumiko-types": "0.362.0",
+    "@cosmicdrift/kumiko-http": "0.364.0",
+    "@cosmicdrift/kumiko-types": "0.364.0",
     "bullmq": "^5.76.7",
     "bun-types": "^1.3.13",
     "hono": "^4.13.1",
@@ -227,7 +227,7 @@
     "zod": "^4.4.3"
   },
   "devDependencies": {
-    "@cosmicdrift/kumiko-dispatcher-live": "0.362.0",
+    "@cosmicdrift/kumiko-dispatcher-live": "0.364.0",
     "bun-types": "^1.3.13",
     "pino-pretty": "^13.1.3"
   },
@@ -419,6 +419,8 @@
     "src/changes.json",
     "src/scripts/codemod",
     "README.md",
-    "LICENSE"
+    "LICENSE",
+    "AGENTS.md",
+    "agents"
   ]
 }