@cosmicdrift/kumiko-framework 0.364.0 → 0.365.0

package/dist/pipeline/event-dispatcher.js

@@ -114,7 +114,7 @@ export function createEventDispatcher(options) {
     // to EVENTS_PUBSUB_CHANNEL; cleared by .stop(). The timer remains active
     // even with LISTEN attached — it's a cheap safety net against missed
     // NOTIFYs (subscription drop, crash mid-commit).
-    let pgUnlisten = null;
+    let pgSubscription = null;
     // Bounds how many consumer turns hold a DB transaction at once. Each turn's
     // db.begin() checks out one pool connection, plus any writes the handler
     // itself makes via context.db — the app db pool defaults to postgres-js's
@@ -498,15 +498,16 @@ export function createEventDispatcher(options) {
             // succeeds (onlisten callback). It drops to 0 on the initial connect
             // failure, on stop() and when the idle pre-check detects a DB outage.
             // An outage shorter than one poll tick is not detected; the gauge then
-            // stays at 1 until postgres.js's delayed re-LISTEN lands.
+            // stays at 1 until the driver's delayed re-LISTEN lands.
             emitEventDispatcherListenConnected(meter, false);
             if (options.pgClient) {
                 try {
                     const sub = await options.pgClient.listen(EVENTS_PUBSUB_CHANNEL, runBackgroundPass, () => {
-                        // Fires on initial connect and again when postgres.js's own
+                        // Fires on initial connect and again when the driver's own
                         // re-LISTEN lands after a drop; during an outage that re-LISTEN
-                        // waits in its connection backoff (measured 10-30s after the DB
-                        // returns), polling covers delivery meanwhile. Never unlisten()
+                        // waits in its connection backoff (postgres-js: measured 10-30s
+                        // after the DB returns, Bun.SQL: up to 32s), polling covers
+                        // delivery meanwhile. Never unlisten()
                         // + listen() by hand: that leaves duplicate listeners.
                         // ponytail: no own LISTEN reconnect, the backoff gap is polled;
                         // add a dedicated LISTEN connection if prod wires a pgClient
@@ -514,7 +515,7 @@ export function createEventDispatcher(options) {
                         listenSubscribed = true;
                         emitEventDispatcherListenConnected(meter, true);
                     });
-                    pgUnlisten = sub.unlisten;
+                    pgSubscription = sub;
                 }
                 catch (e) {
                     emitEventDispatcherListenConnected(meter, false);
@@ -532,12 +533,13 @@ export function createEventDispatcher(options) {
                 clearInterval(timer);
                 timer = null;
             }
-            if (pgUnlisten) {
-                await pgUnlisten().catch(() => {
+            if (pgSubscription) {
+                // Called on the subscription: Bun.SQL's unlisten is a prototype method.
+                await pgSubscription.unlisten().catch(() => {
                     // skip: unlisten failure only matters during shutdown — the
                     // subscription is being torn down anyway.
                 });
-                pgUnlisten = null;
+                pgSubscription = null;
                 listenSubscribed = false;
                 emitEventDispatcherListenConnected(meter, false);
             }

package/dist/pipeline/event-retention.d.ts

@@ -6,6 +6,7 @@ export type PruneEventsOptions = {
     readonly aggregateTypes: readonly string[];
     readonly aggregateIds?: readonly string[];
     readonly dryRun?: boolean;
+    readonly batchSize?: number;
 };
 export type PruneEventsResult = {
     readonly deletedCount: number;

package/dist/pipeline/event-retention.js

@@ -34,6 +34,10 @@ export async function pruneEvents(db, options) {
     if (options.aggregateIds !== undefined && options.aggregateIds.length === 0) {
         throw new Error("pruneEvents: aggregateIds must be non-empty when set.");
     }
+    if (options.batchSize !== undefined &&
+        (!Number.isInteger(options.batchSize) || options.batchSize < 1)) {
+        throw new Error("pruneEvents: batchSize must be a positive integer.");
+    }
     const aggregateTypes = options.aggregateTypes;
     const aggregateIds = options.aggregateIds;
     const dryRun = options.dryRun === true;
@@ -56,7 +60,9 @@ export async function pruneEvents(db, options) {
             aggregateType: [...aggregateTypes],
             ...(aggregateIds ? { aggregateId: [...aggregateIds] } : {}),
             createdAt: { lt: cutoff },
-        });
+        }, options.batchSize === undefined
+            ? undefined
+            : { orderBy: { col: "id", direction: "asc" }, limit: options.batchSize });
         if (candidates.length === 0) {
             return { deletedCount: 0, cutoff, aggregateTypes, dryRun };
         }

package/dist/pipeline/notify-scope.js

@@ -23,8 +23,10 @@ export function createDeferringNotify(deps) {
             assertNotificationVariables(registry, notificationType, options.data);
         if (options.immediate === true)
             return notifyNow(notificationType, options);
+        // The hook runs after the handler returned; a caller reusing `data` meanwhile must not change what is sent.
+        const optionsAtCallTime = structuredClone(options);
         scheduleAfterCommit(async () => {
-            await notifyAfterCommit(notificationType, options);
+            await notifyAfterCommit(notificationType, optionsAtCallTime);
         });
         return { kind: "deferred" };
     }

package/dist/pipeline/pre-transaction-reservations.js

@@ -73,7 +73,8 @@ export async function reserveBeforeTransaction(ctx, commands, user, inheritedOri
             }
             let prepared;
             if (handler.beforeTransaction) {
-                const phase = await handler.beforeTransaction(event, applyBeforeTransactionReadOnly(handlerContext));
+                const phaseContext = await buildHandlerContext(ctx, command.type, user, origin, undefined, undefined, undefined, undefined, undefined, true);
+                const phase = await handler.beforeTransaction(event, applyBeforeTransactionReadOnly(phaseContext));
                 if (!phase.isSuccess) {
                     await releaseAll(ctx, releases);
                     return { isSuccess: false, error: phase.error, failedIndex: index };

package/dist/schema-cli.js

@@ -439,8 +439,19 @@ export async function runSchemaCli(argv, appCwd, out, options = {}) {
                 await reportLeftoverDroppedTables(db, migrationsDir, out);
                 return pending === 0 ? 0 : 1;
             }
+            catch (e) {
+                // Message only, never dbUrl: it can carry the password.
+                out.err(`  ✗ schema status failed: ${e instanceof Error ? e.message : String(e)}`);
+                out.err('  Check that DATABASE_URL is reachable and the database exists (the scaffold\'s docker-compose creates "app").');
+                return 1;
+            }
             finally {
-                await close();
+                try {
+                    await close();
+                }
+                catch {
+                    // The connection already failed and was reported above; a failing close must not throw again.
+                }
             }
         }
         default: {

package/dist/stack/db.d.ts

@@ -1,9 +1,9 @@
-import type { DbConnection } from "@cosmicdrift/kumiko-types/db-connection";
+import type { DbConnection, PgListenClient } from "@cosmicdrift/kumiko-types/db-connection";
 declare function requireEnv(name: string): string;
 export type TestDb = {
     db: DbConnection;
     outsideTransactionDb: DbConnection;
-    client: unknown;
+    client: PgListenClient;
     dbName: string;
     cleanup: () => Promise<void>;
 };

package/dist/stack/test-stack.js

@@ -275,7 +275,8 @@ export async function setupTestStack(options) {
             (appContext.redis === undefined || options.rateLimitNowMs !== undefined);
         const rateLimitFallback = needsOwnRateLimitResolver
             ? createRateLimitResolver({
-                redis: testRedis.redis,
+                // An app-supplied redis keeps buckets and app redis on the same instance.
+                redis: appContext.redis ?? testRedis.redis,
                 ...(options.rateLimitNowMs ? { nowMs: options.rateLimitNowMs } : {}),
             })
             : undefined;

package/dist/testing/index.d.ts

@@ -22,3 +22,4 @@ export { sharedItemEntity, sharedItemTable, sharedUserEntity, sharedUserTable, s
 export { sleep } from "./utils.js";
 export { waitFor } from "./wait-for.js";
 export { withoutAmbientTemporal } from "./without-ambient-temporal.js";
+export { zipWithEntries } from "./zip-fixture.js";

package/dist/testing/index.js

@@ -30,3 +30,4 @@ export { sharedItemEntity, sharedItemTable, sharedUserEntity, sharedUserTable, s
 export { sleep } from "./utils.js";
 export { waitFor } from "./wait-for.js";
 export { withoutAmbientTemporal } from "./without-ambient-temporal.js";
+export { zipWithEntries } from "./zip-fixture.js";

package/dist/testing/multipart-helper.d.ts

@@ -1,3 +1,9 @@
+/**
+ * Serializes a FormData instance to multipart/form-data bytes.
+ *
+ * Returns the encoded body and the Content-Type header value (including the
+ * generated boundary). Pass both directly to app.request or fetch.
+ */
 export declare function buildMultipartBody(fd: FormData): Promise<{
     body: BodyInit;
     contentType: string;

package/dist/testing/multipart-helper.js

@@ -1,3 +1,4 @@
+import { isPlainObject } from "@cosmicdrift/kumiko-types/type-guards";
 // Workarounds for Bun v1.3.x bun:test limitations with multipart/form-data.
 //
 // Two bugs combine to break file upload tests in bun:test:
@@ -19,7 +20,6 @@
  * Returns the encoded body and the Content-Type header value (including the
  * generated boundary). Pass both directly to app.request or fetch.
  */
-import { isPlainObject } from "@cosmicdrift/kumiko-types/type-guards";
 export async function buildMultipartBody(fd) {
     const boundary = `KumikoBnd${Date.now()}${Math.random().toString(36).slice(2, 8)}`;
     const enc = new TextEncoder();

package/dist/testing/zip-fixture.d.ts

@@ -0,0 +1 @@
+export declare function zipWithEntries(...entryNames: readonly string[]): Uint8Array;

package/dist/testing/zip-fixture.js

@@ -0,0 +1,33 @@
+const LOCAL_HEADER_FIXED_LENGTH = 30;
+const CENTRAL_HEADER_FIXED_LENGTH = 46;
+const EOCD_LENGTH = 22;
+// Minimal stored ZIP (no compression, zero CRC): enough structure for readers that
+// walk the central directory. Not for extraction.
+export function zipWithEntries(...entryNames) {
+    const encoder = new TextEncoder();
+    const names = entryNames.map((name) => encoder.encode(name));
+    const localSize = names.reduce((sum, name) => sum + LOCAL_HEADER_FIXED_LENGTH + name.length, 0);
+    const centralSize = names.reduce((sum, name) => sum + CENTRAL_HEADER_FIXED_LENGTH + name.length, 0);
+    const bytes = new Uint8Array(localSize + centralSize + EOCD_LENGTH);
+    const view = new DataView(bytes.buffer);
+    let localOffset = 0;
+    let centralOffset = localSize;
+    for (const name of names) {
+        view.setUint32(localOffset, 0x04034b50, true);
+        view.setUint16(localOffset + 26, name.length, true);
+        bytes.set(name, localOffset + LOCAL_HEADER_FIXED_LENGTH);
+        view.setUint32(centralOffset, 0x02014b50, true);
+        view.setUint16(centralOffset + 28, name.length, true);
+        view.setUint32(centralOffset + 42, localOffset, true);
+        bytes.set(name, centralOffset + CENTRAL_HEADER_FIXED_LENGTH);
+        localOffset += LOCAL_HEADER_FIXED_LENGTH + name.length;
+        centralOffset += CENTRAL_HEADER_FIXED_LENGTH + name.length;
+    }
+    const eocdOffset = localSize + centralSize;
+    view.setUint32(eocdOffset, 0x06054b50, true);
+    view.setUint16(eocdOffset + 8, names.length, true);
+    view.setUint16(eocdOffset + 10, names.length, true);
+    view.setUint32(eocdOffset + 12, centralSize, true);
+    view.setUint32(eocdOffset + 16, localSize, true);
+    return bytes;
+}

package/dist/ui-types/card-column-roles.js

@@ -18,8 +18,10 @@ export function cardFileDisplayKind(type, renderer) {
 // boot validator so the validator counts exactly what the card would draw.
 // The first image column is the card's leading preview, neither title nor meta.
 export function cardColumnRoles(columns) {
-    const image = columns.find((col) => col.fileDisplay?.kind === "image");
-    const textColumns = columns.filter((col) => col !== image);
+    const isImage = (col) => col.fileDisplay?.kind === "image";
+    const image = columns.find((col) => isImage(col) && col.hideOnNarrow !== true);
+    // A narrow-hidden image must not turn into the title just because it is not the preview.
+    const textColumns = columns.filter((col) => col !== image && !(isImage(col) && col.hideOnNarrow === true));
     const title = textColumns.find((col) => col.highlighted === true) ?? textColumns[0];
     const status = textColumns.find((col) => col !== title && col.type === "select" && col.renderer === undefined);
     const meta = textColumns.filter((col) => col !== title && col !== status && col.hideOnNarrow !== true);

package/dist/ui-types/index.d.ts

@@ -4,7 +4,7 @@ export { computeDerivedCellValue, roundDerivedCellValue } from "../engine/embedd
 export type { ParsedRefTarget } from "../engine/parse-ref-target.js";
 export { parseRefTarget } from "../engine/parse-ref-target.js";
 export type { FieldsOrGroupsSection, UnavailableSelectOption } from "../engine/screen-helpers.js";
-export { availableSelectOptions, evalFieldCondition, explicitListScreenId, findUnavailableSelectOptions, isExtensionEditSection, isFieldsEditSection, isFormatSpec, isRecordLocked, isWriteFormEditSection, normalizeEditField, normalizeListColumn, resolveNavParentScreen, sectionFieldSpecs, } from "../engine/screen-helpers.js";
+export { availableSelectOptions, evalFieldCondition, explicitListScreenId, findUnavailableSelectOptions, isExtensionEditSection, isFieldsEditSection, isFormatSpec, isRecordLocked, isUnchangedValue, isWriteFormEditSection, normalizeEditField, normalizeListColumn, resolveNavParentScreen, sectionFieldSpecs, } from "../engine/screen-helpers.js";
 export type { BooleanFieldDef, DateFieldDef, EmbeddedDerivedCellDef, EntityDefinition, FieldDefinition, FileFieldDef, FilesFieldDef, ImageFieldDef, ImagesFieldDef, NumberFieldDef, OptionsQueryPayload, OptionsQueryPayloadValue, SelectFieldDef, SelectOptionTone, TextFieldDef, } from "../engine/types/fields.js";
 export type { AccessRule, OpenToAllAccessRule, OpenToAllDeclaration, OpenToAllPersonalData, RoleAccessPersonalData, RoleAccessRule, } from "../engine/types/handlers.js";
 export { isOpenToAllGranted, isUiAccessGranted } from "../engine/types/handlers.js";

package/dist/ui-types/index.js

@@ -22,7 +22,7 @@
 export { NO_WIDGET_FIELD_TYPES } from "@cosmicdrift/kumiko-types/fields";
 export { computeDerivedCellValue, roundDerivedCellValue } from "../engine/embedded-derived.js";
 export { parseRefTarget } from "../engine/parse-ref-target.js";
-export { availableSelectOptions, evalFieldCondition, explicitListScreenId, findUnavailableSelectOptions, isExtensionEditSection, isFieldsEditSection, isFormatSpec, isRecordLocked, isWriteFormEditSection, normalizeEditField, normalizeListColumn, resolveNavParentScreen, sectionFieldSpecs, } from "../engine/screen-helpers.js";
+export { availableSelectOptions, evalFieldCondition, explicitListScreenId, findUnavailableSelectOptions, isExtensionEditSection, isFieldsEditSection, isFormatSpec, isRecordLocked, isUnchangedValue, isWriteFormEditSection, normalizeEditField, normalizeListColumn, resolveNavParentScreen, sectionFieldSpecs, } from "../engine/screen-helpers.js";
 export { isOpenToAllGranted, isUiAccessGranted } from "../engine/types/handlers.js";
 export { metricField, relatedListGroupHeaderLabel, relatedListGroupKey, } from "../engine/types/screen.js";
 export { ACTION_FORM_ENTITY, handlerFieldLabelKey, handlerTitleKey, PROJECTION_DETAIL_ENTITY, WRITE_FORM_SECTION_ENTITY, } from "../i18n/required-surface-keys.js";

package/dist/upgrade-cli.js

@@ -1,10 +1,11 @@
 import { createHash } from "node:crypto";
 import { existsSync, mkdirSync, readdirSync, readFileSync, realpathSync, statSync, writeFileSync, } from "node:fs";
-import { isAbsolute, join, relative, resolve } from "node:path";
+import { dirname, isAbsolute, join, relative, resolve } from "node:path";
 import { getFlag, getStringFlag, parseArgs } from "./arg-parser.js";
 import { compareVersions, filterEntriesAfter, parseFeatureChangelog, sortEntries, } from "./engine/index.js";
 import { ensureTemporalPolyfill } from "./time/index.js";
 const SEMVER_RE = /^\d+\.\d+\.\d+$/;
+const SEMVER_CORE_RE = /^(\d+\.\d+\.\d+)(?:-[0-9A-Za-z.-]+)?$/;
 const CODEMOD_SUBDIR = "scripts/codemod";
 function readPackageJsonVersion(packageJsonPath) {
     if (!existsSync(packageJsonPath))
@@ -21,20 +22,49 @@ function readPackageJsonVersion(packageJsonPath) {
 }
 // bun.lock pins transitive packages too, so a repo that only depends on
 // kumiko-cli/-guards still records the bundled-features version it resolved.
-function readLockfileVersion(root, pkgName) {
-    const lockPath = join(root, "bun.lock");
+// Prerelease and snapshot pins (0.364.0-next.1, 0.0.0-pr-123) are reduced to
+// their x.y.z core, the only shape the rest of the CLI compares.
+function readLockfileVersion(dir, pkgName) {
+    const lockPath = join(dir, "bun.lock");
     if (!existsSync(lockPath))
         return null;
-    const pinned = new RegExp(`"@cosmicdrift/${pkgName}": \\["@cosmicdrift/${pkgName}@(\\d+\\.\\d+\\.\\d+)"`).exec(readFileSync(lockPath, "utf-8"));
-    return pinned?.[1] ?? null;
+    const pinned = new RegExp(`"@cosmicdrift/${pkgName}": \\["@cosmicdrift/${pkgName}@([^"]+)"`).exec(readFileSync(lockPath, "utf-8"));
+    return pinned?.[1] === undefined ? null : (SEMVER_CORE_RE.exec(pinned[1])?.[1] ?? null);
 }
-// Only the repo's own install, package dir and lockfile count. Walking up
-// from a worktree nested in a parent workspace read that workspace's version,
-// and the isolated linker keeps transitive packages out of node_modules.
+function declaresWorkspaces(packageJsonPath) {
+    if (!existsSync(packageJsonPath))
+        return false;
+    try {
+        const pkg = JSON.parse(readFileSync(packageJsonPath, "utf-8"));
+        return typeof pkg === "object" && pkg !== null && "workspaces" in pkg;
+    }
+    catch {
+        return false;
+    }
+}
+function isRepoBoundary(dir) {
+    return existsSync(join(dir, ".git")) || declaresWorkspaces(join(dir, "package.json"));
+}
+function readPackageVersionAt(dir, pkgName, repoLocalPath) {
+    return (readPackageJsonVersion(join(dir, `node_modules/@cosmicdrift/${pkgName}/package.json`)) ??
+        readPackageJsonVersion(join(dir, repoLocalPath)) ??
+        readLockfileVersion(dir, pkgName));
+}
+// Walks up from a workspace member to the repo's own root (.git or a
+// package.json with workspaces) but never past it: walking on from a worktree
+// nested in a parent workspace read that workspace's version, and the
+// isolated linker keeps transitive packages out of node_modules.
 function readPackageVersion(root, pkgName, repoLocalPath) {
-    return (readPackageJsonVersion(join(root, `node_modules/@cosmicdrift/${pkgName}/package.json`)) ??
-        readPackageJsonVersion(join(root, repoLocalPath)) ??
-        readLockfileVersion(root, pkgName));
+    let dir = root;
+    for (;;) {
+        const version = readPackageVersionAt(dir, pkgName, repoLocalPath);
+        if (version !== null || isRepoBoundary(dir))
+            return version;
+        const parent = dirname(dir);
+        if (parent === dir)
+            return null;
+        dir = parent;
+    }
 }
 // Changelog entries come from @cosmicdrift/kumiko-bundled-features (see
 // findFeaturesDirs); comparing against the framework version instead
@@ -508,6 +538,8 @@ markerVersion, previous) {
 function parseResolveInput(args) {
     if (getFlag(args, "apply"))
         return { error: "--resolve cannot be combined with --apply." };
+    if (getFlag(args, "dry-run"))
+        return { error: "--resolve cannot be combined with --dry-run." };
     const refs = (getStringFlag(args, "resolve") ?? "")
         .split(",")
         .map((ref) => ref.trim())
@@ -565,8 +597,9 @@ function resolveManualMigrations(out, args, targetDir) {
     if (errors.length > 0)
         return fail(...errors, "Nothing was written.");
     const { reason } = input;
-    const notApplicableFlag = args.flags.get("not-applicable");
-    const resolution = notApplicableFlag !== undefined && notApplicableFlag !== false ? "not-applicable" : "migrated";
+    const resolution = getFlag(args, "not-applicable")
+        ? "not-applicable"
+        : "migrated";
     const resolvedAt = Temporal.Now.instant().toString();
     const newlyResolved = open
         .filter((entry) => resolvedIds.has(entry.id))

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-framework",
-  "version": "0.364.0",
+  "version": "0.365.0",
   "description": "Framework core — engine, pipeline, API, DB, and every other bit that makes Kumiko go.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -210,8 +210,8 @@
     "./package.json": "./package.json"
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-http": "0.364.0",
-    "@cosmicdrift/kumiko-types": "0.364.0",
+    "@cosmicdrift/kumiko-http": "0.365.0",
+    "@cosmicdrift/kumiko-types": "0.365.0",
     "bullmq": "^5.76.7",
     "bun-types": "^1.3.13",
     "hono": "^4.13.1",
@@ -227,7 +227,7 @@
     "zod": "^4.4.3"
   },
   "devDependencies": {
-    "@cosmicdrift/kumiko-dispatcher-live": "0.364.0",
+    "@cosmicdrift/kumiko-dispatcher-live": "0.365.0",
     "bun-types": "^1.3.13",
     "pino-pretty": "^13.1.3"
   },