@cosmicdrift/kumiko-framework 0.373.0 → 0.377.0

package/dist/jobs/job-runner.js

@@ -15,6 +15,7 @@ import { isKumikoError } from "../errors/kumiko-error.js";
 import { createTenantFileContext } from "../files/file-handle.js";
 import { createFallbackLogger } from "../logging/index.js";
 import { createEscapeHatchProcessDedup, createEscapeHatchReporter, createEscapeHatchReportWindow, createMetricsForFactory, emitJobLastSuccess, emitJobQueueDepth, flushEscapeHatchAudits, getFallbackTracer, registerStandardMetrics, withEscapeHatchAuditScope, } from "../observability/index.js";
+import { configAccessorFactoryOf } from "../pipeline/config-accessor-factory.js";
 import { createDistributedLock } from "../pipeline/distributed-lock.js";
 import { RedisKeys } from "../pipeline/redis-keys.js";
 import { createGatedIdentitySwitch } from "../pipeline/system-identity-switch.js";
@@ -967,8 +968,9 @@ export function createJobRunner(options) {
         const crossTenantReads = tenantScopedDb && crossTenantReadsReason !== undefined
             ? createCrossTenantReads(tenantScopedDb, crossTenantReadsReason, reportEscapeHatch)
             : undefined;
-        const config = context._configAccessorFactory && tenantScopedDb
-            ? context._configAccessorFactory({
+        const configFactory = configAccessorFactoryOf(context);
+        const config = configFactory && tenantScopedDb
+            ? configFactory({
                 user: { id: jobSystemUser.id, tenantId },
                 db: tenantScopedDb,
                 secrets: context.secrets,

package/dist/pipeline/config-accessor-factory.d.ts

@@ -0,0 +1,3 @@
+import type { ConfigAccessorFactory } from "@cosmicdrift/kumiko-types/config";
+import type { AppContext } from "@cosmicdrift/kumiko-types/handlers";
+export declare function configAccessorFactoryOf(context: Pick<AppContext, "configAccessorFactory" | "_configAccessorFactory">): ConfigAccessorFactory | undefined;

package/dist/pipeline/config-accessor-factory.js

@@ -0,0 +1,3 @@
+export function configAccessorFactoryOf(context) {
+    return context.configAccessorFactory ?? context._configAccessorFactory;
+}

package/dist/pipeline/dispatch-shared.js

@@ -22,6 +22,7 @@ import { isPlainObject } from "../utils/is-plain-object.js";
 import { INTERACTIVE_SIGN_IN_POLICY, resolveActiveMembershipFn } from "./active-membership.js";
 import { appendDomainEventCore } from "./append-event-core.js";
 import { resolveAuthClaims as runAuthClaimsResolver } from "./auth-claims-resolver.js";
+import { configAccessorFactoryOf } from "./config-accessor-factory.js";
 import { runBatch, unwrapSingle } from "./dispatch-batch.js";
 import { executeQuery } from "./dispatch-query.js";
 import { executeWrite } from "./dispatch-write.js";
@@ -393,8 +394,9 @@ readOnlyForTenant = false) {
         });
     }
     // Mirror notify: only built when the config feature wired its factory.
-    const config = context._configAccessorFactory && db
-        ? context._configAccessorFactory({
+    const configFactory = configAccessorFactoryOf(context);
+    const config = configFactory && db
+        ? configFactory({
             user: { id: user.id, tenantId: user.tenantId },
             db,
             secrets: context.secrets,
@@ -404,7 +406,6 @@ readOnlyForTenant = false) {
     // identity is the target tenant's system user so the caller's own user-scope
     // values never resolve into another tenant's config; the db is tenant-mode
     // scoped to the target.
-    const configFactory = context._configAccessorFactory;
     const configFor = configFactory && dbSource
         ? (targetTenantId) => {
             if (targetTenantId === user.tenantId && config)
@@ -1268,8 +1269,9 @@ function buildAuthClaimsContext(ctx, user) {
             projectionRegistry: ctx.registry,
         },
     });
-    const configAccessor = context._configAccessorFactory
-        ? context._configAccessorFactory({
+    const authClaimsConfigFactory = configAccessorFactoryOf(context);
+    const configAccessor = authClaimsConfigFactory
+        ? authClaimsConfigFactory({
             user: { id: user.id, tenantId: user.tenantId },
             db,
             secrets: context.secrets,

package/dist/pipeline/index.d.ts

@@ -41,3 +41,4 @@ export type { ProjectionStatus } from "./projection-state.ts";
 export { createProjectionStateTable, ProjectionStatuses, projectionStateTable, } from "./projection-state.ts";
 export { runProjectionsForEvent } from "./projections-runner.ts";
 export { ACCESS_INVALIDATION_CONSUMER_NAME, createAccessInvalidationEventConsumer, createSearchEventConsumer, createSseBroadcastEventConsumer, SEARCH_CONSUMER_NAME, SSE_BROADCAST_CONSUMER_NAME, } from "./system-hooks.ts";
+export { TENANT_TIMEZONE_CONFIG_KEY } from "./tenant-timezone-config-key.ts";

package/dist/pipeline/index.js

@@ -23,3 +23,4 @@ export { getAllProjectionProgress, getProjectionState, listProjectionsWithState,
 export { createProjectionStateTable, ProjectionStatuses, projectionStateTable, } from "./projection-state.js";
 export { runProjectionsForEvent } from "./projections-runner.js";
 export { ACCESS_INVALIDATION_CONSUMER_NAME, createAccessInvalidationEventConsumer, createSearchEventConsumer, createSseBroadcastEventConsumer, SEARCH_CONSUMER_NAME, SSE_BROADCAST_CONSUMER_NAME, } from "./system-hooks.js";
+export { TENANT_TIMEZONE_CONFIG_KEY } from "./tenant-timezone-config-key.js";

package/dist/ui-types/index.d.ts

@@ -9,7 +9,7 @@ export type { BooleanFieldDef, DateFieldDef, EmbeddedDerivedCellDef, EntityDefin
 export type { AccessRule, OpenToAllAccessRule, OpenToAllDeclaration, OpenToAllPersonalData, RoleAccessPersonalData, RoleAccessRule, } from "../engine/types/handlers.ts";
 export { isOpenToAllGranted, isUiAccessGranted } from "../engine/types/handlers.ts";
 export type { IconKey, NavDefinition, NavIconKey } from "../engine/types/nav.ts";
-export type { ActionFormFooterAction, ActionFormRedirect, ActionFormScreenDefinition, ConfigEditScreenDefinition, CustomScreenDefinition, CustomScreenRoute, DashboardChartKind, DashboardChartMarkerKind, DashboardChartPanel, DashboardChartRangeOption, DashboardChartRanges, DashboardChartTone, DashboardCustomPanel, DashboardDateParam, DashboardFeedPanel, DashboardFilterDefinition, DashboardI18nText, DashboardListPanel, DashboardMoneyParam, DashboardPanelDefinition, DashboardPanelEmptyState, DashboardPanelGate, DashboardPanelQueryOptions, DashboardPanelSpan, DashboardPanelVisibility, DashboardProgressListPanel, DashboardScopeDefinition, DashboardScreenDefinition, DashboardScreenPanel, DashboardStatGroupPanel, DashboardStatPanel, DashboardText, DashboardTextParam, DashboardTimeRangeDefinition, DashboardValueFormat, EditExtensionSection, EditFieldPrefill, EditFieldSpec, EditFieldsSection, EditLayout, EditRelatedListSection, EditSectionSpec, EditWriteFormSection, EmbeddedListEditSpec, EntityEditAction, EntityEditActionPlacement, EntityEditScreenDefinition, EntityListExpandableRow, EntityListFacetConfig, EntityListFacetExtraOption, EntityListScreenDefinition, EntityWriteExcludedFields, FieldCondition, FieldIconKey, FieldRenderer, FormWidth, ListBadgeTone, ListColumnDisplay, ListColumnSpec, ListEmptyStateSpec, ListFacetSpec, ListSortSpec, MetricNavigate, MetricSpec, PlatformComponent, ProjectionDetailScreenDefinition, ProjectionListScreenDefinition, RecordHeaderSubtitlePart, RelatedListGroupBy, RelatedListRowTone, RelatedListToolbarAction, RowAction, RowActionDisplay, RowActionDrawer, RowActionMode, RowActionNavigate, RowActionWriteHandler, RowFieldExtractor, ScreenDefinition, ScreenFilter, ScreenFilterOp, ScreenSlots, SecretMintConfirmStep, SecretMintScreenDefinition, SecretReveal, SecretRevealField, SecretsEditScreenDefinition, SecretsEditSection, ToolbarAction, } from "../engine/types/screen.ts";
+export type { ActionFormFooterAction, ActionFormLoad, ActionFormRedirect, ActionFormScreenDefinition, ActionFormSuccessFact, ActionFormSuccessLink, ConfigEditScreenDefinition, CustomScreenDefinition, CustomScreenRoute, DashboardChartKind, DashboardChartMarkerKind, DashboardChartPanel, DashboardChartRangeOption, DashboardChartRanges, DashboardChartTone, DashboardCurrencyFormat, DashboardCustomPanel, DashboardDateParam, DashboardFeedPanel, DashboardFilterDefinition, DashboardI18nText, DashboardListPanel, DashboardMoneyParam, DashboardPanelDefinition, DashboardPanelEmptyState, DashboardPanelGate, DashboardPanelQueryOptions, DashboardPanelSpan, DashboardPanelVisibility, DashboardProgressListPanel, DashboardProgressTone, DashboardRecordBinding, DashboardRefresh, DashboardRelativeTimeFormat, DashboardRelativeTimeParam, DashboardScopeDefinition, DashboardScreenDefinition, DashboardScreenPanel, DashboardStatGroupPanel, DashboardStatPanel, DashboardText, DashboardTextBlock, DashboardTextPanel, DashboardTextParam, DashboardTimeRangeDefinition, DashboardValueFormat, EditExtensionSection, EditFieldPrefill, EditFieldSpec, EditFieldsSection, EditLayout, EditRelatedListSection, EditSectionSpec, EditWriteFormSection, EmbeddedListEditSpec, EntityEditAction, EntityEditActionPlacement, EntityEditScreenDefinition, EntityListExpandableRow, EntityListFacetConfig, EntityListFacetExtraOption, EntityListScreenDefinition, EntityWriteExcludedFields, FieldAffix, FieldCondition, FieldFillAction, FieldIconKey, FieldRenderer, FormWidth, ListBadgeTone, ListColumnDisplay, ListColumnSpec, ListEmptyStateSpec, ListFacetSpec, ListSortSpec, MetricNavigate, MetricSpec, PlatformComponent, ProjectionDetailScreenDefinition, ProjectionListScreenDefinition, RecordHeaderSubtitlePart, RelatedListGroupBy, RelatedListRowTone, RelatedListToolbarAction, RowAction, RowActionClientAction, RowActionDisplay, RowActionDrawer, RowActionMode, RowActionNavigate, RowActionWriteHandler, RowFieldExtractor, ScreenDefinition, ScreenFilter, ScreenFilterOp, ScreenSlots, SecretMintConfirmStep, SecretMintScreenDefinition, SecretReveal, SecretRevealField, SecretsEditScreenDefinition, SecretsEditSection, ToolbarAction, } from "../engine/types/screen.ts";
 export { metricField, relatedListGroupHeaderLabel, relatedListGroupKey, } from "../engine/types/screen.ts";
 export type { TargetRef } from "../engine/types/target-ref.ts";
 export type { TreeAction, TreeNode, TreeNodeState } from "../engine/types/tree-node.ts";

package/dist/upgrade-changelog.d.ts

@@ -0,0 +1,25 @@
+export type UpgradeChangelogManual = {
+    readonly id: string;
+    readonly version: string;
+    readonly title: string;
+    readonly status: "open" | "migrated" | "not-applicable";
+};
+export type UpgradeChangelogSection = {
+    readonly from: string;
+    readonly to: string;
+    /** YYYY-MM-DD. */
+    readonly date: string;
+    readonly breaking: readonly {
+        readonly version: string;
+        readonly title: string;
+    }[];
+    readonly manual: readonly UpgradeChangelogManual[];
+    readonly codemods: readonly {
+        readonly version: string;
+        readonly codemod: string;
+        readonly title: string;
+    }[];
+};
+export declare function renderUpgradeSection(section: UpgradeChangelogSection): string;
+/** Puts the section on top; a section for the same target version is replaced, so a re-run stays idempotent. */
+export declare function mergeUpgradeSection(existing: string | undefined, section: UpgradeChangelogSection): string;

package/dist/upgrade-changelog.js

@@ -0,0 +1,48 @@
+const CHANGELOG_HEADER = `# Changelog
+
+Kumiko upgrades of this app, written by \`kumiko-upgrade --apply\`. Newest first.
+Format: [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
+`;
+const SECTION_START = /^## \[/;
+const PACKAGES_LABEL = "@cosmicdrift/kumiko-*";
+function printableLine(text) {
+    return text.replace(/\p{Cc}/gu, " ");
+}
+function bulletList(title, lines) {
+    return lines.length === 0 ? [] : ["", `### ${title}`, "", ...lines.map((line) => `- ${line}`)];
+}
+export function renderUpgradeSection(section) {
+    return [
+        `## [${section.to}] - ${section.date}`,
+        ...bulletList("Changed", [`${PACKAGES_LABEL}: ${section.from} → ${section.to}`]),
+        ...bulletList("Breaking", section.breaking.map((entry) => `${entry.version} · ${printableLine(entry.title)}`)),
+        ...bulletList("Manual migrations", section.manual.map((entry) => `[${entry.status}] ${entry.id} · ${entry.version} · ${printableLine(entry.title)}`)),
+        ...bulletList("Codemods applied", section.codemods.map((entry) => `${entry.version} · ${entry.codemod} · ${printableLine(entry.title)}`)),
+        "",
+    ].join("\n");
+}
+function splitSections(content) {
+    const lines = content.split("\n");
+    const firstSection = lines.findIndex((line) => SECTION_START.test(line));
+    if (firstSection === -1)
+        return { header: content.replace(/\n*$/, "\n"), sections: [] };
+    const header = lines.slice(0, firstSection).join("\n").replace(/\n*$/, "\n");
+    const sections = [];
+    let current = [];
+    for (const line of lines.slice(firstSection)) {
+        if (SECTION_START.test(line) && current.length > 0) {
+            sections.push(current.join("\n").replace(/\n*$/, "\n"));
+            current = [];
+        }
+        current.push(line);
+    }
+    sections.push(current.join("\n").replace(/\n*$/, "\n"));
+    return { header, sections };
+}
+/** Puts the section on top; a section for the same target version is replaced, so a re-run stays idempotent. */
+export function mergeUpgradeSection(existing, section) {
+    const { header, sections } = splitSections(existing ?? CHANGELOG_HEADER);
+    const prefix = `## [${section.to}]`;
+    const others = sections.filter((candidate) => !candidate.startsWith(prefix));
+    return [header, renderUpgradeSection(section), ...others].join("\n");
+}

package/dist/upgrade-cli.js

@@ -4,6 +4,7 @@ import { dirname, isAbsolute, join, relative, resolve } from "node:path";
 import { getFlag, getStringFlag, parseArgs } from "./arg-parser.js";
 import { compareVersions, filterEntriesAfter, parseFeatureChangelog, sortEntries, } from "./engine/index.js";
 import { ensureTemporalPolyfill } from "./time/index.js";
+import { mergeUpgradeSection } from "./upgrade-changelog.js";
 const SEMVER_RE = /^\d+\.\d+\.\d+$/;
 const SEMVER_CORE_RE = /^(\d+\.\d+\.\d+)(?:-[0-9A-Za-z.-]+)?$/;
 const CODEMOD_SUBDIR = "scripts/codemod";
@@ -340,12 +341,24 @@ function carryOverManual(previous, newManual) {
         ...(previous.resolvedManual.length > 0 && { resolvedManual: previous.resolvedManual }),
     };
 }
+// The marker records every codemod ever applied, not just the last bump's, so the
+// CI guard and a resumed run see the whole history.
+function accumulateCodemods(previous, ran) {
+    const seen = new Set();
+    return [...previous, ...ran].filter((entry) => {
+        const key = `${entry.version}\0${entry.codemod}`;
+        if (seen.has(key))
+            return false;
+        seen.add(key);
+        return true;
+    });
+}
 function writeUpgradeMarker(targetDir, marker) {
     const dir = join(targetDir, ".kumiko");
     mkdirSync(dir, { recursive: true });
     writeFileSync(join(dir, "upgrade-state.json"), `${JSON.stringify(marker, null, 2)}\n`, "utf-8");
 }
-const NO_CARRY = { pendingManual: [], resolvedManual: [] };
+const NO_CARRY = { codemods: [], pendingManual: [], resolvedManual: [] };
 function isRecord(value) {
     return typeof value === "object" && value !== null && !Array.isArray(value);
 }
@@ -427,16 +440,52 @@ function carryOf(read) {
 function printable(text) {
     return text.replace(/\p{Cc}/gu, "");
 }
-function logOpenManual(out, open) {
+function manualDetailsOf(entries) {
+    return new Map(entries.map((entry) => [
+        manualEntryId(entry.version, entry.title),
+        { detail: entry.detail, migration: entry.migration },
+    ]));
+}
+function logOpenManual(out, open, details) {
     // skip: no open manual migrations, nothing to report
     if (open.length === 0)
         return;
     out.log(`  ⚠ ${open.length} manual migration(s) still open:`);
     for (const entry of open) {
         out.log(`    ${printable(entry.id)} · ${printable(entry.version)} · ${printable(entry.title)}`);
+        const entryDetails = details?.get(entry.id);
+        if (entryDetails?.detail)
+            out.log(`      ${printable(entryDetails.detail.replace(/\s*\n\s*/g, " "))}`);
+        if (entryDetails?.migration)
+            out.log(`      → Migration: ${printable(entryDetails.migration)}`);
     }
     out.log('  Migrate them by hand, then mark them done: kumiko-upgrade --resolve <id|version> --reason "<what you did>" [--not-applicable]');
 }
+function manualWithStatus(manualEntries, previous) {
+    return manualEntries.map((entry) => {
+        const id = manualEntryId(entry.version, entry.title);
+        const resolved = previous.resolvedManual.find((candidate) => candidate.id === id);
+        return {
+            id,
+            version: entry.version,
+            title: entry.title,
+            status: resolved === undefined ? "open" : resolved.resolution,
+        };
+    });
+}
+// Runs only for a real bump: an app that is already current keeps its CHANGELOG.md untouched.
+function writeUpgradeChangelog(targetDir, bump) {
+    const path = join(targetDir, "CHANGELOG.md");
+    const existing = existsSync(path) ? readFileSync(path, "utf-8") : undefined;
+    writeFileSync(path, mergeUpgradeSection(existing, {
+        from: bump.from,
+        to: bump.to,
+        date: Temporal.Now.instant().toString().slice(0, 10),
+        breaking: bump.pending.filter((entry) => entry.type === "breaking"),
+        manual: manualWithStatus(bump.manualEntries, bump.previous),
+        codemods: bump.ran,
+    }), "utf-8");
+}
 // Records the codemods that already wrote files before a later one failed, so
 // a re-run resumes after them instead of replaying non-idempotent codemods.
 function writePartialMarker(out, targetDir, pending, manualEntries, failedVersion, ran, previous) {
@@ -453,7 +502,7 @@ function writePartialMarker(out, targetDir, pending, manualEntries, failedVersio
     writeUpgradeMarker(targetDir, {
         version,
         appliedAt: Temporal.Now.instant().toString(),
-        codemods: ran,
+        codemods: accumulateCodemods(previous.codemods, ran),
         ...carryOverManual(previous, manualEntries.map(toMarkerManual)),
     });
     out.err(`  ⚠ ${ran.length} codemod(s) already applied; wrote marker at ${version} so a re-run resumes at the failed one.`);
@@ -469,7 +518,7 @@ async function applyCodemods(out, pending, repoRoot, targetDir, dryRun,
 // Installed version for the zero-pending bootstrap marker — never a
 // `--from` filter override (that would permanently skip real pending
 // codemods once the CI guard compares against the fake marker).
-markerVersion, previous) {
+markerVersion, previous, fromVersion, manualDetails) {
     if (pending.length === 0) {
         out.log("  ✓ Nothing new since your version.");
         if (!dryRun) {
@@ -477,11 +526,11 @@ markerVersion, previous) {
             writeUpgradeMarker(targetDir, {
                 version: markerVersion,
                 appliedAt: Temporal.Now.instant().toString(),
-                codemods: [],
+                codemods: previous.codemods,
                 ...carried,
             });
             out.log(`  ✓ Applied 0 codemod(s). Wrote ${join(targetDir, ".kumiko/upgrade-state.json")}`);
-            logOpenManual(out, carried.pendingManual ?? []);
+            logOpenManual(out, carried.pendingManual ?? [], manualDetails);
         }
         return 0;
     }
@@ -504,11 +553,19 @@ markerVersion, previous) {
             writeUpgradeMarker(targetDir, {
                 version: markerVersion,
                 appliedAt: Temporal.Now.instant().toString(),
-                codemods: [],
+                codemods: previous.codemods,
                 ...carried,
             });
+            writeUpgradeChangelog(targetDir, {
+                from: fromVersion,
+                to: markerVersion,
+                pending,
+                manualEntries,
+                ran: [],
+                previous,
+            });
             out.log(`  ✓ Applied 0 codemod(s). Wrote ${join(targetDir, ".kumiko/upgrade-state.json")}`);
-            logOpenManual(out, carried.pendingManual ?? []);
+            logOpenManual(out, carried.pendingManual ?? [], manualDetails);
         }
         return 0;
     }
@@ -546,11 +603,19 @@ markerVersion, previous) {
     writeUpgradeMarker(targetDir, {
         version: markerVersion,
         appliedAt: Temporal.Now.instant().toString(),
-        codemods: ran,
+        codemods: accumulateCodemods(previous.codemods, ran),
         ...carried,
     });
+    writeUpgradeChangelog(targetDir, {
+        from: fromVersion,
+        to: markerVersion,
+        pending,
+        manualEntries,
+        ran,
+        previous,
+    });
     out.log(`  ✓ Applied ${ran.length} codemod(s). Wrote ${join(targetDir, ".kumiko/upgrade-state.json")}`);
-    logOpenManual(out, carried.pendingManual ?? []);
+    logOpenManual(out, carried.pendingManual ?? [], manualDetails);
     return 0;
 }
 function parseResolveInput(args) {
@@ -751,7 +816,7 @@ export async function runUpgradeCli(argv, cwd, out, options) {
             return 1;
         }
         out.log("");
-        const code = await applyCodemods(out, pending, repoRoot, targetDir, dryRun, markerVersion ?? currentVersion, carryOf(markerRead));
+        const code = await applyCodemods(out, pending, repoRoot, targetDir, dryRun, markerVersion ?? currentVersion, carryOf(markerRead), currentVersion, verbose ? manualDetailsOf(allEntries) : undefined);
         out.log("");
         return code;
     }
@@ -774,7 +839,7 @@ export async function runUpgradeCli(argv, cwd, out, options) {
     if (pending.length === 0) {
         out.log("  ✓ Nothing new since your version.");
         out.log("");
-        logOpenManual(out, openManual);
+        logOpenManual(out, openManual, verbose ? manualDetailsOf(allEntries) : undefined);
         return 0;
     }
     if (breaking.length > 0) {
@@ -819,6 +884,6 @@ export async function runUpgradeCli(argv, cwd, out, options) {
         out.log("  Run with --verbose for full migration details.");
         out.log("");
     }
-    logOpenManual(out, openManual);
+    logOpenManual(out, openManual, verbose ? manualDetailsOf(allEntries) : undefined);
     return 0;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-framework",
-  "version": "0.373.0",
+  "version": "0.377.0",
   "description": "Framework core — engine, pipeline, API, DB, and every other bit that makes Kumiko go.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -199,8 +199,7 @@
     "./package.json": "./package.json"
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-http": "0.373.0",
-    "@cosmicdrift/kumiko-types": "0.373.0",
+    "@cosmicdrift/kumiko-types": "0.377.0",
     "bullmq": "^5.76.7",
     "bun-types": "^1.3.13",
     "hono": "^4.13.1",
@@ -216,8 +215,7 @@
     "zod": "^4.4.3"
   },
   "devDependencies": {
-    "@cosmicdrift/kumiko-dispatcher-live": "0.373.0",
-    "@cosmicdrift/kumiko-testing": "0.373.0",
+    "@cosmicdrift/kumiko-testing": "0.377.0",
     "bun-types": "^1.3.13",
     "pino-pretty": "^13.1.3"
   },

package/presets/biome-app.json

@@ -62,6 +62,14 @@
     }
   },
   "overrides": [
+    {
+      "includes": ["bin/**", "scripts/**", "**/bin/**", "**/scripts/**"],
+      "linter": {
+        "rules": {
+          "suspicious": { "noConsole": "off" }
+        }
+      }
+    },
     {
       "includes": [
         "**/*.test.ts",

package/src/changes.json

@@ -1,4 +1,136 @@
 [
+  {
+    "version": "0.377.0",
+    "type": "improvement",
+    "title": "design decisions log",
+    "detail": "docs/reference/decisions.md records lasting design decisions with their reasons. It is documentation only and changes no behavior."
+  },
+  {
+    "version": "0.377.0",
+    "type": "improvement",
+    "title": "Env hint links to the infra deploy runbook",
+    "detail": "The boot env report ends with a link to docs/runbooks/standard-deploy-app.md in the infra repo instead of a path in kumiko-platform that no longer exists."
+  },
+  {
+    "version": "0.377.0",
+    "type": "improvement",
+    "title": "Replay parser and migration splitter cover dollar quotes, RENAME, CREATE TABLE AS and DO",
+    "detail": "splitSqlStatements keeps dollar-quoted bodies whole and throws on an unterminated one. The replay parser follows RENAME TO, RENAME COLUMN, CREATE TABLE AS and DO blocks; tables with columns it cannot derive are skipped in the schema diff. The Bun.SQL wording in db/query.ts errors and logger names now says postgres-js."
+  },
+  {
+    "version": "0.377.0",
+    "type": "improvement",
+    "title": "providerPluginContextFromHandler and providerPluginContextFromJob",
+    "detail": "Build a ProviderPluginContext from a HandlerContext or JobContext (jobs use the system user and have no dbOutsideTransaction)."
+  },
+  {
+    "version": "0.377.0",
+    "type": "improvement",
+    "title": "hasOutsideTransactionDb and requireOutsideTransactionDb",
+    "detail": "Public helpers in the db barrel. hasOutsideTransactionDb(ctx) narrows ctx.dbOutsideTransaction to TenantDb; requireOutsideTransactionDb(ctx) returns it or throws an InternalError."
+  },
+  {
+    "version": "0.377.0",
+    "type": "breaking",
+    "title": "Provider contexts expose auditUserId instead of _userId",
+    "detail": "FileProviderContext, MailTransportContext, InboundMailContext and the context read by requireSecretsContext name the audit identity auditUserId. The old underscore field is gone.",
+    "migration": "Rename _userId to auditUserId wherever a provider context is built by hand (tests, custom resolvers, worker wiring). requireSecretsContext still falls back to ctx.user.id when it is unset."
+  },
+  {
+    "version": "0.377.0",
+    "type": "improvement",
+    "title": "Boot always sets configAccessorFactory and overrides an app value",
+    "detail": "addConfigAccessorFactory writes configAccessorFactory and the _configAccessorFactory alias from the effective configResolver, replacing any app-supplied factory. The replay parser also rejects DO blocks without a dollar-quoted body and accepts tags like $do1$."
+  },
+  {
+    "version": "0.377.0",
+    "type": "improvement",
+    "title": "http moved into framework",
+    "detail": "egress(), the host policy helpers and their errors are implemented in @cosmicdrift/kumiko-framework/http. @cosmicdrift/kumiko-http now only re-exports that subpath and is removed after the consumer pass of wave 4.",
+    "migration": "Run bun kumiko-upgrade --apply, or bun kumiko codemod package-merge . --write. It rewrites imports of @cosmicdrift/kumiko-http to @cosmicdrift/kumiko-framework/http and replaces the kumiko-http dependency in package.json with kumiko-framework.",
+    "codemod": "scripts/codemod/package-merge.ts"
+  },
+  {
+    "version": "0.377.0",
+    "type": "improvement",
+    "title": "package-merge codemod covers headless and dispatcher-live",
+    "detail": "The mapping table of the package-merge codemod gained the headless and dispatcher-live moves into kumiko-renderer.",
+    "codemod": "scripts/codemod/package-merge.ts"
+  },
+  {
+    "version": "0.377.0",
+    "type": "improvement",
+    "title": "package-merge codemod covers renderer-web and CSS files",
+    "detail": "The mapping table of the package-merge codemod gained the renderer-web move into kumiko-renderer/web, and the codemod now also rewrites .css files (@import, @plugin, @config). A @source path into the old package is reported for manual follow-up.",
+    "codemod": "scripts/codemod/package-merge.ts"
+  },
+  {
+    "version": "0.376.0",
+    "type": "improvement",
+    "title": "kumiko-upgrade writes CHANGELOG.md and shows manual entries with --verbose",
+    "detail": "--apply adds one section per bump to CHANGELOG.md in the app (changed packages, breaking titles, manual migrations with status, codemods applied); a re-run of the same bump replaces its section. --verbose prints detail and migration of the open manual entries. A second --apply keeps the codemods already recorded in the marker. The biome-app preset allows console in bin and scripts. AppConfig takes an optional includeBundled flag that the managed kumiko/schema.ts uses to compose the bundled auth features."
+  },
+  {
+    "version": "0.374.0",
+    "type": "improvement",
+    "title": "actionForm successLinks and resetOnSuccess",
+    "detail": "successLinks keeps the actionForm open after a successful submit and lists links resolved like redirect; boot rejects it together with redirect, with an unknown target or with a record target without idFrom. resetOnSuccess clears typed values after success. Role projection drops links to screens the role cannot reach."
+  },
+  {
+    "version": "0.374.0",
+    "type": "improvement",
+    "title": "clientAction row actions",
+    "detail": "RowAction gains kind \"clientAction\" with a client-registered handler name; boot rejects a name that is not <feature>:<kebab>, and the surface keys include its confirm, confirmLabel and successMessage."
+  },
+  {
+    "version": "0.374.0",
+    "type": "improvement",
+    "title": "Boot validation for screen-panel fallback and text panels",
+    "detail": "DashboardScreenPanel.fallback needs visibleWhen and a registered, embeddable target without its own visibleWhen. DashboardTextPanel (kind \"text\", exported with DashboardTextBlock) rejects empty blocks and empty lists; its text keys are required translation keys. Extension-selector panels qualify a short fallback ref, and role projection drops a fallback the role cannot reach."
+  },
+  {
+    "version": "0.374.0",
+    "type": "improvement",
+    "title": "Dashboard record binding, header actions, refresh and relative time",
+    "detail": "Dashboards take record, actions and refresh; stat panels and text params gain a relativeTime format; the surface keys include kumiko.dashboard.record.missing."
+  },
+  {
+    "version": "0.374.0",
+    "type": "breaking",
+    "title": "DashboardChartPanel.valueFormat only takes the currency format",
+    "detail": "DashboardValueFormat is now a union of DashboardCurrencyFormat and DashboardRelativeTimeFormat. Stat panels take both, chart panels only the currency one, and boot rejects relativeTime on a chart.",
+    "migration": "A chart panel that declares valueFormat keeps working with { kind: \"currency\", currency }. Code that types a chart's valueFormat as DashboardValueFormat should use DashboardCurrencyFormat instead; relativeTime on a chart was never meaningful and now fails boot."
+  },
+  {
+    "version": "0.374.0",
+    "type": "improvement",
+    "title": "Derived list searchability, actionForm load and drawer rowClick",
+    "detail": "projectionList searchable is derived false for entity-convention lists without searchable fields (searchable true is rejected at boot), actionForm.load registers a query checked at boot, and a drawer row action may set rowClick, counted with navigate rowClick and rejected on projectionDetail header actions."
+  },
+  {
+    "version": "0.374.0",
+    "type": "improvement",
+    "title": "Boot checks for field affixes and fillAction",
+    "detail": "Boot fails when a fillAction query is not a registered query handler, or when a { field } affix or a fillAction params source is not a field of the same form."
+  },
+  {
+    "version": "0.374.0",
+    "type": "improvement",
+    "title": "pagedListSchema and pageRows for in-memory list queries",
+    "detail": "pagedListSchema(sortableFields) and pageRows(rows, request, { searchFields, defaultSort }) cover search, sort (missing values last, ties by id), offset paging and an optional total for projectionList queries over merged rows. PagedListRequest and PagedListRowValue are exported; nextCursor is always null."
+  },
+  {
+    "version": "0.374.0",
+    "type": "improvement",
+    "title": "DashboardProgressTone type and unlimited label key",
+    "detail": "New exported type DashboardProgressTone for progress-list row tones. The default translations gain kumiko.dashboard.progress.unlimited."
+  },
+  {
+    "version": "0.374.0",
+    "type": "improvement",
+    "title": "Dashboard chart panels take a y-axis unit",
+    "detail": "DashboardChartPanel.unit (i18n key) is shown once on the y axis of a timeseries chart, with or without valueFormat. The boot validator rejects unit on other chart kinds; an untranslated unit key fails the required-surface key check."
+  },
   {
     "version": "0.373.0",
     "type": "improvement",

package/src/scripts/codemod/README.md

@@ -140,3 +140,28 @@ bun node_modules/@cosmicdrift/kumiko-framework/src/scripts/codemod/remove-engine
 
 Runs via `bun kumiko-upgrade --apply`. Without a mode flag it writes, then formats the changed files
 with Biome. `--check` exits 1 while any rewritable or manual site is left.
+
+## package-merge.ts
+
+Packages folded into another package stay as re-export shims for one wave. The codemod rewrites
+imports, re-exports, `import("…")` and `mock.module` specifiers (including subpaths) of the old
+package to the new one, and in `package.json` replaces the old dependency with the target package
+(same version range, same block, skipped when the block already lists it). The moves are the rows
+of `PACKAGE_MERGE_MAPPINGS`: `@cosmicdrift/kumiko-http` to `@cosmicdrift/kumiko-framework/http`,
+`@cosmicdrift/kumiko-repo-manifest` to `@cosmicdrift/kumiko-guards/repo-manifest`,
+`@cosmicdrift/kumiko-headless` to `@cosmicdrift/kumiko-renderer/headless` (subpaths keep their name),
+`@cosmicdrift/kumiko-dispatcher-live` to `@cosmicdrift/kumiko-renderer/live`,
+`@cosmicdrift/kumiko-renderer-web` to `@cosmicdrift/kumiko-renderer/web` (so
+`@import "@cosmicdrift/kumiko-renderer-web/styles.css"` becomes
+`@import "@cosmicdrift/kumiko-renderer/web/styles.css"`).
+
+`.css` files are covered too: the specifier of `@import`, `@plugin` and `@config` is rewritten like
+an import. A `@source` path into `node_modules/<old package>/…` has no mechanical target and is
+reported as manual.
+
+```bash
+bun node_modules/@cosmicdrift/kumiko-framework/src/scripts/codemod/package-merge.ts <dir> [--check | --dry-run | --write] [--no-format]
+```
+
+Runs via `bun kumiko-upgrade --apply`. Without a mode flag it writes. `--check` exits 1 while any
+site is left. Run your package manager's install afterwards to refresh the lockfile.