@cosmicdrift/kumiko-framework 0.384.0 → 0.386.0

package/dist/schema-cli.js

@@ -38,6 +38,9 @@ function withFileStoragePresence(env) {
 function isStringSet(value) {
     return value instanceof Set && [...value].every((entry) => typeof entry === "string");
 }
+function isNonEmptyStringArray(value) {
+    return Array.isArray(value) && value.every((entry) => typeof entry === "string" && entry !== "");
+}
 function isBoolean(value) {
     return typeof value === "boolean";
 }
@@ -64,7 +67,9 @@ function parseValidateBootOptions(raw) {
     const navAllowlist = readOptionalOption(raw, "navAllowlist", isStringSet, "a Set<string>");
     const navAllowlistExempt = readOptionalOption(raw, "navAllowlistExempt", isStringSet, "a Set<string>");
     const warnOnUniqueAccessRoles = readOptionalOption(raw, "warnOnUniqueAccessRoles", isBoolean, "a boolean");
+    const requiredLocales = readOptionalOption(raw, "requiredLocales", isNonEmptyStringArray, "an array of non-empty strings");
     return {
+        ...(requiredLocales !== undefined && { requiredLocales }),
         ...(navAllowlist !== undefined && { navAllowlist }),
         ...(navAllowlistExempt !== undefined && { navAllowlistExempt }),
         ...(warnOnUniqueAccessRoles !== undefined && { warnOnUniqueAccessRoles }),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-framework",
-  "version": "0.384.0",
+  "version": "0.386.0",
   "description": "Framework core — engine, pipeline, API, DB, and every other bit that makes Kumiko go.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -199,7 +199,7 @@
     "./package.json": "./package.json"
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-types": "0.384.0",
+    "@cosmicdrift/kumiko-types": "0.386.0",
     "bullmq": "^5.76.7",
     "bun-types": "^1.3.13",
     "hono": "^4.13.1",
@@ -215,7 +215,7 @@
     "zod": "^4.4.3"
   },
   "devDependencies": {
-    "@cosmicdrift/kumiko-testing": "0.384.0",
+    "@cosmicdrift/kumiko-testing": "0.386.0",
     "bun-types": "^1.3.13",
     "pino-pretty": "^13.1.3"
   },

package/src/changes.json

@@ -1,4 +1,23 @@
 [
+  {
+    "version": "0.386.0",
+    "type": "improvement",
+    "title": "ctx.crossTenantReads for handlers with the crossTenantReads grant",
+    "detail": "A handler whose `escapeHatch` lists `grants: [\"crossTenantReads\"]` (or `unsafeRaw`, which implies it) gets `ctx.crossTenantReads` with `selectMany`, `fetchOne` and `count`, unfiltered by tenant and including the events table. Every call is audited as `cross-tenant-read`; `ctx.db.unsafeRaw()` stays denied for the read-only grant, and neither a member-resolution read nor an agent tool call (`dispatchToolCall`, including handlers it reaches through nested `ctx.query`/`ctx.write`) ever receives the surface, so cross-tenant rows cannot reach an LLM context. Jobs use the same grant. The internal `runAsDirectCallEntry` (`/internal/request-context`) now also marks its scope as an agent tool call. Without the grant nothing changes."
+  },
+  {
+    "version": "0.385.0",
+    "type": "improvement",
+    "title": "requiredLocales boot option",
+    "detail": "`validateBootOptions.requiredLocales` (also `VALIDATE_BOOT_OPTIONS` in kumiko/schema.ts) makes boot fail when any translation key of the mounted features lacks one of the listed locales. Locales are combined across features, so locale packages close the gaps of the features they translate. Without the option nothing changes. This replaces the locale list the i18n-keys guard read from `src/i18n-guard-locales.ts` until 0.384.0; without that file it checked `[\"de\", \"en\"]`.",
+    "migration": "Define the option once, e.g. `{ requiredLocales: [\"de\", \"en\"] }`, pass it as `validateBootOptions` wherever the app boots (`runProdApp`, `runDevApp`, workers) and re-export it as `VALIDATE_BOOT_OPTIONS` from `kumiko/schema.ts` so `kumiko-schema validate` checks it in CI. The check covers framework and bundled keys too; a key missing a locale fails boot with the feature and key named."
+  },
+  {
+    "version": "0.385.0",
+    "type": "improvement",
+    "title": "selectMany distinctOn for newest-row-per-key reads",
+    "detail": "SelectOptions.distinctOn takes field names and emits SELECT DISTINCT ON over them, keeping the first row per key by orderBy, so newest-row-per-key reads no longer need unsafeRaw. orderBy has to start with the distinctOn fields in the same order, otherwise selectMany throws; without orderBy it defaults to them ascending. Tenant scoping applies as for every selectMany. Error classification and driver detection drop the branches for the removed Bun.SQL driver (ERR_POSTGRES_* codes, SQLSTATE in errno, millisecond timeouts), which postgres-js never produces."
+  },
   {
     "version": "0.384.0",
     "type": "breaking",