@cosmicdrift/kumiko-framework 0.391.0 → 0.392.0

package/dist/db/row-level-security-boot-check.js

@@ -42,17 +42,17 @@ async function assertAllTenantTablesProtected(db, knownTables, scope) {
     const sections = [
         ...(frameworkTables.length > 0
             ? [
-                `framework tables without it: ${listingOf(frameworkTables)}. Run \`kumiko schema apply\`: it adds the missing policies to the framework tables (\`kumiko schema generate\` reports no changes for them).`,
+                `framework tables without it: ${listingOf(frameworkTables)}. Run \`bun kumiko-schema apply\`: it adds the missing policies to the framework tables (\`bun kumiko-schema generate\` reports no changes for them).`,
             ]
             : []),
         ...(known.length > 0
             ? [
-                `tables of this app without it: ${listingOf(known)}. Run \`kumiko schema generate\` and apply the migration.`,
+                `tables of this app without it: ${listingOf(known)}. Run \`bun kumiko-schema generate\` and apply the migration.`,
             ]
             : []),
         ...(orphaned.length > 0
             ? [
-                `tables no feature declares anymore: ${listingOf(orphaned)}. No feature declares them: add a migration with DROP TABLE (enable the commented \`-- DESTRUCTIVE\` DROP that \`kumiko schema generate\` emitted; see \`kumiko schema status\`).`,
+                `tables no feature declares anymore: ${listingOf(orphaned)}. No feature declares them: add a migration with DROP TABLE (enable the commented \`-- DESTRUCTIVE\` DROP that \`bun kumiko-schema generate\` emitted; see \`bun kumiko-schema status\`).`,
             ]
             : []),
     ];
@@ -66,7 +66,7 @@ async function assertNoLiveRowLevelSecurity(db, knownTables, scope) {
     if (tables.length === 0)
         return;
     throw new InternalError({
-        message: `rowLevelSecurity is "off" but row-level security is still enabled on: ${tables.join(", ")}. Without a tenant scope every statement would see zero rows. Run \`kumiko schema generate\` with rowLevelSecurity off to produce the DISABLE ROW LEVEL SECURITY migration and apply it.`,
+        message: `rowLevelSecurity is "off" but row-level security is still enabled on: ${tables.join(", ")}. Without a tenant scope every statement would see zero rows. Run \`bun kumiko-schema generate\` with rowLevelSecurity off to produce the DISABLE ROW LEVEL SECURITY migration and apply it.`,
     });
 }
 // Table state only, no role check: the role is a runtime property of the boot connection, so tools

package/dist/db/table-builder.d.ts

@@ -7,7 +7,7 @@ import type { LocatedTimestampRead } from "./located-timestamp.ts";
 import type { MoneyRead } from "./money.ts";
 export { toSnakeCase } from "../utils/case.ts";
 import { type ColumnBuilder, type ColumnHandle, type SchemaTable, type TableColumns } from "./dialect.ts";
-export declare const SOFT_DELETE_LIVE_ROW_PREDICATE = "\"is_deleted\" = false";
+export { SOFT_DELETE_LIVE_ROW_PREDICATE } from "./entity-table-indexes.ts";
 export declare function physicalColumnName(table: Table, field: string): string;
 export type AnyPgColumn = ColumnHandle;
 export declare const READ_MODEL_PREFIX = "read_";

package/dist/db/table-builder.js

@@ -1,12 +1,11 @@
 import { KUMIKO_META_SYMBOL } from "@cosmicdrift/kumiko-types/schema-table-types";
 import { toSnakeCase } from "../utils/case.js";
+import { buildEntityIndexes } from "./entity-table-indexes.js";
 import { markExecutorManagedTable } from "./executor-managed-tables.js";
 import { columnHandleName } from "./table-introspection.js";
 export { toSnakeCase } from "../utils/case.js";
-import { bigint, boolean, decimalColumn, doublePrecision, index, instant, integer, isSqlExpression, jsonb, moneyAmount, table as pgTable, plainDate, serial, sql, text, uniqueIndex, uuid, } from "./dialect.js";
-// Partial-index predicate for soft-delete entities; table-builder and
-// entity-table-meta must render identical index definitions.
-export const SOFT_DELETE_LIVE_ROW_PREDICATE = `"is_deleted" = false`;
+import { bigint, boolean, decimalColumn, doublePrecision, instant, integer, jsonb, moneyAmount, table as pgTable, plainDate, serial, sql, text, uuid, } from "./dialect.js";
+export { SOFT_DELETE_LIVE_ROW_PREDICATE } from "./entity-table-indexes.js";
 // Shared by the CRUD executor and the parent-ref read-gate — a field's
 // declared column name if it has one, else its snake_case default.
 export function physicalColumnName(table, field) {
@@ -233,140 +232,50 @@ export function declareGlobalTenancy(table) {
     // @cast-boundary phantom-brand — TenancyBrand<"global"> is a phantom marker with no runtime representation.
     return table;
 }
+// The featureName prefix is inserted between read_ and the base name so all
+// read models consistently start with `read_`, whether or not featureName is set:
+//   featureName="shop", base="read_orders"  →  "read_shop_orders"
+//   featureName=undef,  base="read_orders"  →  "read_orders"
+//   featureName="shop", base="orders" (no read_)  →  "shop_orders"
+function entityTableName(entityName, entity, featureName) {
+    const baseTableName = entity.table ?? toTableName(entityName);
+    if (!featureName)
+        return baseTableName;
+    return baseTableName.startsWith(READ_MODEL_PREFIX)
+        ? `${READ_MODEL_PREFIX}${featureName}_${baseTableName.slice(READ_MODEL_PREFIX.length)}`
+        : `${featureName}_${baseTableName}`;
+}
+// Fields to index as foreign keys. Sources:
+//  (a) single-file / single-image fields store a fileRef id and are queried
+//      by that id whenever a detail view resolves attachments.
+//  (b) belongsTo relations declared via r.relation() — the FK column is the
+//      parent-side lookup key; without an index every child join scans the
+//      full table.
+// `Set` keeps the list deduplicated when (a) and (b) name the same column.
+function foreignKeyFieldNames(entity, relations) {
+    const names = new Set();
+    for (const [name, field] of Object.entries(entity.fields)) {
+        if (field.type === "file" || field.type === "image")
+            names.add(name);
+    }
+    for (const rel of Object.values(relations ?? {})) {
+        if (rel.type === "belongsTo")
+            names.add(rel.foreignKey);
+    }
+    return names;
+}
 export function buildEntityTable(entityName, entity, options) {
     const baseColumns = buildBaseColumns(entity.softDelete ?? false, entity.idType ?? "uuid");
     const fieldColumns = {};
     for (const [name, field] of Object.entries(entity.fields)) {
-        const cols = fieldToColumns(name, field, entity);
-        Object.assign(fieldColumns, cols);
+        Object.assign(fieldColumns, fieldToColumns(name, field, entity));
     }
-    // Default table name derived from entityName (e.g. "memberTask" → "read_member_tasks")
-    const baseTableName = entity.table ?? toTableName(entityName);
-    // The featureName prefix is inserted between read_ and the base name so
-    // all read models consistently start with `read_`, whether or not
-    // featureName is set. Examples:
-    //   featureName="shop", base="read_orders"  →  "read_shop_orders"
-    //   featureName=undef,  base="read_orders"  →  "read_orders"
-    //   featureName="shop", base="orders" (no read_)  →  "shop_orders"
-    const tableName = options?.featureName
-        ? baseTableName.startsWith(READ_MODEL_PREFIX)
-            ? `${READ_MODEL_PREFIX}${options.featureName}_${baseTableName.slice(READ_MODEL_PREFIX.length)}`
-            : `${options.featureName}_${baseTableName}`
-        : baseTableName;
-    // Build the list of foreign-key columns to index. Sources:
-    //  (a) single-file / single-image fields store a fileRef id and are queried
-    //      by that id whenever a detail view resolves attachments.
-    //  (b) belongsTo relations declared via r.relation() — the FK column is the
-    //      parent-side lookup key; without an index every child join scans the
-    //      full table.
-    // `Set` keeps the list deduplicated when (a) and (b) name the same column.
-    const foreignKeyFields = new Set();
-    for (const [name, field] of Object.entries(entity.fields)) {
-        if (field.type === "file" || field.type === "image") {
-            foreignKeyFields.add(name);
-        }
-    }
-    if (options?.relations) {
-        for (const rel of Object.values(options.relations)) {
-            if (rel.type === "belongsTo")
-                foreignKeyFields.add(rel.foreignKey);
-        }
-    }
-    // Cast back to EntityTable<E>: drizzle-kit's pgTable returns a fully
-    // inferred PgTableWithColumns over the *exact* column-builder map we
-    // hand in. Our typed signature narrows that to the static names from
-    // EntityDefinition (kept in sync with fieldToColumns + buildBaseColumns).
-    // Drizzle's runtime instance carries every needed method on top.
-    const built = pgTable(tableName, {
-        ...baseColumns,
-        ...fieldColumns,
-    }, 
-    // Every multi-tenant query filters by tenant_id. Without this index, list
-    // queries scan the whole table across all tenants. Applies to every table
-    // built via buildEntityTable since every entity inherits tenantId.
-    (table) => {
-        const indexes = {};
-        const tHandle = table;
-        indexes[`${tableName}_tenant_id_idx`] = index(`${tableName}_tenant_id_idx`).on(
-        // biome-ignore lint/style/noNonNullAssertion: tenantId column always exists on entity tables
-        tHandle["tenantId"]);
-        for (const fieldName of foreignKeyFields) {
-            const column = tHandle[fieldName];
-            if (column) {
-                indexes[`${tableName}_${toSnakeCase(fieldName)}_idx`] = index(`${tableName}_${toSnakeCase(fieldName)}_idx`).on(column);
-            }
-        }
-        // lookupable fields: index the bidx column (kept in lockstep with
-        // deriveEntityTableMeta).
-        const bidxFieldByField = new Map();
-        for (const [name, field] of Object.entries(entity.fields)) {
-            if (field.type !== "text" || field.lookupable !== true)
-                continue;
-            bidxFieldByField.set(name, `${name}Bidx`);
-            const column = tHandle[`${name}Bidx`];
-            if (column) {
-                const idxName = `${tableName}_${toSnakeCase(name)}_bidx_idx`;
-                indexes[idxName] = index(idxName).on(column);
-            }
-        }
-        // entity.indexes contains composite/unique indexes explicitly declared by
-        // the author. Columns are addressed by field name (camelCase), and the
-        // index name follows <table>_<col1>_<col2>_<unique|idx>; index.name can
-        // override the convention.
-        for (const def of entity.indexes ?? []) {
-            const cols = def.columns
-                .map((fieldName) => tHandle[fieldName])
-                .filter((col) => col !== undefined);
-            if (cols.length !== def.columns.length)
-                continue;
-            const suffix = def.unique === true ? "unique" : "idx";
-            const indexName = def.name ?? `${tableName}_${def.columns.map((c) => toSnakeCase(c)).join("_")}_${suffix}`;
-            const builder = def.unique === true ? uniqueIndex(indexName) : index(indexName);
-            let chain = builder.on(...cols);
-            // entity.indexes[].where is now a SqlExpression (was drizzle SQL).
-            // Pass through to the IndexBuilderWithCols.where()-API.
-            if (def.where !== undefined) {
-                // A silently dropped where would build a full (unique) index that
-                // entity-table-meta flags as needsManualWhere.
-                if (!isSqlExpression(def.where)) {
-                    throw new Error(`[${tableName}] index "${indexName}": where must be a sql\`...\` expression`);
-                }
-                chain = chain.where(def.where);
-            }
-            else if (def.unique === true && entity.softDelete === true) {
-                // Soft-deleted rows keep their value, so a full unique index would
-                // permanently block reuse; kept in lock-step with entity-table-meta.ts.
-                chain = chain.where(sql.raw(SOFT_DELETE_LIVE_ROW_PREDICATE));
-            }
-            indexes[indexName] = chain;
-            // Partial bidx counterpart for unique indexes over lookupable fields
-            // (kept in lockstep with deriveEntityTableMeta).
-            if (def.unique === true && def.where === undefined) {
-                const bidxFieldNames = def.columns.map((c) => bidxFieldByField.get(c) ?? c);
-                if (bidxFieldNames.some((c, i) => c !== def.columns[i])) {
-                    const bidxCols = bidxFieldNames
-                        .map((c) => tHandle[c])
-                        .filter((col) => col !== undefined);
-                    if (bidxCols.length === bidxFieldNames.length) {
-                        const notNullParts = bidxFieldNames
-                            .filter((c, i) => c !== def.columns[i])
-                            .map((c) => `"${toSnakeCase(c)}" IS NOT NULL`);
-                        // Soft-deleted rows keep their bidx hash — without this, a
-                        // restored row can't reuse a value a soft-deleted sibling still
-                        // holds.
-                        const whereText = (entity.softDelete === true
-                            ? [...notNullParts, SOFT_DELETE_LIVE_ROW_PREDICATE]
-                            : notNullParts).join(" AND ");
-                        const partialWhere = sql.raw(whereText);
-                        indexes[`${indexName}_bidx`] = uniqueIndex(`${indexName}_bidx`)
-                            .on(...bidxCols)
-                            .where(partialWhere);
-                    }
-                }
-            }
-        }
-        return indexes;
-    });
+    const tableName = entityTableName(entityName, entity, options?.featureName);
+    const foreignKeyFields = foreignKeyFieldNames(entity, options?.relations);
+    // Cast back to EntityTable<E>: the typed signature narrows the dynamic column
+    // map to the static names from EntityDefinition (kept in sync with
+    // fieldToColumns + buildBaseColumns).
+    const built = pgTable(tableName, { ...baseColumns, ...fieldColumns }, (table) => buildEntityIndexes(tableName, entity, table, foreignKeyFields));
     stampEntityTableMeta(built, entity);
     markExecutorManagedTable(built, { entityName, entity });
     return built;

package/dist/engine/boot-validator/query-refs.js

@@ -12,17 +12,25 @@ export function checkQueryRef(queryHandlers, query, buildPrefix) {
         return;
     throw new Error(`${buildPrefix()} query "${query}" ${NOT_REGISTERED_SUFFIX}`);
 }
-// visibleWhen queries are run with an empty payload by the client gate, so a query
-// that requires input would fail on every call and the screen/panel would stay
-// unavailable with no hint.
-function checkVisibleWhenQueryRef(queryHandlers, query, buildPrefix) {
+const PROBE_ROUTE_ID = "00000000-0000-4000-8000-000000000000";
+// Panel gates run with an empty payload; a screen gate with `idParam` runs with the route id
+// under that key. A query needing anything more would fail on every call and the
+// screen/panel would stay unavailable with no hint.
+function checkVisibleWhenQueryRef(queryHandlers, query, buildPrefix, idParam) {
     checkQueryRef(queryHandlers, query, buildPrefix);
     const handler = queryHandlers.get(query);
-    // skip: nothing to check for an unknown handler (checkQueryRef already threw) or an input-free query
-    if (handler === undefined || handler.schema.safeParse({}).success)
+    // skip: unknown handler, checkQueryRef already threw
+    if (handler === undefined)
         return;
-    throw new Error(`${buildPrefix()} query "${query}" requires input; visibleWhen queries run with an empty payload. ` +
-        "Make the query's input fields optional or use a query without required input.");
+    const probe = idParam === undefined ? {} : { [idParam]: PROBE_ROUTE_ID };
+    // skip: the query parses what the gate sends
+    if (handler.schema.safeParse(probe).success)
+        return;
+    throw new Error(idParam === undefined
+        ? `${buildPrefix()} query "${query}" requires input; visibleWhen queries run with an empty payload. ` +
+            "Make the query's input fields optional, use a query without required input, or (projectionDetail only) set visibleWhen.idParam to receive the route id."
+        : `${buildPrefix()} query "${query}" requires input beyond idParam "${idParam}"; visibleWhen queries run with only the route id under that key. ` +
+            `Make the other input fields optional or fix idParam "${idParam}".`);
 }
 // relatedList is currently only reachable on projectionDetail — screens.ts
 // rejects it outright on entityEdit/actionForm/configEdit. Walking
@@ -104,7 +112,12 @@ function checkEditFormScreenQueryRefs(queryHandlers, featureName, screenId, scre
 }
 function checkScreenQueryRefs(queryHandlers, featureName, screenId, screen) {
     if (screen.visibleWhen !== undefined) {
-        checkVisibleWhenQueryRef(queryHandlers, screen.visibleWhen.query, () => `[Feature ${featureName}] Screen "${screenId}" (${screen.type}) visibleWhen`);
+        const { idParam } = screen.visibleWhen;
+        if (idParam !== undefined && screen.type !== "projectionDetail") {
+            throw new Error(`[Feature ${featureName}] Screen "${screenId}" (${screen.type}) visibleWhen.idParam is only supported on projectionDetail, ` +
+                "where the route always carries a record id. Remove idParam or use a projectionDetail screen.");
+        }
+        checkVisibleWhenQueryRef(queryHandlers, screen.visibleWhen.query, () => `[Feature ${featureName}] Screen "${screenId}" (${screen.type}) visibleWhen`, idParam);
     }
     if (screen.type === "projectionList") {
         checkQueryRef(queryHandlers, screen.query, () => `[Feature ${featureName}] Screen "${screenId}" (projectionList)`);

package/dist/engine/boot-validator/screens-actions.js

@@ -434,17 +434,20 @@ export function validateRecordActionRedirect(feature, screenId, screenKind, acti
     }
 }
 // "edit" is the default edit action, which only exists when detailFor names
-// the entity; a typo would otherwise silently fall back to the default precedence.
+// the entity; a typo would otherwise silently fall back to the default header layout.
 export function validatePrimaryActionTarget(featureName, screenId, screen) {
-    // skip: no declared primaryAction, the default header precedence applies
-    if (screen.primaryAction === undefined)
-        return;
+    const targets = [
+        ...(screen.primaryAction !== undefined
+            ? [["primaryAction", screen.primaryAction]]
+            : []),
+        ...(screen.inlineActions ?? []).map((id) => ["inlineActions", id]),
+    ];
     const declaredIds = (screen.actions ?? []).map((action) => action.id);
     const editIsAvailable = screen.detailFor !== undefined;
-    const targetExists = declaredIds.includes(screen.primaryAction) ||
-        (editIsAvailable && screen.primaryAction === "edit");
-    if (!targetExists) {
-        throw new Error(`[Feature ${featureName}] Screen "${screenId}" (projectionDetail) primaryAction "${screen.primaryAction}" ` +
+    for (const [option, id] of targets) {
+        if (declaredIds.includes(id) || (editIsAvailable && id === "edit"))
+            continue;
+        throw new Error(`[Feature ${featureName}] Screen "${screenId}" (projectionDetail) ${option} "${id}" ` +
             `matches no action — use one of the declared action ids (${declaredIds.join(", ") || "none declared"})` +
             `${editIsAvailable ? ' or "edit"' : ' ("edit" needs detailFor on this screen)'}.`);
     }

package/dist/engine/boot-validator/screens-kind-projection-detail.js

@@ -74,6 +74,13 @@ function validateProjectionDetailStatusTones(featureName, screenId, screen) {
         }
     }
 }
+function validateProjectionDetailStatusFormat(featureName, screenId, screen) {
+    const header = screen.header;
+    if (header?.statusFormat !== undefined && header.status === undefined) {
+        throw new Error(`[Feature ${featureName}] Screen "${screenId}" (projectionDetail) sets header.statusFormat ` +
+            `without header.status — there is no status badge to format. Set header.status or remove statusFormat.`);
+    }
+}
 function validateProjectionDetailSubtitleParts(ctx, screenId, subtitleHref, parts) {
     const featureName = ctx.feature.name;
     if (subtitleHref !== undefined) {
@@ -223,6 +230,7 @@ export function validateProjectionDetailScreen(ctx, screenId, screen) {
         validateProjectionDetailMetric(ctx, screenId, screen, metric);
     }
     validateProjectionDetailStatusTones(featureName, screenId, screen);
+    validateProjectionDetailStatusFormat(featureName, screenId, screen);
     validateProjectionDetailSubtitle(ctx, screenId, screen);
     for (const section of screen.layout.sections) {
         validateProjectionDetailSection(ctx, screenId, screen, section);

package/dist/engine/build-app-schema.js

@@ -19,6 +19,8 @@
 //   Workspace: verbatim definition + getWorkspaceNavs() from the registry
 //   Translations: verbatim feature.translations (raw r.translations keys,
 //                 unfiltered — see FeatureSchema.translations doc)
+//   queryLiveEntities: { <query QN>: liveEntities } of the feature's own
+//                 query handlers with a non-empty liveEntities list
 //
 // Feature toggles: this schema is tenant-independent and lists every feature.
 // The schema route strips features the caller's tenant has switched off
@@ -29,6 +31,7 @@ import { collectUrlPrefillFieldsByScreenQn } from "./boot-validator/url-prefill-
 import { buildConfigFeatureSchema, SETTINGS_HUB_FEATURE, } from "./build-config-feature-schema.js";
 import { isEncryptedAtRest } from "./config-helpers.js";
 import { isListQueryWithoutSearchableFields } from "./entity-list-searchability.js";
+import { projectQueryLiveEntities } from "./project-query-live-entities.js";
 import { QnTypes, qualifyEntityName } from "./qualified-name.js";
 const log = createFallbackLogger("kumiko");
 // Workspace ids are only unique per feature, and the schema carries the short id. The owner stays
@@ -54,6 +57,7 @@ export function buildAppSchema(registry, options = {}) {
             ...collection,
             navQn: `${featureName}:nav:${collection.id}`,
         }));
+        const queryLiveEntities = projectQueryLiveEntities(registry, featureName);
         const featureSchema = {
             featureName,
             entities: projectEntities(feature.entities ?? {}),
@@ -67,6 +71,7 @@ export function buildAppSchema(registry, options = {}) {
                 translations: feature.translations,
             }),
             ...(options.searchAdapterMissing === true && { searchAdapterMissing: true }),
+            ...(Object.keys(queryLiveEntities).length > 0 && { queryLiveEntities }),
         };
         features.push(featureSchema);
     }

package/dist/engine/extensions/user-data.js

@@ -7,6 +7,4 @@
 // The runner pipelines that consume these hooks are built and live: see
 // packages/bundled-features/src/user-data-rights/run-user-export.ts,
 // run-forget-cleanup.ts, run-export-jobs.ts.
-//
-// See docs/plans/datenschutz/user-data-rights.md.
 export {};

package/dist/engine/project-query-live-entities.d.ts

@@ -0,0 +1,2 @@
+import type { Registry } from "./types/feature.ts";
+export declare function projectQueryLiveEntities(registry: Registry, featureName: string): Readonly<Record<string, readonly string[]>>;

package/dist/engine/project-query-live-entities.js

@@ -0,0 +1,11 @@
+export function projectQueryLiveEntities(registry, featureName) {
+    const projected = {};
+    for (const [queryQn, handler] of registry.getAllQueryHandlers()) {
+        if (handler.liveEntities === undefined || handler.liveEntities.length === 0)
+            continue;
+        if (registry.getHandlerFeature(queryQn) !== featureName)
+            continue;
+        projected[queryQn] = [...handler.liveEntities];
+    }
+    return projected;
+}

package/dist/engine/strip-disabled-features-from-app-schema.js

@@ -131,7 +131,7 @@ export function stripDisabledFeaturesFromAppSchema(schema, registry, disabledFea
     const orphanedNavQns = collectOrphanedNavQns(schema.features, removedNavQns);
     const features = schema.features.map((feature) => {
         if (disabled.has(feature.featureName)) {
-            const { navs: _navs, contentCollections: _collections, workspaces: _ws, ...rest } = feature;
+            const { navs: _navs, contentCollections: _collections, workspaces: _ws, queryLiveEntities: _live, ...rest } = feature;
             return { ...rest, screens: screensKeptForFallback(feature) };
         }
         if (orphanedNavQns.size === 0 || feature.navs === undefined)

package/dist/env/index.d.ts

@@ -1,6 +1,7 @@
 import * as z from "zod";
 import type { FeatureDefinition } from "../engine/types/feature.ts";
 import { type ComposedEnvShape, type ComposeEnvSchemaOptions, type EmptyShape, type EnvError, type EnvFieldClass, type EnvFieldStatus, type KumikoEnvMeta, type ParseEnvOptions } from "./internals.ts";
+export { type EnvSource, requiredEnvFor } from "./required-env.ts";
 export declare function readKumikoMeta(field: z.ZodType): KumikoEnvMeta;
 /** Env names whose schema field declares `kms: true` — the slots
  *  `resolvePlatformKeks` resolves from a ciphertext. */

package/dist/env/index.js

@@ -16,6 +16,7 @@
 import * as z from "zod";
 import { zodDef, zodMeta, zodShape, zodShapeField } from "./_zod-introspect.js";
 import { buildPulumiSuggestion, getFieldDescription, } from "./internals.js";
+export { requiredEnvFor } from "./required-env.js";
 // --- Per-env-var metadata (attach via Zod's `.meta()`) ---
 function isKumikoMeta(value) {
     if (value === null || typeof value !== "object")

package/dist/env/required-env.d.ts

@@ -0,0 +1,2 @@
+export type EnvSource = Readonly<Record<string, string | undefined>>;
+export declare function requiredEnvFor(label: string, env: EnvSource): (name: string) => string;

package/dist/env/required-env.js

@@ -0,0 +1,9 @@
+export function requiredEnvFor(label, env) {
+    return (name) => {
+        const value = env[name];
+        if (value === undefined || value === "") {
+            throw new Error(`[${label}] required env var ${name} is missing or empty`);
+        }
+        return value;
+    };
+}

package/dist/i18n/required-surface-keys.js

@@ -203,6 +203,10 @@ function pushRelatedListSectionKeys(out, section) {
     pushKey(out, grouping?.label);
     for (const label of Object.values(grouping?.labels ?? {}))
         pushKey(out, label);
+    for (const variant of section.emptyState?.variants ?? []) {
+        pushKey(out, variant.title);
+        pushKey(out, variant.description);
+    }
 }
 function pushListEmptyStateKeys(out, emptyState) {
     pushKey(out, emptyState?.title);

package/dist/migrations/kumiko-drift.js

@@ -125,11 +125,11 @@ export function formatKumikoDriftReport(report) {
     // restored by apply.
     lines.push("");
     if (report.pending.length > 0) {
-        lines.push("Run 'kumiko schema apply' to apply the pending migration(s).");
+        lines.push("Run 'bun kumiko-schema apply' to apply the pending migration(s).");
     }
     if (report.checksumMismatches.length > 0) {
         lines.push("Revert the edited migration file(s) to their applied content, or hand-correct");
-        lines.push("the checksum in _kumiko_migrations — 'kumiko schema apply' cannot resolve a");
+        lines.push("the checksum in _kumiko_migrations — 'bun kumiko-schema apply' cannot resolve a");
         lines.push("checksum mismatch.");
     }
     if (report.missingTables.length > 0 && report.pending.length === 0) {
@@ -138,8 +138,8 @@ export function formatKumikoDriftReport(report) {
     }
     if (report.missingColumns.length > 0) {
         lines.push("Missing column(s) — the live table predates a richer snapshot (e.g. a");
-        lines.push("ride-along column the generator now emits). Run 'kumiko schema generate' to");
-        lines.push("produce an ALTER-TABLE migration for the new column(s), then 'kumiko schema apply'.");
+        lines.push("ride-along column the generator now emits). Run 'bun kumiko-schema generate' to");
+        lines.push("produce an ALTER-TABLE migration for the new column(s), then 'bun kumiko-schema apply'.");
     }
     return lines.join("\n");
 }

package/dist/ui-types/app-schema.d.ts

@@ -12,6 +12,7 @@ export type FeatureSchema = {
     readonly translations?: TranslationKeys;
     readonly workspaces?: readonly WorkspaceSchema[];
     readonly searchAdapterMissing?: boolean;
+    readonly queryLiveEntities?: Readonly<Record<string, readonly string[]>>;
 };
 export type QualifiedContentCollection = ContentCollectionDefinition & {
     readonly navQn: string;

package/dist/ui-types/index.d.ts

@@ -10,7 +10,7 @@ export type { EmbeddedDerivedCellDef, EntityDefinition, FieldDefinition, Options
 export type { AccessRule } from "../engine/types/handlers.ts";
 export { isOpenToAllGranted, isUiAccessGranted } from "../engine/types/handlers.ts";
 export type { IconKey, NavDefinition, NavIconKey } from "../engine/types/nav.ts";
-export type { ActionFormFooterAction, ActionFormLoad, ActionFormRedirect, ActionFormScreenDefinition, ActionFormSuccessFact, ActionFormSuccessLink, ConfigEditScreenDefinition, CustomScreenDefinition, DashboardChartMarkerKind, DashboardChartPanel, DashboardCurrencyFormat, DashboardCustomPanel, DashboardDateParam, DashboardFeedPanel, DashboardFilterDefinition, DashboardI18nText, DashboardListPanel, DashboardMoneyParam, DashboardPanelDefinition, DashboardPanelEmptyState, DashboardPanelQueryOptions, DashboardPanelSpan, DashboardPanelVisibility, DashboardProgressListPanel, DashboardProgressTone, DashboardRefresh, DashboardRelativeTimeParam, DashboardScopeDefinition, DashboardScreenDefinition, DashboardScreenPanel, DashboardStatGroupPanel, DashboardStatPanel, DashboardText, DashboardTextBlock, DashboardTextPanel, DashboardTextParam, DashboardTimeRangeDefinition, EditExtensionSection, EditFieldSpec, EditFieldsSection, EditLayout, EditRelatedListSection, EditSectionSpec, EditWriteFormSection, EmbeddedListEditSpec, EntityEditAction, EntityEditScreenDefinition, EntityListFacetConfig, EntityListScreenDefinition, FieldAffix, FieldCondition, FieldFillAction, FieldIconKey, FieldRenderer, FormWidth, ListBulkAction, ListColumnSpec, ListEmptyStateSpec, ListFacetSpec, ListSortSpec, ListTableOptions, MetricNavigate, PlatformComponent, ProjectionDetailScreenDefinition, ProjectionListScreenDefinition, RecordHeaderSubtitlePart, RelatedListRowTone, RelatedListToolbarAction, RowAction, RowActionClientAction, RowActionDisplay, RowActionDrawer, RowActionMode, RowActionNavigate, RowActionWriteHandler, RowFieldExtractor, ScreenDefinition, ScreenSlots, SecretMintConfirmStep, SecretMintScreenDefinition, SecretsEditScreenDefinition, ToolbarAction, } from "../engine/types/screen.ts";
+export type { ActionFormFooterAction, ActionFormLoad, ActionFormRedirect, ActionFormScreenDefinition, ActionFormSuccessFact, ActionFormSuccessLink, ConfigEditScreenDefinition, CustomScreenDefinition, DashboardChartMarkerKind, DashboardChartPanel, DashboardCurrencyFormat, DashboardCustomPanel, DashboardDateParam, DashboardFeedPanel, DashboardFilterDefinition, DashboardI18nText, DashboardListPanel, DashboardMoneyParam, DashboardPanelDefinition, DashboardPanelEmptyState, DashboardPanelQueryOptions, DashboardPanelSpan, DashboardPanelVisibility, DashboardProgressListPanel, DashboardProgressTone, DashboardRefresh, DashboardRelativeTimeParam, DashboardScopeDefinition, DashboardScreenDefinition, DashboardScreenPanel, DashboardStatGroupPanel, DashboardStatPanel, DashboardText, DashboardTextBlock, DashboardTextPanel, DashboardTextParam, DashboardTimeRangeDefinition, EditExtensionSection, EditFieldSpec, EditFieldsSection, EditLayout, EditRelatedListSection, EditSectionSpec, EditWriteFormSection, EmbeddedListEditSpec, EntityEditAction, EntityEditScreenDefinition, EntityListFacetConfig, EntityListScreenDefinition, FieldAffix, FieldCondition, FieldFillAction, FieldIconKey, FieldRenderer, FormWidth, ListBulkAction, ListColumnSpec, ListEmptyStateSpec, ListFacetSpec, ListSortSpec, ListTableOptions, MetricNavigate, PlatformComponent, ProjectionDetailScreenDefinition, ProjectionListScreenDefinition, RecordHeaderSubtitlePart, RelatedListEmptyStateSpec, RelatedListEmptyStateVariant, RelatedListRowTone, RelatedListToolbarAction, RowAction, RowActionClientAction, RowActionDisplay, RowActionDrawer, RowActionMode, RowActionNavigate, RowActionWriteHandler, RowFieldExtractor, ScreenDefinition, ScreenSlots, ScreenVisibility, SecretMintConfirmStep, SecretMintScreenDefinition, SecretsEditScreenDefinition, ToolbarAction, } from "../engine/types/screen.ts";
 export { MAX_BULK_SELECTION } from "../engine/types/screen.ts";
 export type { TargetRef } from "../engine/types/target-ref.ts";
 export type { TreeAction } from "../engine/types/tree-node.ts";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-framework",
-  "version": "0.391.0",
+  "version": "0.392.0",
   "description": "Framework core — engine, pipeline, API, DB, and every other bit that makes Kumiko go.",
   "license": "MIT",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -199,7 +199,7 @@
     "./package.json": "./package.json"
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-types": "0.391.0",
+    "@cosmicdrift/kumiko-types": "0.392.0",
     "bullmq": "^5.76.7",
     "hono": "^4.13.1",
     "i18next": "^26.1.0",
@@ -221,7 +221,7 @@
     }
   },
   "devDependencies": {
-    "@cosmicdrift/kumiko-testing": "0.391.0",
+    "@cosmicdrift/kumiko-testing": "0.392.0",
     "bun-types": "^1.4.4",
     "fflate": "^0.8.2",
     "meilisearch": "^0.58.0",

package/src/changes.json

@@ -1,4 +1,46 @@
 [
+  {
+    "version": "0.392.0",
+    "type": "improvement",
+    "title": "Table and migration generation split into smaller steps",
+    "detail": "fieldToColumnMeta, buildEntityTable and renderMigrationSql are now tables and named steps instead of long functions. Columns, indexes and migration SQL are byte-identical; nothing changes for apps."
+  },
+  {
+    "version": "0.392.0",
+    "type": "improvement",
+    "title": "requiredEnvFor reads a required env var in ops scripts",
+    "detail": "@cosmicdrift/kumiko-framework/env exports requiredEnvFor(label, env). It returns a reader that hands back the value of a set variable and throws \"[label] required env var NAME is missing or empty\" otherwise; an empty string counts as missing and the error never contains a value. The env source is passed in, so a script can read from the KEK-resolved env of resolvePlatformKeks as well as from process.env. It replaces the requiredEnv copies in app bin/ops scripts."
+  },
+  {
+    "version": "0.392.0",
+    "type": "improvement",
+    "title": "The boot validator checks header.statusFormat",
+    "detail": "A projectionDetail screen with header.statusFormat but without header.status fails boot, because there is no badge to format."
+  },
+  {
+    "version": "0.392.0",
+    "type": "improvement",
+    "title": "The boot check validates inlineActions",
+    "detail": "Every id in a projectionDetail inlineActions list must name a declared action (or edit when the screen has an edit target), the same rule as primaryAction; an unknown id fails the boot."
+  },
+  {
+    "version": "0.392.0",
+    "type": "improvement",
+    "title": "The i18n boot check covers emptyState variants",
+    "detail": "Title and description keys of relatedList emptyState variants count as required surface keys, so a missing translation fails the boot check."
+  },
+  {
+    "version": "0.392.0",
+    "type": "improvement",
+    "title": "projectionDetail visibleWhen can pass the route id",
+    "detail": "A screen-level visibleWhen takes idParam on projectionDetail. The gate then queries with the route id under that key, and boot accepts a visibleWhen query that requires exactly that input. Without idParam the empty-payload rule stays, and idParam on another screen type fails boot. A failing gate query, such as a 403 for a downgraded tenant, shows the fallback or the standard notice instead of the screen."
+  },
+  {
+    "version": "0.391.1",
+    "type": "fix",
+    "title": "Boot errors name the real schema command",
+    "detail": "The drift report and the row-level-security boot check recommended `kumiko schema apply` and `kumiko schema generate`. Apps run the CLI as `bun kumiko-schema <subcommand>`, so the hints now say that."
+  },
   {
     "version": "0.391.0",
     "type": "fix",