@getstrata/bootstrap 2.2.13 → 2.2.15

package/CHANGELOG.md

@@ -1,8 +1,28 @@
 # @getstrata/bootstrap changelog
 
+## 2.2.15
+
+- Batch legacy list-queue priority polling while retaining recovery and ownership contracts.
+- Batch dialect-portable pivot writes with framework transaction/savepoint composition and consistent numeric/string ID toggle semantics. Noncanonical or textual IDs use sequential database comparisons to preserve coercion and collation behavior.
+- New Redis scaffolds explicitly select Streams; existing unset transport settings continue to select lists.
+- Generate the SQL outbox migration, listener registry and managed worker command. Durable publication and cache-invalidation activation remain explicit.
+
+- Primary-key ascending `chunk` queries reuse the existing keyset walk, including default primary-key ordering; projections, joins, grouping, locks and other orders retain OFFSET behavior.
+- Empty filtered pagination totals skip the row query. Nonempty page-number pagination preserves OFFSET semantics and its count-plus-row-query budget; explicit cursor/keyset APIs remain available for deep traversal.
+- Independent hashed write casts run concurrently. Deterministic regressions prove concurrent start, complete awaiting and failure before model observers or SQL writes; hydration and existing-hash behavior are preserved.
+- Streams workers poll retry promotion, pending recovery and new delivery across priorities in one bounded Redis script, preserving priority, ownership fencing and at-least-once delivery contracts.
+- Clarify historical 2.1.0–2.2.13 release notes and database/queue documentation. Remove the consolidated 1.x-to-2.x migration guide; existing projects are upgraded individually.
+
+## 2.2.14
+
+Complete the scoped HTML rendering starter adoption: generated apps inject ViewRenderer through createViewProvider instead of copying renderPage; welcome pages opt into HTMX fragments with full-page fallbacks, auth retains existing contracts, and CORS preserves representation Vary headers. Includes generator, runtime auth and cache-header regressions.
+
+Add optional typed resourceRoutes and strict mergeRouteMaps composition, preserving native Bun routing and app-owned middleware. Add explicit ViewRenderer.namespace prefixes with unchanged layout/Response/HTMX contracts; generated auth controllers use the namespace. Includes native HTTP, compile-time, rendering isolation and generator regressions.
+
 ## 2.2.13
 
-- Improve view rendering and better htmx support
+- Add a typed per-app HTML renderer on top of the native response path.
+- Add explicit HTMX page and fragment responses. A fragment can fall back to the full page. Layout and auth response contracts stay the same.
 
 ## 2.2.12
 
@@ -24,42 +44,47 @@ Add independently interruptible read-only SQLite and MySQL observations; extend
 
 ## 2.2.9
 
-- Support native cancellable transaction acquisition
+- Pool checkout can be cancelled. `reserve({ signal })` on the native driver aborts while it is still waiting for a connection. Drivers without that method are not given a fake one.
 
 ## 2.2.8
 
-- Add bounded read-only Postgres outbox metrics
+- Add bounded, read-only Postgres outbox metrics.
+- Add bounded, opt-in Redis queue metrics. List and Streams depth stay separate.
 
 ## 2.2.7
 
-- Where an ordinary operation needs SQL because the framework cannot express it
+- `ORDER BY` accepts explicit `nulls: "first" | "last"`. Postgres and SQLite emit `NULLS FIRST` / `NULLS LAST`. MySQL has no `NULLS FIRST` / `NULLS LAST` clause, so it orders nulls with an `IS NULL` discriminator and leaves the rest of the sort unchanged.
 
 ## 2.2.6
 
--  fix(cli): relay shutdown to children and simplify container launcher
+- The CLI, when it supervises the app or worker as a child, forwards shutdown signals to that child and waits for it. The container launcher no longer exits while the child is still running.
 
 ## 2.2.5
 
--  fix(starter): keep container readiness independent of API admission
+- Container readiness no longer means the API is admitting traffic. Database readiness no longer provisions roles or creates a missing database. A failed configured admin connection does not fall back to a generated password.
 
 ## 2.2.4
 
--  perf(database): seek Postgres composite keyset bounds
+- Composite keyset pages on Postgres seek with a row comparison (`(a, b) > (cursor)`), so the planner can start at the index bound instead of expanding the cursor into a chain of OR predicates.
 
 ## 2.2.3
 
-- feat(database): add scoped composite keyset pagination
+- Add scoped composite keyset pagination. The order must end with the primary key. Global scopes and caller filters stay in force across the cursor. Joins, grouping, and offset queries are rejected.
 
 ## 2.2.2
 
-- orm improvments
+- Schema `bigId` emits an explicit 64-bit generated identity.
+- Repository writes can be conditional and set-based.
+- Repositories and models can take a typed row lock inside the current transaction.
+- Generated Postgres query handles keep tagged-SQL typing.
 
 ## 2.2.1
 
-F02 — complete queue durability. Queues have leased reservations, recovery and fenced acknowledgement, but still use Redis lists. Persisted retry schedules, execution deadlines, cancellation and the planned Streams migration remain unfinished. Retries currently wait inside the running worker.
-F10 — production public-route tenancy. Separate anonymous access from development tenant headers, support a trusted-host resolver, reject unknown hosts, and accept forwarded hosts only through configured trusted proxies. The shop still lacks the approved-domain mapping.
-F12 — initial administrator provisioning and migration guidance. Automatic demo seeding is fixed. Secure initial-admin provisioning and a consolidated upgrade/operations guide remain.
-Distributed qualification. Cache generations/fill leases, scheduler ownership, OpenTelemetry, body limits and lifecycle controls now exist. Their implementation should no longer be described as entirely pending, but broader failure and capacity qualification is still required.
+- Opt-in Redis Streams (`QUEUE_REDIS_TRANSPORT=streams`). Lists stay the default. Streams adds consumer-group recovery, persisted retry schedules, total job deadlines, opt-in cancellation, and a stable job id across replay. Conversion from lists is a stopped maintenance step.
+- Failed jobs stay recorded until retry admission succeeds. Manual replay keeps `failed_job.job_id` when the row has one.
+- Public reads and tenant host selection are separate. Unknown hosts fail closed. Forwarded hosts are accepted only from configured trusted proxies.
+- Generated apps can provision one initial administrator with `auth:provision-admin` and a one-time claim migration. Demo seeding stays explicit and is rejected in production and staging.
+- Quota and in-memory throttle docs match the code: memory throttles stay process-local, and a Redis failure does not fall back to them.
 
 ## 2.2.0
 
@@ -88,7 +113,9 @@ Bounded memory throttling.
 
 ## 2.1.0
 
-- refactor(starter): reuse shared config and base repositories - fix(database): await password casts before model writes - fix(database): preserve concrete model types in query results
+- Generated apps reuse the shared config store and base repositories instead of a copied stack.
+- Password casts are awaited before the write reaches SQL or observers. Hydration does not hash.
+- Model queries keep the concrete model type in their results. Service tokens, route handlers, and the starter's generated infrastructure were tightened in the same release.
 
 ## 2.0.9
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@getstrata/bootstrap",
-  "version": "2.2.13",
+  "version": "2.2.15",
   "description": "Strata application bootstrap: HttpKernel, DI, web session helpers",
   "type": "module",
   "license": "MIT",
@@ -190,7 +190,7 @@
     "access": "public"
   },
   "peerDependencies": {
-    "@getstrata/core": "^2.2.13",
+    "@getstrata/core": "^2.2.15",
     "typescript": "^5.9.0 || ^6.0.0 || ^7.0.0"
   },
   "engines": {