@getstrata/bootstrap 2.2.34 → 2.2.36

package/CHANGELOG.md

@@ -1,5 +1,15 @@
 # @getstrata/bootstrap changelog
 
+## 2.2.36
+
+Add a mandatory installed-package SQLite column-tenancy CLI/OpenAPI/HTTP profile, including cookie/token/JWT/Basic and repeated SCIM isolation, while preserving existing Postgres security, route inventories, compiler combinations and Docker gates. Reconcile observability/rotation trackers against shipped capabilities and remaining operational qualification.
+
+Fix declared default exports missing from nine published core subpaths. Preserve defaults in generated non-shared entries and alias the shared BaseRepository default to its canonical root constructor, retaining named exports and singleton/class identity. Extend declaration/runtime verification with value-default and type-only-default regressions; compile all nine imports across the existing 18 generated compiler combinations and execute them in every installed candidate app. Records the published 2.2.35 reproduction from Q01 dogfooding; no shop adapter or node_modules patch.
+
+## 2.2.35
+
+Retire checked-in HiroApp applications after preserving security, CLI/OpenAPI/HTTP, source, migration and Docker acceptance in generated candidate-package fixtures. Keep all 23 security cases, 40 runtime operations, 22 API/protocol operations, three-engine migration cases and 18 compiler combinations. Make the private root CLI fixture-only, isolate post-commit HTTP databases, and validate the generated production image with restricted runtime credentials, Redis recovery and graceful shutdown. Remove obsolete app regeneration/selectors and update contributor, generator and deployment documentation; retain compatible example preset IDs and explicit application-owned deployment boundaries. Regenerate the sample SDK from the API-only snapshot and verify it against the installed candidate package. Core coverage retains 136 enforced files at 100%; remove only the two deleted private-entrypoint exemptions (272 remaining).
+
 ## 2.2.34
 
 Complete opt-in persisted account-state adoption: atomic SCIM suspension/reactivation and credential revocation, serialized generated password/SSO issuance, version-bound session/MFA/confirmation proofs, safe optional credential-table handling and malformed-cookie rejection. Includes explicit schema migration and upgrade instructions; installing packages alone does not rewrite existing apps.

package/dist/bootstrap/schemaTarget.d.ts

@@ -1,5 +1,6 @@
 type SchemaTarget = "app" | "fixture";
 declare function readSchemaTarget(): SchemaTarget;
 declare function isFixtureSchema(): boolean;
+declare function assertFixtureSchema(): void;
 export type { SchemaTarget };
-export { isFixtureSchema, readSchemaTarget };
+export { assertFixtureSchema, isFixtureSchema, readSchemaTarget };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@getstrata/bootstrap",
-  "version": "2.2.34",
+  "version": "2.2.36",
   "description": "Strata application bootstrap: HttpKernel, DI, web session helpers",
   "type": "module",
   "license": "MIT",
@@ -190,7 +190,7 @@
     "access": "public"
   },
   "peerDependencies": {
-    "@getstrata/core": "^2.2.34",
+    "@getstrata/core": "^2.2.36",
     "typescript": "^5.9.0 || ^6.0.0 || ^7.0.0"
   },
   "engines": {

package/dist/bootstrap/server.d.ts

@@ -1 +0,0 @@
-export {};