@jskit-ai/jskit-cli 0.2.140 → 0.2.142

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jskit-ai/jskit-cli",
-  "version": "0.2.140",
+  "version": "0.2.142",
   "description": "Bundle and package orchestration CLI for JSKIT apps.",
   "type": "module",
   "files": [
@@ -21,9 +21,9 @@
     "test": "node --test"
   },
   "dependencies": {
-    "@jskit-ai/jskit-catalog": "0.1.135",
-    "@jskit-ai/kernel": "0.1.123",
-    "@jskit-ai/shell-web": "0.1.124",
+    "@jskit-ai/jskit-catalog": "0.1.137",
+    "@jskit-ai/kernel": "0.1.124",
+    "@jskit-ai/shell-web": "0.1.125",
     "@vue/compiler-sfc": "^3.5.29",
     "ts-morph": "^28.0.0",
     "yaml": "^2.8.3"

package/src/server/commandHandlers/health.js

@@ -1659,11 +1659,22 @@ function createHealthCommands(ctx = {}) {
       const crudOwnership = crudOwnershipByTable.get(tableName) || null;
       if (crudOwnership) {
         const missingRequiredOwnerKinds = subtractStringSet(crudOwnership.requiredOwnerKinds, directOwnerKinds);
+        const unexpectedOwnerKinds = subtractStringSet(directOwnerKinds, crudOwnership.requiredOwnerKinds);
         if (missingRequiredOwnerKinds.size > 0) {
           issues.push(
             `${crudOwnership.providerPath}: [crud-ownership:missing-owner-columns] ownershipFilter "${crudOwnership.ownershipFilter}" requires live table "${tableName}" to carry direct owner column(s) ${formatOwnerColumns(missingRequiredOwnerKinds)}. JSKIT CRUD ownership must be materialized on the row, not recovered through joins.`
           );
         }
+        if (unexpectedOwnerKinds.size > 0) {
+          issues.push(
+            `${crudOwnership.providerPath}: [crud-ownership:unexpected-owner-columns] ownershipFilter "${crudOwnership.ownershipFilter}" conflicts with reserved owner column(s) ${formatOwnerColumns(unexpectedOwnerKinds)} on live table "${tableName}". The exact direct columns "workspace_id" and "user_id" define JSKIT ownership; change the filter to match, or rename a domain relationship to a specific foreign-key name.`
+          );
+        }
+
+        // Direct workspace_id and user_id columns define this CRUD's ownership, and the checks
+        // above require its filter to agree. Foreign-key reachability through domain relationships
+        // such as recipient_user_id and created_by_user_id does not add another owner.
+        continue;
       }
 
       if (inheritedOwnerKinds.size < 1 || allowsAuxiliaryInheritedOwnership) {

package/src/server/prompts/app_blueprint.md

@@ -33,7 +33,7 @@ Cover:
 - The role of each surface: app, admin, console, settings, public, workspace, or any app-specific surface from the brief.
 - Global view of the main product areas and navigation destinations.
 - Key domain concepts and data objects, without inventing database schemas unless the brief clearly requires them.
-- Ownership model per persistent entity when it is already clear: public, user, workspace, or workspace_user.
+- Ownership model per persistent entity when it is already clear: public, user, workspace, or workspace_user. Treat only the exact columns `workspace_id` and `user_id` as standard JSKIT ownership, and require the selected ownership filter to match those columns exactly. Treat specific foreign keys such as `recipient_user_id`, `created_by_user_id`, and `assignee_user_id` as domain relationships, not ownership aliases. Never rename a domain relationship to an ownership column to satisfy tooling.
 - Baseline JSKIT package workflows to accept as defaults and any intended overrides.
 - Package install, generator, and custom-code areas at a high level.
 - CRUDs likely to need server ownership, and any narrow exceptions that should be called out later.