keiro 0.2.0.0

Packages

All five packages are released together at the shared version 0.2.0.0.

Package	Hackage	Tag
keiro-core	https://hackage.haskell.org/package/keiro-core-0.2.0.0	keiro-core-0.2.0.0
keiro	https://hackage.haskell.org/package/keiro-0.2.0.0	keiro-0.2.0.0
keiro-pgmq	https://hackage.haskell.org/package/keiro-pgmq-0.2.0.0	keiro-pgmq-0.2.0.0
keiro-migrations	https://hackage.haskell.org/package/keiro-migrations-0.2.0.0	keiro-migrations-0.2.0.0
keiro-dsl	https://hackage.haskell.org/package/keiro-dsl-0.2.0.0	keiro-dsl-0.2.0.0

What's Changed

A major release across the package set. The headline changes are the relocation
of Keiro's framework tables into a dedicated keiro PostgreSQL schema, stricter
replay-contract validation on the Keiki 0.2 core, durable dead letters for
rejected dispatches, and a substantially expanded keiro-dsl spec surface
(read models, routers, snapshots, queue ordering, and workflow evolution).

Breaking Changes

• Keiro's framework tables moved out of the kiroku schema into a new,
  dedicated keiro PostgreSQL schema that Keiro creates and owns. Every
  runtime query is now schema-qualified (keiro.keiro_snapshots,
  keiro.keiro_timers, keiro.keiro_outbox, …) and no longer depends on
  search_path. keiro-core exports the new Keiro.Schema.keiroSchema as the
  single source of truth for the name. Existing databases must run the
  keiro-migrations bootstrap, which creates the schema and relocates the
  tables; application SQL that read bare keiro_* relations must be re-qualified.
• runCommandWithSql, runCommandWithSqlEvents,
  runCommandWithProjections, and the process-manager/router runners now
  require KirokuStoreResource so transactional appends can apply Kiroku's
  configured enrichEvent hook. Acquire the store with withKirokuStore and
  interpret Store with runStoreResource; plain runCommand is unchanged.
• Read-model queries no longer auto-register missing registry rows. Applications
  must call registerReadModel at projection startup; unknown models now return
  ReadModelUnregistered without mutating the registry.
• ReadModel now requires a strongScope :: StrongScope field. Use
  EntireLog for all-stream subscriptions or CategoryHead category for a
  category subscription so unrelated traffic cannot hold Strong reads behind.
• ReadModel now also requires a schema :: Text field naming the PostgreSQL
  schema its data table lives in. Keiro does not rewrite query; qualify the
  application's SQL with qualifiedTableName or Keiro.Connection.qualifyTable.
  The field is Haskell-level wiring only and is deliberately not persisted in the
  keiro.keiro_read_models registry.
• AsyncProjection now requires readModelName, naming the registry row that
  fences writes during a rebuild.
• PMCommandResult.PMCommandFailed now carries the target StreamName alongside
  its CommandError, so worker policy can identify the failing target.
• WorkerOptions gains a rejectedCommandPolicy :: RejectedCommandPolicy field,
  and ShardedWorkerOptions gains handlerRetryDelay :: RetryDelay and
  retryPolicy :: RetryPolicy. Record construction must supply them; the
  defaultWorkerOptions and defaultShardedWorkerOptions defaults are unchanged
  in behavior.
• applyAsyncProjection now returns AsyncApplyOutcome (AsyncApplied,
  AsyncDuplicate, or AsyncFenced) and live workers must not checkpoint a
  fenced event. Rebuild replayers use applyAsyncProjectionUnfenced between the
  new atomic startRebuild and guarded finishRebuild helpers.
• keiro-migrations now exports a native pg-migrate component and composes
  Kiroku through an explicit component dependency instead of a combined Codd
  migration-set API.
• Router deterministic command ids are now derived from the resolved target
  stream name and same-stream occurrence rather than the target's list position.
  A transition point-probe recognizes legacy positional ids for stable resolver
  output and may be removed in a later release. If both the deployment version
  and resolver output change between attempts, a target command may be
  dispatched at most one extra time across that one-time upgrade window.
• runWorkflow, runWorkflowWith, and the child-workflow runtime now require
  Error StoreError in their effect rows so post-commit workflow snapshot
  failures can be caught without leaving the typed error channel.
• mkEventStream now rejects snapshot codecs that cannot encode their initial
  state and register file. Snapshot-enabled streams built from
  emptyRegFile must initialize every slot before validation.
• Keiro now requires post-MP-16 Keiki 0.2. Stream validation runs the new
  head-recoverability, inversion-ambiguity, unguarded-input-read, and
  state-changing-silent-edge checks; any warning makes mkEventStream reject
  the stream at startup.
• HydrationReplayFailed now carries a typed HydrationReplayReason alongside
  the failing stream version. The reasons distinguish no inverting edge,
  ambiguous inversion, queue mismatch, and a truncated multi-event chain.
  CommandError also gains CommandAmbiguous, carrying matched edge indices.
• A command matching multiple transitions is now reported as
  CommandAmbiguous instead of CommandRejected. Process managers and routers
  halt on this aggregate-definition bug, while generated timer dispositions
  route it through their on-error arm rather than benign on-reject handling.
• The hydration_replay_failed telemetry class is replaced by four
  reason-specific error.type values, and command_ambiguous is new.
  Dashboards keyed on the old hydration class must be updated.
• validateEventStreamWith and mkEventStreamWith now force-enable Keiki's
  head-recoverability and state-changing-epsilon checks. Caller-supplied
  options may only strengthen validation at Keiro's durable boundary; use the
  explicitly unsafe mkEventStreamUnchecked only for tests and emergency
  forensics, never production streams.
• keiro-dsl: the process saga clause is now
  saga <Aggregate> category "<camelCase>", replacing
  saga <Aggregate> stream="<prefix>-" <> correlationId; process nodes must
  declare node-level rejected and poison policies; every timer fire
  disposition must carry an on-ambiguous arm; identifiers are restricted to
  ASCII and checked for Haskell hygiene; and numeric literals exceeding
  maxBound :: Int are rejected instead of silently wrapping. Validation is
  substantially stricter overall, so specs that checked under 0.1.0.0 may now be
  rejected. See keiro-dsl/CHANGELOG.md for the full list.
• keiro-dsl: scaffold now plans the whole module set before writing any byte
  and refuses to overwrite a Generated path lacking the @generated banner
  (override with --force-generated-overwrite). diff gained a WARNING: tier
  and reformatted its change lines; only BREAKING: changes exit non-zero.

New Features

• Durable dispatch dead letters. New Keiro.DeadLetter,
  Keiro.DeadLetter.Schema, and Keiro.DeadLetter.Replay modules let
  process-manager and router workers park a rejected dispatch instead of halting.
  RejectedCommandPolicy selects RejectedHalt (the default),
  RejectedDeadLetter (persist to the new keiro.keiro_dead_letters table and
  acknowledge), or RejectedSkip. replaySubscriptionDeadLetters re-runs a
  caller-supplied handler over the rows Kiroku parked in kiroku.dead_letters
  without deleting or mutating those Kiroku-owned rows.
• New Keiro.Connection module for application read-model and projection tables:
  qualifyTable, quoteIdentifier, withProjectionSchema,
  keiroConnectionSettings, and the opt-in ensureProjectionSchema. The store
  connection's schema stays kiroku because it drives the LISTEN/NOTIFY
  channel; a projection schema is reached by qualification and/or
  extraSearchPath.
• Acknowledgement-aware sharded subscriptions: runShardedSubscriptionGroupAck
  with ShardAck, ShardDelivery, and ShardEventHandler, plus per-event retry
  and dead-letter dispositions. runShardedSubscriptionGroup remains as the
  compatibility wrapper.
• New telemetry: keiro.dispatch.deadlettered, keiro.subscription.deadlettered,
  keiro.snapshot.encode.failures, keiro.snapshot.decode.failures,
  keiro.snapshot.read.hits, keiro.snapshot.read.misses, and
  keiro.snapshot.apply.divergence. Keiro.Telemetry.kirokuEventBridge installs
  on Kiroku's eventHandler to observe the terminal retry-exhaustion signal.
• keiro-dsl gained a first-class readmodel node (typed columns, shape-hash
  drift detection, consistency/scope/feed validation) and a router node for
  stateless content-based routing, both with generated runtime modules and typed
  holes. Query operations and PGMQ dispatch dedup references now genuinely resolve
  against declared read models — they were deferred no-ops in 0.1.0.0.
• keiro-dsl gained aggregate snapshot policies with a captured state-codec
  fixture, workqueue ordering and provisioning (FIFO, group keys, unlogged,
  partitioned), intake persist posture, and durable-workflow evolution via
  guarded patch blocks and terminal continueAsNew. diff was rebuilt on an
  exhaustive node-family registry, so a new node kind can no longer be silently
  classified as safe.
• keiro-migrations appended 0018, creating keiro.keiro_dead_letters.

Bug Fixes

• Sharded subscription readers now acknowledge each event only after its handler
  returns. A shed or rebalanced bucket's checkpoint can no longer cover an
  unprocessed event.
• keiro-dsl string literals now decode and re-render the closed DSL escape set,
  so topics, emit maps, and quoted field bindings survive a parse/pretty-print
  round trip. The scaffolder also escapes payload li...

keiro 0.1.0.0

Packages

Package	Tag
keiro-core	keiro-core-0.1.0.0
keiro	keiro-0.1.0.0
keiro-pgmq	keiro-pgmq-0.1.0.0
keiro-migrations	keiro-migrations-0.1.0.0
keiro-dsl	keiro-dsl-0.1.0.0

What's Changed

Initial GitHub release for the Keiro package set at shared version 0.1.0.0.

Breaking Changes

• Established ValidatedEventStream as the command-boundary contract for the runtime packages.
• Finalized keiro-core stream, codec, and event-stream contracts for the first public package set.
• Renamed the typed-spec file extension from .kdsl to .keiro before the first public keiro-dsl release.

New Features

• keiro-core: shared typed contracts for streams, codecs, event streams, replay-safety validation, integration events, and snapshot policies.
• keiro: command runners, projections, read models, snapshots, process managers, routers, timers, outbox/inbox integrations, subscription workers, telemetry, and durable workflows.
• keiro-pgmq: typed PGMQ jobs, codecs, runtime workers, retry and DLQ policies, FIFO/message-group support, queue provisioning, metrics, and trace propagation.
• keiro-migrations: embedded codd migrations and the keiro-migrate executable for installing and upgrading Keiro database schema.
• keiro-dsl: parser, checker, diff engine, scaffold generator, harness emitter, configurable module placement, starter skeletons, and conformance suites for .keiro specifications.

Publishing Status

Hackage uploads are deferred. The package set still depends on codd, which is not currently available from Hackage, so publishing now would produce packages that Hackage consumers cannot resolve.