@cosmicdrift/kumiko-cli 0.373.0 → 0.377.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-cli",
-  "version": "0.373.0",
+  "version": "0.377.0",
   "description": "CLI for Kumiko apps. `bunx @cosmicdrift/kumiko-cli new app <name>` scaffolds a runnable workspace; `add feature <name>` mounts a feature; `check` runs boot validation plus the guard suites with the step list derived from kumiko.json; `agent lint`, `project` and `consumer` operate on an existing app; `handbuch build` renders the HTML handbuch.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -36,10 +36,10 @@
     }
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-dev-server": "0.373.0",
-    "@cosmicdrift/kumiko-guards": "0.373.0",
-    "@cosmicdrift/kumiko-repo-manifest": "0.373.0",
-    "@cosmicdrift/kumiko-testing": "0.373.0",
+    "@cosmicdrift/kumiko-dev-server": "0.377.0",
+    "@cosmicdrift/kumiko-guards": "0.377.0",
+    "@cosmicdrift/kumiko-server-runtime": "0.377.0",
+    "@cosmicdrift/kumiko-testing": "0.377.0",
     "marked": "^18.0.3",
     "zod": "^4.4.3"
   },
@@ -47,7 +47,7 @@
     "sharp": "^0.35.5",
     "@cosmicdrift/kumiko-bundled-features": ">=0.353.0 <1.0.0",
     "@cosmicdrift/kumiko-framework": ">=0.353.0 <1.0.0",
-    "@cosmicdrift/kumiko-headless": ">=0.353.0 <1.0.0"
+    "@cosmicdrift/kumiko-renderer": ">=0.353.0 <1.0.0"
   },
   "peerDependenciesMeta": {
     "sharp": {
@@ -59,14 +59,14 @@
     "@cosmicdrift/kumiko-framework": {
       "optional": true
     },
-    "@cosmicdrift/kumiko-headless": {
+    "@cosmicdrift/kumiko-renderer": {
       "optional": true
     }
   },
   "devDependencies": {
-    "@cosmicdrift/kumiko-bundled-features": "0.373.0",
-    "@cosmicdrift/kumiko-framework": "0.373.0",
-    "@cosmicdrift/kumiko-headless": "0.373.0",
+    "@cosmicdrift/kumiko-bundled-features": "0.377.0",
+    "@cosmicdrift/kumiko-framework": "0.377.0",
+    "@cosmicdrift/kumiko-renderer": "0.377.0",
     "sharp": "^0.35.5"
   },
   "publishConfig": {

package/src/changes.json

@@ -1,4 +1,22 @@
 [
+  {
+    "version": "0.377.0",
+    "type": "improvement",
+    "title": "kumiko codemod lists package-merge",
+    "detail": "kumiko codemod package-merge rewrites imports and package.json dependencies of merged packages."
+  },
+  {
+    "version": "0.377.0",
+    "type": "fix",
+    "title": "project rebuild keeps blind indexes and aborts without crypto, events prune names its aggregate types",
+    "detail": "`kumiko project rebuild` now wires the subject KMS and blind-index key from the env like `schema apply` and `ops backfill-pii`, so rebuilding a PII projection no longer nulls its bidx columns. Without the crypto env an app with PII fields aborts the rebuild unless `--allow-plaintext-pii <reason>` is passed. `kumiko events prune` takes the required `--aggregate-types <a,b>` flag; before, it always failed because pruneEvents needs explicit aggregate types."
+  },
+  {
+    "version": "0.376.0",
+    "type": "fix",
+    "title": "kumiko ports and sync-managed use the shared port reader and print managed warnings",
+    "detail": "kumiko ports reads from repo-manifest/app-ports; check managed and sync-managed print the infraRef warning."
+  },
   {
     "version": "0.371.0",
     "type": "improvement",

package/src/commands/check-managed.ts

@@ -41,6 +41,7 @@ export async function runManagedCheckStep(
   const local = result.files.filter((report) => report.state === "local");
   const okCount = result.files.length - drift.length - local.length;
   out.log(`    ${okCount}/${result.files.length} managed file(s) match the installed template`);
+  for (const warning of result.warnings) out.log(`    ! ${warning}`);
   for (const report of local) out.log(`    ~ ${report.path}: ${describeReport(report)}`);
   for (const report of drift) {
     out.log(`    ${result.adopted ? "✗" : "!"} ${report.path}: ${describeReport(report)}`);

package/src/commands/check.ts

@@ -1,6 +1,6 @@
 import { existsSync } from "node:fs";
 import { join, resolve } from "node:path";
-import { REPO_MANIFEST_FILE, type RepoManifest } from "@cosmicdrift/kumiko-repo-manifest";
+import { REPO_MANIFEST_FILE, type RepoManifest } from "@cosmicdrift/kumiko-guards/repo-manifest";
 import type { CliCommand, CliCommandContext } from "./types";
 
 const APP_SCHEMA_FILE = "kumiko/schema.ts";

package/src/commands/codemod.ts

@@ -1,7 +1,7 @@
 import type { CliCommand, CliCommandContext } from "./types";
 
 // The shipped codemods that share the `<dir...> [--check | --dry-run | --write]` CLI of codemod-support.
-const CODEMODS = ["feature-factory", "import-extensions", "s3-imports"] as const;
+const CODEMODS = ["feature-factory", "import-extensions", "package-merge", "s3-imports"] as const;
 type CodemodName = (typeof CODEMODS)[number];
 
 function isCodemodName(value: string | undefined): value is CodemodName {

package/src/commands/kms-wiring.ts

@@ -0,0 +1,53 @@
+import type { KmsWiring } from "@cosmicdrift/kumiko-framework/crypto";
+import type { FeatureDefinition } from "@cosmicdrift/kumiko-framework/engine";
+
+export const CLI_KMS_SLOTS = [
+  "PLATFORM_KEK",
+  "PLATFORM_KEK_PREVIOUS",
+  "KUMIKO_BLIND_INDEX_KEY",
+] as const;
+
+// A rebuild replays applyEntityEvent, which computes bidx columns from the
+// boot-injected blind-index key and subject KMS. This standalone CLI never
+// boots the app, so without wiring them a rebuild nulls the bidx columns (fw#3091).
+// Plaintext is refused for apps with PII carriers, like the prod boot does, unless
+// the operator names a reason.
+export async function wireKmsFromEnv(options: {
+  readonly logPrefix: string;
+  readonly log: (line: string) => void;
+  readonly features: readonly FeatureDefinition[];
+  readonly allowPlaintextPii?: string | undefined;
+}): Promise<KmsWiring> {
+  const crypto = await import("@cosmicdrift/kumiko-framework/crypto");
+  const { assertPiiBootInvariants } = await import(
+    "@cosmicdrift/kumiko-server-runtime/pii-boot-gate"
+  );
+  const wiring = await crypto.resolveKmsWiringAsync(process.env, {
+    logPrefix: options.logPrefix,
+    slots: CLI_KMS_SLOTS,
+    log: options.log,
+  });
+  try {
+    if ("kms" in wiring) {
+      assertPiiBootInvariants(options.features, {
+        mode: "prod",
+        kms: wiring.kms,
+        blindIndexKey: wiring.blindIndexKey,
+      });
+      crypto.configurePiiSubjectKms(wiring.kms);
+      crypto.configureBlindIndexKey(wiring.blindIndexKey);
+    } else {
+      assertPiiBootInvariants(options.features, {
+        mode: "prod",
+        allowPlaintextPii: options.allowPlaintextPii,
+      });
+    }
+  } catch (e) {
+    await wiring.close();
+    const reason = e instanceof Error ? e.message : String(e);
+    throw new Error(
+      `${options.logPrefix} ${reason} The rebuild would null the blind-index columns. Provide PLATFORM_KEK, SUBJECT_KEYS_DATABASE_URL and KUMIKO_BLIND_INDEX_KEY, or pass --allow-plaintext-pii <reason>.`,
+    );
+  }
+  return wiring;
+}

package/src/commands/ops/backfill-pii.ts

@@ -1,6 +1,7 @@
 import { join } from "node:path";
 import type { DbConnection } from "@cosmicdrift/kumiko-framework/db";
 import type { Registry } from "@cosmicdrift/kumiko-framework/engine";
+import { CLI_KMS_SLOTS } from "../kms-wiring";
 import { loadAppConfig } from "../load-app-config";
 import type { CliCommandContext } from "../types";
 
@@ -86,8 +87,6 @@ export function selectPiiProjections<
 
 const LOG_PREFIX = "[backfill-pii]";
 
-const KMS_SLOTS = ["PLATFORM_KEK", "PLATFORM_KEK_PREVIOUS", "KUMIKO_BLIND_INDEX_KEY"] as const;
-
 const BIGINT_SAFE = (_key: string, value: unknown): unknown =>
   typeof value === "bigint" ? String(value) : value;
 
@@ -213,7 +212,7 @@ export async function runBackfillPii(ctx: CliCommandContext): Promise<number> {
   try {
     wiring = await crypto.requireKmsWiringAsync(process.env, {
       logPrefix: LOG_PREFIX,
-      slots: KMS_SLOTS,
+      slots: CLI_KMS_SLOTS,
       log: (line) => ctx.out.log(line),
     });
   } catch (e) {

package/src/commands/ops/waitlist-migrate.ts

@@ -57,7 +57,7 @@ export const waitlistMigrateOp = {
       });
       ctx.out.log("");
       ctx.out.log(
-        `  ${dryRun ? "[dry-run] " : ""}waitlist-migrate --from ${from}: read ${report.read}, ${dryRun ? "would create" : "created"} ${report.created}, already present ${report.skipped}, unreadable ${report.unreadable}`,
+        `  ${dryRun ? "[dry-run] " : ""}waitlist-migrate --from ${from}: read ${report.read}, ${dryRun ? "would create" : "created"} ${report.created}, already present ${report.skipped}, unreadable ${report.unreadable}, legacy streams archived ${report.archivedStreams}`,
       );
       ctx.out.log("");
       return report.unreadable > 0 ? 1 : 0;

package/src/commands/ports.ts

@@ -1,4 +1,9 @@
 import { resolve } from "node:path";
+import {
+  findPortCollisions,
+  listAppPorts,
+  scanWorkspaceApps,
+} from "@cosmicdrift/kumiko-guards/repo-manifest/app-ports";
 import type { CliCommand, CliCommandContext } from "./types";
 
 // Fixed column order so the table reads the same in every run.
@@ -10,8 +15,7 @@ export async function runPorts(ctx: CliCommandContext): Promise<number> {
     return 1;
   }
   const root = resolve(ctx.cwd, ctx.argv[0] ?? ".");
-  const managed = await import("@cosmicdrift/kumiko-dev-server/managed-files");
-  const apps = managed.scanWorkspaceApps(root);
+  const apps = scanWorkspaceApps(root);
   if (apps.length === 0) {
     ctx.out.err(`  No app with kumiko.config.ts directly below ${root}.`);
     return 1;
@@ -26,14 +30,12 @@ export async function runPorts(ctx: CliCommandContext): Promise<number> {
       ctx.out.log(`  ${app.padEnd(20)}(${reason})`);
       continue;
     }
-    const byRole = new Map(
-      managed.listAppPorts(appConfig.ports).map(({ role, port }) => [role, port]),
-    );
+    const byRole = new Map(listAppPorts(appConfig.ports).map(({ role, port }) => [role, port]));
     ctx.out.log(
       `  ${app.padEnd(20)}${PORT_COLUMNS.map((column) => String(byRole.get(column) ?? "-").padEnd(12)).join("")}`,
     );
   }
-  const collisions = managed.findPortCollisions(apps);
+  const collisions = findPortCollisions(apps);
   ctx.out.log("");
   for (const { port, claims } of collisions) {
     ctx.out.err(`  ✗ port ${port}: ${claims.map(({ app, role }) => `${app} ${role}`).join(", ")}`);

package/src/commands/project.ts

@@ -1,4 +1,6 @@
 import { join } from "node:path";
+import { getStringFlag, parseArgs } from "@cosmicdrift/kumiko-framework/arg-parser";
+import { wireKmsFromEnv } from "./kms-wiring";
 import { loadAppConfig } from "./load-app-config";
 import type { CliCommand, CliCommandContext } from "./types";
 
@@ -12,10 +14,18 @@ function isProjectSubcommand(value: string | undefined): value is ProjectSubcomm
 export const projectCommand: CliCommand = {
   id: "project",
   description: "Manage projections (list | status <name> | rebuild <name>)",
-  help: "Reads kumiko.config.ts in cwd, builds the registry, dispatches against the\nprojection-state table in DATABASE_URL.\n\nSubcommands:\n  list                 List all projections and their state\n  status <name>        Show detail state for one projection\n  rebuild <name>       Full rebuild + report",
+  help: "Reads kumiko.config.ts in cwd, builds the registry, dispatches against the\nprojection-state table in DATABASE_URL.\n\nSubcommands:\n  list                 List all projections and their state\n  status <name>        Show detail state for one projection\n  rebuild <name> [--allow-plaintext-pii <reason>]\n                       Full rebuild + report; needs the crypto env for PII apps",
   run: async (ctx) => {
     const sub = ctx.argv[0];
-    const arg = ctx.argv[1];
+    const rest = parseArgs(ctx.argv.slice(1));
+    const arg = rest.positional[0];
+    const allowPlaintextPii = getStringFlag(rest, "allow-plaintext-pii");
+    if (rest.flags.has("allow-plaintext-pii") && !allowPlaintextPii?.trim()) {
+      ctx.out.err("");
+      ctx.out.err("  --allow-plaintext-pii requires a non-empty reason");
+      ctx.out.err("");
+      return 1;
+    }
 
     if (!isProjectSubcommand(sub)) {
       ctx.out.err("");
@@ -58,8 +68,17 @@ export const projectCommand: CliCommand = {
 
     const registry = createRegistry(config.features);
     const { db, close } = createDbConnection({ url: databaseUrl });
+    let wiring: Awaited<ReturnType<typeof wireKmsFromEnv>> | undefined;
 
     try {
+      if (sub === "rebuild") {
+        wiring = await wireKmsFromEnv({
+          logPrefix: "[kumiko project rebuild]",
+          log: (line) => ctx.out.log(line),
+          features: config.features,
+          allowPlaintextPii,
+        });
+      }
       await createProjectionStateTable(db);
       switch (sub) {
         case "list":
@@ -75,6 +94,7 @@ export const projectCommand: CliCommand = {
       ctx.out.err("");
       return 1;
     } finally {
+      await wiring?.close();
       await close();
     }
   },

package/src/commands/sync-managed.ts

@@ -26,6 +26,7 @@ export async function runSyncManaged(ctx: CliCommandContext): Promise<number> {
     appRoot: ctx.cwd,
     uiRoots: manifest.uiRoots ?? [],
   });
+  for (const warning of managed.listManagedWarnings(facts)) ctx.out.err(`  ! ${warning}`);
   const actions = managed.syncManagedFiles(facts, { write, adopt: ctx.argv.includes("--adopt") });
   ctx.out.log("");
   for (const entry of actions) {

package/src/handbuch/render.ts

@@ -1,5 +1,5 @@
 import { existsSync } from "node:fs";
-import { raw } from "@cosmicdrift/kumiko-headless";
+import { raw } from "@cosmicdrift/kumiko-renderer/headless";
 import { Marked } from "marked";
 import { type BuildInfo, buildInfoLines } from "./buildinfo";
 import { chromeFor } from "./chrome";

package/src/missing-peer.ts

@@ -1,7 +1,7 @@
 const APP_PEER_PACKAGES = [
   "@cosmicdrift/kumiko-framework",
   "@cosmicdrift/kumiko-bundled-features",
-  "@cosmicdrift/kumiko-headless",
+  "@cosmicdrift/kumiko-renderer",
 ] as const;
 
 // The runtime packages are optional peers (so `new app` runs without them); a

package/src/repo-manifest.ts

@@ -9,4 +9,4 @@ export {
   type RepoManifestSource,
   repoKindSchema,
   repoManifestSchema,
-} from "@cosmicdrift/kumiko-repo-manifest";
+} from "@cosmicdrift/kumiko-guards/repo-manifest";