@cosmicdrift/kumiko-cli 0.386.0 → 0.388.0

package/LICENSE

@@ -1,57 +1,21 @@
-Business Source License 1.1
-
-Parameters
-
-Licensor:             Marc Frost
-
-Licensed Work:        @cosmicdrift/kumiko-framework
-                      The Licensed Work is © 2026 Marc Frost.
-
-Additional Use Grant: 
-You may use the Licensed Work in production for any purpose, including 
-commercially, EXCEPT for the Restricted Use. 
-
-"Restricted Use" is defined as using the Licensed Work to provide a platform 
-or service to third parties that allows them to host, deploy, or run their 
-own applications built with the Licensed Work. This includes, but is not 
-limited to: managed hosting services, software-as-a-service (SaaS) platforms, 
-platform-as-a-service (PaaS), developer platforms, or any multi-tenant 
-managed offering of the Licensed Work.
-
-This restriction does not apply to the Licensor, any entity controlled by, 
-controlling, or under common control with the Licensor ("Affiliates"), or 
-contractors acting on their behalf. The Licensor remains free to use the 
-Licensed Work for any purpose, including for the operation of kumiko.rocks.
-
-Change Date:          2030-05-05
-Change License:       Apache License, Version 2.0
-
-
-Terms
-
-The Licensor hereby grants you the right to copy, modify, create derivative works, 
-redistribute, and make non-production use of the Licensed Work. The Licensor may 
-make an Additional Use Grant, above, permitting limited production use.
-
-Effective on the Change Date, or the fourth anniversary of the first publicly 
-available distribution of the Licensed Work under this License, whichever comes 
-first, this License will convert to the Change License.
-
-This Business Source License governs use of the Licensed Work in all cases, except 
-as to any use that is explicitly granted in the Additional Use Grant above or 
-under the Change License after the Change Date.
-
-If your use of the Licensed Work does not comply with the requirements of this 
-License, you must cease use of the Licensed Work immediately.
-
-All copies of the Licensed Work, and all derivative works thereof, must include 
-this License.
-
-This License does not grant you any right, title, or interest in any trademark, 
-logo, or branding of the Licensor, except as required to comply with this License.
-
-TO THE EXTENT PERMITTED BY APPLICABLE LAW, THE LICENSED WORK IS PROVIDED ON AN 
-“AS IS” BASIS. LICENSOR DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING 
-WITHOUT LIMITATION WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, 
-TITLE, AND NON-INFRINGEMENT. IN NO EVENT WILL LICENSOR BE LIABLE FOR ANY DAMAGES 
-ARISING OUT OF OR RELATED TO THIS LICENSE OR THE USE OF THE LICENSED WORK.
+MIT License
+
+Copyright (c) 2026 Marc Frost
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@cosmicdrift/kumiko-cli",
-  "version": "0.386.0",
+  "version": "0.388.0",
   "description": "CLI for Kumiko apps. `bunx @cosmicdrift/kumiko-cli new app <name>` scaffolds a runnable workspace; `add feature <name>` mounts a feature; `check` runs boot validation plus the guard suites with the step list derived from kumiko.json; `agent lint`, `project` and `consumer` operate on an existing app; `handbuch build` renders the HTML handbuch.",
-  "license": "BUSL-1.1",
+  "license": "MIT",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
   "repository": {
     "type": "git",
@@ -36,18 +36,18 @@
     }
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-dev-server": "0.386.0",
-    "@cosmicdrift/kumiko-guards": "0.386.0",
-    "@cosmicdrift/kumiko-server-runtime": "0.386.0",
-    "@cosmicdrift/kumiko-testing": "0.386.0",
+    "@cosmicdrift/kumiko-dev-server": "0.388.0",
+    "@cosmicdrift/kumiko-guards": "0.388.0",
+    "@cosmicdrift/kumiko-server-runtime": "0.388.0",
+    "@cosmicdrift/kumiko-testing": "0.388.0",
     "marked": "^18.0.3",
     "zod": "^4.4.3"
   },
   "peerDependencies": {
     "sharp": "^0.35.5",
-    "@cosmicdrift/kumiko-bundled-features": "0.386.0",
-    "@cosmicdrift/kumiko-framework": "0.386.0",
-    "@cosmicdrift/kumiko-renderer": "0.386.0"
+    "@cosmicdrift/kumiko-bundled-features": "0.388.0",
+    "@cosmicdrift/kumiko-framework": "0.388.0",
+    "@cosmicdrift/kumiko-renderer": "0.388.0"
   },
   "peerDependenciesMeta": {
     "sharp": {
@@ -64,9 +64,9 @@
     }
   },
   "devDependencies": {
-    "@cosmicdrift/kumiko-bundled-features": "0.386.0",
-    "@cosmicdrift/kumiko-framework": "0.386.0",
-    "@cosmicdrift/kumiko-renderer": "0.386.0",
+    "@cosmicdrift/kumiko-bundled-features": "0.388.0",
+    "@cosmicdrift/kumiko-framework": "0.388.0",
+    "@cosmicdrift/kumiko-renderer": "0.388.0",
     "sharp": "^0.35.5"
   },
   "publishConfig": {

package/src/changes.json

@@ -1,4 +1,10 @@
 [
+  {
+    "version": "0.388.0",
+    "type": "fix",
+    "title": "check, sync-managed and backfill-pii handle failure and subdirectories correctly",
+    "detail": "kumiko check only warns about unresolvable managed files or package.json scripts until kumiko.config.ts calls defineAppConfig. sync-managed resolves the repo root like check instead of using cwd. ops backfill-pii closes the KMS wiring when registry creation fails. The agent command reuses allAppFeatures from the framework config."
+  },
   {
     "version": "0.379.0",
     "type": "improvement",

package/src/commands/agent.ts

@@ -1,5 +1,6 @@
 import { join } from "node:path";
-import { allConfiguredFeatures, loadAppConfig } from "./load-app-config";
+import { allAppFeatures } from "@cosmicdrift/kumiko-framework/config";
+import { loadAppConfig } from "./load-app-config";
 import type { CliCommand } from "./types";
 
 const LINT_SUBCOMMAND = "lint";
@@ -26,7 +27,9 @@ export const agentCommand: CliCommand = {
       ctx.out.err("    // kumiko.config.ts");
       ctx.out.err('    import { defineAppConfig } from "@cosmicdrift/kumiko-framework/config";');
       ctx.out.err('    import { myFeature } from "./src/features/my-feature";');
-      ctx.out.err("    export default defineAppConfig({ features: [myFeature], client, ports });");
+      ctx.out.err(
+        '    export default defineAppConfig({ features: [myFeature], client: { entries: ["src/client.tsx"] }, ports: { dev: 4173, e2e: 4174 } });',
+      );
       ctx.out.err("");
       return 1;
     }
@@ -37,7 +40,7 @@ export const agentCommand: CliCommand = {
       "@cosmicdrift/kumiko-bundled-features/agent-tools"
     );
 
-    const features = allConfiguredFeatures(config);
+    const features = allAppFeatures(config);
     const gaps = findAgentDocGaps(features);
     const translationGaps = findHandlerTranslationGaps(features);
 

package/src/commands/check-managed.ts

@@ -35,8 +35,26 @@ export async function runManagedCheckStep(
   uiRoots: readonly string[],
 ): Promise<number> {
   const managed: ManagedFilesModule = await import("@cosmicdrift/kumiko-dev-server/managed-files");
-  const facts = managed.resolveManagedAppFacts({ appRoot: repoRoot, uiRoots });
-  const result = managed.checkManagedFiles(facts);
+  let result: ReturnType<ManagedFilesModule["checkManagedFiles"]>;
+  try {
+    result = managed.checkManagedFiles(
+      managed.resolveManagedAppFacts({ appRoot: repoRoot, uiRoots }),
+    );
+  } catch (error) {
+    // Before defineAppConfig is adopted the managed step only warns, also when the facts cannot be resolved.
+    if (managed.readStaticAppConfig(repoRoot).kind === "defined") throw error;
+    out.log(`    ! ${error instanceof Error ? error.message : String(error)}`);
+    out.log(`    ${NOT_ADOPTED_NOTE}`);
+    return 0;
+  }
+  return reportManagedCheck(out, managed, result);
+}
+
+function reportManagedCheck(
+  out: Output,
+  managed: ManagedFilesModule,
+  result: ReturnType<ManagedFilesModule["checkManagedFiles"]>,
+): number {
   const drift = result.files.filter(managed.isManagedDrift);
   const local = result.files.filter((report) => report.state === "local");
   const okCount = result.files.length - drift.length - local.length;

package/src/commands/check-scripts.ts

@@ -28,8 +28,16 @@ export async function runScriptsCheckStep(
   uiRoots: readonly string[],
 ): Promise<number> {
   const managed: ManagedFilesModule = await import("@cosmicdrift/kumiko-dev-server/managed-files");
-  const report = managed.checkAppScripts(readScripts(repoRoot), { hasUi: uiRoots.length > 0 });
   const adopted = managed.readStaticAppConfig(repoRoot).kind === "defined";
+  let scripts: Record<string, string>;
+  try {
+    scripts = readScripts(repoRoot);
+  } catch (error) {
+    if (adopted) throw error;
+    out.log(`    ! ${error instanceof Error ? error.message : String(error)}`);
+    return 0;
+  }
+  const report = managed.checkAppScripts(scripts, { hasUi: uiRoots.length > 0 });
   if (report.knownExtras.length > 0)
     out.log(`    extras (standard): ${report.knownExtras.join(", ")}`);
   if (report.appExtras.length > 0) out.log(`    extras (app): ${report.appExtras.join(", ")}`);

package/src/commands/kms-wiring.ts

@@ -9,7 +9,7 @@ export const CLI_KMS_SLOTS = [
 
 // A rebuild replays applyEntityEvent, which computes bidx columns from the
 // boot-injected blind-index key and subject KMS. This standalone CLI never
-// boots the app, so without wiring them a rebuild nulls the bidx columns (fw#3091).
+// boots the app, so without wiring them a rebuild nulls the bidx columns.
 // Plaintext is refused for apps with PII carriers, like the prod boot does, unless
 // the operator names a reason.
 export async function wireKmsFromEnv(options: {

package/src/commands/load-app-config.ts

@@ -20,11 +20,6 @@ function isAppConfig(value: unknown): value is AppConfig {
   );
 }
 
-/** Everything prod mounts: lint and docs checks must see the prod-only features too. */
-export function allConfiguredFeatures(config: AppConfig): readonly FeatureDefinition[] {
-  return [...config.features, ...(config.prodFeatures ?? [])];
-}
-
 // kumiko.config.ts is user-authored: a missing default export or `features`
 // array must produce a readable message, not a TypeError further down.
 export async function loadAppConfig(
@@ -38,7 +33,9 @@ export async function loadAppConfig(
     ctx.out.err("");
     ctx.out.err(`  ${configPath} must default-export an object with a "features" array:`);
     ctx.out.err('    import { defineAppConfig } from "@cosmicdrift/kumiko-framework/config";');
-    ctx.out.err("    export default defineAppConfig({ features: [myFeature], client, ports });");
+    ctx.out.err(
+      '    export default defineAppConfig({ features: [myFeature], client: { entries: ["src/client.tsx"] }, ports: { dev: 4173, e2e: 4174 } });',
+    );
     ctx.out.err("");
     return null;
   }

package/src/commands/ops/backfill-pii.ts

@@ -219,20 +219,22 @@ export async function runBackfillPii(ctx: CliCommandContext): Promise<number> {
     ctx.out.err(errorMessage(e));
     return 1;
   }
-  crypto.configurePiiSubjectKms(wiring.kms);
-  crypto.configureBlindIndexKey(wiring.blindIndexKey);
-
-  const registry = createRegistry(config.features);
-  const { db, close } = createDbConnection({ url: databaseUrl, maxConnections: 4 });
   try {
-    return args.mode === "rebuild"
-      ? await rebuildPiiProjections(ctx, db, registry, crypto)
-      : await backfillPii(ctx, db, registry, args);
+    crypto.configurePiiSubjectKms(wiring.kms);
+    crypto.configureBlindIndexKey(wiring.blindIndexKey);
+    const registry = createRegistry(config.features);
+    const { db, close } = createDbConnection({ url: databaseUrl, maxConnections: 4 });
+    try {
+      return args.mode === "rebuild"
+        ? await rebuildPiiProjections(ctx, db, registry, crypto)
+        : await backfillPii(ctx, db, registry, args);
+    } finally {
+      await close();
+    }
   } catch (e) {
     ctx.out.err(`${LOG_PREFIX} ${errorMessage(e)}`);
     return 1;
   } finally {
-    await close();
     // The KMS pool keeps the process alive otherwise.
     await wiring.close();
   }

package/src/commands/ops/waitlist-migrate.ts

@@ -57,7 +57,7 @@ export const waitlistMigrateOp = {
       });
       ctx.out.log("");
       ctx.out.log(
-        `  ${dryRun ? "[dry-run] " : ""}waitlist-migrate --from ${from}: read ${report.read}, ${dryRun ? "would create" : "created"} ${report.created}, already present ${report.skipped}, unreadable ${report.unreadable}, legacy streams archived ${report.archivedStreams}`,
+        `  ${dryRun ? "[dry-run] " : ""}waitlist-migrate --from ${from}: read ${report.read}, ${dryRun ? "would create" : "created"} ${report.created}, already present ${report.skipped}, unreadable ${report.unreadable}, legacy streams ${dryRun ? "would archive" : "archived"} ${report.archivedStreams}`,
       );
       ctx.out.log("");
       return report.unreadable > 0 ? 1 : 0;

package/src/commands/sync-managed.ts

@@ -1,4 +1,4 @@
-import { loadRepoManifest, REPO_MANIFEST_FILE } from "../repo-manifest";
+import { REPO_MANIFEST_FILE } from "../repo-manifest";
 import type { CliCommand, CliCommandContext } from "./types";
 
 const SYNC_FLAGS = ["--write", "--adopt"] as const;
@@ -11,9 +11,13 @@ export async function runSyncManaged(ctx: CliCommandContext): Promise<number> {
     );
     return 1;
   }
-  const { manifest } = loadRepoManifest(ctx.cwd, {
-    warn: (message) => ctx.out.err(`  ${message}`),
-  });
+  const { findLocalRepo } = await import("@cosmicdrift/kumiko-guards");
+  const repo = findLocalRepo(ctx.cwd);
+  if (repo === undefined) {
+    ctx.out.err(`  No Kumiko repo above ${ctx.cwd}. Add a ${REPO_MANIFEST_FILE} at the repo root.`);
+    return 1;
+  }
+  const { manifest } = repo;
   if (manifest.kind !== "app") {
     ctx.out.err(
       `  sync-managed needs kind "app" in ${REPO_MANIFEST_FILE}, got "${manifest.kind}".`,
@@ -23,7 +27,7 @@ export async function runSyncManaged(ctx: CliCommandContext): Promise<number> {
   const write = ctx.argv.includes("--write");
   const managed = await import("@cosmicdrift/kumiko-dev-server/managed-files");
   const facts = managed.resolveManagedAppFacts({
-    appRoot: ctx.cwd,
+    appRoot: repo.absPath,
     uiRoots: manifest.uiRoots ?? [],
   });
   for (const error of managed.listManagedErrors(facts)) ctx.out.err(`  ✗ ${error}`);

package/src/index.ts

@@ -1,4 +1,4 @@
-// biome-ignore-all lint/suspicious/noConsole: CLI-Script, console ist Feature.
+// biome-ignore-all lint/suspicious/noConsole: CLI script; console is an intentional feature.
 //
 // runCli — programmatic entry-point for the kumiko CLI. The bin-shim
 // (../bin/cli.ts) is a 3-line wrapper that forwards process.argv. Tests