@cosmicdrift/kumiko-dev-server 0.289.0 → 0.291.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-dev-server",
-  "version": "0.289.0",
+  "version": "0.291.0",
   "description": "Dev-tooling for Kumiko apps: local dev-server bootstrap (runDevApp), scaffolding, codegen. Its compose-stacks/env-schema subpaths are consumed at prod boot too — see @cosmicdrift/kumiko-server-runtime for the prod runner itself.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -59,10 +59,10 @@
     "kumiko-upgrade": "./bin/kumiko-upgrade.ts"
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-bundled-features": "0.289.0",
-    "@cosmicdrift/kumiko-framework": "0.289.0",
-    "@cosmicdrift/kumiko-headless": "0.289.0",
-    "@cosmicdrift/kumiko-server-runtime": "0.289.0",
+    "@cosmicdrift/kumiko-bundled-features": "0.291.0",
+    "@cosmicdrift/kumiko-framework": "0.291.0",
+    "@cosmicdrift/kumiko-headless": "0.291.0",
+    "@cosmicdrift/kumiko-server-runtime": "0.291.0",
     "ts-morph": "^28.0.0"
   },
   "publishConfig": {

package/src/changes.json

@@ -1,4 +1,10 @@
 [
+  {
+    "version": "0.291.0",
+    "type": "fix",
+    "title": "renderWriteHandlerTypes emits the WriteHandlerQn union in stable order",
+    "detail": "`renderWriteHandlerTypes` now sorts `handlerQns` before rendering, like its sibling renderers in the same file. The dev-server passes registration order (`collectWriteHandlerQns`) while the CLI/build path passes manifest order, so the same feature set produced a differently ordered `WriteHandlerQn` union in `.kumiko/define.ts` and `.kumiko/types.generated.d.ts` depending on which one ran last. Consumer apps that commit those generated files no longer get order-only diffs after a local `bun dev`."
+  },
   {
     "version": "0.289.0",
     "type": "improvement",

package/src/codegen/__tests__/render-codegen.test.ts

@@ -90,4 +90,11 @@ describe("renderWriteHandlerTypes", () => {
     expect(out).toContain("export type WriteHandlerQn =");
     expect(out).toContain('| "tenant:write:create"');
   });
+
+  test("output does not depend on input order", () => {
+    const out = renderWriteHandlerTypes(["a:write:x", "b:write:y"]);
+
+    expect(renderWriteHandlerTypes(["b:write:y", "a:write:x"])).toBe(out);
+    expect(out.indexOf('| "a:write:x"')).toBeLessThan(out.indexOf('| "b:write:y"'));
+  });
 });

package/src/codegen/render.ts

@@ -296,7 +296,9 @@ export function renderDefineFile(handlerQns: readonly string[] = []): string {
 export function renderWriteHandlerTypes(handlerQns: readonly string[]): string {
   if (handlerQns.length === 0) return "";
 
-  const lines = handlerQns.map((qn) => `  | "${qn}"`);
+  // Stable order — callers pass registration order (dev-server) or manifest
+  // order (CLI); bare sort keeps both byte-identical.
+  const lines = [...handlerQns].sort().map((qn) => `  | "${qn}"`);
   return ["", WRITE_HANDLER_QN_MARKER, `export type WriteHandlerQn =`, ...lines, ";", ""].join(
     "\n",
   );

package/src/run-dev-app.ts

@@ -45,10 +45,6 @@ import {
   SESSIONS_FEATURE,
 } from "@cosmicdrift/kumiko-bundled-features/sessions";
 import { TenantQueries } from "@cosmicdrift/kumiko-bundled-features/tenant";
-import {
-  resolveTenantLifecycleGate,
-  TENANT_LIFECYCLE_FEATURE,
-} from "@cosmicdrift/kumiko-bundled-features/tenant-lifecycle";
 import type { SessionMetadata, TokenVerifier } from "@cosmicdrift/kumiko-framework/api";
 import { createInMemoryLoginRateLimiter } from "@cosmicdrift/kumiko-framework/api";
 import {
@@ -56,7 +52,6 @@ import {
   configurePiiSubjectKms,
   type KmsAdapter,
 } from "@cosmicdrift/kumiko-framework/crypto";
-import type { DbConnection } from "@cosmicdrift/kumiko-framework/db";
 import { configureEntityFieldEncryption } from "@cosmicdrift/kumiko-framework/db";
 import {
   collectWriteHandlerQns,
@@ -68,6 +63,7 @@ import {
   type SessionUser,
   type TenantId,
   type TierResolverPlugin,
+  type ValidateBootOptions,
   validateAppCustomScreenWriteQns,
   validateBoot,
 } from "@cosmicdrift/kumiko-framework/engine";
@@ -176,6 +172,8 @@ export type RunDevAppOptions = {
    *  auth-email-password automatisch dazu gemischt — KEIN doppeltes
    *  manuelles Hinzufügen nötig. */
   readonly features: readonly FeatureDefinition[];
+  /** Opt-in boot-validator warnings — see ValidateBootOptions. */
+  readonly validateBootOptions?: ValidateBootOptions;
   /** Pfad zum Browser-Entry-Modul. Bun.build bündelt es zu /client.js.
    *  Mutually exclusive mit `clientEntries`. */
   readonly clientEntry?: string;
@@ -302,7 +300,7 @@ export async function runDevApp(options: RunDevAppOptions): Promise<KumikoServer
   // CrashLoopBackOff sterben ließ (#359). Wirft synchron, bevor ein
   // Socket oder Watcher (codegen-Write) aufgeht.
   try {
-    validateBoot(features);
+    validateBoot(features, options.validateBootOptions);
   } finally {
     if (setFileStorageProviderEnv) delete process.env["FILE_STORAGE_PROVIDER"];
   }
@@ -437,10 +435,8 @@ export async function runDevApp(options: RunDevAppOptions): Promise<KumikoServer
   // needs the real db+registry (only concrete after setupTestStack). Wired
   // whenever a provider feature (personal-access-tokens today) is mounted.
   let tokenVerifier: TokenVerifier | undefined;
-  let lifecycleDb: DbConnection | undefined;
   const patFeature = features.find((f) => f.name === PAT_FEATURE);
   const mfaFeature = features.find((f) => f.name === AUTH_MFA_FEATURE);
-  const tenantLifecycleFeature = features.find((f) => f.name === TENANT_LIFECYCLE_FEATURE);
   const patAuthFragment = patFeature
     ? {
         tokenVerifier: (rawToken: string) => {
@@ -456,18 +452,6 @@ export async function runDevApp(options: RunDevAppOptions): Promise<KumikoServer
       }
     : {};
 
-  const tenantLifecycleAuthFragment = tenantLifecycleFeature
-    ? {
-        resolveTenantLifecycleStatus: async (tenantId: string) => {
-          if (!lifecycleDb) {
-            throw new Error("[runDevApp] tenant-lifecycle gate accessed before onAfterSetup");
-          }
-          const gate = await resolveTenantLifecycleGate(lifecycleDb, tenantId);
-          return gate ? { status: gate.status } : null;
-        },
-      }
-    : {};
-
   // Parity with runProdApp (#1372 review): gate on sessionStore provider, not
   // the sessions feature name — a custom provider must also wire auth
   // callbacks. sessionStoreProviderMounted computed above via the registry
@@ -525,7 +509,6 @@ export async function runDevApp(options: RunDevAppOptions): Promise<KumikoServer
         }),
         ...sessionAuthFragment,
         ...patAuthFragment,
-        ...tenantLifecycleAuthFragment,
         ...(mfaFeature && {
           mfaVerifyHandler: AuthMfaHandlers.verify,
           mfaPreauthEnableStartHandler: AuthMfaHandlers.enableStartPreauth,
@@ -565,7 +548,6 @@ export async function runDevApp(options: RunDevAppOptions): Promise<KumikoServer
       },
     }),
     onAfterSetup: async (stack) => {
-      lifecycleDb = stack.db;
       // Sprint-8a: build tier-resolver BEFORE any seeds so seeds can rely
       // on the resolver being live (e.g. seed that writes a SystemAdmin's
       // tier-assignment can immediately read tier-cuts).