@cosmicdrift/kumiko-dev-server 0.328.1 → 0.330.0

package/src/codegen/watch.ts

@@ -1,140 +0,0 @@
-// watchAndRegenerate — file-watcher der bei jeder TS-Änderung unter
-// `<appRoot>/src/**` `runCodegen` neu fährt. Lebendige IDE-DX: User
-// editiert ein r.defineEvent, drückt save, das `.kumiko/types.generated.d.ts`
-// ist innerhalb von ~50ms aktualisiert, der TS-Sprachserver merkt es,
-// neue Auto-Complete-Vorschläge erscheinen ohne Server-Restart.
-//
-// Implementation: node:fs.watch (recursive) auf `<appRoot>/src/`.
-// Debounced damit ein batch-edit (z.B. find+replace via sed) nicht
-// 50× hintereinander feuert. Idempotent — runCodegen schreibt nur bei
-// echter Änderung, der Watcher kann ohne Schaden über-ruft werden.
-//
-// Nicht-Ziele: kein Watcher auf `node_modules`, `.kumiko`, `dist*`,
-// `__tests__` (gleicher SKIP-Set wie scan-events). fs.watch's
-// recursive-Mode liefert events für jede Subdir; wir filtern im
-// Callback.
-
-import { type FSWatcher, watch } from "node:fs";
-import { join } from "node:path";
-import { runCodegen } from "./run-codegen";
-import { formatScanWarning } from "./scan-events";
-
-export type WatchOptions = {
-  /** App-Wurzel — gleiche Bedeutung wie für `runCodegen`. */
-  readonly appRoot: string;
-  /** Optional: alle registrierten Write-Handler-QNs. Durchgereicht an
-   *  `runCodegen` für die Generierung der `WriteHandlerQn`-Union.
-   *  Der Dev-Server extrahiert sie beim Boot aus den Features und
-   *  reicht sie hier rein — der Watcher reicht sie bei jedem Re-Run
-   *  an `runCodegen` weiter, damit der generated-Type nicht verschwindet. */
-  readonly handlerQns?: readonly string[];
-  /** Wartet diese Millisekunden zusätzliche Events ab, bevor codegen
-   *  einmal fährt. 50ms catched typische save-bursts (Editor-Saves
-   *  feuern oft 2-3 Events: temp-file → rename → cleanup), bleibt aber
-   *  unmerklich für den User. */
-  readonly debounceMs?: number;
-  /** Callback nach jedem erfolgreichen Codegen-Pass. Default: stderr-
-   *  Log mit event-count + warnings. Wer den Output strukturiert
-   *  konsumieren will (Dev-Server-UI, IDE-Plugin), gibt einen eigenen
-   *  Handler. */
-  readonly onResult?: (result: ReturnType<typeof runCodegen>) => void;
-  /** Callback bei runCodegen-Fehlern. Default: stderr-Warning. */
-  readonly onError?: (err: unknown) => void;
-};
-
-export type WatchHandle = {
-  /** Beendet den Watcher. Idempotent — mehrfacher Aufruf ist no-op. */
-  readonly close: () => void;
-};
-
-const SKIP_SUBSTRINGS = ["/node_modules/", "/.kumiko/", "/dist/", "/dist-server/", "/__tests__/"];
-
-const DEFAULT_DEBOUNCE_MS = 50;
-
-/**
- * Startet den Watcher. Beim Boot fährt einmalig `runCodegen` (sodass
- * die generated Files sofort frisch sind), dann hängt sich an `fs.watch`
- * und re-runs bei file-changes mit Debounce.
- */
-export function watchAndRegenerate(opts: WatchOptions): WatchHandle {
-  const debounceMs = opts.debounceMs ?? DEFAULT_DEBOUNCE_MS;
-  const srcDir = join(opts.appRoot, "src");
-  let timer: ReturnType<typeof setTimeout> | undefined;
-  let watcher: FSWatcher | undefined;
-  let closed = false;
-
-  const fire = () => {
-    try {
-      const result = runCodegen({
-        appRoot: opts.appRoot,
-        ...(opts.handlerQns !== undefined && { handlerQns: opts.handlerQns }),
-      });
-      if (opts.onResult) {
-        opts.onResult(result);
-      } else {
-        if (result.warnings.length > 0) {
-          for (const w of result.warnings) {
-            // biome-ignore lint/suspicious/noConsole: codegen-watcher logs to terminal
-            console.warn(`[codegen] ${formatScanWarning(w)}`);
-          }
-        }
-      }
-    } catch (err) {
-      if (opts.onError) opts.onError(err);
-      else {
-        // biome-ignore lint/suspicious/noConsole: codegen-watcher logs to terminal
-        console.warn(
-          `[codegen] regenerate failed: ${err instanceof Error ? err.message : String(err)}`,
-        );
-      }
-    }
-  };
-
-  // Initial run — gleiches Verhalten wie wenn ein file-change kam, aber
-  // ohne Debounce (User wartet auf den ersten codegen).
-  fire();
-
-  try {
-    watcher = watch(srcDir, { recursive: true }, (_eventType, filename) => {
-      // skip: watcher closed or no filename reported, nothing to act on
-      if (closed || !filename) return;
-      // node liefert filename relativ zu srcDir, kann aber posix oder
-      // windows-style separators haben. Wir prüfen substring-tolerant.
-      const normalised = `/${filename.toString().replace(/\\/g, "/")}`;
-      // skip: path matches an excluded segment (node_modules/dist/etc.)
-      if (SKIP_SUBSTRINGS.some((seg) => normalised.includes(seg))) return;
-      // skip: Nur .ts/.tsx interessieren — alles andere (CSS, MD, JSON) hat
-      // keinen Einfluss auf r.defineEvent-Calls.
-      if (!normalised.endsWith(".ts") && !normalised.endsWith(".tsx")) return;
-      // skip: .d.ts ausgenommen — die kommen meistens vom codegen selbst.
-      if (normalised.endsWith(".d.ts")) return;
-      // skip: .test.ts/.test.tsx ausgenommen — Tests definieren keine
-      // Production-Features.
-      if (normalised.endsWith(".test.ts") || normalised.endsWith(".test.tsx")) return;
-
-      if (timer) clearTimeout(timer);
-      timer = setTimeout(fire, debounceMs);
-    });
-  } catch (err) {
-    // Watch failed (z.B. fs nicht recursive-fähig auf Linux ohne
-    // patches) — degraded mode: codegen läuft nur beim initial-call.
-    // User kriegt keine live-updates, aber das ist nicht fatal.
-    if (opts.onError) opts.onError(err);
-    else {
-      // biome-ignore lint/suspicious/noConsole: codegen-watcher logs to terminal
-      console.warn(
-        `[codegen] watcher failed to start (live-updates disabled): ${err instanceof Error ? err.message : String(err)}`,
-      );
-    }
-  }
-
-  return {
-    close: () => {
-      // skip: already closed, avoid double-close
-      if (closed) return;
-      closed = true;
-      if (timer) clearTimeout(timer);
-      watcher?.close();
-    },
-  };
-}

package/src/compose-stacks.ts

@@ -1,193 +0,0 @@
-// @runtime runtime
-// Despite living in this "dev"-marked package, every preset here composes
-// @cosmicdrift/kumiko-bundled-features factories, and run-config.ts in every
-// app repo feeds it into the runProdApp boot path, not just runDevApp
-// (kumiko-framework#2337).
-//
-// Composable SaaS stack presets — explicit opt-in blocks for run-config.ts.
-// Presets export feature instances only; no implicit PAT scopes, anonymousAccess,
-// or tier maps (those stay in bin/server.ts / app run-config).
-
-import { createAuditFeature } from "@cosmicdrift/kumiko-bundled-features/audit";
-import { authFoundationFeature } from "@cosmicdrift/kumiko-bundled-features/auth-foundation";
-import {
-  type AuthMfaFeatureOptions,
-  createAuthMfaFeature,
-} from "@cosmicdrift/kumiko-bundled-features/auth-mfa";
-import { createComplianceProfilesFeature } from "@cosmicdrift/kumiko-bundled-features/compliance-profiles";
-import { createDataRetentionFeature } from "@cosmicdrift/kumiko-bundled-features/data-retention";
-import { createDeliveryFeature } from "@cosmicdrift/kumiko-bundled-features/delivery";
-import { fileFoundationFeature } from "@cosmicdrift/kumiko-bundled-features/file-foundation";
-import { fileProviderInMemoryFeature } from "@cosmicdrift/kumiko-bundled-features/file-provider-inmemory";
-import { fileProviderS3Feature } from "@cosmicdrift/kumiko-bundled-features/file-provider-s3";
-import { fileProviderS3EnvFeature } from "@cosmicdrift/kumiko-bundled-features/file-provider-s3-env";
-import { createFilesFeature } from "@cosmicdrift/kumiko-bundled-features/files";
-import { createJobsFeature } from "@cosmicdrift/kumiko-bundled-features/jobs";
-import {
-  createLegalPagesFeature,
-  type LegalPagesOptions,
-} from "@cosmicdrift/kumiko-bundled-features/legal-pages";
-import { mailFoundationFeature } from "@cosmicdrift/kumiko-bundled-features/mail-foundation";
-import { mailTransportInMemoryFeature } from "@cosmicdrift/kumiko-bundled-features/mail-transport-inmemory";
-import { mailTransportSmtpFeature } from "@cosmicdrift/kumiko-bundled-features/mail-transport-smtp";
-import { createRateLimitingFeature } from "@cosmicdrift/kumiko-bundled-features/rate-limiting";
-import { createRendererFoundationFeature } from "@cosmicdrift/kumiko-bundled-features/renderer-foundation";
-import { createRendererSimpleFeature } from "@cosmicdrift/kumiko-bundled-features/renderer-simple";
-import { createSessionsFeature } from "@cosmicdrift/kumiko-bundled-features/sessions";
-import { createTemplateResolverFeature } from "@cosmicdrift/kumiko-bundled-features/template-resolver";
-import { createTenantLifecycleFeature } from "@cosmicdrift/kumiko-bundled-features/tenant-lifecycle";
-
-import {
-  createUserDataRightsFeature,
-  type UserDataRightsOptions,
-} from "@cosmicdrift/kumiko-bundled-features/user-data-rights";
-import { createUserDataRightsDefaultsFeature } from "@cosmicdrift/kumiko-bundled-features/user-data-rights-defaults";
-import type { FeatureDefinition } from "@cosmicdrift/kumiko-framework/engine";
-
-export type FileProviderKind = "inmemory" | "s3" | "s3-env";
-export type MailTransportKind = "inmemory" | "smtp";
-export type GdprStackOrder = "retention-first" | "compliance-first";
-
-export type FileStackOptions = {
-  readonly providers: readonly FileProviderKind[];
-  readonly includeFilesFeature?: boolean;
-};
-
-export type MailStackOptions = {
-  readonly transports: readonly MailTransportKind[];
-};
-
-export type PagesStackOptions = {
-  readonly wrapLayout?: LegalPagesOptions["wrapLayout"];
-};
-
-export type GdprStackOptions = {
-  readonly order?: GdprStackOrder;
-  readonly sessions?: boolean;
-  readonly tenantLifecycle?: boolean;
-  /** Optional tokenVerifier provider(s) (e.g. PAT) when `sessions` is on.
-   *  Session-only stacks need none — sessions registers sessionStore, which
-   *  satisfies auth-foundation's boot check (#1570). Pass providers when the
-   *  app also wants Bearer/PAT auth. */
-  readonly providers?: readonly FeatureDefinition[];
-};
-
-export type UserDataRightsStackOptions = {
-  readonly userDataRights?: UserDataRightsOptions;
-  readonly includeDefaults?: boolean;
-};
-
-// `sessions` may live on composeIdentityStack OR composeGdprStack; both with default
-// options is deduped at boot, differing options throw "Duplicate feature".
-export type OpsStackOptions = {
-  readonly delivery?: boolean;
-  readonly audit?: boolean;
-  readonly jobs?: boolean;
-  readonly rateLimiting?: boolean;
-};
-
-/** sessions (+ optional auth-mfa). config/user/tenant/auth-email-password stay
- *  on composeFeatures(includeBundled). Pass `mfa` options to mount TOTP.
- *  When `sessions` is on (the default), auth-foundation is mounted alongside it —
- *  the framework's registry now hard-requires it (sessions.requires("auth-foundation")).
- *  Session-only is enough for boot (#1570); optional Bearer/PAT still needs a
- *  tokenVerifier provider from the caller (e.g. createPersonalAccessTokensFeature
- *  ({ scopes })) — PAT scopes are app-specific, so they stay caller-owned. */
-export type IdentityStackOptions = {
-  readonly sessions?: boolean;
-  readonly mfa?: AuthMfaFeatureOptions;
-};
-
-export function stackFeatureNames(features: readonly FeatureDefinition[]): string[] {
-  return features.map((f) => f.name);
-}
-
-export function composePagesStack(options: PagesStackOptions = {}): FeatureDefinition[] {
-  // Pages content lives in template-resolver (kind text-block), which the
-  // renderer stack already mounts — an app composing pages WITHOUT the renderer
-  // stack has to add createTemplateResolverFeature() itself, or legal-pages'
-  // r.requires fails the boot. Mounting it here instead would collide with
-  // composeRendererStack (createRegistry rejects duplicate features).
-  return [
-    createLegalPagesFeature(
-      options.wrapLayout !== undefined ? { wrapLayout: options.wrapLayout } : {},
-    ),
-  ];
-}
-
-export function composeRendererStack(): FeatureDefinition[] {
-  return [
-    createTemplateResolverFeature(),
-    createRendererFoundationFeature(),
-    createRendererSimpleFeature(),
-  ];
-}
-
-export function composeMailStack(options: MailStackOptions): FeatureDefinition[] {
-  const out: FeatureDefinition[] = [mailFoundationFeature];
-  for (const transport of options.transports) {
-    if (transport === "inmemory") out.push(mailTransportInMemoryFeature);
-    if (transport === "smtp") out.push(mailTransportSmtpFeature);
-  }
-  return out;
-}
-
-export function composeFileStack(options: FileStackOptions): FeatureDefinition[] {
-  const out: FeatureDefinition[] = [fileFoundationFeature];
-  for (const provider of options.providers) {
-    if (provider === "inmemory") out.push(fileProviderInMemoryFeature);
-    if (provider === "s3") out.push(fileProviderS3Feature);
-    if (provider === "s3-env") out.push(fileProviderS3EnvFeature);
-  }
-  if (options.includeFilesFeature ?? true) out.push(createFilesFeature());
-  return out;
-}
-
-/** Retention + compliance (+ optional lifecycle/sessions). UDR/files mount separately — order varies per app. */
-export function composeGdprStack(options: GdprStackOptions = {}): FeatureDefinition[] {
-  const order = options.order ?? "retention-first";
-  const retention = createDataRetentionFeature();
-  const compliance = createComplianceProfilesFeature();
-  const out: FeatureDefinition[] =
-    order === "compliance-first" ? [compliance, retention] : [retention, compliance];
-  if (options.tenantLifecycle) out.push(createTenantLifecycleFeature());
-  if (options.sessions) {
-    out.push(authFoundationFeature, createSessionsFeature());
-    if (options.providers) out.push(...options.providers);
-  }
-  return out;
-}
-
-export function composeUserDataRightsStack(
-  options: UserDataRightsStackOptions = {},
-): FeatureDefinition[] {
-  const includeDefaults = options.includeDefaults ?? true;
-  const out: FeatureDefinition[] = [createUserDataRightsFeature(options.userDataRights ?? {})];
-  if (includeDefaults) out.push(createUserDataRightsDefaultsFeature());
-  return out;
-}
-
-export function composeOpsStack(options: OpsStackOptions = {}): FeatureDefinition[] {
-  const delivery = options.delivery ?? true;
-  const audit = options.audit ?? true;
-  const jobs = options.jobs ?? true;
-  const rateLimiting = options.rateLimiting ?? false;
-  const out: FeatureDefinition[] = [];
-  if (delivery) out.push(createDeliveryFeature());
-  if (audit) out.push(createAuditFeature());
-  if (jobs) out.push(createJobsFeature());
-  if (rateLimiting) out.push(createRateLimitingFeature());
-  return out;
-}
-
-/** Identity opt-ins: sessions by default; auth-mfa when `mfa` options given.
- *  Do not also pass `sessions: true` to composeGdprStack — duplicate feature. */
-export function composeIdentityStack(options: IdentityStackOptions = {}): FeatureDefinition[] {
-  const sessions = options.sessions ?? true;
-  const out: FeatureDefinition[] = [];
-  if (sessions) {
-    out.push(authFoundationFeature, createSessionsFeature());
-  }
-  if (options.mfa !== undefined) out.push(createAuthMfaFeature(options.mfa));
-  return out;
-}

package/src/crash-tracker.ts

@@ -1,56 +0,0 @@
-// Tracks server-Crashes in einem rollenden Zeitfenster und entscheidet,
-// ob der dev-wrapper noch respawnen darf oder den Crash-Loop aufgeben
-// muss. Liegt als eigener File, damit `kumiko-dev.ts` (bin-Script ohne
-// Test-Setup) eine pure, injizierbare API bekommt — die Logik ist
-// testbar via createCrashTracker, ohne den Wrapper-Prozess fahren zu
-// müssen.
-//
-// Semantik: ein Crash "zählt im Fenster", wenn er innerhalb der letzten
-// `windowMs` ms vor `now` registriert wurde. Wenn nach Aufnahme des
-// neuen Crashes mehr als `maxCrashes` im Fenster liegen, gibt der
-// Tracker `false` zurück → Wrapper soll aufgeben.
-
-export type CrashTrackerOptions = {
-  readonly maxCrashes: number;
-  readonly windowMs: number;
-};
-
-export type CrashTracker = {
-  /** Crash bei `now` registrieren. Returns `true` wenn der Wrapper
-   *  noch respawnen darf, `false` wenn das Limit überschritten ist.
-   *
-   *  Der Crash wird IMMER aufgenommen, auch wenn `false` zurückkommt —
-   *  der Caller terminiert in dem Fall normalerweise eh. Reuse mit
-   *  "rejected → state unchanged"-Semantik wird nicht unterstützt. */
-  readonly noteCrash: (now: number) => boolean;
-  /** Anzahl Crashes im Fenster relativ zu `now` — prunt lazy, damit
-   *  der Aufruf auch ohne vorheriges noteCrash konsistent ist. */
-  readonly crashCountInWindow: (now: number) => number;
-};
-
-export function createCrashTracker(options: CrashTrackerOptions): CrashTracker {
-  const timestamps: number[] = [];
-
-  const pruneBefore = (cutoff: number): void => {
-    // Crashes älter als `cutoff` raus. Gleicher Timestamp wie cutoff
-    // bleibt drin (`<` statt `<=`) — symmetrisch zur Fenster-Definition
-    // "innerhalb der letzten windowMs", also Endpoint inklusive.
-    while (timestamps.length > 0) {
-      const head = timestamps[0];
-      if (head !== undefined && head < cutoff) timestamps.shift();
-      else break;
-    }
-  };
-
-  return {
-    noteCrash: (now) => {
-      pruneBefore(now - options.windowMs);
-      timestamps.push(now);
-      return timestamps.length <= options.maxCrashes;
-    },
-    crashCountInWindow: (now) => {
-      pruneBefore(now - options.windowMs);
-      return timestamps.length;
-    },
-  };
-}