@cosmicdrift/kumiko-dev-server 0.363.0 → 0.364.0

package/dist/run-dev-app.js

@@ -67,7 +67,13 @@ export async function runDevApp(options) {
     // die früher nur runProdApp fing und sonst erst den Prod-Pod im
     // CrashLoopBackOff sterben ließ (#359). Wirft synchron, bevor ein
     // Socket oder Watcher (codegen-Write) aufgeht.
-    validateBoot(features, bootOptions);
+    // Resolved before validateBoot: an app-supplied masterKey provider must satisfy the
+    // encrypted-field gate here exactly as it does in runProdApp.
+    const bootCrypto = resolveBootCrypto(envSource, options.masterKey);
+    validateBoot(features, {
+        ...(bootCrypto.entityFieldCipher && { entityFieldCipher: bootCrypto.entityFieldCipher }),
+        ...bootOptions,
+    });
     warnIfNonUtcServerTimeZone();
     validateAppCustomScreenWriteQns(process.cwd(), collectWriteHandlerQns(features));
     // Codegen + File-Watcher — schreibt `<appRoot>/.kumiko/types.generated.d.ts`
@@ -122,7 +128,6 @@ export async function runDevApp(options) {
     // throwaway-Registry hier extrahiert nur die config-Keys, weil der
     // configResolver vor dem Server-Boot konstruiert wird (stack.registry
     // gibt's erst onAfterSetup) — createKumikoServer baut intern seine eigene.
-    const bootCrypto = resolveBootCrypto(envSource, options.masterKey);
     // App-wide cipher for `encrypted: true` entity fields (symmetrisch zu
     // runProdApp) — executors resolve it lazily.
     configureEntityFieldEncryption(bootCrypto.entityFieldCipher);

package/dist/scaffold-agent-docs.d.ts

@@ -0,0 +1,3 @@
+export declare const FRAMEWORK_AGENTS_IMPORT = "@node_modules/@cosmicdrift/kumiko-framework/AGENTS.md";
+export declare function renderAgentsMd(): string;
+export declare function renderClaudeMd(): string;

package/dist/scaffold-agent-docs.js

@@ -0,0 +1,17 @@
+export const FRAMEWORK_AGENTS_IMPORT = "@node_modules/@cosmicdrift/kumiko-framework/AGENTS.md";
+const FRAMEWORK_AGENTS_PATH = "node_modules/@cosmicdrift/kumiko-framework/AGENTS.md";
+const FRAMEWORK_AGENTS_DIR = "node_modules/@cosmicdrift/kumiko-framework/agents/";
+export function renderAgentsMd() {
+    return `# Agent instructions
+
+This app is built on Kumiko. The framework guide for coding agents ships with the installed package and matches its version:
+
+- \`${FRAMEWORK_AGENTS_PATH}\`: start here.
+- \`${FRAMEWORK_AGENTS_DIR}\`: generated indexes of bundled features, widgets and tested examples.
+
+Read the framework guide before you add or change a feature. App-specific rules go below.
+`;
+}
+export function renderClaudeMd() {
+    return `${FRAMEWORK_AGENTS_IMPORT}\n@AGENTS.md\n`;
+}

package/dist/scaffold-app.js

@@ -16,6 +16,7 @@ import { collectTableMetas, generateMigration, writeSnapshotJson, } from "@cosmi
 import { composeFeatures } from "@cosmicdrift/kumiko-server-runtime/compose-features";
 import { IndentationText, Project, VariableDeclarationKind } from "ts-morph";
 import { isKebabSegment } from "./kebab.js";
+import { renderAgentsMd, renderClaudeMd } from "./scaffold-agent-docs.js";
 import { createDemoTasksFeature, renderDemoSeedFile, renderDemoTasksFeatureFile, renderDemoTasksI18n, renderDemoTasksIndex, renderDemoTasksWebIndex, } from "./scaffold-demo-tasks.js";
 import { scaffoldDeploy } from "./scaffold-deploy.js";
 export async function scaffoldApp(options) {
@@ -93,6 +94,10 @@ export async function scaffoldApp(options) {
     }
     write(join(destination, "README.md"), `${renderReadme(options.name, options.features)}${testSetup === undefined ? "" : `\n${testSetup.rulesMarkdown}`}`);
     files.push("README.md");
+    write(join(destination, "AGENTS.md"), renderAgentsMd());
+    files.push("AGENTS.md");
+    write(join(destination, "CLAUDE.md"), renderClaudeMd());
+    files.push("CLAUDE.md");
     return { destination, files, appName: options.name };
 }
 // @wrapper-known semantic-alias

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-dev-server",
-  "version": "0.363.0",
+  "version": "0.364.0",
   "description": "Dev-tooling for Kumiko apps: local dev-server bootstrap (runDevApp), scaffolding, codegen. Its compose-stacks/env-schema subpaths are consumed at prod boot too — see @cosmicdrift/kumiko-server-runtime for the prod runner itself.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -64,13 +64,13 @@
     "kumiko-upgrade": "./bin/kumiko-upgrade.ts"
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-bundled-features": "0.363.0",
-    "@cosmicdrift/kumiko-framework": "0.363.0",
-    "@cosmicdrift/kumiko-headless": "0.363.0",
-    "@cosmicdrift/kumiko-renderer-mail-html": "0.363.0",
-    "@cosmicdrift/kumiko-renderer-web": "0.363.0",
-    "@cosmicdrift/kumiko-server-runtime": "0.363.0",
-    "@cosmicdrift/kumiko-types": "0.363.0",
+    "@cosmicdrift/kumiko-bundled-features": "0.364.0",
+    "@cosmicdrift/kumiko-framework": "0.364.0",
+    "@cosmicdrift/kumiko-headless": "0.364.0",
+    "@cosmicdrift/kumiko-renderer-mail-html": "0.364.0",
+    "@cosmicdrift/kumiko-renderer-web": "0.364.0",
+    "@cosmicdrift/kumiko-server-runtime": "0.364.0",
+    "@cosmicdrift/kumiko-types": "0.364.0",
     "bun-types": "^1.3.13",
     "ts-morph": "^28.0.0",
     "zod": "^4.4.3"

package/src/changes.json

@@ -1,4 +1,10 @@
 [
+  {
+    "version": "0.364.0",
+    "type": "fix",
+    "title": "runDevApp resolves the masterKey provider before boot validation",
+    "detail": "runDevApp validated encrypted fields before building the boot cipher, so an app that supplies masterKey and has no KUMIKO_SECRETS_MASTER_KEY_V1 in the environment booted in production but failed locally with no usable master key. The provider now reaches validateBoot like in runProdApp and runWorkerApp."
+  },
   {
     "version": "0.363.0",
     "type": "improvement",