@cosmicdrift/kumiko-dev-server 0.363.0 → 0.365.0

package/dist/scaffold-demo-tasks.js

@@ -127,7 +127,8 @@ const editScreen: EntityEditScreenDefinition = {
 const open = {
   access: {
     openToAll: {
-      reason: "scaffolded demo handler: every signed-in user of the demo tenant manages their tasks",
+      reason:
+        "scaffolded demo handler: every signed-in user of the demo tenant manages their tasks",
     },
   },
 } as const;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-dev-server",
-  "version": "0.363.0",
+  "version": "0.365.0",
   "description": "Dev-tooling for Kumiko apps: local dev-server bootstrap (runDevApp), scaffolding, codegen. Its compose-stacks/env-schema subpaths are consumed at prod boot too — see @cosmicdrift/kumiko-server-runtime for the prod runner itself.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -60,17 +60,16 @@
     "kumiko-dev": "./bin/kumiko-dev.ts",
     "kumiko-init-deploy": "./bin/kumiko-init-deploy.ts",
     "kumiko-schema": "./bin/kumiko-schema.ts",
-    "kumiko-schema-check": "./bin/kumiko-schema-check.ts",
     "kumiko-upgrade": "./bin/kumiko-upgrade.ts"
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-bundled-features": "0.363.0",
-    "@cosmicdrift/kumiko-framework": "0.363.0",
-    "@cosmicdrift/kumiko-headless": "0.363.0",
-    "@cosmicdrift/kumiko-renderer-mail-html": "0.363.0",
-    "@cosmicdrift/kumiko-renderer-web": "0.363.0",
-    "@cosmicdrift/kumiko-server-runtime": "0.363.0",
-    "@cosmicdrift/kumiko-types": "0.363.0",
+    "@cosmicdrift/kumiko-bundled-features": "0.365.0",
+    "@cosmicdrift/kumiko-framework": "0.365.0",
+    "@cosmicdrift/kumiko-headless": "0.365.0",
+    "@cosmicdrift/kumiko-renderer-mail-html": "0.365.0",
+    "@cosmicdrift/kumiko-renderer-web": "0.365.0",
+    "@cosmicdrift/kumiko-server-runtime": "0.365.0",
+    "@cosmicdrift/kumiko-types": "0.365.0",
     "bun-types": "^1.3.13",
     "ts-morph": "^28.0.0",
     "zod": "^4.4.3"

package/src/changes.json

@@ -1,4 +1,47 @@
 [
+  {
+    "version": "0.365.0",
+    "type": "fix",
+    "title": "New projects read the prod admin password from DEMO_ADMIN_PASSWORD",
+    "detail": "The scaffolded bin/main.ts no longer seeds the prod admin with a fixed password. It reads DEMO_ADMIN_PASSWORD (declared in the env schema, min 12 chars), and boot fails without it. Existing apps are untouched; apps from an older scaffold should change bin/main.ts the same way."
+  },
+  {
+    "version": "0.365.0",
+    "type": "fix",
+    "title": "A freshly scaffolded app passes bun run lint without rework",
+    "detail": "New projects now get a .gitignore, an exactly pinned @biomejs/biome and lint-clean generated files (import order, formatting). Existing apps are untouched."
+  },
+  {
+    "version": "0.365.0",
+    "type": "improvement",
+    "title": "composeRendererStack passes a mail brand suffix resolver",
+    "detail": "composeRendererStack({ mailBrandSuffix }) hands the resolver to createRendererMailHtmlFeature as brandSuffix."
+  },
+  {
+    "version": "0.365.0",
+    "type": "improvement",
+    "title": "composeRendererStack passes a mail footer resolver to the mail renderer",
+    "detail": "composeRendererStack({ mailFooter }) hands the resolver to createRendererMailHtmlFeature, so apps on the composed stack set imprint, privacy and platform line in one place."
+  },
+  {
+    "version": "0.365.0",
+    "type": "breaking",
+    "title": "The kumiko-schema-check bin and the resolveGeneratePath, usesDerivedSchemaLayout and implicitAuthModeFeatureNames exports are removed",
+    "detail": "kumiko-schema-check diffed APP_FEATURES against a hand-kept FEATURE_IMPORT_REGISTRY. Apps with kumiko/schema.ts derive their entities from the mounted features and have no registry that could drift, so the check was a no-op there. The helpers resolveGeneratePath, usesDerivedSchemaLayout and implicitAuthModeFeatureNames are no longer exported from @cosmicdrift/kumiko-dev-server/cli.",
+    "migration": "Apps with kumiko/schema.ts need nothing. Run kumiko-schema validate to check migrations against the mounted features, and remove kumiko-schema-check from package scripts and CI. Apps that keep a FEATURE_IMPORT_REGISTRY diff it against APP_FEATURES in their own coverage script."
+  },
+  {
+    "version": "0.365.0",
+    "type": "fix",
+    "title": "buildServerBundle resolves worker and bootstrap entries as .ts or .js; runDevApp stop keeps an explicit blindIndexKey",
+    "detail": "An app with bin/main.js and bin/worker.js used to get no dist-server/worker.js without any warning, because only worker.ts and bootstrap.ts were looked up. Siblings now resolve like the server entry, .ts first and then .js. In the ephemeral PII default, stopping runDevApp unset a blindIndexKey that the app passed itself; it now unsets only the key the default generated."
+  },
+  {
+    "version": "0.364.0",
+    "type": "fix",
+    "title": "runDevApp resolves the masterKey provider before boot validation",
+    "detail": "runDevApp validated encrypted fields before building the boot cipher, so an app that supplies masterKey and has no KUMIKO_SECRETS_MASTER_KEY_V1 in the environment booted in production but failed locally with no usable master key. The provider now reaches validateBoot like in runProdApp and runWorkerApp."
+  },
   {
     "version": "0.363.0",
     "type": "improvement",

package/bin/kumiko-schema-check.ts

@@ -1,175 +0,0 @@
-#!/usr/bin/env bun
-// biome-ignore-all lint/suspicious/noConsole: CLI-Script, console ist Feature.
-//
-// kumiko schema check — Empfehlung 3 aus Sprint-9.8-Retro
-// (luminous-watching-moler.md). Diff't APP_FEATURES (runtime, aus
-// `src/run-config.ts`) gegen FEATURE_IMPORT_REGISTRY (statisch, aus
-// `drizzle/generate.ts`). Catches:
-//
-//   1. Mount-without-registry: ein neues feature in APP_FEATURES ohne
-//      Entry in FEATURE_IMPORT_REGISTRY. Resultiert in Schema-Drift:
-//      Runtime mountet feature, Migration kennt seine Tabellen nicht.
-//   2. Stale-registry: ein Entry in FEATURE_IMPORT_REGISTRY ohne
-//      matching mount in APP_FEATURES. Dead-code; im Schema entsteht
-//      eine Tabelle ohne Runtime-Konsument.
-//
-// Studio's 9.8-Drama: FEATURE_IMPORT_REGISTRY war 18 features hinter
-// APP_FEATURES. Hätte mit diesem check eine Sekunde Lokal gefangen.
-//
-// Usage (aus dem app-workspace):
-//   bunx kumiko-schema-check
-//   # oder mit explicit pfaden:
-//   bunx kumiko-schema-check --run-config src/run-config.ts --generate drizzle/generate.ts
-//
-// Exit 0 wenn alles in sync, exit 1 wenn drift.
-
-import { existsSync, readFileSync } from "node:fs";
-import { resolve } from "node:path";
-import {
-  implicitAuthModeFeatureNames,
-  resolveGeneratePath,
-} from "@cosmicdrift/kumiko-dev-server/cli";
-
-type Args = {
-  readonly runConfigPath: string;
-  readonly generatePath: string;
-};
-
-function parseArgs(argv: readonly string[]): Args {
-  const cwd = process.cwd();
-  let runConfigPath = resolve(cwd, "src/run-config.ts");
-  let generatePath: string | undefined;
-  for (let i = 0; i < argv.length; i++) {
-    const flag = argv[i];
-    const value = argv[i + 1];
-    if (flag === "--run-config" && value) {
-      runConfigPath = resolve(cwd, value);
-      i++;
-    } else if (flag === "--generate" && value) {
-      generatePath = resolve(cwd, value);
-      i++;
-    }
-  }
-  return { runConfigPath, generatePath: generatePath ?? resolveGeneratePath(cwd) };
-}
-
-function readRegistryFeatures(generateSrc: string): Set<string> {
-  // Match object-keys mit Discriminator `kind: "factory" | "named"`.
-  // Quoted ("billing-foundation") oder unquoted (config, user) — beides
-  // ist gültig in JS. Pattern aus use-all-bundled/scripts/check-coverage.ts
-  // dupliziert hier weil per-app-CLI nicht von sample-script lesen darf.
-  const re = /(?:"([a-z][a-z0-9-]*)"|([a-z][a-z0-9]*)):\s*\{\s*kind:\s*"(factory|named)"/g;
-  const out = new Set<string>();
-  for (const m of generateSrc.matchAll(re)) {
-    const name = m[1] ?? m[2];
-    if (name) out.add(name);
-  }
-  return out;
-}
-
-async function readMountedFeatures(runConfigPath: string): Promise<Set<string>> {
-  const mod = (await import(runConfigPath)) as {
-    APP_FEATURES?: ReadonlyArray<{ name: string }>;
-    HAS_AUTH?: boolean;
-    HAS_SIGNUP?: boolean;
-  };
-  if (!mod.APP_FEATURES) {
-    throw new Error(
-      `kumiko-schema-check: ${runConfigPath} hat kein 'APP_FEATURES' export. ` +
-        `Convention: 'export const APP_FEATURES = [...] as const'.`,
-    );
-  }
-  const set = new Set<string>();
-  for (const f of mod.APP_FEATURES) {
-    set.add(f.name);
-  }
-  // HAS_AUTH defaults to true (Studio/use-all-bundled convention). When set,
-  // include the implicit auth-mode features so the diff doesn't false-positive
-  // "auth-email-password is mounted but no registry-entry".
-  if (mod.HAS_AUTH ?? true) {
-    for (const name of implicitAuthModeFeatureNames()) set.add(name);
-  }
-  // auth-self-registration is only prepended when authOptions.signup is set
-  // (composeFeatures) — opt-in via HAS_SIGNUP so apps without signup don't
-  // get a stale-registry false positive (#1521).
-  if (mod.HAS_SIGNUP === true) {
-    set.add("auth-self-registration");
-  }
-  return set;
-}
-
-const USAGE = "Usage: kumiko-schema-check [--run-config <path>] [--generate <path>]";
-
-async function main(): Promise<void> {
-  if (process.argv.slice(2).some((arg) => arg === "--help" || arg === "-h")) {
-    console.log(USAGE);
-    process.exit(0);
-  }
-  const args = parseArgs(process.argv.slice(2));
-
-  if (!existsSync(args.runConfigPath)) {
-    console.error(`✗ run-config not found: ${args.runConfigPath}`);
-    process.exit(1);
-  }
-  if (!existsSync(args.generatePath)) {
-    console.error(`✗ generate not found: ${args.generatePath}`);
-    process.exit(1);
-  }
-
-  const registry = readRegistryFeatures(readFileSync(args.generatePath, "utf-8"));
-  const mounted = await readMountedFeatures(args.runConfigPath);
-
-  // Mounted but not in registry → schema-drift (runtime ↔ migration mismatch).
-  const mountedWithoutEntry: string[] = [];
-  for (const name of mounted) {
-    if (!registry.has(name)) mountedWithoutEntry.push(name);
-  }
-  // In registry but not mounted → stale entry (dead schema-mapping).
-  const staleEntries: string[] = [];
-  for (const name of registry) {
-    if (!mounted.has(name)) staleEntries.push(name);
-  }
-
-  let ok = true;
-
-  if (mountedWithoutEntry.length > 0) {
-    console.error(
-      `\n✗ ${mountedWithoutEntry.length} feature(s) mounted in APP_FEATURES but NOT in FEATURE_IMPORT_REGISTRY:`,
-    );
-    for (const name of mountedWithoutEntry.sort()) {
-      console.error(`   - ${name}`);
-    }
-    console.error(
-      "\n  Action: in drizzle/generate.ts FEATURE_IMPORT_REGISTRY den Eintrag ergänzen,",
-    );
-    console.error("  damit Schema-Generator + Migration die feature-Tabellen kennt.");
-    ok = false;
-  }
-
-  if (staleEntries.length > 0) {
-    console.error(
-      `\n✗ ${staleEntries.length} stale FEATURE_IMPORT_REGISTRY entry/entries (kein matching mount):`,
-    );
-    for (const name of staleEntries.sort()) {
-      console.error(`   - ${name}`);
-    }
-    console.error("\n  Action: entry aus drizzle/generate.ts FEATURE_IMPORT_REGISTRY entfernen,");
-    console.error("  oder das feature in src/run-config.ts mounten.");
-    ok = false;
-  }
-
-  if (ok) {
-    console.log(
-      `✓ schema check: ${mounted.size} mounted ↔ ${registry.size} registry entries, no drift`,
-    );
-    process.exit(0);
-  } else {
-    process.exit(1);
-  }
-}
-
-// Only run when executed as a CLI, not when imported (e.g. from tests that
-// exercise the exported pure helpers).
-if (import.meta.main) {
-  await main();
-}

package/dist/schema-check-core.d.ts

@@ -1,2 +0,0 @@
-export declare function resolveGeneratePath(cwd: string): string;
-export declare function implicitAuthModeFeatureNames(): readonly string[];

package/dist/schema-check-core.js

@@ -1,24 +0,0 @@
-// Pure helpers for the `kumiko-schema-check` bin. Kept in src/ (vs. the bin)
-// so they are part of the tsc project + unit-testable without importing the
-// auto-running CLI.
-import { existsSync } from "node:fs";
-import { resolve } from "node:path";
-import { composeFeatures } from "@cosmicdrift/kumiko-server-runtime/compose-features";
-// The generate-script lives under different roots across apps: publicstatus
-// uses `drizzle/generate.ts`, the framework's own sample-apps use
-// `schema/generate.ts`. Pick whichever exists so a no-arg `bunx
-// kumiko-schema-check` works in both layouts; default to `drizzle/` for the
-// error message when neither is present.
-export function resolveGeneratePath(cwd) {
-    const drizzlePath = resolve(cwd, "drizzle/generate.ts");
-    const schemaPath = resolve(cwd, "schema/generate.ts");
-    if (!existsSync(drizzlePath) && existsSync(schemaPath))
-        return schemaPath;
-    return drizzlePath;
-}
-// The features composeFeatures auto-prepends in auth-mode (config + user +
-// tenant + auth-email-password). Derived from composeFeatures itself so this
-// can't drift from the real prepend-list in compose-features.ts.
-export function implicitAuthModeFeatureNames() {
-    return composeFeatures([], { includeBundled: true }).map((f) => f.name);
-}