@cosmicdrift/kumiko-dev-server 0.370.0 → 0.371.0

package/dist/compose-stacks.d.ts

@@ -22,6 +22,8 @@ export type MailStackOptions = {
 };
 export type PagesStackOptions = {
     readonly wrapLayout?: LegalPagesOptions["wrapLayout"];
+    /** Also serves the terms routes, see LegalPagesOptions.terms. */
+    readonly terms?: LegalPagesOptions["terms"];
 };
 export type GdprStackOptions = {
     readonly order?: GdprStackOrder;
@@ -37,6 +39,8 @@ export type GdprStackOptions = {
      *  satisfies auth-foundation's boot check (#1570). Pass providers when the
      *  app also wants Bearer/PAT auth. */
     readonly providers?: readonly FeatureDefinition[];
+    /** Roles allowed to use the compliance-profiles handlers; default access.admin. */
+    readonly access?: readonly string[];
 };
 export type UserDataRightsStackOptions = {
     readonly userDataRights?: UserDataRightsOptions;
@@ -44,6 +48,8 @@ export type UserDataRightsStackOptions = {
 };
 export type OpsStackOptions = {
     readonly delivery?: boolean;
+    /** Roles allowed to use the delivery handlers; default access.admin. */
+    readonly access?: readonly string[];
     readonly audit?: boolean;
     readonly jobs?: boolean;
     readonly rateLimiting?: boolean;

package/dist/compose-stacks.js

@@ -53,7 +53,10 @@ export function composePagesStack(options = {}) {
     // r.requires fails the boot. Mounting it here instead would collide with
     // composeRendererStack (createRegistry rejects duplicate features).
     return [
-        createLegalPagesFeature(options.wrapLayout !== undefined ? { wrapLayout: options.wrapLayout } : {}),
+        createLegalPagesFeature({
+            ...(options.wrapLayout !== undefined && { wrapLayout: options.wrapLayout }),
+            ...(options.terms !== undefined && { terms: options.terms }),
+        }),
     ];
 }
 export function composeRendererStack(options = {}) {
@@ -106,7 +109,7 @@ export function composeFileStack(options = {}) {
 export function composeGdprStack(options = {}) {
     const order = options.order ?? "retention-first";
     const retention = withBootRequires(createDataRetentionFeature(), "composeGdprStack", ["kmsMode"]);
-    const compliance = createComplianceProfilesFeature();
+    const compliance = createComplianceProfilesFeature(options.access !== undefined ? { access: options.access } : {});
     const out = order === "compliance-first" ? [compliance, retention] : [retention, compliance];
     if (options.tenantLifecycle)
         out.push(createTenantLifecycleFeature());
@@ -139,7 +142,7 @@ export function composeOpsStack(options = {}) {
     const rateLimiting = options.rateLimiting ?? false;
     const out = [];
     if (delivery)
-        out.push(createDeliveryFeature());
+        out.push(createDeliveryFeature(options.access !== undefined ? { access: options.access } : {}));
     if (audit)
         out.push(createAuditFeature());
     if (jobs)

package/dist/index.d.ts

@@ -1,6 +1,6 @@
 export { type ComposeFeaturesOptions, composeFeatures, } from "@cosmicdrift/kumiko-server-runtime/compose-features";
 export { type AuthStackOptions, composeAuthStack, composeFileStack, composeGdprStack, composeIdentityStack, composeMailStack, composeOpsStack, composePagesStack, composeRendererStack, composeSaasStack, composeSecurityStack, composeUserDataRightsStack, type FileProviderKind, type FileStackOptions, type GdprStackOptions, type GdprStackOrder, type IdentityStackOptions, type MailStackOptions, type MailTransportKind, type OpsStackOptions, type PagesStackOptions, type SaasStackBilling, type SaasStackOptions, type SecurityStackOptions, stackFeatureNames, type UserDataRightsStackOptions, } from "./compose-stacks.ts";
-export { type CreateKumikoServerOptions, createKumikoServer, type KumikoServerHandle, PROD_BUNDLES_ENV, resolveStylesheet, STYLESHEET_WATCH_ENV, } from "./create-kumiko-server.ts";
+export { type CreateKumikoServerOptions, createKumikoServer, type DevHostDispatch, type DevHostDispatchResult, type KumikoServerHandle, PROD_BUNDLES_ENV, resolveStylesheet, STYLESHEET_WATCH_ENV, } from "./create-kumiko-server.ts";
 export { type FrameworkCoreEnv, frameworkCoreEnvSchema } from "./env-schema.ts";
 export type { AuthoringStyle, BuildFewShotCorpusOptions, CorpusWarning, FewShotCorpus, FewShotEntry, } from "./few-shot-corpus.ts";
 export { buildFewShotCorpus, pathToId } from "./few-shot-corpus.ts";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-dev-server",
-  "version": "0.370.0",
+  "version": "0.371.0",
   "description": "Dev-tooling for Kumiko apps: local dev-server bootstrap (runDevApp), scaffolding. Its compose-stacks/env-schema subpaths are consumed at prod boot too — see @cosmicdrift/kumiko-server-runtime for the prod runner itself.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -72,14 +72,14 @@
     "kumiko-upgrade": "./bin/kumiko-upgrade.ts"
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-bundled-features": "0.370.0",
-    "@cosmicdrift/kumiko-framework": "0.370.0",
-    "@cosmicdrift/kumiko-headless": "0.370.0",
-    "@cosmicdrift/kumiko-renderer-mail-html": "0.370.0",
-    "@cosmicdrift/kumiko-renderer-web": "0.370.0",
-    "@cosmicdrift/kumiko-server-runtime": "0.370.0",
-    "@cosmicdrift/kumiko-testing": "0.370.0",
-    "@cosmicdrift/kumiko-types": "0.370.0",
+    "@cosmicdrift/kumiko-bundled-features": "0.371.0",
+    "@cosmicdrift/kumiko-framework": "0.371.0",
+    "@cosmicdrift/kumiko-headless": "0.371.0",
+    "@cosmicdrift/kumiko-renderer-mail-html": "0.371.0",
+    "@cosmicdrift/kumiko-renderer-web": "0.371.0",
+    "@cosmicdrift/kumiko-server-runtime": "0.371.0",
+    "@cosmicdrift/kumiko-testing": "0.371.0",
+    "@cosmicdrift/kumiko-types": "0.371.0",
     "bun-types": "^1.3.13",
     "ts-morph": "^28.0.0",
     "zod": "^4.4.3"

package/src/changes.json

@@ -1,4 +1,10 @@
 [
+  {
+    "version": "0.371.0",
+    "type": "improvement",
+    "title": "composeGdprStack access, composePagesStack terms, migrate-step project name",
+    "detail": "composeGdprStack({ access }) is passed to compliance-profiles and composeOpsStack({ access }) to delivery as their handler roles. composePagesStack({ terms }) is passed to legal-pages. DevHostDispatch and DevHostDispatchResult are exported. The migrate-step.sh template and the managed pre-push template follow the show-pony version, with the compose project name taken from docker compose config."
+  },
   {
     "version": "0.370.0",
     "type": "improvement",

package/templates/deploy/migrate-step.sh.template

@@ -10,8 +10,9 @@
 # changes BEFORE the app container starts — runProdApp's boot gate would
 # otherwise abort with SchemaDriftError.
 #
-# Network: the exact `<dirname>_stack` name of the compose project this
-# script runs in — never another project's network on a shared host.
+# Network: the exact `<project>_stack` name of the compose project this
+# script runs in (project name as reported by `docker compose config`) —
+# never another project's network on a shared host.
 
 set -euo pipefail
 
@@ -22,12 +23,16 @@ set -a
 . ./.env
 set +a
 
-# After the .env import, so a COMPOSE_PROJECT_NAME set there picks the network.
-# Compose lowercases the project name and drops characters outside [a-z0-9_-].
-COMPOSE_PROJECT="$(printf '%s' "${COMPOSE_PROJECT_NAME:-$(basename "$PWD")}" | tr '[:upper:]' '[:lower:]' | tr -cd 'a-z0-9_-')"
+# After the .env import, so COMPOSE_PROJECT_NAME from there is honored. Ask
+# compose first: it also takes the name from a top-level `name:` key. The
+# fallback mirrors compose's normalization (lowercase, drop [^a-z0-9_-]).
+COMPOSE_PROJECT="$(docker compose config 2>/dev/null | sed -n 's/^name: //p' | head -n1 || true)"
+if [ -z "$COMPOSE_PROJECT" ]; then
+  COMPOSE_PROJECT="$(printf '%s' "${COMPOSE_PROJECT_NAME:-$(basename "$PWD")}" | tr '[:upper:]' '[:lower:]' | tr -cd 'a-z0-9_-')"
+fi
 STACK_NETWORK="${COMPOSE_PROJECT}_stack"
 if ! docker network inspect "$STACK_NETWORK" >/dev/null 2>&1; then
-  echo "Stack network '$STACK_NETWORK' not found (derived from COMPOSE_PROJECT_NAME or the directory name '$(basename "$PWD")') — compose project not running?" >&2
+  echo "Stack network '$STACK_NETWORK' not found (project name from 'docker compose config', fallback COMPOSE_PROJECT_NAME or directory name '$(basename "$PWD")'; 'docker compose -p <name>' is not detected, set COMPOSE_PROJECT_NAME in .env then) — compose project not running?" >&2
   exit 1
 fi
 

package/templates/managed/husky-pre-push.template

@@ -11,8 +11,9 @@ if [ -z "$REPO_ROOT" ]; then
   exit 1
 fi
 
-# Walk up to / so a worktree without its own node_modules resolves via the
-# parent install; `[ -x ]` also skips a broken (uninstalled) symlink.
+# Walk up so a worktree without its own node_modules resolves via the parent
+# install, but not past an enclosing repository: a bin above that boundary
+# belongs to another project. `[ -x ]` also skips a broken (uninstalled) symlink.
 BIN=""
 DIR="$REPO_ROOT"
 while true; do
@@ -24,6 +25,9 @@ while true; do
   if [ "$DIR" = "/" ]; then
     break
   fi
+  if [ "$DIR" != "$REPO_ROOT" ] && [ -e "$DIR/.git" ]; then
+    break
+  fi
   DIR="$(dirname "$DIR")"
 done