@cosmicdrift/kumiko-dev-server 0.373.0 → 0.377.0

package/dist/compose-stacks.d.ts

@@ -110,9 +110,12 @@ export type SaasStackOptions<TCaps extends Readonly<Record<string, unknown>> = R
     readonly caps?: CreateCapOverviewOptions;
     /** Mounts waitlist; it needs auth-email-password and user-data-rights. */
     readonly waitlist?: WaitlistOptions;
+    /** Operator switches over the tiers: the stack then expects runProdApp / runDevApp's `featureToggles` option. */
+    readonly featureToggles?: boolean;
 };
 /** billing-foundation + tier-engine (+ caps, waitlist). `"stripe"` leaves
  *  subscription-stripe and its webhook route to runProdApp's `billing` option;
+ *  Without that option a stripe stack only warns at boot.
  *  `"mollie"` mounts subscription-mollie, whose webhook route the app adds.
  *  billing-foundation requires tenant-lifecycle and compliance-profiles, which
  *  composeGdprStack({ tenantLifecycle: true }) mounts. */

package/dist/compose-stacks.js

@@ -40,8 +40,11 @@ import { createUserDataRightsDefaultsFeature } from "@cosmicdrift/kumiko-bundled
 import { createUserProfileFeature } from "@cosmicdrift/kumiko-bundled-features/user-profile";
 import { createWaitlistFeature, } from "@cosmicdrift/kumiko-bundled-features/waitlist";
 import { createRendererMailHtmlFeature, } from "@cosmicdrift/kumiko-renderer-mail-html";
-function withBootRequires(feature, stack, options) {
-    return { ...feature, bootRequires: { stack, options } };
+function withBootRequires(feature, stack, options, severity = "error") {
+    return {
+        ...feature,
+        bootRequires: { stack, options, ...(severity === "warn" && { severity }) },
+    };
 }
 export function stackFeatureNames(features) {
     return features.map((f) => f.name);
@@ -179,16 +182,20 @@ export function composeAuthStack(options = {}) {
 }
 /** billing-foundation + tier-engine (+ caps, waitlist). `"stripe"` leaves
  *  subscription-stripe and its webhook route to runProdApp's `billing` option;
+ *  Without that option a stripe stack only warns at boot.
  *  `"mollie"` mounts subscription-mollie, whose webhook route the app adds.
  *  billing-foundation requires tenant-lifecycle and compliance-profiles, which
  *  composeGdprStack({ tenantLifecycle: true }) mounts. */
 export function composeSaasStack(options) {
     const foundation = createBillingFoundationFeature(options.billingFoundation ?? {});
+    const tierEngine = createTierEngineFeature(options.tiers);
     const out = [
         options.billing === "stripe"
-            ? withBootRequires(foundation, "composeSaasStack", ["billing"])
+            ? withBootRequires(foundation, "composeSaasStack", ["billing"], "warn")
             : foundation,
-        createTierEngineFeature(options.tiers),
+        options.featureToggles
+            ? withBootRequires(tierEngine, "composeSaasStack", ["featureToggles"])
+            : tierEngine,
     ];
     if (options.billing === "mollie")
         out.push(createSubscriptionMollieFeature(options.mollie));

package/dist/create-kumiko-server.d.ts

@@ -2,7 +2,7 @@
 import { type AuthRoutesConfig, type ExtraRouteDefinition } from "@cosmicdrift/kumiko-framework/api";
 import { type FeatureDefinition } from "@cosmicdrift/kumiko-framework/engine";
 import type { ErrorDocsConfig } from "@cosmicdrift/kumiko-framework/errors";
-import { type PageHeadResolver, type PageHeadSystemQuery } from "@cosmicdrift/kumiko-headless/apex";
+import { type PageHeadResolver, type PageHeadSystemQuery } from "@cosmicdrift/kumiko-renderer/headless/apex";
 import { type SystemWireDeps } from "@cosmicdrift/kumiko-server-runtime/extra-routes-deps";
 import { type TestStack, type TestStackOptions } from "@cosmicdrift/kumiko-testing/stack";
 type BunServer = typeof Bun extends undefined ? unknown : ReturnType<typeof Bun.serve>;
@@ -99,7 +99,7 @@ export type CreateKumikoServerOptions = {
      *  whether the CLI keeps running with `--watch` afterwards.
      *
      *  When `undefined` and a client entry is set, the app's own
-     *  src/styles.css wins, otherwise `@cosmicdrift/kumiko-renderer-web/styles.css`
+     *  src/styles.css wins, otherwise `@cosmicdrift/kumiko-renderer/web/styles.css`
      *  resolves via package exports, so no sample hardcodes a monorepo-relative path.
      *
      *  `stylesheet: false` disables the CSS pipeline. */
@@ -183,6 +183,8 @@ export type CreateKumikoServerOptions = {
      *  ships unchanged with status 200 — never a 500. `systemQuery` inside
      *  the resolver runs as the anonymous role, same as prod. */
     readonly resolvePageHead?: PageHeadResolver;
+    /** Wraps the request handler before it reaches Bun.serve and `handle.fetch`, e.g. the demo read-only gate. */
+    readonly wrapFetch?: (handler: (req: Request, socketAddress?: string) => Promise<Response>) => (req: Request, socketAddress?: string) => Promise<Response>;
 };
 export type KumikoServerHandle = {
     /** The fetch handler that routes a Request through the dev-server

package/dist/create-kumiko-server.js

@@ -26,7 +26,7 @@ import { createEventsTable } from "@cosmicdrift/kumiko-framework/event-store";
 import { rankPreferredLocales } from "@cosmicdrift/kumiko-framework/i18n";
 import { createMetricsForFactory } from "@cosmicdrift/kumiko-framework/observability";
 import { TestUsers } from "@cosmicdrift/kumiko-framework/seeding";
-import { resolveAndInjectPageHead, } from "@cosmicdrift/kumiko-headless/apex";
+import { resolveAndInjectPageHead, } from "@cosmicdrift/kumiko-renderer/headless/apex";
 import { startDevJobRunners } from "@cosmicdrift/kumiko-server-runtime/boot/job-run-logger";
 import { buildBunServeOptions, resolveDerivedMaxRequestBodySize, } from "@cosmicdrift/kumiko-server-runtime/bun-serve-options";
 import { makeDispatchSystemQuery, makeDispatchSystemWrite, } from "@cosmicdrift/kumiko-server-runtime/extra-routes-deps";
@@ -99,7 +99,7 @@ const RELOAD_SNIPPET = `
 // keyboard shrinks only the visual viewport, not the layout viewport that
 // `position: fixed` anchors to — a fixed bottom action bar would stay
 // pinned behind the keyboard instead of above it. iOS Safari ignores the
-// key; renderer-web's useKeyboardInset covers it via window.visualViewport.
+// key; renderer/web's useKeyboardInset covers it via window.visualViewport.
 export const DEFAULT_HTML = `<!doctype html>
 <html lang="en">
   <head>
@@ -393,23 +393,20 @@ function expandWatchPatterns(patterns) {
     }
     return out;
 }
-// Resolve den Pfad zur Tailwind-Entry-CSS. Mehrere Fälle:
-//   - Explicit string  → den resolved'en absoluten Pfad verwenden
-//   - false            → CSS-Pipeline aus (undefined zurück)
-//   - undefined + client(s):
-//       1. App-eigenes src/styles.css (App-Theme-Override) wenn vorhanden
-//       2. Sonst Default `@cosmicdrift/kumiko-renderer-web/styles.css` über Package-Exports
-//   - undefined + kein clientEntry/clientEntries: undefined (keine CSS nötig)
+// Resolves the path to the Tailwind entry CSS:
+//   - explicit string  → the resolved absolute path
+//   - false            → CSS pipeline off (undefined)
+//   - undefined + client entries:
+//       1. the app's own src/styles.css (theme override) if present
+//       2. else the default `@cosmicdrift/kumiko-renderer/web/styles.css` via package exports
+//   - undefined + no client entry: undefined (no CSS needed)
 //
-// Auto-Detection von src/styles.css spiegelt die Logik aus
-// build-prod-bundle:resolveStylesheetEntry — damit dev und prod identisch
-// resolven. Ohne diesen Check müsste jede App `stylesheet: "./src/styles.css"`
-// setzen, sonst greift in dev der renderer-web-Default und Brand-Tokens
-// werden ignoriert (DX-Falle).
+// The src/styles.css auto-detection mirrors build-prod-bundle:resolveStylesheetEntry
+// so dev and prod resolve identically. Without it every app would have to set
+// `stylesheet: "./src/styles.css"`, or dev would fall back to the default and
+// ignore the brand tokens.
 //
-// @internal — exportiert nur für Unit-Tests, nicht aus dem Package-Index
-//   re-exportiert. Konsumenten gehen ausschließlich über die `stylesheet`-
-//   Option der createKumikoServer-Aufrufstelle.
+// @internal — exported for unit tests only, not re-exported from the package index.
 export function resolveStylesheet(options) {
     if (options.stylesheet === false)
         return undefined;
@@ -419,12 +416,12 @@ export function resolveStylesheet(options) {
         (options.clientEntries !== undefined && options.clientEntries.length > 0);
     if (!hasAnyEntry)
         return undefined;
-    // App-eigenes src/styles.css schlägt den renderer-web-Default — gleiche
-    // Logik wie kumiko-build, damit lokal/prod identisch bauen.
+    // The app's own src/styles.css beats the renderer/web default, same as
+    // kumiko-build, so local and prod builds match.
     const local = resolve(process.cwd(), "src/styles.css");
     if (existsSync(local))
         return local;
-    // Bun.resolveSync folgt Package-Exports — "./styles.css" in renderer-web's
+    // Bun.resolveSync folgt Package-Exports — "./styles.css" in renderer/web's
     // package.json. Das Monorepo auflöst direkt auf den Workspace-File, eine
     // installierte Fremd-App auf den node_modules-File. Kein `fileURLToPath`
     // nötig, Bun gibt schon einen absoluten FS-Pfad zurück.
@@ -435,14 +432,14 @@ export function resolveStylesheet(options) {
         return undefined;
     }
     try {
-        const resolved = Bun.resolveSync("@cosmicdrift/kumiko-renderer-web/styles.css", process.cwd());
+        const resolved = Bun.resolveSync("@cosmicdrift/kumiko-renderer/web/styles.css", process.cwd());
         if (!canResolveTailwindStylesheet(resolved, { bun: Bun, cwd: process.cwd() })) {
             return undefined;
         }
         return resolved;
     }
     catch (err) {
-        logError("[kumiko-server] couldn't auto-resolve @cosmicdrift/kumiko-renderer-web/styles.css — " +
+        logError("[kumiko-server] couldn't auto-resolve @cosmicdrift/kumiko-renderer/web/styles.css — " +
             "pass `stylesheet: <path>` or `stylesheet: false` explicitly.", err);
         return undefined;
     }
@@ -556,7 +553,7 @@ export async function createKumikoServer(options) {
     // reloads after a bundle rebuild anyway.
     //
     // Without an explicit `stylesheet`, the default resolves through the
-    // package exports of `@cosmicdrift/kumiko-renderer-web`, which works both
+    // package exports of `@cosmicdrift/kumiko-renderer/web`, which works both
     // for a workspace link and for an installed app (node_modules).
     let stylesheetPath;
     let killTailwind;
@@ -800,9 +797,9 @@ export async function createKumikoServer(options) {
         ? realpathSync(lexicalPublicDir)
         : lexicalPublicDir;
     // The app's cwd first, this package's own location as fallback (the cwd may
-    // not have renderer-web installed, e.g. a fixture dir).
+    // not have renderer/web installed, e.g. a fixture dir).
     const rendererWebFontsDir = resolveRendererWebFontsDir([process.cwd(), import.meta.dir]);
-    const handleFetch = async (req, socketAddress) => {
+    const routeFetch = async (req, socketAddress) => {
         const url = new URL(req.url);
         // Specific routes first — assets, reload-SSE, API.
         if (req.method === "GET") {
@@ -959,6 +956,7 @@ export async function createKumikoServer(options) {
         // header-hygiene note).
         return stripNoRouteMatchHeader(await stack.app.fetch(req, socketAddress));
     };
+    const handleFetch = options.wrapFetch ? options.wrapFetch(routeFetch) : routeFetch;
     // --- HTTP server (Bun only) ---
     // Under Node/vitest we skip Bun.serve entirely — the handle's
     // .fetch() is the test surface. Real dev runs under Bun, where

package/dist/managed-files/app-jobs.d.ts

@@ -0,0 +1,4 @@
+export declare function stripAppJobs(content: string): string;
+export declare function appJobsOf(content: string): string;
+/** Appends the app-owned jobs of `existing` to a freshly rendered workflow. */
+export declare function withAppJobsOf(rendered: string, existing: string): string;

package/dist/managed-files/app-jobs.js

@@ -0,0 +1,68 @@
+// Jobs named `app-<name>` in a managed workflow belong to the app: drift
+// checks ignore them and a sync carries them over.
+const JOBS_HEADER = /^jobs:\s*$/;
+const JOB_START = /^ {2}([A-Za-z0-9_-]+):\s*$/;
+const TOP_LEVEL_KEY = /^[^\s#]/;
+const APP_JOB_PREFIX = "app-";
+function isDetachedComment(line) {
+    return /^ {2}#/.test(line);
+}
+function findJobBlocks(lines) {
+    const header = lines.findIndex((line) => JOBS_HEADER.test(line));
+    if (header === -1)
+        return [];
+    const starts = [];
+    let jobsEnd = lines.length;
+    for (let index = header + 1; index < lines.length; index++) {
+        const line = lines[index] ?? "";
+        if (TOP_LEVEL_KEY.test(line)) {
+            jobsEnd = index;
+            break;
+        }
+        const match = JOB_START.exec(line);
+        if (match?.[1] !== undefined)
+            starts.push({ name: match[1], start: index });
+    }
+    return starts.map(({ name, start }, position) => {
+        let end = starts[position + 1]?.start ?? jobsEnd;
+        // Comments and blank lines right above the next job introduce that job.
+        while (end > start + 1 && (isDetachedComment(lines[end - 1] ?? "") || lines[end - 1] === "")) {
+            end--;
+        }
+        return { name, start: introStart(lines, start, starts[position - 1]), end };
+    });
+}
+function introStart(lines, start, previous) {
+    let first = start;
+    const floor = previous === undefined ? 0 : previous.start + 1;
+    while (first > floor && isDetachedComment(lines[first - 1] ?? ""))
+        first--;
+    return first;
+}
+function appJobBlocks(lines) {
+    return findJobBlocks(lines).filter((block) => block.name.startsWith(APP_JOB_PREFIX));
+}
+export function stripAppJobs(content) {
+    const lines = content.split("\n");
+    const removed = new Set();
+    for (const { start, end } of appJobBlocks(lines)) {
+        for (let index = start; index < end; index++)
+            removed.add(index);
+        if (lines[start - 1] === "")
+            removed.add(start - 1);
+    }
+    return lines.filter((_, index) => !removed.has(index)).join("\n");
+}
+export function appJobsOf(content) {
+    const lines = content.split("\n");
+    return appJobBlocks(lines)
+        .map(({ start, end }) => lines.slice(start, end).join("\n"))
+        .join("\n\n");
+}
+/** Appends the app-owned jobs of `existing` to a freshly rendered workflow. */
+export function withAppJobsOf(rendered, existing) {
+    const appJobs = appJobsOf(existing);
+    if (appJobs === "")
+        return rendered;
+    return `${rendered.replace(/\n+$/, "")}\n\n${appJobs}\n`;
+}

package/dist/managed-files/check.d.ts

@@ -28,6 +28,8 @@ export type ManagedCheckResult = {
     /** kumiko.config.ts calls defineAppConfig: drift fails the check from then on. */
     readonly adopted: boolean;
     readonly files: readonly ManagedFileReport[];
+    /** Findings that do not fail the check. */
+    readonly warnings: readonly string[];
 };
 export declare function checkManagedFiles(facts: ManagedAppFacts): ManagedCheckResult;
 /** States that fail `kumiko check managed` once the app has adopted kumiko.config.ts. */

package/dist/managed-files/check.js

@@ -1,10 +1,11 @@
 import { existsSync, readFileSync } from "node:fs";
 import { join } from "node:path";
 import { mergeBunfig } from "@cosmicdrift/kumiko-testing/bunfig";
+import { stripAppJobs } from "./app-jobs.js";
 import { parseJsonc } from "./jsonc.js";
 import { renderLineDiff } from "./line-diff.js";
 import { readManagedMarker, stripManagedMarker } from "./marker.js";
-import { BIOME_PRESET, listManagedFiles, renderManagedBunfig, TSCONFIG_PRESET, } from "./registry.js";
+import { BIOME_PRESET, listManagedFiles, listManagedWarnings, renderManagedBunfig, TSCONFIG_PRESET, } from "./registry.js";
 function readIfExists(path) {
     return existsSync(path) ? readFileSync(path, "utf-8") : undefined;
 }
@@ -17,7 +18,7 @@ function checkTemplate(file, existing) {
         return { state: "invalid", message: marker.message };
     if (marker.kind === "local")
         return { state: "local", reason: marker.reason };
-    const diff = compareBodies(stripManagedMarker(file.content), stripManagedMarker(existing));
+    const diff = compareBodies(stripAppJobs(stripManagedMarker(file.content)), stripAppJobs(stripManagedMarker(existing)));
     if (marker.kind === "unmarked")
         return diff === undefined ? { state: "unmarked" } : { state: "unmarked", diff };
     return diff === undefined ? { state: "ok" } : { state: "differs", diff };
@@ -101,6 +102,7 @@ export function checkManagedFiles(facts) {
             kind: file.kind,
             ...checkFile(file, facts),
         })),
+        warnings: listManagedWarnings(facts),
     };
 }
 /** States that fail `kumiko check managed` once the app has adopted kumiko.config.ts. */

package/dist/managed-files/index.d.ts

@@ -1,8 +1,6 @@
-export { listAppPorts } from "@cosmicdrift/kumiko-framework/config";
+export { findPortCollisions, listAppPorts, type PortClaim, type PortCollision, parseStaticAppConfig, readStaticAppConfig, type ScannedApp, type StaticAppConfig, scanWorkspaceApps, } from "@cosmicdrift/kumiko-guards/repo-manifest/app-ports";
 export { type AppScriptsReport, checkAppScripts, KNOWN_EXTRA_APP_SCRIPTS, PREPARE_SCRIPT, STANDARD_APP_SCRIPTS, type StandardAppScript, } from "./app-scripts.ts";
 export { checkManagedFiles, isManagedDrift, type ManagedCheckResult, type ManagedFileReport, type ManagedFileState, } from "./check.ts";
 export { addManagedMarker, MANAGED_MARKER, readManagedMarker, stripManagedMarker, } from "./marker.ts";
-export { findPortCollisions, type PortClaim, type PortCollision, type ScannedApp, scanWorkspaceApps, } from "./port-registry.ts";
-export { BIOME_PRESET, listManagedFiles, type ManagedAppFacts, type ManagedAppInput, type ManagedFile, type ManagedTemplateFile, renderBiomePresetJson, renderManagedBunfig, renderManagedTemplates, renderTsconfigPresetJson, resolveManagedAppFacts, TSCONFIG_PRESET, } from "./registry.ts";
-export { parseStaticAppConfig, readStaticAppConfig, type StaticAppConfig, } from "./static-app-config.ts";
+export { BIOME_PRESET, listManagedFiles, listManagedWarnings, type ManagedAppFacts, type ManagedAppInput, type ManagedFile, type ManagedTemplateFile, renderBiomePresetJson, renderManagedBunfig, renderManagedTemplates, renderTsconfigPresetJson, resolveManagedAppFacts, TSCONFIG_PRESET, } from "./registry.ts";
 export { type SyncAction, type SyncManagedOptions, syncManagedFiles } from "./sync.ts";

package/dist/managed-files/index.js

@@ -1,8 +1,6 @@
-export { listAppPorts } from "@cosmicdrift/kumiko-framework/config";
+export { findPortCollisions, listAppPorts, parseStaticAppConfig, readStaticAppConfig, scanWorkspaceApps, } from "@cosmicdrift/kumiko-guards/repo-manifest/app-ports";
 export { checkAppScripts, KNOWN_EXTRA_APP_SCRIPTS, PREPARE_SCRIPT, STANDARD_APP_SCRIPTS, } from "./app-scripts.js";
 export { checkManagedFiles, isManagedDrift, } from "./check.js";
 export { addManagedMarker, MANAGED_MARKER, readManagedMarker, stripManagedMarker, } from "./marker.js";
-export { findPortCollisions, scanWorkspaceApps, } from "./port-registry.js";
-export { BIOME_PRESET, listManagedFiles, renderBiomePresetJson, renderManagedBunfig, renderManagedTemplates, renderTsconfigPresetJson, resolveManagedAppFacts, TSCONFIG_PRESET, } from "./registry.js";
-export { parseStaticAppConfig, readStaticAppConfig, } from "./static-app-config.js";
+export { BIOME_PRESET, listManagedFiles, listManagedWarnings, renderBiomePresetJson, renderManagedBunfig, renderManagedTemplates, renderTsconfigPresetJson, resolveManagedAppFacts, TSCONFIG_PRESET, } from "./registry.js";
 export { syncManagedFiles } from "./sync.js";

package/dist/managed-files/registry.d.ts

@@ -1,4 +1,5 @@
-import { type StaticAppConfig } from "./static-app-config.ts";
+import { type StaticAppConfig } from "@cosmicdrift/kumiko-guards/repo-manifest/app-ports";
+import { type KumikoReleaseTarget } from "../scaffold-deploy.ts";
 export declare const BIOME_PRESET = "@cosmicdrift/kumiko-framework/biome";
 export declare const TSCONFIG_PRESET = "@cosmicdrift/kumiko-framework/tsconfig.app.json";
 export type ManagedAppInput = {
@@ -13,7 +14,10 @@ export type ManagedAppFacts = {
     readonly appName: string;
     readonly hasUi: boolean;
     readonly config: StaticAppConfig;
+    readonly deploy: KumikoReleaseTarget;
 };
+/** Ref used in the workflow templates while `kumiko.deploy.infraRef` is unset. */
+export declare const DEFAULT_INFRA_REF = "main";
 /** Byte-compared after the marker lines are stripped. */
 export type ManagedTemplateFile = {
     readonly kind: "template";
@@ -40,6 +44,8 @@ export type ManagedSeedFile = {
 };
 export type ManagedFile = ManagedTemplateFile | ManagedBunfigFile | ManagedStructuralFile | ManagedSeedFile;
 export declare function resolveManagedAppFacts(input: ManagedAppInput): ManagedAppFacts;
+/** Findings that do not fail `kumiko check managed`. */
+export declare function listManagedWarnings(facts: ManagedAppFacts): readonly string[];
 export declare function renderManagedTemplates(facts: ManagedAppFacts): readonly ManagedTemplateFile[];
 export declare function managedBunfigFiles(facts: ManagedAppFacts): readonly ManagedBunfigFile[];
 /** Options are the app's choice; read them from the file so the check only flags real drift. */

package/dist/managed-files/registry.js

@@ -5,13 +5,15 @@ import { existsSync, readFileSync } from "node:fs";
 import { dirname, join } from "node:path";
 import { fileURLToPath } from "node:url";
 import { parseJsonOrThrow } from "@cosmicdrift/kumiko-framework/utils";
+import { readStaticAppConfig, } from "@cosmicdrift/kumiko-guards/repo-manifest/app-ports";
 import { BUNFIG_FILES, renderBunfig } from "@cosmicdrift/kumiko-testing/bunfig";
 import { isKebabSegment } from "../kebab.js";
-import { readReleaseTarget, render, renderDeployFiles } from "../scaffold-deploy.js";
+import { readReleaseTarget, render, renderDeployFiles, } from "../scaffold-deploy.js";
 import { addManagedMarker } from "./marker.js";
-import { readStaticAppConfig } from "./static-app-config.js";
 export const BIOME_PRESET = "@cosmicdrift/kumiko-framework/biome";
 export const TSCONFIG_PRESET = "@cosmicdrift/kumiko-framework/tsconfig.app.json";
+/** Ref used in the workflow templates while `kumiko.deploy.infraRef` is unset. */
+export const DEFAULT_INFRA_REF = "main";
 function templatesDir() {
     return join(dirname(fileURLToPath(import.meta.url)), "..", "..", "templates", "managed");
 }
@@ -39,8 +41,18 @@ export function resolveManagedAppFacts(input) {
         appName,
         hasUi: input.uiRoots.length > 0,
         config: readStaticAppConfig(input.appRoot),
+        deploy: readReleaseTarget(input.appRoot, appName),
     };
 }
+/** Findings that do not fail `kumiko check managed`. */
+export function listManagedWarnings(facts) {
+    if (facts.deploy.visibility === "private" && facts.deploy.infraRef === undefined) {
+        return [
+            `package.json#kumiko.deploy.infraRef is not set: ci.yml and release.yml call the infra workflows at @${DEFAULT_INFRA_REF}. Set it to an infra tag; a missing value will fail this check in a later release.`,
+        ];
+    }
+    return [];
+}
 function marked(path, body, style, executable = false) {
     return { kind: "template", path, content: addManagedMarker(body, style), executable };
 }
@@ -48,7 +60,28 @@ function renderCiWorkflow(facts) {
     const infra = facts.config.kind === "defined" ? facts.config.ports.infra : undefined;
     const minio = infra?.s3 !== undefined;
     const meilisearch = infra?.meilisearch !== undefined;
-    return render(readTemplate("ci.yml.template"), { appName: facts.appName, uiGuards: String(facts.hasUi) }, { minio, meilisearch, e2eInputs: minio || meilisearch });
+    if (facts.deploy.visibility === "public") {
+        return render(readTemplate("ci-public.yml.template"), { appName: facts.appName }, { uiGuards: facts.hasUi, meilisearch });
+    }
+    return render(readTemplate("ci.yml.template"), {
+        appName: facts.appName,
+        uiGuards: String(facts.hasUi),
+        infraRef: facts.deploy.infraRef ?? DEFAULT_INFRA_REF,
+    }, {
+        minio,
+        meilisearch,
+        e2eInputs: minio || meilisearch,
+        docStatusGuardOff: !facts.deploy.docStatusGuard,
+    });
+}
+function renderReleaseWorkflow(facts) {
+    const { namespace, deployment, visibility, infraRef } = facts.deploy;
+    return render(readTemplate("release.yml.template"), {
+        appName: facts.appName,
+        namespace,
+        deployment,
+        infraRef: infraRef ?? DEFAULT_INFRA_REF,
+    }, { privateDeploy: visibility === "private", publicRollout: visibility === "public" });
 }
 export function renderManagedTemplates(facts) {
     const deploy = renderDeployFiles({
@@ -56,12 +89,11 @@ export function renderManagedTemplates(facts) {
         destination: facts.appRoot,
         ensuredRegistryConfigFiles: [BUNFIG_FILES.unit],
     });
-    const target = readReleaseTarget(facts.appRoot, facts.appName);
     return [
         ...deploy.files.map((file) => marked(`deploy/${file.output}`, file.content, "#", file.output.endsWith(".sh"))),
         marked(".husky/pre-push", readTemplate("husky-pre-push.template"), "#", true),
         marked(".github/workflows/cache-cleanup.yml", readTemplate("cache-cleanup.yml.template"), "#"),
-        marked(".github/workflows/release.yml", render(readTemplate("release.yml.template"), { appName: facts.appName, ...target }, {}), "#"),
+        marked(".github/workflows/release.yml", renderReleaseWorkflow(facts), "#"),
         marked(".github/workflows/ci.yml", renderCiWorkflow(facts), "#"),
         marked("kumiko/schema.ts", readTemplate("kumiko-schema.ts.template"), "//"),
     ];

package/dist/managed-files/sync.js

@@ -1,6 +1,7 @@
 import { chmodSync, existsSync, lstatSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { dirname, join, relative, sep } from "node:path";
 import { mergeBunfig } from "@cosmicdrift/kumiko-testing/bunfig";
+import { stripAppJobs, withAppJobsOf } from "./app-jobs.js";
 import { readManagedMarker } from "./marker.js";
 import { listManagedFiles, renderBiomePresetJson, renderManagedBunfig, renderTsconfigPresetJson, } from "./registry.js";
 // A symlinked .github or deploy/ would let the sync write outside the app.
@@ -24,10 +25,18 @@ function isBrokenSymlink(path) {
         return false;
     }
 }
+// App jobs stay where the app put them as long as the rest matches the template.
+function templateContent(rendered, existing) {
+    if (existing === undefined)
+        return rendered;
+    return stripAppJobs(existing) === stripAppJobs(rendered)
+        ? existing
+        : withAppJobsOf(rendered, existing);
+}
 function plannedContent(file, existing) {
     switch (file.kind) {
         case "template":
-            return { content: file.content, executable: file.executable };
+            return { content: templateContent(file.content, existing), executable: file.executable };
         case "bunfig": {
             const generated = renderManagedBunfig(file, existing);
             if (existing === undefined)

package/dist/run-dev-app.d.ts

@@ -2,9 +2,11 @@ import { type SeedAdminOptions } from "@cosmicdrift/kumiko-bundled-features/auth
 import type { PostAuthLandingResolver } from "@cosmicdrift/kumiko-framework/api";
 import { type KmsAdapter } from "@cosmicdrift/kumiko-framework/crypto";
 import { type FeatureDefinition, type Registry, type ValidateBootOptions } from "@cosmicdrift/kumiko-framework/engine";
+import { type ComposedEnvSchema } from "@cosmicdrift/kumiko-framework/env";
 import type { ErrorDocsConfig } from "@cosmicdrift/kumiko-framework/errors";
 import type { EnvelopeCipher, MasterKeyProvider } from "@cosmicdrift/kumiko-framework/secrets";
-import type { PageHeadResolver } from "@cosmicdrift/kumiko-headless/apex";
+import type { PageHeadResolver } from "@cosmicdrift/kumiko-renderer/headless/apex";
+import { type BillingBootOption, type DemoModeOption, type FileStorageBootOption, type KmsMode, type MailBootOption, type ProdSeedsConfig } from "@cosmicdrift/kumiko-server-runtime";
 import type { TestStack } from "@cosmicdrift/kumiko-testing/stack";
 import { type CreateKumikoServerOptions, type KumikoServerHandle } from "./create-kumiko-server.ts";
 export type { AccountLockoutSetup, AccountUnlockSetup, AuthMailOptions, EmailVerificationSetup, InviteSetup, PasswordResetSetup, SignupSetup, } from "@cosmicdrift/kumiko-server-runtime/run-prod-app";
@@ -65,6 +67,10 @@ export type RunDevAppAuthOptions = {
 /** Hook for app-specific seeding (demo data, fixtures). Runs after the
  *  admin (when auth is active) in declared order. */
 export type SeedFn = (stack: TestStack) => Promise<void>;
+/** Dev counterpart of `ProdSeedsConfig`: the declarative shortcuts plus free seeds that get the test stack. */
+export type RunDevAppSeedsConfig = Omit<ProdSeedsConfig, "run"> & {
+    readonly run?: readonly SeedFn[];
+};
 export type RunDevAppOptions = {
     /** App-spezifische Features. Im auth-mode werden config/user/tenant/
      *  auth-email-password automatisch dazu gemischt — KEIN doppeltes
@@ -88,7 +94,7 @@ export type RunDevAppOptions = {
      *  through `runDevApp` show the same resolved head prod does. See
      *  `CreateKumikoServerOptions.resolvePageHead` for the full contract. */
     readonly resolvePageHead?: PageHeadResolver;
-    /** CSS-Entry. Default: package-export `@cosmicdrift/kumiko-renderer-web/styles.css`
+    /** CSS-Entry. Default: package-export `@cosmicdrift/kumiko-renderer/web/styles.css`
      *  wenn ein client-Entry gesetzt ist. `false` deaktiviert die CSS-Pipeline. */
     readonly stylesheet?: string | false;
     /** Tailwind `--watch` process on/off, see `CreateKumikoServerOptions.stylesheetWatch`. */
@@ -109,7 +115,7 @@ export type RunDevAppOptions = {
     readonly auth?: RunDevAppAuthOptions;
     /** Eigene Seed-Funktionen, laufen nach dem Admin (wenn auth) in
      *  Array-Reihenfolge. */
-    readonly seeds?: readonly SeedFn[];
+    readonly seeds?: readonly SeedFn[] | RunDevAppSeedsConfig;
     /** Extra-AppContext-Keys. `templateResolver` (immer) + `secrets` (wenn das
      *  secrets-Feature gemountet ist) + `configResolver` (auth-mode) werden
      *  automatisch ergänzt — App-Werte gewinnen. Symmetrisch zu runProdApp. */
@@ -154,13 +160,23 @@ export type RunDevAppOptions = {
     /** Hook for app-wired co-running components — symmetric to
      *  runProdApp.wire (kumiko-framework#3050). */
     readonly wire?: CreateKumikoServerOptions["wire"];
-    /** Feature-toggle resolver — durchgereicht an createKumikoServer →
-     *  setupTestStack. Sprint-8 Tier-Composition: per-Tenant unterschied-
-     *  liche features aktiv via globalFeatureToggleRuntime. Pattern in
-     *  bin/server.ts: createLateBoundHolder + post-boot runtime.initialize
-     *  in einem seed-fn, weil die runtime stack.db braucht und die seed-
-     *  Funktionen nach setupTestStack laufen. */
-    readonly effectiveFeatures?: CreateKumikoServerOptions["effectiveFeatures"];
+    /** Same as `RunProdAppOptions["mail"]`: mounts `channel-email` and wires the auth mail flows. */
+    readonly mail?: MailBootOption;
+    /** Same as `RunProdAppOptions["fileStorage"]`. */
+    readonly fileStorage?: FileStorageBootOption;
+    /** Same as `RunProdAppOptions["kmsMode"]`; replaces the dev KMS default and cannot be combined
+     *  with `kms` / `blindIndexKey`. */
+    readonly kmsMode?: KmsMode;
+    /** Same as `RunProdAppOptions["billing"]`. */
+    readonly billing?: BillingBootOption;
+    /** Same as `RunProdAppOptions["featureToggles"]`: global operator switches over the tier resolver. */
+    readonly featureToggles?: boolean;
+    /** Same as `RunProdAppOptions["demoMode"]`. */
+    readonly demoMode?: DemoModeOption;
+    /** Composed env schema (see `RunProdAppOptions["envSchema"]`). When set, the env is validated
+     *  against it plus the blocks the boot options above need, and a violation throws a
+     *  `KumikoBootError`. Dev does not run the dry-run modes. */
+    readonly envSchema?: ComposedEnvSchema;
     /** Print a first-run banner after the server starts (URL, admin login,
      *  hot-reload hint, docs link). Default: off — apps that already log
      *  their own startup shouldn't get double-printed. The scaffold template