@cosmicdrift/kumiko-dev-server 0.374.0 → 0.378.0

package/dist/run-dev-app.js

@@ -23,15 +23,17 @@ import { createInMemoryLoginRateLimiter, parseTrustedProxyHopsEnv, TRUSTED_PROXY
 import { configureBlindIndexKey, configurePiiSubjectKms, } from "@cosmicdrift/kumiko-framework/crypto";
 import { configureEntityFieldEncryption } from "@cosmicdrift/kumiko-framework/db";
 import { collectWriteHandlerQns, createRegistry, FILE_STORAGE_PROVIDER_BOOT_SENTINEL, FILE_STORAGE_PROVIDER_ENV, findTierResolverUsage, requireTierResolverPlugin, validateAppCustomScreenWriteQns, validateBoot, } from "@cosmicdrift/kumiko-framework/engine";
+import { parseEnv } from "@cosmicdrift/kumiko-framework/env";
 import { createFallbackLogger } from "@cosmicdrift/kumiko-framework/logging";
 import { warnIfNonUtcServerTimeZone } from "@cosmicdrift/kumiko-framework/time";
+import { assertStackBootRequirements, isSeedFnList, rejectRemovedEffectiveFeatures, resolveBootOptionWiring, withBootOptionEnvBlocks, } from "@cosmicdrift/kumiko-server-runtime";
 import { applyBootSeeds } from "@cosmicdrift/kumiko-server-runtime/boot/apply-boot-seeds";
 import { resolveBootCrypto } from "@cosmicdrift/kumiko-server-runtime/boot/boot-crypto";
 import { buildComposeAuthOptions, composeFeatures, } from "@cosmicdrift/kumiko-server-runtime/compose-features";
 import { assertPiiBootInvariants } from "@cosmicdrift/kumiko-server-runtime/pii-boot-gate";
 import { assertSessionBootInvariants } from "@cosmicdrift/kumiko-server-runtime/session-boot-gate";
 import { createKumikoServer, logInfo, } from "./create-kumiko-server.js";
-import { captureEphemeralDevPiiKms, resolveDevPiiKms } from "./resolve-dev-pii-kms.js";
+import { captureEphemeralDevPiiKms, resolveDevPiiKms, } from "./resolve-dev-pii-kms.js";
 import { renderWelcomeBanner } from "./welcome-banner.js";
 import { addConfigAccessorFactory, buildBootExtraContext, loggerFromExtraContext, requireEnv, resolveAuthMail, resolveUnsubscribeWiring, } from "@cosmicdrift/kumiko-server-runtime/run-prod-app";
 export async function runDevApp(options) {
@@ -39,12 +41,52 @@ export async function runDevApp(options) {
     // source of truth — auch runProdApp und der per-app drizzle-Schema-
     // Generator nutzen denselben Helper, damit Migration und Runtime nie
     // auseinanderdriften können).
-    const envSource = options.envSource ?? process.env;
+    const rawEnvSource = options.envSource ?? process.env;
+    const seedsConfig = options.seeds !== undefined && !isSeedFnList(options.seeds) ? options.seeds : undefined;
+    const stackSeeds = options.seeds === undefined
+        ? []
+        : isSeedFnList(options.seeds)
+            ? options.seeds
+            : (options.seeds.run ?? []);
+    if (options.envSchema) {
+        // Free dev seeds take the test stack; the env blocks only read the declarative part.
+        const { seeds: _devSeeds, kms: devKms, ...bootFields } = options;
+        const composed = withBootOptionEnvBlocks(options.envSchema, {
+            ...bootFields,
+            ...(devKms && { kms: devKms }),
+            ...(seedsConfig && { seeds: { ...seedsConfig, run: [] } }),
+            features: options.features,
+        });
+        parseEnv(composed.schema, rawEnvSource, { sources: composed.sources });
+    }
+    rejectRemovedEffectiveFeatures(options);
+    const wiring = await resolveBootOptionWiring({
+        features: options.features,
+        ...(options.mail && { mail: options.mail }),
+        ...(options.fileStorage && { fileStorage: options.fileStorage }),
+        ...(options.kmsMode !== undefined && { kmsMode: options.kmsMode }),
+        ...(options.billing && { billing: options.billing }),
+        ...(options.featureToggles && { featureToggles: true }),
+        ...(options.demoMode && { demoMode: options.demoMode }),
+        ...(seedsConfig && { seeds: { ...seedsConfig, run: [] } }),
+        ...(options.kms && { kms: options.kms }),
+        ...(options.blindIndexKey !== undefined && { blindIndexKey: options.blindIndexKey }),
+        ...(options.auth && { auth: options.auth }),
+    }, rawEnvSource);
+    const envSource = Object.keys(wiring.envDefaults).length > 0
+        ? { ...wiring.envDefaults, ...rawEnvSource }
+        : rawEnvSource;
+    assertStackBootRequirements({
+        features: options.features,
+        ...(options.featureToggles && { featureToggles: true }),
+    }, ["featureToggles"]);
     // auth.mail → normalisiert in die expliziten Flow-Felder (symmetrisch zu
     // runProdApp). hmacSecret = JWT_SECRET-env (fail-fast, symmetrisch zu
     // runProdApp). Ab hier IMMER effectiveAuth statt options.auth.
     const effectiveAuth = options.auth
-        ? resolveAuthMail(options.auth, requireEnv("JWT_SECRET", envSource, "runDevApp"), envSource)
+        ? resolveAuthMail(options.auth, requireEnv("JWT_SECRET", envSource, "runDevApp"), envSource, {
+            mailConfigured: wiring.mailConfigured,
+        })
         : undefined;
     const composeAuthOptions = buildComposeAuthOptions(effectiveAuth);
     const { unsubscribeLinks, unsubscribeRoutes } = resolveUnsubscribeWiring({
@@ -54,10 +96,10 @@ export async function runDevApp(options) {
         envSource,
         warn: (message) => createFallbackLogger("runDevApp").warn(message),
     });
-    const extraRoutes = unsubscribeRoutes.length === 0
+    const extraRoutes = unsubscribeRoutes.length === 0 && wiring.extraRoutes.length === 0
         ? options.extraRoutes
-        : [...(options.extraRoutes ?? []), ...unsubscribeRoutes];
-    const features = composeFeatures(options.features, {
+        : [...(options.extraRoutes ?? []), ...unsubscribeRoutes, ...wiring.extraRoutes];
+    const features = composeFeatures([...options.features, ...wiring.features], {
         includeBundled: !!effectiveAuth,
         ...(composeAuthOptions && { authOptions: composeAuthOptions }),
     });
@@ -65,13 +107,19 @@ export async function runDevApp(options) {
     // FILE_STORAGE_PROVIDER boot gate. Passed via the validateBoot env option
     // instead of mutating process.env, so nothing leaks into later runDevApp
     // calls in the same process.
-    const baseBootEnv = options.validateBootOptions?.env ?? process.env;
+    const baseBootEnv = {
+        ...wiring.envDefaults,
+        ...(options.validateBootOptions?.env ?? process.env),
+    };
+    const hasBootEnvDefaults = Object.keys(wiring.envDefaults).length > 0;
     const bootOptions = options.files !== undefined && baseBootEnv[FILE_STORAGE_PROVIDER_ENV] === undefined
         ? {
             ...options.validateBootOptions,
             env: { ...baseBootEnv, [FILE_STORAGE_PROVIDER_ENV]: FILE_STORAGE_PROVIDER_BOOT_SENTINEL },
         }
-        : options.validateBootOptions;
+        : hasBootEnvDefaults
+            ? { ...options.validateBootOptions, env: baseBootEnv }
+            : options.validateBootOptions;
     // Boot-Validation als allererstes — vor dem Server. Dieselbe
     // Fehlerklasse (unqualifizierte nav-/handler-QNs, screen-access etc.),
     // die früher nur runProdApp fing und sonst erst den Prod-Pod im
@@ -87,34 +135,33 @@ export async function runDevApp(options) {
     warnIfNonUtcServerTimeZone();
     validateAppCustomScreenWriteQns(process.cwd(), collectWriteHandlerQns(features));
     // Sprint-8a Tier-Composition auto-wire: scan features for a
-    // tenantTierResolver-extension. If found AND user didn't supply own
-    // effectiveFeatures, we wire a late-bound wrapper here and fill it
-    // in onAfterSetup (where stack.db + stack.registry are available).
+    // tenantTierResolver-extension and wire a late-bound wrapper here; it is
+    // filled in onAfterSetup (where stack.db + stack.registry are available).
+    // The global operator toggles layer over the same wrapper.
     // App-Author sees nothing — `createTierEngineFeature(opts)` mounts +
     // framework auto-wires.
-    const tierResolverUsage = options.effectiveFeatures ? undefined : findTierResolverUsage(features);
+    const tierResolverUsage = findTierResolverUsage(features);
     const tierResolverHolder = {
         resolver: undefined,
     };
-    const finalEffectiveFeatures = options.effectiveFeatures ??
-        (tierResolverUsage
-            ? Object.assign((tenantId) => {
-                // Defensive: Server starts AFTER onAfterSetup completes, so the
-                // resolver is filled before any request comes in. Throwing here
-                // means a programming error (boot order) rather than silent
-                // "all-features-on" misbehavior.
-                if (!tierResolverHolder.resolver) {
-                    throw new Error("tier-resolver: extension found but resolver not yet built — boot order issue?");
-                }
-                return tierResolverHolder.resolver(tenantId);
-            }, {
-                // Late-bind: der echte trialGate hängt erst nach plugin.build() am
-                // holder.resolver. Delegieren (nicht kopieren), weil dieses
-                // Wrapper-Closure vor build() konstruiert wird. Kein Trial → false.
-                trialGate: (tenantId, featureName) => tierResolverHolder.resolver?.trialGate?.(tenantId, featureName) ??
-                    Promise.resolve(false),
-            })
-            : undefined);
+    const finalEffectiveFeatures = tierResolverUsage || wiring.featureToggles
+        ? Object.assign((tenantId) => {
+            // Defensive: Server starts AFTER onAfterSetup completes, so the
+            // resolver is filled before any request comes in. Throwing here
+            // means a programming error (boot order) rather than silent
+            // "all-features-on" misbehavior.
+            if (!tierResolverHolder.resolver) {
+                throw new Error("tier-resolver: extension found but resolver not yet built — boot order issue?");
+            }
+            return tierResolverHolder.resolver(tenantId);
+        }, {
+            // Late-bind: der echte trialGate hängt erst nach plugin.build() am
+            // holder.resolver. Delegieren (nicht kopieren), weil dieses
+            // Wrapper-Closure vor build() konstruiert wird. Kein Trial → false.
+            trialGate: (tenantId, featureName) => tierResolverHolder.resolver?.trialGate?.(tenantId, featureName) ??
+                Promise.resolve(false),
+        })
+        : undefined;
     // configResolver-default fürs config-feature — im auth-mode immer
     // hinzufügen, im no-auth-mode dem Caller überlassen. Factory-form
     // wird gewrap't damit der spread auf das aufgerufene Result greift,
@@ -129,10 +176,21 @@ export async function runDevApp(options) {
     // Subject-KMS + Blind-Index (symmetrisch zu runProdApp). Dev warnt bei
     // Klartext-PII statt zu failen; kms+lookupable ohne blindIndexKey bricht
     // auch hier (Lookups wären in jedem Modus kaputt).
-    const piiKms = resolveDevPiiKms(options);
+    const piiKms = options.kmsMode !== undefined
+        ? {
+            kms: wiring.kms.kms,
+            blindIndexKey: wiring.kms.blindIndexKey,
+            generatedBlindIndexKey: false,
+            mode: wiring.kms.kms ? "app-kms" : "plaintext",
+        }
+        : resolveDevPiiKms(options);
     configurePiiSubjectKms(piiKms.kms);
     configureBlindIndexKey(piiKms.blindIndexKey);
     const releaseEphemeralPiiKms = captureEphemeralDevPiiKms(piiKms);
+    const releasePiiKms = async () => {
+        releaseEphemeralPiiKms();
+        await wiring.kms.close();
+    };
     assertPiiBootInvariants(features, {
         kms: piiKms.kms,
         blindIndexKey: piiKms.blindIndexKey,
@@ -260,6 +318,7 @@ export async function runDevApp(options) {
         ...(extraRoutes !== undefined && { extraRoutes }),
         ...(options.wire !== undefined && { wire: options.wire }),
         ...(trustedProxyHops !== undefined && { trustedProxyHops }),
+        ...(options.demoMode && { wrapFetch: wiring.wrapFetch }),
         ...(finalEffectiveFeatures !== undefined && {
             effectiveFeatures: finalEffectiveFeatures,
         }),
@@ -342,6 +401,15 @@ export async function runDevApp(options) {
                     cacheSync: stack.cacheSync,
                 });
             }
+            if (wiring.featureToggles) {
+                const bound = await wiring.featureToggles.bind({
+                    db: stack.db,
+                    registry: stack.registry,
+                    cacheSync: stack.cacheSync,
+                    tierResolver: tierResolverHolder.resolver,
+                });
+                tierResolverHolder.resolver = bound.resolver;
+            }
             if (effectiveAuth && stack.registry.getExtensionUsages(EXT_SESSION_STORE).length > 0) {
                 // Secure-by-default (#1372): resolve sessionStore provider; bind
                 // password-change mass-revoke + MFA revokeAllOthers.
@@ -374,17 +442,20 @@ export async function runDevApp(options) {
             // Runs before user-supplied seed callbacks so those can read /
             // override the deploy-defaults. The helper indirection is what
             // config-seed-boot.integration.ts pins — keep it as a single call.
+            for (const seed of wiring.shortcutSeeds) {
+                await seed(stack.db);
+            }
             await applyBootSeeds({
                 registry: stack.registry,
                 db: stack.db,
                 ...(bootCrypto.configCipher && { cipher: bootCrypto.configCipher }),
             });
-            for (const seed of options.seeds ?? []) {
+            for (const seed of stackSeeds) {
                 await seed(stack);
             }
         },
-    }).catch((error) => {
-        releaseEphemeralPiiKms();
+    }).catch(async (error) => {
+        await releasePiiKms().catch(() => { });
         throw error;
     });
     if (options.welcomeBanner) {
@@ -411,7 +482,7 @@ export async function runDevApp(options) {
                 await handle.stop();
             }
             finally {
-                releaseEphemeralPiiKms();
+                await releasePiiKms();
             }
         },
     };
@@ -427,7 +498,7 @@ export function mergeConfigResolverDefault(ctx, registry, envSource, cipher) {
             ...(cipher && { cipher }),
         }),
     };
-    // ctx.config wird per-Request aus _configAccessorFactory geminted (siehe
+    // ctx.config wird per-Request aus configAccessorFactory geminted (siehe
     // addConfigAccessorFactory) — sonst bleibt ctx.config undefined und Handler
     // die es lesen (createFileProviderForTenant) werfen. Aus dem EFFEKTIVEN
     // Resolver (Caller-Override gewinnt) gebaut, symmetrisch zu runProdApp.

package/dist/scaffold-app-feature.js

@@ -155,7 +155,7 @@ function renderWebIndex(name) {
 // createKumikoApp({ clientFeatures: [...] }) einhängen — das passiert
 // NICHT automatisch. Screens: eine Datei pro Screen in diesem Ordner.
 
-import type { ClientFeatureDefinition } from "@cosmicdrift/kumiko-renderer-web";
+import type { ClientFeatureDefinition } from "@cosmicdrift/kumiko-renderer/web";
 
 export const ${camel}Client: ClientFeatureDefinition = {
   name: "${name}",

package/dist/scaffold-app.d.ts

@@ -37,6 +37,9 @@ export type ScaffoldAppOptions = {
      *  @cosmicdrift/kumiko-testing/scaffold. Without it the app gets the managed
      *  bunfigs but no example tests and fewer standard scripts. */
     readonly testSetup?: ScaffoldTestSetupFactory;
+    /** Infra tag written to `package.json#kumiko.deploy.infraRef`. Unset: the managed
+     *  workflows call infra at `main` and `kumiko check managed` warns. */
+    readonly infraRef?: string;
 };
 export type ScaffoldAppResult = {
     readonly destination: string;

package/dist/scaffold-app.js

@@ -51,7 +51,7 @@ export async function scaffoldApp(options) {
     mkdirSync(join(destination, "src"), { recursive: true });
     mkdirSync(join(destination, "kumiko"), { recursive: true });
     const files = [];
-    write(join(destination, "package.json"), renderPackageJson(options.name, version, testSetup));
+    write(join(destination, "package.json"), renderPackageJson(options.name, version, testSetup, options.infraRef));
     files.push("package.json");
     write(join(destination, "kumiko.json"), renderKumikoManifest());
     files.push("kumiko.json");
@@ -137,18 +137,19 @@ function appScripts(testSetup) {
         prepare: PREPARE_SCRIPT,
     };
 }
-function renderPackageJson(name, version, testSetup) {
+function renderPackageJson(name, version, testSetup, infraRef) {
     return `${JSON.stringify({
         name,
         version: "0.1.0",
         private: true,
         type: "module",
+        ...(infraRef === undefined ? {} : { kumiko: { deploy: { infraRef } } }),
         scripts: appScripts(testSetup),
         dependencies: {
             "@cosmicdrift/kumiko-bundled-features": version,
             "@cosmicdrift/kumiko-dev-server": version,
             "@cosmicdrift/kumiko-framework": version,
-            "@cosmicdrift/kumiko-renderer-web": version,
+            "@cosmicdrift/kumiko-renderer": version,
             "@cosmicdrift/kumiko-server-runtime": version,
             react: "^19.2.6",
             "react-dom": "^19.2.6",
@@ -461,7 +462,7 @@ function renderClient(appName) {
         },
         { specifier: "./features/tasks/web", names: ["tasksClient"] },
         {
-            specifier: "@cosmicdrift/kumiko-renderer-web",
+            specifier: "@cosmicdrift/kumiko-renderer/web",
             names: ["type AppSchema", "createKumikoApp", "DefaultAppShell"],
         },
         { specifier: "react", names: ["ReactNode"], typeOnly: true },
@@ -659,7 +660,7 @@ For full docs see https://docs.kumiko.rocks.
 }
 function renderStylesCss() {
     return [
-        '@import "@cosmicdrift/kumiko-renderer-web/styles.css";',
+        '@import "@cosmicdrift/kumiko-renderer/web/styles.css";',
         "",
         '@source "./**/*.{ts,tsx}";',
         "",
@@ -693,7 +694,6 @@ function renderBinKumiko() {
         'import { envSchema } from "./env-schema";',
         "",
         "const [, , cmd, ...rest] = Bun.argv;",
-        "// biome-ignore lint/suspicious/noConsole: CLI output is the feature.",
         "const out = { log: (l: string) => console.log(l), err: (l: string) => console.error(l) };",
         "",
         'if (cmd === "schema") {',
@@ -708,7 +708,6 @@ function renderBinKumiko() {
         "  process.exit(await runConsumerCli(rest, out));",
         "}",
         "",
-        "// biome-ignore lint/suspicious/noConsole: CLI output is the feature.",
         "console.error(",
         `  \`\\n  Unknown: kumiko \${cmd ?? ""} — the standalone bundle only runs 'kumiko schema' and 'kumiko consumer'.\\n\`,`,
         ");",

package/dist/scaffold-demo-tasks.js

@@ -195,7 +195,7 @@ export const tasksTranslations: TranslationsByLocale = {
 `;
 }
 export function renderDemoTasksWebIndex() {
-    return `import type { ClientFeatureDefinition } from "@cosmicdrift/kumiko-renderer-web";
+    return `import type { ClientFeatureDefinition } from "@cosmicdrift/kumiko-renderer/web";
 import { tasksTranslations } from "../i18n";
 
 export const tasksClient: ClientFeatureDefinition = {

package/dist/scaffold-deploy.d.ts

@@ -88,9 +88,15 @@ export declare function scaffoldDeploy(options: ScaffoldDeployOptions): Scaffold
 /** Read-only: compares the rendered deploy files against what's on disk
  *  without writing anything. */
 export declare function checkDeployDrift(options: RenderDeployFilesOptions): CheckDeployDriftResult;
+export declare const DEPLOY_VISIBILITIES: readonly ["private", "public"];
+export type DeployVisibility = (typeof DEPLOY_VISIBILITIES)[number];
 export type KumikoReleaseTarget = {
     readonly namespace: string;
     readonly deployment: string;
+    readonly visibility: DeployVisibility;
+    /** Unset until the app pins an infra tag; templates render `main` then. */
+    readonly infraRef: string | undefined;
+    readonly docStatusGuard: boolean;
 };
 /** Release target from `package.json#kumiko.deploy`; throws on an invalid deploy config. */
 export declare function readReleaseTarget(sourceDir: string, appName: string): KumikoReleaseTarget;

package/dist/scaffold-deploy.js

@@ -147,6 +147,9 @@ const DB_IDENTIFIER_RE = /^[a-zA-Z0-9_][a-zA-Z0-9_-]{0,62}$/;
 // Kubernetes object names (RFC 1123 label); they are interpolated into the
 // generated release workflow, so nothing outside this charset may pass.
 const K8S_NAME_RE = /^[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?$/;
+// The ref lands in `uses: org/infra/...@<ref>` lines of generated workflows.
+const INFRA_REF_RE = /^[A-Za-z0-9][A-Za-z0-9._/-]{0,99}$/;
+export const DEPLOY_VISIBILITIES = ["private", "public"];
 const kumikoDeployConfigSchema = z
     .object({
     dbUser: z.string().regex(DB_IDENTIFIER_RE).optional(),
@@ -155,6 +158,12 @@ const kumikoDeployConfigSchema = z
     namespace: z.string().regex(K8S_NAME_RE).optional(),
     /** Name of the prod Deployment; default = appName. */
     deployment: z.string().regex(K8S_NAME_RE).optional(),
+    /** Tag or branch of cosmicdriftgamestudio/infra that ci.yml and release.yml pin their reusable workflows to. */
+    infraRef: z.string().regex(INFRA_REF_RE).optional(),
+    /** A public repo cannot call the private infra workflows; default "private". */
+    visibility: z.enum(DEPLOY_VISIBILITIES).optional(),
+    /** `false` turns the doc-status guard off in ci.yml; default on. */
+    docStatusGuard: z.boolean().optional(),
     // "directory" is the only behaviour left; the key stays valid so existing
     // package.json files keep scaffolding.
     stackNetwork: z
@@ -201,7 +210,13 @@ export function readReleaseTarget(sourceDir, appName) {
             throw new Error(`scaffoldDeploy: "${value}" cannot serve as the release ${field} (must match ${K8S_NAME_RE}); set package.json#kumiko.deploy.${field}`);
         }
     }
-    return { namespace, deployment };
+    return {
+        namespace,
+        deployment,
+        visibility: config.visibility ?? "private",
+        infraRef: config.infraRef,
+        docStatusGuard: config.docStatusGuard ?? true,
+    };
 }
 function resolveDbIdentifier(configured, appName, field, role) {
     const effective = configured ?? appName;

package/dist/testing.d.ts

@@ -0,0 +1,17 @@
+import type { ExtraRouteDefinition } from "@cosmicdrift/kumiko-framework/api";
+import type { FeatureDefinition } from "@cosmicdrift/kumiko-framework/engine";
+import { type InProcessSeededTenant, type PersistedTenant, type SeedTenantOptions, type SeedWriter } from "@cosmicdrift/kumiko-testing";
+import { type E2eSeedRoutesOptions } from "@cosmicdrift/kumiko-testing/e2e/seed-route";
+import { type TestStack } from "@cosmicdrift/kumiko-testing/stack";
+import { type SetupTestStackFromFeaturesOptions } from "./setup-test-stack-from-features.ts";
+export type SetupAppTestStackOptions = SetupTestStackFromFeaturesOptions & {
+    readonly registryTables?: boolean;
+};
+export declare function setupAppTestStack(features: readonly FeatureDefinition[], options?: SetupAppTestStackOptions): Promise<TestStack>;
+export declare function seedTenant(stack: TestStack, options?: SeedTenantOptions): Promise<InProcessSeededTenant>;
+export declare function persistTenantRows(write: SeedWriter, options?: {
+    readonly name?: string;
+    readonly users?: number;
+    readonly admin?: SeedTenantOptions["admin"];
+}): Promise<PersistedTenant>;
+export declare function createE2eSeedRoutes(options?: E2eSeedRoutesOptions): readonly ExtraRouteDefinition[];

package/dist/testing.js

@@ -0,0 +1,46 @@
+// Ready-made test functions that kumiko-testing cannot hold itself: it has no bundled-features or
+// dev-server dependency, so those pieces are injected here and apps import the bound result.
+import { hashPassword } from "@cosmicdrift/kumiko-bundled-features/auth-email-password";
+import { createMailTransportInMemoryFeature, getInbox, } from "@cosmicdrift/kumiko-bundled-features/mail-transport-inmemory";
+import { TenantHandlers, TenantQueries } from "@cosmicdrift/kumiko-bundled-features/tenant";
+import { UserHandlers } from "@cosmicdrift/kumiko-bundled-features/user";
+import { persistTenantRowsWith, seedTenantWith, } from "@cosmicdrift/kumiko-testing";
+import { createE2eSeedRoutes as createE2eSeedRoutesWith, } from "@cosmicdrift/kumiko-testing/e2e/seed-route";
+import { pushEntityProjectionTables } from "@cosmicdrift/kumiko-testing/stack";
+import { setupTestStackFromFeatures, } from "./setup-test-stack-from-features.js";
+export async function setupAppTestStack(features, options = {}) {
+    const { registryTables = true, includeBundled = true, ...stackOptions } = options;
+    const stack = await setupTestStackFromFeatures(features, {
+        ...stackOptions,
+        includeBundled,
+        entityTables: registryTables,
+    });
+    if (!registryTables)
+        return stack;
+    try {
+        await pushEntityProjectionTables(stack, stack.registry);
+    }
+    catch (error) {
+        await stack.cleanup();
+        throw error;
+    }
+    return stack;
+}
+const seedBundledApi = { hashPassword, UserHandlers, TenantHandlers };
+const seedRouteBundledApi = {
+    ...seedBundledApi,
+    tenantMeQuery: TenantQueries.me,
+    mailInbox: {
+        featureName: createMailTransportInMemoryFeature().name,
+        read: getInbox,
+    },
+};
+export function seedTenant(stack, options = {}) {
+    return seedTenantWith(stack, options, seedBundledApi);
+}
+export function persistTenantRows(write, options = {}) {
+    return persistTenantRowsWith(write, options, seedBundledApi);
+}
+export function createE2eSeedRoutes(options = {}) {
+    return createE2eSeedRoutesWith(options, seedRouteBundledApi);
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-dev-server",
-  "version": "0.374.0",
+  "version": "0.378.0",
   "description": "Dev-tooling for Kumiko apps: local dev-server bootstrap (runDevApp), scaffolding. Its compose-stacks/env-schema subpaths are consumed at prod boot too — see @cosmicdrift/kumiko-server-runtime for the prod runner itself.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -19,7 +19,8 @@
     "bunOnlyExports": [
       ".",
       "./managed-files",
-      "./setup-test-stack-from-features"
+      "./setup-test-stack-from-features",
+      "./testing"
     ]
   },
   "exports": {
@@ -47,6 +48,10 @@
       "types": "./dist/setup-test-stack-from-features.d.ts",
       "default": "./dist/setup-test-stack-from-features.js"
     },
+    "./testing": {
+      "types": "./dist/testing.d.ts",
+      "default": "./dist/testing.js"
+    },
     "./schema-apply": {
       "types": "./dist/schema-apply.d.ts",
       "default": "./dist/schema-apply.js"
@@ -72,14 +77,14 @@
     "kumiko-upgrade": "./bin/kumiko-upgrade.ts"
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-bundled-features": "0.374.0",
-    "@cosmicdrift/kumiko-framework": "0.374.0",
-    "@cosmicdrift/kumiko-headless": "0.374.0",
-    "@cosmicdrift/kumiko-renderer-mail-html": "0.374.0",
-    "@cosmicdrift/kumiko-renderer-web": "0.374.0",
-    "@cosmicdrift/kumiko-server-runtime": "0.374.0",
-    "@cosmicdrift/kumiko-testing": "0.374.0",
-    "@cosmicdrift/kumiko-types": "0.374.0",
+    "@cosmicdrift/kumiko-bundled-features": "0.378.0",
+    "@cosmicdrift/kumiko-framework": "0.378.0",
+    "@cosmicdrift/kumiko-renderer": "0.378.0",
+    "@cosmicdrift/kumiko-renderer-mail-html": "0.378.0",
+    "@cosmicdrift/kumiko-guards": "0.378.0",
+    "@cosmicdrift/kumiko-server-runtime": "0.378.0",
+    "@cosmicdrift/kumiko-testing": "0.378.0",
+    "@cosmicdrift/kumiko-types": "0.378.0",
     "bun-types": "^1.3.13",
     "ts-morph": "^28.0.0",
     "zod": "^4.4.3"
@@ -112,6 +117,10 @@
         "types": "./dist/setup-test-stack-from-features.d.ts",
         "default": "./dist/setup-test-stack-from-features.js"
       },
+      "./testing": {
+        "types": "./dist/testing.d.ts",
+        "default": "./dist/testing.js"
+      },
       "./schema-apply": {
         "types": "./dist/schema-apply.d.ts",
         "default": "./dist/schema-apply.js"

package/src/changes.json

@@ -1,4 +1,28 @@
 [
+  {
+    "version": "0.378.0",
+    "type": "improvement",
+    "title": "composeRendererStack forwards templateResolver options",
+    "detail": "RendererStackOptions.templateResolver is passed to createTemplateResolverFeature, so an app can set tenantEditable."
+  },
+  {
+    "version": "0.376.0",
+    "type": "improvement",
+    "title": "composeSaasStack with stripe warns instead of requiring billing",
+    "detail": "A stripe stack without the billing option logs a boot warning instead of aborting, and composeSaasStack takes featureToggles to require that option."
+  },
+  {
+    "version": "0.376.0",
+    "type": "improvement",
+    "title": "Managed workflows take infraRef, visibility and app-* jobs",
+    "detail": "ci.yml and release.yml render the infra reusables as @<infraRef> from package.json#kumiko.deploy.infraRef. Without it sync-managed renders @main and kumiko check managed warns; this warning becomes an error in a later release. kumiko.deploy.visibility \"public\" renders a self-contained ci.yml and a release.yml that only prints the gh workflow run hint for the public rollout. Jobs named app-* survive a sync and are not drift. kumiko.deploy.docStatusGuard false renders doc-status-guard false."
+  },
+  {
+    "version": "0.376.0",
+    "type": "improvement",
+    "title": "./testing subpath with the bound test stack and seed helpers",
+    "detail": "setupAppTestStack, seedTenant, persistTenantRows and createE2eSeedRoutes, wired to the bundled user, tenant and auth features."
+  },
   {
     "version": "0.373.0",
     "type": "improvement",