@cosmicdrift/kumiko-dev-server 0.65.0 → 0.67.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-dev-server",
-  "version": "0.65.0",
+  "version": "0.67.0",
   "description": "Development server bootstrap for Kumiko apps. Bundles the client, mints dev-JWTs, injects the resolved AppSchema, and seeds an admin. Not for production.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -50,8 +50,8 @@
     "kumiko-schema-check": "./bin/kumiko-schema-check.ts"
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-bundled-features": "0.65.0",
-    "@cosmicdrift/kumiko-framework": "0.65.0",
+    "@cosmicdrift/kumiko-bundled-features": "0.67.0",
+    "@cosmicdrift/kumiko-framework": "0.67.0",
     "ts-morph": "^28.0.0"
   },
   "publishConfig": {

package/src/create-kumiko-server.ts

@@ -173,6 +173,11 @@ export type CreateKumikoServerOptions = {
    *  Handler `roles: ["anonymous"]` deklariert. Tenant-Resolution per
    *  Header/Cookie/Default; siehe AnonymousAccessConfig. */
   readonly anonymousAccess?: TestStackOptions["anonymousAccess"];
+  /** File-Storage-Provider — durchgereicht an setupTestStack. Wenn gesetzt,
+   *  mountet der Stack die Upload-Routes (POST/GET/DELETE /api/files) +
+   *  `ctx.files` und legt die file_refs-Tabelle an. Für Demos:
+   *  `{ storageProvider: createInMemoryFileProvider() }`. */
+  readonly files?: TestStackOptions["files"];
   /** Feature-toggle resolver — durchgereicht an setupTestStack. Wenn
    *  gesetzt, konsultiert der dispatcher-feature-gate, hook-filter, MSP-
    *  filter den callback; absent = alle features always-on. Erforderlich
@@ -660,6 +665,7 @@ export async function createKumikoServer(
     ...(options.auth !== undefined && { authConfig: options.auth }),
     ...(options.extraContext !== undefined && { extraContext: options.extraContext }),
     ...(options.anonymousAccess !== undefined && { anonymousAccess: options.anonymousAccess }),
+    ...(options.files !== undefined && { files: options.files }),
     ...(options.effectiveFeatures !== undefined && {
       effectiveFeatures: options.effectiveFeatures,
     }),

package/src/run-dev-app.ts

@@ -163,6 +163,9 @@ export type RunDevAppOptions = {
    *  als Pseudo-User mit Rolle `anonymous` durch, wenn der Handler die
    *  Rolle in `access.roles` führt. */
   readonly anonymousAccess?: CreateKumikoServerOptions["anonymousAccess"];
+  /** File-Storage-Provider — aktiviert die Upload-Routes (/api/files) +
+   *  `ctx.files`. Demos: `{ storageProvider: createInMemoryFileProvider() }`. */
+  readonly files?: CreateKumikoServerOptions["files"];
   /** App-eigene HTTP-Routes (z.B. /feed.xml, /sitemap.xml) — wird ans
    *  Hono-app gehängt, läuft VOR dem static-asset-Pfad. Symmetrisch zur
    *  gleichnamigen Option in runProdApp. */
@@ -187,6 +190,13 @@ export async function runDevApp(options: RunDevAppOptions): Promise<KumikoServer
     ...(composeAuthOptions && { authOptions: composeAuthOptions }),
   });
 
+  // Ein explizit gewireter File-Provider (options.files) erfüllt das
+  // FILE_STORAGE_PROVIDER-Boot-Gate — der Provider IST konfiguriert, nur
+  // nicht über die env-Bridge. Setzen bevor validateBoot greift.
+  if (options.files !== undefined && process.env["FILE_STORAGE_PROVIDER"] === undefined) {
+    process.env["FILE_STORAGE_PROVIDER"] = "configured";
+  }
+
   // Boot-Validation als allererstes — vor fs-Watcher und Server. Dieselbe
   // Fehlerklasse (unqualifizierte nav-/handler-QNs, screen-access etc.),
   // die früher nur runProdApp fing und sonst erst den Prod-Pod im
@@ -224,18 +234,28 @@ export async function runDevApp(options: RunDevAppOptions): Promise<KumikoServer
   const finalEffectiveFeatures: EffectiveFeaturesResolver | undefined =
     options.effectiveFeatures ??
     (tierResolverUsage
-      ? (tenantId: TenantId) => {
-          // Defensive: Server starts AFTER onAfterSetup completes, so the
-          // resolver is filled before any request comes in. Throwing here
-          // means a programming error (boot order) rather than silent
-          // "all-features-on" misbehavior.
-          if (!tierResolverHolder.resolver) {
-            throw new Error(
-              "tier-resolver: extension found but resolver not yet built — boot order issue?",
-            );
-          }
-          return tierResolverHolder.resolver(tenantId);
-        }
+      ? Object.assign(
+          (tenantId: TenantId) => {
+            // Defensive: Server starts AFTER onAfterSetup completes, so the
+            // resolver is filled before any request comes in. Throwing here
+            // means a programming error (boot order) rather than silent
+            // "all-features-on" misbehavior.
+            if (!tierResolverHolder.resolver) {
+              throw new Error(
+                "tier-resolver: extension found but resolver not yet built — boot order issue?",
+              );
+            }
+            return tierResolverHolder.resolver(tenantId);
+          },
+          {
+            // Late-bind: der echte trialGate hängt erst nach plugin.build() am
+            // holder.resolver. Delegieren (nicht kopieren), weil dieses
+            // Wrapper-Closure vor build() konstruiert wird. Kein Trial → false.
+            trialGate: (tenantId: TenantId, featureName: string): Promise<boolean> =>
+              tierResolverHolder.resolver?.trialGate?.(tenantId, featureName) ??
+              Promise.resolve(false),
+          },
+        )
       : undefined);
 
   // configResolver-default fürs config-feature — im auth-mode immer
@@ -298,6 +318,7 @@ export async function runDevApp(options: RunDevAppOptions): Promise<KumikoServer
     }),
     ...(extraContext !== undefined && { extraContext }),
     ...(options.anonymousAccess !== undefined && { anonymousAccess: options.anonymousAccess }),
+    ...(options.files !== undefined && { files: options.files }),
     ...(options.extraRoutes !== undefined && { extraRoutes: options.extraRoutes }),
     ...(finalEffectiveFeatures !== undefined && {
       effectiveFeatures: finalEffectiveFeatures,