@cosmicdrift/kumiko-dev-server 0.90.0 → 0.90.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-dev-server",
-  "version": "0.90.0",
+  "version": "0.90.3",
   "description": "Development server bootstrap for Kumiko apps. Bundles the client, mints dev-JWTs, injects the resolved AppSchema, and seeds an admin. Not for production.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -50,8 +50,8 @@
     "kumiko-schema-check": "./bin/kumiko-schema-check.ts"
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-bundled-features": "0.90.0",
-    "@cosmicdrift/kumiko-framework": "0.90.0",
+    "@cosmicdrift/kumiko-bundled-features": "0.90.3",
+    "@cosmicdrift/kumiko-framework": "0.90.3",
     "ts-morph": "^28.0.0"
   },
   "publishConfig": {

package/src/__tests__/scaffold-app.test.ts

@@ -29,6 +29,7 @@ describe("scaffoldApp", () => {
       "bin/dev.ts",
       "src/client.tsx",
       ".env.example",
+      "docker-compose.yml",
       "README.md",
     ]);
     for (const f of result.files) {
@@ -104,6 +105,27 @@ describe("scaffoldApp", () => {
     expect(env).toContain("DATABASE_URL=");
   });
 
+  test("docker-compose.yml ports + credentials match the .env.example *_URL defaults", () => {
+    const dest = join(tmp, "my-shop");
+    scaffoldApp({ name: "my-shop", destination: dest });
+
+    const compose = readFileSync(join(dest, "docker-compose.yml"), "utf-8");
+    const env = readFileSync(join(dest, ".env.example"), "utf-8");
+    // README tells the user to run `docker compose up -d`; that only works if
+    // the compose service matches what the generated .env points its *_URLs at.
+    expect(env).toContain("127.0.0.1:5432");
+    expect(env).toContain("127.0.0.1:6379");
+    // Ports bind to loopback only — weak dev creds / auth-less Redis must not
+    // be reachable from the LAN (security review of the scaffold).
+    expect(compose).toContain('"127.0.0.1:5432:5432"');
+    expect(compose).toContain('"127.0.0.1:6379:6379"');
+    expect(compose).not.toContain('"5432:5432"');
+    expect(compose).not.toContain('"6379:6379"');
+    expect(compose).toContain("POSTGRES_PASSWORD: postgres");
+    expect(compose).toContain("image: postgres:");
+    expect(compose).toContain("image: redis:");
+  });
+
   test("README lists the mounted features dynamically", () => {
     const dest = join(tmp, "my-shop");
     scaffoldApp({

package/src/__tests__/walkthrough.integration.test.ts

@@ -42,6 +42,7 @@ describe("walkthrough — DX-3.1 snapshot", () => {
       "bin/dev.ts",
       "src/client.tsx",
       ".env.example",
+      "docker-compose.yml",
       "README.md",
     ]);
   });

package/src/scaffold-app.ts

@@ -89,6 +89,9 @@ export function scaffoldApp(options: ScaffoldAppOptions): ScaffoldAppResult {
   write(join(destination, ".env.example"), renderEnvExample(options.name));
   files.push(".env.example");
 
+  write(join(destination, "docker-compose.yml"), renderDockerCompose());
+  files.push("docker-compose.yml");
+
   write(join(destination, "README.md"), renderReadme(options.name, options.features));
   files.push("README.md");
 
@@ -455,6 +458,35 @@ KUMIKO_DEV_DB_NAME=${devDb}
 `;
 }
 
+// Local Postgres + Redis for `bun dev`. Ports + credentials match the *_URL
+// defaults in renderEnvExample, so `docker compose up -d` (referenced by the
+// README) just works with the generated .env. Named pg volume so dev data
+// survives `docker compose down` (pairs with KUMIKO_DEV_DB_NAME persistence).
+// Ports bind to 127.0.0.1 only: the dev DB (postgres/postgres) and auth-less
+// Redis must not be reachable from the LAN on a machine without a firewall.
+function renderDockerCompose(): string {
+  return `# Local Postgres + Redis for \`bun dev\`. Matches the *_URL defaults in .env.example.
+# Start: docker compose up -d   ·   Stop: docker compose down   ·   Reset: docker compose down -v
+# Ports bind to 127.0.0.1 only — weak dev credentials must not be exposed on the LAN.
+services:
+  postgres:
+    image: postgres:18
+    environment:
+      POSTGRES_USER: postgres
+      POSTGRES_PASSWORD: postgres
+    ports:
+      - "127.0.0.1:5432:5432"
+    volumes:
+      - kumiko-pg:/var/lib/postgresql/data
+  redis:
+    image: redis:7
+    ports:
+      - "127.0.0.1:6379:6379"
+volumes:
+  kumiko-pg:
+`;
+}
+
 function renderReadme(
   appName: string,
   features: ReadonlyArray<ScaffoldFeatureEntry> | undefined,
@@ -503,6 +535,7 @@ Runs \`KUMIKO_DRY_RUN_ENV=boot bun bin/main.ts\` — validates feature compositi
 - \`src/run-config.ts\` — single source of truth: which features your app mounts.
 - \`bin/dev.ts\` — dev-server entry (\`bun dev\`).
 - \`bin/main.ts\` — production-bootstrap (\`bun run boot\` smoke + production deploy).
+- \`docker-compose.yml\` — local Postgres + Redis for \`bun dev\`.
 
 For full docs see https://docs.kumiko.rocks.
 `;