@cosmicdrift/kumiko-dev-server 1.0.0 → 2.0.0

package/src/compose-features.ts

@@ -1,145 +0,0 @@
-// composeFeatures — single source of truth für die Feature-Liste die
-// Boot UND Schema-Generator sehen.
-//
-// Sowohl runDevApp als auch runProdApp mischen im auth-mode dieselben
-// vier Bundled-Features dazu (config + user + tenant + auth-email-pw).
-// Damit der drizzle-Schema-Generator pro App genau dieselbe Feature-
-// Liste sieht wie die Runtime, leben die Komposition hier — beide
-// Bootstrap-Wrapper UND der per-app drizzle/generate.ts rufen sie auf.
-//
-// Reihenfolge: Infrastruktur-Features (config/user/tenant) zuerst, dann
-// auth-email-password, dann die App-Features. Spätere Features dürfen
-// auf Frühere referenzieren (z.B. authClaims-Hooks an user/tenant).
-
-import {
-  type AuthEmailPasswordOptions,
-  type AuthMailLocale,
-  createAuthEmailPasswordFeature,
-  type EmailVerificationOptions,
-  type InviteOptions,
-  type PasswordResetOptions,
-  type SignupOptions,
-} from "@cosmicdrift/kumiko-bundled-features/auth-email-password";
-import { createConfigFeature } from "@cosmicdrift/kumiko-bundled-features/config";
-import { createTenantFeature } from "@cosmicdrift/kumiko-bundled-features/tenant";
-import { createUserFeature } from "@cosmicdrift/kumiko-bundled-features/user";
-import type { FeatureDefinition } from "@cosmicdrift/kumiko-framework/engine";
-
-export type ComposeFeaturesOptions = {
-  /** When true, prepends config + user + tenant + auth-email-password
-   *  before the app features. Mirror of "auth-mode" in run{Dev,Prod}App. */
-  readonly includeBundled: boolean;
-  /** Optional auth-feature-options durchgereicht an
-   *  createAuthEmailPasswordFeature. Wenn passwordReset / emailVerification
-   *  hier gesetzt sind, registriert das Feature die request-/confirm-
-   *  Handler — sonst NICHT (500 wenn die routes via auth-routes.ts
-   *  gemounted sind aber kein Handler dispatcht). Hand-in-hand mit dem
-   *  passwordReset-Block in RunProdAppAuthOptions / RunDevAppAuthOptions. */
-  readonly authOptions?: AuthEmailPasswordOptions;
-};
-
-export function composeFeatures(
-  appFeatures: readonly FeatureDefinition[],
-  options: ComposeFeaturesOptions,
-): FeatureDefinition[] {
-  if (!options.includeBundled) return [...appFeatures];
-
-  // Bundled foundation goes first so its instances carry the runDevApp /
-  // runProdApp `authOptions` (passwordReset wiring etc.). App-features that
-  // ALSO declare one of these names — e.g. the create-kumiko-app picker
-  // hands back `createAuthEmailPasswordFeature()` because the user ticked
-  // it — would otherwise crash createRegistry with "Duplicate feature".
-  // Drop the app-side duplicates and warn so the user can clean run-config.
-  const bundled = [
-    createConfigFeature(),
-    createUserFeature(),
-    createTenantFeature(),
-    createAuthEmailPasswordFeature(options.authOptions ?? {}),
-  ];
-  const bundledNames = new Set(bundled.map((f) => f.name));
-  const filteredApp: FeatureDefinition[] = [];
-  for (const f of appFeatures) {
-    if (bundledNames.has(f.name)) {
-      // biome-ignore lint/suspicious/noConsole: boot-time UX warning
-      console.warn(
-        `[composeFeatures] "${f.name}" already auto-mounted via includeBundled — dropping the explicit copy from APP_FEATURES. Remove it from run-config.ts to silence this warning.`,
-      );
-      continue;
-    }
-    filteredApp.push(f);
-  }
-  return [...bundled, ...filteredApp];
-}
-
-/** Shape eines beliebigen run{Prod,Dev}App-Auth-Blocks der eine
- *  PasswordReset/EmailVerification-Konfiguration tragen kann. Die
- *  Wrapper-API (PasswordResetSetup) extends die Feature-API
- *  (PasswordResetOptions), darum reicht ein structural-typed
- *  Lookup auf den auth-only-Subset. Erlaubt buildComposeAuthOptions
- *  mit RunProd- UND RunDev-AuthOptions zu callen ohne den Helper
- *  doppelt zu bauen. */
-export type AuthOptionsCarrier = {
-  readonly passwordReset?: PasswordResetOptions;
-  readonly emailVerification?: EmailVerificationOptions;
-  readonly signup?: SignupOptions;
-  readonly invite?: InviteOptions;
-};
-
-/** Baut den authOptions-Block für composeFeatures aus einem
- *  Wrapper-Auth-Block. Reicht NUR die feature-side-Felder
- *  (hmacSecret, tokenTtlMinutes, mode) durch — die mail-side
- *  (sendResetEmail/appResetUrl) gehört in die auth-routes-config
- *  und wird vom Wrapper separat verdrahtet.
- *
- *  Returnt undefined wenn weder passwordReset noch emailVerification
- *  gesetzt sind (composeFeatures default-deny: KEINE handler in der
- *  Registry registriert, /api/auth/request-password-reset etc. bleiben
- *  401/404). */
-type MailFlowFields = {
-  readonly appUrl: string;
-  readonly tokenTtlMinutes?: number;
-  readonly appName?: string;
-  readonly locale?: AuthMailLocale;
-};
-
-// The magic-link mail fields shared by all four flows. Conditional spreads omit
-// undefined keys (exactOptionalPropertyTypes) and avoid the property-write that
-// trips noPropertyAccessFromIndexSignature on the type-aliased option shapes.
-// reset/verify layer hmacSecret (+ mode) on top.
-function pickMailFields(src: MailFlowFields): MailFlowFields {
-  return {
-    appUrl: src.appUrl,
-    ...(src.tokenTtlMinutes !== undefined && { tokenTtlMinutes: src.tokenTtlMinutes }),
-    ...(src.appName !== undefined && { appName: src.appName }),
-    ...(src.locale !== undefined && { locale: src.locale }),
-  };
-}
-
-export function buildComposeAuthOptions(
-  auth: AuthOptionsCarrier | undefined,
-): AuthEmailPasswordOptions | undefined {
-  if (!auth) return undefined;
-  const opts: { -readonly [K in keyof AuthEmailPasswordOptions]: AuthEmailPasswordOptions[K] } = {};
-  if (auth.passwordReset) {
-    opts.passwordReset = {
-      hmacSecret: auth.passwordReset.hmacSecret,
-      ...pickMailFields(auth.passwordReset),
-    };
-  }
-  if (auth.emailVerification) {
-    opts.emailVerification = {
-      hmacSecret: auth.emailVerification.hmacSecret,
-      ...pickMailFields(auth.emailVerification),
-      ...(auth.emailVerification.mode !== undefined && { mode: auth.emailVerification.mode }),
-    };
-  }
-  if (auth.signup) {
-    opts.signup = pickMailFields(auth.signup);
-  }
-  if (auth.invite) {
-    opts.invite = pickMailFields(auth.invite);
-  }
-  return opts.passwordReset || opts.emailVerification || opts.signup || opts.invite
-    ? opts
-    : undefined;
-}

package/src/extra-routes-deps.ts

@@ -1,47 +0,0 @@
-import { ROLES } from "@cosmicdrift/kumiko-framework/auth";
-import type { DbConnection } from "@cosmicdrift/kumiko-framework/db";
-import {
-  createSystemUser,
-  type Registry,
-  type SessionUser,
-  type TenantId,
-  type WriteResult,
-} from "@cosmicdrift/kumiko-framework/engine";
-import type Redis from "ioredis";
-
-/** Deps für `extraRoutes` — geteilt zwischen runProdApp (prod) und
- *  createKumikoServer (dev), damit die beiden Pfade nicht driften.
- *  Naming: `deps` statt `ctx` weil im Framework `ctx` der HandlerContext
- *  mit user/tenant/registry ist — hier ist der Scope absichtlich kleiner
- *  (Routes laufen außerhalb der Auth/Tenant-Pipeline). */
-export type ExtraRoutesSystemDeps = {
-  readonly db: DbConnection;
-  readonly redis: Redis;
-  /** Feature-registry — z.B. für Plugin-Lookups via
-   *  `registry.getExtensionUsages("subscriptionProvider")`. */
-  readonly registry: Registry;
-  /** Schreibt durch den /api/*-Command-Dispatcher (gleiche Idempotency/
-   *  Job-Hooks) — aber als auto-konstruierter SystemAdmin des Ziel-
-   *  Tenants, OHNE Access-Check der Route. Privilege-Scope: SystemAdmin
-   *  ist die höchste nicht-tenant-scoped Rolle — der Call erreicht JEDEN
-   *  SystemAdmin-gegateten Handler auf jedem Tenant; das Rollen-Set ist
-   *  nicht konfigurierbar. Nur für Pfade, die ihre Authentizität selbst
-   *  beweisen (Provider-Webhook-Signaturen,
-   *  createSubscriptionWebhookHandler et al.). */
-  readonly dispatchSystemWrite: (args: {
-    readonly handlerQn: string;
-    readonly payload: unknown;
-    readonly tenantId: TenantId;
-  }) => Promise<WriteResult>;
-};
-
-type SystemWriteDispatcher = {
-  readonly write: (handlerQn: string, payload: unknown, user: SessionUser) => Promise<WriteResult>;
-};
-
-export function makeDispatchSystemWrite(
-  dispatcher: SystemWriteDispatcher,
-): ExtraRoutesSystemDeps["dispatchSystemWrite"] {
-  return ({ handlerQn, payload, tenantId }) =>
-    dispatcher.write(handlerQn, payload, createSystemUser(tenantId, [ROLES.SystemAdmin]));
-}

package/src/inject-schema.ts

@@ -1,24 +0,0 @@
-// Injiziert das Server-aufgelöste AppSchema in das HTML-Template damit
-// createKumikoApp() es synchron unter `window.__KUMIKO_SCHEMA__` vorfindet.
-// JSON ist valides JS — direkt eingebettet, der Browser parsed das
-// Object-Literal nativ.
-//
-// Geteilt zwischen dev-server (Schema kommt frisch aus dem laufenden
-// Prozess) und prod-server (Schema wird beim Boot einmal berechnet und
-// in die statisch ausgelieferte index.html injiziert). Beide Pfade
-// nutzen dieselbe Tag-Form damit `createKumikoApp` den Lookup nicht je
-// nach Kontext anders machen muss.
-//
-// Idempotenz: wenn das HTML schon einen __KUMIKO_SCHEMA__-Marker hat,
-// wird nicht doppelt injected — verhindert dass repeated index.html-
-// Reads (prod) oder bereits-vorbereitete templates (custom CI-builds)
-// stacking-Tags produzieren.
-
-export function injectSchema(html: string, schemaJson: string): string {
-  if (html.includes("__KUMIKO_SCHEMA__")) return html;
-  const tag = `<script>window.__KUMIKO_SCHEMA__=${schemaJson};</script>`;
-  if (html.includes('<script src="/client.js"')) {
-    return html.replace('<script src="/client.js"', `${tag}<script src="/client.js"`);
-  }
-  return html.includes("</body>") ? html.replace("</body>", `${tag}</body>`) : html + tag;
-}

package/src/resolve-tailwind-cli.ts

@@ -1,45 +0,0 @@
-// Resolved den lokal installierten @tailwindcss/cli-Bin auf seinen
-// absoluten Dateipfad. Wir vermeiden `bunx`, weil das auch bei lokal
-// installiertem Package noch das Registry-Manifest fragt und ohne Netz
-// mit `FailedToOpenSocket` stirbt.
-//
-// Ausgelagert aus create-kumiko-server.ts, damit unter vitest/Node
-// testbar (Bun-Branch + Resolve-Fail-Branch) ohne den Server zu
-// booten.
-
-import { dirname, resolve } from "node:path";
-
-type BunResolver = { resolveSync: (id: string, from: string) => string };
-
-export type ResolveTailwindCliDeps = {
-  readonly bun?: BunResolver;
-  readonly cwd: string;
-};
-
-export function resolveTailwindCli(deps: ResolveTailwindCliDeps): string | undefined {
-  if (deps.bun === undefined) return undefined;
-  try {
-    const pkgJsonPath = deps.bun.resolveSync("@tailwindcss/cli/package.json", deps.cwd);
-    // bin: { tailwindcss: "./dist/index.mjs" } → absoluter Pfad
-    return resolve(pkgJsonPath, "..", "dist", "index.mjs");
-  } catch {
-    return undefined;
-  }
-}
-
-/** Tailwind v4 resolves `@import "tailwindcss"` relative to the entry
- *  CSS file. Skip renderer-web fallback (or fail build) when peer deps
- *  aren't resolvable from that directory — e.g. Bun cache copies of
- *  `@cosmicdrift/kumiko-renderer-web` outside a hoisted node_modules tree. */
-export function canResolveTailwindStylesheet(
-  entryCss: string,
-  deps: ResolveTailwindCliDeps,
-): boolean {
-  if (deps.bun === undefined) return false;
-  try {
-    deps.bun.resolveSync("tailwindcss", dirname(entryCss));
-    return true;
-  } catch {
-    return false;
-  }
-}