@cosmicdrift/kumiko-dev-server 1.0.0 → 2.0.0

package/src/compose-stacks.ts

@@ -0,0 +1,184 @@
+// Composable SaaS stack presets — explicit opt-in blocks for run-config.ts.
+// Presets export feature instances only; no implicit PAT scopes, anonymousAccess,
+// or tier maps (those stay in bin/server.ts / app run-config).
+
+import { createAuditFeature } from "@cosmicdrift/kumiko-bundled-features/audit";
+import { authFoundationFeature } from "@cosmicdrift/kumiko-bundled-features/auth-foundation";
+import {
+  type AuthMfaFeatureOptions,
+  createAuthMfaFeature,
+} from "@cosmicdrift/kumiko-bundled-features/auth-mfa";
+import { createComplianceProfilesFeature } from "@cosmicdrift/kumiko-bundled-features/compliance-profiles";
+import { createDataRetentionFeature } from "@cosmicdrift/kumiko-bundled-features/data-retention";
+import { createDeliveryFeature } from "@cosmicdrift/kumiko-bundled-features/delivery";
+import { fileFoundationFeature } from "@cosmicdrift/kumiko-bundled-features/file-foundation";
+import { fileProviderInMemoryFeature } from "@cosmicdrift/kumiko-bundled-features/file-provider-inmemory";
+import { fileProviderS3Feature } from "@cosmicdrift/kumiko-bundled-features/file-provider-s3";
+import { fileProviderS3EnvFeature } from "@cosmicdrift/kumiko-bundled-features/file-provider-s3-env";
+import { createFilesFeature } from "@cosmicdrift/kumiko-bundled-features/files";
+import { createJobsFeature } from "@cosmicdrift/kumiko-bundled-features/jobs";
+import {
+  createLegalPagesFeature,
+  type LegalPagesOptions,
+} from "@cosmicdrift/kumiko-bundled-features/legal-pages";
+import { mailFoundationFeature } from "@cosmicdrift/kumiko-bundled-features/mail-foundation";
+import { mailTransportInMemoryFeature } from "@cosmicdrift/kumiko-bundled-features/mail-transport-inmemory";
+import { mailTransportSmtpFeature } from "@cosmicdrift/kumiko-bundled-features/mail-transport-smtp";
+import { createRateLimitingFeature } from "@cosmicdrift/kumiko-bundled-features/rate-limiting";
+import { createRendererFoundationFeature } from "@cosmicdrift/kumiko-bundled-features/renderer-foundation";
+import { createRendererSimpleFeature } from "@cosmicdrift/kumiko-bundled-features/renderer-simple";
+import { createSessionsFeature } from "@cosmicdrift/kumiko-bundled-features/sessions";
+import { createTemplateResolverFeature } from "@cosmicdrift/kumiko-bundled-features/template-resolver";
+import { createTenantLifecycleFeature } from "@cosmicdrift/kumiko-bundled-features/tenant-lifecycle";
+import { createTextContentFeature } from "@cosmicdrift/kumiko-bundled-features/text-content";
+import {
+  createUserDataRightsFeature,
+  type UserDataRightsOptions,
+} from "@cosmicdrift/kumiko-bundled-features/user-data-rights";
+import { createUserDataRightsDefaultsFeature } from "@cosmicdrift/kumiko-bundled-features/user-data-rights-defaults";
+import type { FeatureDefinition } from "@cosmicdrift/kumiko-framework/engine";
+
+export type FileProviderKind = "inmemory" | "s3" | "s3-env";
+export type MailTransportKind = "inmemory" | "smtp";
+export type GdprStackOrder = "retention-first" | "compliance-first";
+
+export type FileStackOptions = {
+  readonly providers: readonly FileProviderKind[];
+  readonly includeFilesFeature?: boolean;
+};
+
+export type MailStackOptions = {
+  readonly transports: readonly MailTransportKind[];
+};
+
+export type PagesStackOptions = {
+  readonly wrapLayout?: LegalPagesOptions["wrapLayout"];
+};
+
+export type GdprStackOptions = {
+  readonly order?: GdprStackOrder;
+  readonly sessions?: boolean;
+  readonly tenantLifecycle?: boolean;
+  /** Optional tokenVerifier provider(s) (e.g. PAT) when `sessions` is on.
+   *  Session-only stacks need none — sessions registers sessionStore, which
+   *  satisfies auth-foundation's boot check (#1570). Pass providers when the
+   *  app also wants Bearer/PAT auth. */
+  readonly providers?: readonly FeatureDefinition[];
+};
+
+export type UserDataRightsStackOptions = {
+  readonly userDataRights?: UserDataRightsOptions;
+  readonly includeDefaults?: boolean;
+};
+
+// `sessions` may live on composeIdentityStack OR composeGdprStack — never both
+// with sessions:true. composeOpsStack used to accept it too; combining presets
+// that each push "sessions" crashes createRegistry with "duplicate feature".
+export type OpsStackOptions = {
+  readonly delivery?: boolean;
+  readonly audit?: boolean;
+  readonly jobs?: boolean;
+  readonly rateLimiting?: boolean;
+};
+
+/** sessions (+ optional auth-mfa). config/user/tenant/auth-email-password stay
+ *  on composeFeatures(includeBundled). Pass `mfa` options to mount TOTP.
+ *  When `sessions` is on (the default), auth-foundation is mounted alongside it —
+ *  the framework's registry now hard-requires it (sessions.requires("auth-foundation")).
+ *  Session-only is enough for boot (#1570); optional Bearer/PAT still needs a
+ *  tokenVerifier provider from the caller (e.g. createPersonalAccessTokensFeature
+ *  ({ scopes })) — PAT scopes are app-specific, so they stay caller-owned. */
+export type IdentityStackOptions = {
+  readonly sessions?: boolean;
+  readonly mfa?: AuthMfaFeatureOptions;
+};
+
+export function stackFeatureNames(features: readonly FeatureDefinition[]): string[] {
+  return features.map((f) => f.name);
+}
+
+export function composePagesStack(options: PagesStackOptions = {}): FeatureDefinition[] {
+  return [
+    createTextContentFeature(),
+    createLegalPagesFeature(
+      options.wrapLayout !== undefined ? { wrapLayout: options.wrapLayout } : {},
+    ),
+  ];
+}
+
+export function composeRendererStack(): FeatureDefinition[] {
+  return [
+    createTemplateResolverFeature(),
+    createRendererFoundationFeature(),
+    createRendererSimpleFeature(),
+  ];
+}
+
+export function composeMailStack(options: MailStackOptions): FeatureDefinition[] {
+  const out: FeatureDefinition[] = [mailFoundationFeature];
+  for (const transport of options.transports) {
+    if (transport === "inmemory") out.push(mailTransportInMemoryFeature);
+    if (transport === "smtp") out.push(mailTransportSmtpFeature);
+  }
+  return out;
+}
+
+export function composeFileStack(options: FileStackOptions): FeatureDefinition[] {
+  const out: FeatureDefinition[] = [fileFoundationFeature];
+  for (const provider of options.providers) {
+    if (provider === "inmemory") out.push(fileProviderInMemoryFeature);
+    if (provider === "s3") out.push(fileProviderS3Feature);
+    if (provider === "s3-env") out.push(fileProviderS3EnvFeature);
+  }
+  if (options.includeFilesFeature ?? true) out.push(createFilesFeature());
+  return out;
+}
+
+/** Retention + compliance (+ optional lifecycle/sessions). UDR/files mount separately — order varies per app. */
+export function composeGdprStack(options: GdprStackOptions = {}): FeatureDefinition[] {
+  const order = options.order ?? "retention-first";
+  const retention = createDataRetentionFeature();
+  const compliance = createComplianceProfilesFeature();
+  const out: FeatureDefinition[] =
+    order === "compliance-first" ? [compliance, retention] : [retention, compliance];
+  if (options.tenantLifecycle) out.push(createTenantLifecycleFeature());
+  if (options.sessions) {
+    out.push(authFoundationFeature, createSessionsFeature());
+    if (options.providers) out.push(...options.providers);
+  }
+  return out;
+}
+
+export function composeUserDataRightsStack(
+  options: UserDataRightsStackOptions = {},
+): FeatureDefinition[] {
+  const includeDefaults = options.includeDefaults ?? true;
+  const out: FeatureDefinition[] = [createUserDataRightsFeature(options.userDataRights ?? {})];
+  if (includeDefaults) out.push(createUserDataRightsDefaultsFeature());
+  return out;
+}
+
+export function composeOpsStack(options: OpsStackOptions = {}): FeatureDefinition[] {
+  const delivery = options.delivery ?? true;
+  const audit = options.audit ?? true;
+  const jobs = options.jobs ?? true;
+  const rateLimiting = options.rateLimiting ?? false;
+  const out: FeatureDefinition[] = [];
+  if (delivery) out.push(createDeliveryFeature());
+  if (audit) out.push(createAuditFeature());
+  if (jobs) out.push(createJobsFeature());
+  if (rateLimiting) out.push(createRateLimitingFeature());
+  return out;
+}
+
+/** Identity opt-ins: sessions by default; auth-mfa when `mfa` options given.
+ *  Do not also pass `sessions: true` to composeGdprStack — duplicate feature. */
+export function composeIdentityStack(options: IdentityStackOptions = {}): FeatureDefinition[] {
+  const sessions = options.sessions ?? true;
+  const out: FeatureDefinition[] = [];
+  if (sessions) {
+    out.push(authFoundationFeature, createSessionsFeature());
+  }
+  if (options.mfa !== undefined) out.push(createAuthMfaFeature(options.mfa));
+  return out;
+}

package/src/create-kumiko-server.ts

@@ -19,6 +19,7 @@ import { existsSync, mkdtempSync, statSync } from "node:fs";
 import { readFile, watch } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import { join, resolve } from "node:path";
+import { resolveAnonymousAccessFromRegistry } from "@cosmicdrift/kumiko-bundled-features/auth-foundation";
 import { type AuthRoutesConfig, generateToken } from "@cosmicdrift/kumiko-framework/api";
 import { buildAppSchema, type FeatureDefinition } from "@cosmicdrift/kumiko-framework/engine";
 import { createEventsTable } from "@cosmicdrift/kumiko-framework/event-store";
@@ -29,11 +30,18 @@ import {
   type TestStackOptions,
   TestUsers,
 } from "@cosmicdrift/kumiko-framework/stack";
-import { type ExtraRoutesSystemDeps, makeDispatchSystemWrite } from "./extra-routes-deps";
-import { injectSchema } from "./inject-schema";
-import { canResolveTailwindStylesheet, resolveTailwindCli } from "./resolve-tailwind-cli";
-import { buildBunServeOptions } from "./run-prod-app";
-import { tryHonoFirst } from "./try-hono-first";
+import { startDevJobRunners } from "@cosmicdrift/kumiko-server-runtime/boot/job-run-logger";
+import { buildBunServeOptions } from "@cosmicdrift/kumiko-server-runtime/bun-serve-options";
+import {
+  type ExtraRoutesSystemDeps,
+  makeDispatchSystemWrite,
+} from "@cosmicdrift/kumiko-server-runtime/extra-routes-deps";
+import { injectSchema } from "@cosmicdrift/kumiko-server-runtime/inject-schema";
+import {
+  canResolveTailwindStylesheet,
+  resolveTailwindCli,
+} from "@cosmicdrift/kumiko-server-runtime/resolve-tailwind-cli";
+import { tryHonoFirst } from "@cosmicdrift/kumiko-server-runtime/try-hono-first";
 
 // Runtime-detection. The dev-server is meant to run under Bun (Kumiko's
 // target runtime), but the test-suite runs under vitest on Node — we
@@ -335,6 +343,7 @@ async function watchDir(
   } catch (err) {
     // signal.abort() wirft AbortError aus dem async-iterator; das ist
     // gewollt und kein Fehler. Andere Errors weiterreichen.
+    // skip: AbortSignal fired the abort, this is expected teardown not a real error
     if ((err as { name?: string }).name === "AbortError") return;
     throw err;
   }
@@ -665,10 +674,14 @@ export async function createKumikoServer(
     ...(options.auth !== undefined && { authConfig: options.auth }),
     ...(options.extraContext !== undefined && { extraContext: options.extraContext }),
     ...(options.anonymousAccess !== undefined && { anonymousAccess: options.anonymousAccess }),
+    enrichAnonymousAccess: (base, deps) => resolveAnonymousAccessFromRegistry(base, deps),
     ...(options.files !== undefined && { files: options.files }),
     ...(options.effectiveFeatures !== undefined && {
       effectiveFeatures: options.effectiveFeatures,
     }),
+    // jobs: {} = enqueuer-only; startDevJobRunners below is the sole
+    // consumer/cron-scheduler per lane, so runOnBoot/cron jobs don't double-fire.
+    jobs: {},
   });
   await createEventsTable(stack.db);
   await pushEntityProjectionTables(stack, stack.registry);
@@ -707,6 +720,14 @@ export async function createKumikoServer(
     await stack.eventDispatcher.start();
   }
 
+  const redisUrl = `redis://${stack.redis.redis.options.host}:${stack.redis.redis.options.port}/${stack.redis.redis.options.db}`;
+  const devJobRunners = await startDevJobRunners({
+    registry: stack.registry,
+    db: stack.db,
+    context: { db: stack.db, registry: stack.registry },
+    redisUrl,
+  });
+
   // Dev user = TestUsers.admin. Demo features are openToAll but the
   // auth-middleware still needs a valid JWT to let the request past.
   // Nicht genutzt wenn `options.auth` gesetzt ist — dann macht der Client
@@ -936,6 +957,7 @@ export async function createKumikoServer(
         dir,
         async (filename) => {
           const action = classifyChange(filename);
+          // skip: file change classified as ignore (test/css/json), nothing to rebuild
           if (action === "ignore") return;
           if (action === "restart") {
             logInfo(
@@ -977,6 +999,7 @@ export async function createKumikoServer(
     if (stack.eventDispatcher) {
       await stack.eventDispatcher.stop();
     }
+    await devJobRunners.stop();
     await stack.cleanup();
   };
 

package/src/few-shot-corpus.ts

@@ -52,7 +52,7 @@ export type CorpusWarning = {
   /** Human-readable explanation. Currently only "parser-throw" but
    *  kept open-ended so future builders can add more (e.g.
    *  "duplicate-id", "no-feature-name"). */
-  readonly reason: string;
+  readonly message: string;
 };
 
 export type FewShotEntry = {
@@ -161,7 +161,7 @@ export function buildFewShotCorpus(options: BuildFewShotCorpusOptions): FewShotC
       // warning, drop the second occurrence.
       warnings.push({
         sourcePath: entry.sourcePath,
-        reason: `duplicate-id: collides with ${previousPath}`,
+        message: `duplicate-id: collides with ${previousPath}`,
       });
       continue;
     }
@@ -198,7 +198,7 @@ function buildEntry(filePath: string, repoRoot: string): BuildEntryResult {
     // hide newly broken feature-files until L2 hit them.
     const detail = err instanceof Error ? err.message : String(err);
     return {
-      warning: { sourcePath, reason: `parser-throw: ${detail}` },
+      warning: { sourcePath, message: `parser-throw: ${detail}` },
     };
   }
 
@@ -295,6 +295,7 @@ function walkDir(dir: string, acc: string[]): void {
   try {
     entries = readdirSync(dir, { withFileTypes: true });
   } catch {
+    // skip: directory missing/unreadable, nothing to walk
     return;
   }
   for (const entry of entries) {

package/src/index.ts

@@ -13,6 +13,10 @@
 //     Login-Routes + Error-Map, ruft seedAdmin im onAfterSetup. Default
 //     für Sample-Apps und Showcases — 5-10 Zeilen Bootstrap statt 50.
 
+export {
+  type ComposeFeaturesOptions,
+  composeFeatures,
+} from "@cosmicdrift/kumiko-server-runtime/compose-features";
 // Build-Toolchain (buildProdBundle, Bun.build, Tailwind-Pipeline, ts-morph) lebt
 // im Sub-Path-Export `@cosmicdrift/kumiko-dev-server/build`. Damit zieht der Main-Barrel
 // kein Bun-Toolchain-Bundle mehr in Production-Reads (z.B. wenn drizzle-kit
@@ -25,7 +29,27 @@ export {
   type ScanWarning,
   scanEvents,
 } from "./codegen";
-export { type ComposeFeaturesOptions, composeFeatures } from "./compose-features";
+export {
+  composeFileStack,
+  composeGdprStack,
+  composeIdentityStack,
+  composeMailStack,
+  composeOpsStack,
+  composePagesStack,
+  composeRendererStack,
+  composeUserDataRightsStack,
+  type FileProviderKind,
+  type FileStackOptions,
+  type GdprStackOptions,
+  type GdprStackOrder,
+  type IdentityStackOptions,
+  type MailStackOptions,
+  type MailTransportKind,
+  type OpsStackOptions,
+  type PagesStackOptions,
+  stackFeatureNames,
+  type UserDataRightsStackOptions,
+} from "./compose-stacks";
 export {
   type CreateKumikoServerOptions,
   createKumikoServer,
@@ -43,17 +67,6 @@ export type {
 export { buildFewShotCorpus, pathToId } from "./few-shot-corpus";
 export type { RunDevAppAuthOptions, RunDevAppOptions, SeedFn } from "./run-dev-app";
 export { runDevApp } from "./run-dev-app";
-export type {
-  EmailVerificationSetup,
-  InviteSetup,
-  PasswordResetSetup,
-  ProdAppHandle,
-  ProdSeedFn,
-  RunProdAppAuthOptions,
-  RunProdAppOptions,
-  SignupSetup,
-} from "./run-prod-app";
-export { runProdApp } from "./run-prod-app";
 export type {
   ScaffoldAppOptions,
   ScaffoldAppResult,
@@ -73,4 +86,9 @@ export type {
 export { scaffoldDeploy } from "./scaffold-deploy";
 export type { ScaffoldFeatureOptions, ScaffoldFeatureResult } from "./scaffold-feature";
 export { scaffoldFeature } from "./scaffold-feature";
+export {
+  type SetupTestStackFromFeaturesOptions,
+  setupTestStackFromFeatures,
+  type TestStackPreset,
+} from "./setup-test-stack-from-features";
 export { renderWelcomeBanner, type WelcomeBannerInput } from "./welcome-banner";