@cosmicdrift/kumiko-server-runtime 0.154.1 → 0.154.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-server-runtime",
-  "version": "0.154.1",
+  "version": "0.154.2",
   "description": "Production server-boot runtime for Kumiko apps: connections, schema-drift-gate, seeds, lifecycle, graceful shutdown. Symmetric to kumiko-dev-server's runDevApp, without dev/scaffold/codegen tooling.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -72,8 +72,8 @@
     }
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-bundled-features": "0.154.1",
-    "@cosmicdrift/kumiko-framework": "0.154.1"
+    "@cosmicdrift/kumiko-bundled-features": "0.154.2",
+    "@cosmicdrift/kumiko-framework": "0.154.2"
   },
   "publishConfig": {
     "registry": "https://registry.npmjs.org",

package/src/__tests__/build-prod-bundle.test.ts

@@ -16,6 +16,7 @@ import {
   computeBuildId,
   discoverClientEntries,
   discoverHtmlTemplate,
+  formatBuildResult,
   injectAssetTags,
 } from "../build-prod-bundle";
 
@@ -276,3 +277,60 @@ describe("build-prod-bundle/injectAssetTags build-info", () => {
     expect(result).not.toContain("__KUMIKO_BUILD__");
   });
 });
+
+describe("build-prod-bundle/formatBuildResult", () => {
+  test("lists outDir, duration, and every manifest entry", () => {
+    const out = formatBuildResult(
+      {
+        outDir: "dist",
+        manifest: {
+          "client.js": "/assets/client-abc.js",
+          "styles.css": "/assets/styles-xyz.css",
+        },
+      },
+      42,
+    );
+    expect(out).toContain("dist");
+    expect(out).toContain("42ms");
+    expect(out).toContain("client.js");
+    expect(out).toContain("/assets/client-abc.js");
+    expect(out).toContain("styles.css");
+    expect(out).toContain("/assets/styles-xyz.css");
+  });
+
+  test("empty manifest still prints the success line", () => {
+    const out = formatBuildResult({ outDir: "dist-server", manifest: {} }, 1);
+    expect(out).toContain("dist-server");
+    expect(out).toContain("1ms");
+  });
+});
+
+describe("build-prod-bundle/discovery edges", () => {
+  let workDir = "";
+
+  beforeEach(async () => {
+    workDir = await mkdtemp(join(tmpdir(), "kumiko-build-edge-"));
+  });
+
+  afterEach(async () => {
+    await rm(workDir, { recursive: true, force: true });
+  });
+
+  test("discoverClientEntries accepts src/client.ts (no x)", async () => {
+    await mkdir(join(workDir, "src"), { recursive: true });
+    await writeFile(join(workDir, "src/client.ts"), "// single ts");
+    const entries = discoverClientEntries(workDir);
+    expect(entries).toHaveLength(1);
+    expect(entries[0]?.name).toBe("client");
+    expect(entries[0]?.sourceFile.endsWith("src/client.ts")).toBe(true);
+  });
+
+  test("discoverClientEntries ignores non-matching client-* names", async () => {
+    await mkdir(join(workDir, "src"), { recursive: true });
+    // Uppercase / leading digit / underscore violate ^client-([a-z][a-z0-9-]*)\.tsx?$
+    await writeFile(join(workDir, "src/client-Admin.tsx"), "// bad");
+    await writeFile(join(workDir, "src/client-1bad.tsx"), "// bad");
+    await writeFile(join(workDir, "src/client_admin.tsx"), "// bad");
+    expect(discoverClientEntries(workDir)).toEqual([]);
+  });
+});

package/src/__tests__/run-prod-app.integration.test.ts

@@ -886,6 +886,25 @@ describe("runProdApp job-lane wiring (runSingleInstance)", () => {
     };
     await expect(boot(undefined, { kms: unhealthyKms })).rejects.toThrow(/KMS health check failed/);
   });
+
+  test("rateLimit flows from runProdApp through entrypoint into the L1/L2 middleware (#1101)", async () => {
+    const handle = await boot(undefined, {
+      rateLimit: { global: { limit: 1, windowSeconds: 60 } },
+      anonymousAccess: { defaultTenantId: TENANT_ID },
+    });
+
+    const fetchOnce = () =>
+      handle.entrypoint.app.fetch(
+        new Request("http://test/api/query", {
+          method: "POST",
+          headers: { "content-type": "application/json", "x-forwarded-for": "203.0.113.9" },
+          body: JSON.stringify({ type: "prod-probe:query:ping", payload: {} }),
+        }),
+      );
+
+    expect((await fetchOnce()).status).toBe(200);
+    expect((await fetchOnce()).status).toBe(429);
+  });
 });
 
 describe("hard PII boot gate (#818 step 2)", () => {

package/src/run-prod-app.ts

@@ -564,6 +564,11 @@ export type RunProdAppOptions = {
    *  PrometheusMeter-basierten `observability`-Provider antwortet `/metrics`
    *  mit 503 + Misconfiguration-Hinweis statt echter Metriken. */
   readonly metrics?: import("@cosmicdrift/kumiko-framework/api").ServerOptions["metrics"];
+  /** L1 (Login-Lockout) + L2 (globaler IP-Limit) Rate-Limit-Middleware —
+   *  1:1 durchgereicht an `buildServer`s `ServerOptions.rateLimit`. Ohne
+   *  dieses Feld wird kein L1/L2 verdrahtet (L3 Handler-`rateLimit:`
+   *  funktioniert unabhängig davon bereits). */
+  readonly rateLimit?: import("@cosmicdrift/kumiko-framework/api").ServerOptions["rateLimit"];
 };
 
 export type ProdAppHandle = {
@@ -893,6 +898,7 @@ export async function runProdApp(options: RunProdAppOptions): Promise<ProdAppHan
     ...(options.observability && { observability: options.observability }),
     ...(options.observabilityOptions && { observabilityOptions: options.observabilityOptions }),
     ...(options.metrics && { metrics: options.metrics }),
+    ...(options.rateLimit && { rateLimit: options.rateLimit }),
     ...(effectiveAuth && {
       auth: {
         membershipQuery: TenantQueries.memberships,