@cosmicdrift/kumiko-server-runtime 0.155.0 → 0.155.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-server-runtime",
-  "version": "0.155.0",
+  "version": "0.155.1",
   "description": "Production server-boot runtime for Kumiko apps: connections, schema-drift-gate, seeds, lifecycle, graceful shutdown. Symmetric to kumiko-dev-server's runDevApp, without dev/scaffold/codegen tooling.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -72,8 +72,9 @@
     }
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-bundled-features": "0.155.0",
-    "@cosmicdrift/kumiko-framework": "0.155.0"
+    "@cosmicdrift/kumiko-bundled-features": "0.155.1",
+    "@cosmicdrift/kumiko-framework": "0.155.1",
+    "temporal-polyfill": "^0.3.2"
   },
   "publishConfig": {
     "registry": "https://registry.npmjs.org",

package/src/build-prod-bundle.ts

@@ -44,6 +44,7 @@ import { existsSync, readdirSync } from "node:fs";
 import { cp, mkdir, mkdtemp, readFile, rm, writeFile } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import { join, resolve } from "node:path";
+import { Temporal } from "temporal-polyfill";
 import { canResolveTailwindStylesheet, resolveTailwindCli } from "./resolve-tailwind-cli";
 
 // Bun-Runtime-Check als module-level Konstante: alle Build-Schritte
@@ -188,7 +189,7 @@ export async function buildProdBundle(options: BuildProdBundleOptions = {}): Pro
   //     nicht stale). Bei Bedarf an Server-Versionierung koppeln.
   const buildInfo: BuildInfo | undefined =
     Object.keys(manifest).length > 0
-      ? { id: computeBuildId(manifest), builtAt: new Date().toISOString() }
+      ? { id: computeBuildId(manifest), builtAt: Temporal.Now.instant().toString() }
       : undefined;
 
   // 6. HTML pro Entry rendern. Convention: ein HTML-File pro Client-Entry,
@@ -364,7 +365,9 @@ function resolveStylesheetEntry(
 // Laut failen statt ein 15KB-Image zu liefern, das in prod nackt rendert.
 // @internal — exportiert nur für Unit-Tests.
 export function assertRendererWebShellPresent(css: string, stylesheet: ResolvedStylesheet): void {
+  // skip: not the renderer-web fallback stylesheet, invariant doesn't apply
   if (!stylesheet.isRendererWebFallback) return;
+  // skip: shell sentinel class present, styles were scanned correctly
   if (css.includes(RENDERER_WEB_SHELL_SENTINEL)) return;
   throw new Error(
     `[kumiko build] renderer-web-Fallback-CSS ohne Shell-Klasse "${RENDERER_WEB_SHELL_SENTINEL}" — ` +

package/src/pii-boot-gate.ts

@@ -47,6 +47,7 @@ export function assertPiiBootInvariants(
     console.warn(
       `[${tag}] ${piiEntities.length} entities carry pii/userOwned/tenantOwned annotations but no \`kms\` adapter is configured — fields are stored in PLAINTEXT locally. Pass { kms: new InMemoryKmsAdapter() } (ephemeral DB) or createPgKmsAdapter(...) to exercise crypto-shredding in dev.`,
     );
+    // skip: dev mode, plaintext-PII warning already logged above
     return;
   }
   if (opts.allowPlaintextPii) {
@@ -54,6 +55,7 @@ export function assertPiiBootInvariants(
     console.warn(
       `[${tag}] ${piiEntities.length} entities carry PII annotations but no \`kms\` adapter is configured — fields are stored in PLAINTEXT (allowPlaintextPii: "${opts.allowPlaintextPii}"). GDPR erasure via crypto-shredding is NOT possible until a KMS is provisioned.`,
     );
+    // skip: operator explicitly acknowledged plaintext PII via allowPlaintextPii, warning already logged above
     return;
   }
   throw new Error(

package/src/run-prod-app.ts

@@ -1103,6 +1103,7 @@ export async function runProdApp(options: RunProdAppOptions): Promise<ProdAppHan
       // signals it shouldn't respond to.
       let shuttingDown = false;
       const shutdown = async (signal: string) => {
+        // skip: shutdown already in progress, avoid double-drain
         if (shuttingDown) return;
         shuttingDown = true;
         // biome-ignore lint/suspicious/noConsole: boot-time progress hint, no logger configured this early