@cosmicdrift/kumiko-server-runtime 0.327.0 → 0.328.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-server-runtime",
-  "version": "0.327.0",
+  "version": "0.328.1",
   "description": "Production server-boot runtime for Kumiko apps: connections, schema-drift-gate, seeds, lifecycle, graceful shutdown. Symmetric to kumiko-dev-server's runDevApp, without dev/scaffold/codegen tooling.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -62,6 +62,10 @@
       "types": "./src/extra-routes-deps.ts",
       "default": "./src/extra-routes-deps.ts"
     },
+    "./renderer-web-fonts": {
+      "types": "./src/renderer-web-fonts.ts",
+      "default": "./src/renderer-web-fonts.ts"
+    },
     "./resolve-tailwind-cli": {
       "types": "./src/resolve-tailwind-cli.ts",
       "default": "./src/resolve-tailwind-cli.ts"
@@ -76,9 +80,9 @@
     }
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-bundled-features": "0.327.0",
-    "@cosmicdrift/kumiko-framework": "0.327.0",
-    "@cosmicdrift/kumiko-headless": "0.327.0",
+    "@cosmicdrift/kumiko-bundled-features": "0.328.1",
+    "@cosmicdrift/kumiko-framework": "0.328.1",
+    "@cosmicdrift/kumiko-headless": "0.328.1",
     "temporal-polyfill": "^0.3.2"
   },
   "publishConfig": {

package/src/__tests__/build-prod-bundle.inprocess.test.ts

@@ -118,6 +118,46 @@ describe("buildProdBundle in-process (Bun.build)", () => {
     }
   });
 
+  test("renderer-web stylesheet → woff2 files land where the CSS points, no external font URL", async () => {
+    const dir = await mkdtemp(join(REPO_ROOT, ".inproc-fonts-"));
+    const cwd = join(dir, "app");
+    try {
+      await mkdir(join(cwd, "src"), { recursive: true });
+      await writeFile(
+        join(cwd, "src/client.ts"),
+        `const root = document.getElementById("root"); if (root) root.textContent = "hi";`,
+      );
+      await writeFile(
+        join(cwd, "src/styles.css"),
+        `@import "@cosmicdrift/kumiko-renderer-web/styles.css";\n`,
+      );
+      await mkdir(join(cwd, "public"), { recursive: true });
+      await writeFile(
+        join(cwd, "public/index.html"),
+        `<!doctype html><html><head><link rel="stylesheet" href="/styles.css" /></head><body><div id="root"></div><script type="module" src="/client.js"></script></body></html>`,
+      );
+      await writeFile(join(cwd, "package.json"), `{"name":"inproc-fonts","private":true}`);
+
+      const result = await buildProdBundle({ cwd, stylesheet: "src/styles.css" });
+
+      const css = await readFile(join(cwd, "dist", result.manifest["styles.css"] ?? ""), "utf8");
+      const referenced = [
+        ...css.matchAll(/url\("?(\/assets\/kumiko\/fonts\/[a-z0-9-]+\.woff2)"?\)/g),
+      ].map((m) => m[1] ?? "");
+      expect(referenced.length).toBeGreaterThanOrEqual(10);
+      for (const url of referenced) {
+        const file = join(cwd, "dist", url);
+        expect(existsSync(file)).toBe(true);
+        // woff2 magic number
+        expect((await readFile(file)).subarray(0, 4).toString("latin1")).toBe("wOF2");
+      }
+      expect(css).not.toMatch(/url\(\s*["']?(https?:)?\/\//);
+      expect(css).not.toContain("data:font");
+    } finally {
+      await rm(dir, { recursive: true, force: true });
+    }
+  });
+
   test("missing stylesheet override → tailwind rejects", async () => {
     const dir = await mkdtemp(join(REPO_ROOT, ".inproc-styles-miss-"));
     const cwd = join(dir, "app");

package/src/__tests__/renderer-web-theme-plugin.integration.test.ts

@@ -11,7 +11,7 @@ import { fileURLToPath } from "node:url";
 import { runTailwindOnce } from "../build-prod-bundle";
 
 const REPO_ROOT = resolve(dirname(fileURLToPath(import.meta.url)), "../../../..");
-const FRAMEWORK_LIGHT_PRIMARY = "--color-primary:#171717";
+const FRAMEWORK_LIGHT_PRIMARY = "--color-primary:#1a1c1e";
 
 function bunAvailable(): boolean {
   try {

package/src/boot/pii-event-backfill-on-boot.ts

@@ -0,0 +1,43 @@
+import type { DbConnection } from "@cosmicdrift/kumiko-framework/db";
+import type { Registry } from "@cosmicdrift/kumiko-framework/engine";
+import { createFallbackLogger } from "@cosmicdrift/kumiko-framework/logging";
+import { runPiiEventBackfill } from "@cosmicdrift/kumiko-framework/migrations";
+
+export const SKIP_PII_BACKFILL_ENV = "KUMIKO_SKIP_PII_BACKFILL";
+
+type ShutdownRegistry = {
+  registerShutdownHook(name: string, fn: () => Promise<void>): void;
+};
+
+// Runs in the background instead of blocking boot: the first run after a bump
+// scans the whole store and would delay readiness in proportion to its size.
+// Every batch is its own transaction, so an abort at any point is safe.
+export function startPiiEventBackfillOnBoot(opts: {
+  readonly db: DbConnection;
+  readonly registry: Registry;
+  readonly lifecycle: ShutdownRegistry;
+  readonly envSource: Readonly<Record<string, string | undefined>>;
+}): void {
+  if (opts.envSource[SKIP_PII_BACKFILL_ENV] === "1") {
+    // skip: operator opted out via KUMIKO_SKIP_PII_BACKFILL
+    return;
+  }
+
+  const log = createFallbackLogger("pii-event-backfill");
+  const abortController = new AbortController();
+  const run = runPiiEventBackfill(opts.db, opts.registry, {
+    signal: abortController.signal,
+  }).then(
+    () => undefined,
+    (e: unknown) => {
+      log.error("PII event backfill crashed; it will be retried on the next boot", {
+        error: e instanceof Error ? e.message : String(e),
+      });
+    },
+  );
+
+  opts.lifecycle.registerShutdownHook("piiEventBackfill", async () => {
+    abortController.abort();
+    await run;
+  });
+}

package/src/build-prod-bundle.ts

@@ -53,6 +53,11 @@ import { tmpdir } from "node:os";
 import { isAbsolute, join, relative, resolve, sep } from "node:path";
 import { isPlainObject, parseJsonOrThrow } from "@cosmicdrift/kumiko-framework/utils";
 import { Temporal } from "temporal-polyfill";
+import {
+  RENDERER_WEB_FONT_FILE_PATTERN,
+  RENDERER_WEB_FONTS_DIST_DIR,
+  resolveRendererWebFontsDir,
+} from "./renderer-web-fonts";
 import { canResolveTailwindStylesheet, resolveTailwindCli } from "./resolve-tailwind-cli";
 
 // Bun-Runtime-Check als module-level Konstante: alle Build-Schritte
@@ -186,6 +191,7 @@ export async function buildProdBundle(options: BuildProdBundleOptions = {}): Pro
     const filename = `styles-${hash}.css`;
     await writeFile(join(assetsDir, filename), css);
     manifest["styles.css"] = `/${ASSETS_DIR}/${filename}`;
+    await copyRendererWebFonts(cwd, outDir);
   }
 
   // 4. Bun.build pro Entry (multi-entry produces N bundles + shared chunks).
@@ -641,6 +647,22 @@ export function assertRendererWebShellPresent(css: string, stylesheet: ResolvedS
   );
 }
 
+// The compiled CSS points at absolute /assets/kumiko/fonts/<file>.woff2 URLs
+// (see renderer-web-fonts.ts), so the files have to sit at exactly that path in
+// dist. Skipped when renderer-web isn't resolvable — then no such CSS exists.
+async function copyRendererWebFonts(cwd: string, outDir: string): Promise<void> {
+  const fontsDir = resolveRendererWebFontsDir([cwd]);
+  // skip: renderer-web not resolvable, so no font-referencing CSS exists.
+  if (fontsDir === undefined || !existsSync(fontsDir)) return;
+  const target = join(outDir, RENDERER_WEB_FONTS_DIST_DIR);
+  await mkdir(target, { recursive: true });
+  for (const file of readdirSync(fontsDir)) {
+    if (RENDERER_WEB_FONT_FILE_PATTERN.test(file)) {
+      await cp(join(fontsDir, file), join(target, file));
+    }
+  }
+}
+
 // @internal — exported nur für Unit-Tests.
 export function discoverHtmlTemplate(cwd: string): string | undefined {
   for (const candidate of ["index.html", "public/index.html"]) {

package/src/changes.json

@@ -1,4 +1,10 @@
 [
+  {
+    "version": "0.328.0",
+    "type": "improvement",
+    "title": "Production build copies the renderer-web fonts",
+    "detail": "`buildProdBundle` copies the IBM Plex woff2 files to `dist/assets/kumiko/fonts/`, where the compiled CSS expects them. The new export `@cosmicdrift/kumiko-server-runtime/renderer-web-fonts` holds the URL prefix, the file name allowlist and the resolver, and the woff2 MIME type is known to the static file server."
+  },
   {
     "version": "0.323.0",
     "type": "breaking",

package/src/renderer-web-fonts.ts

@@ -0,0 +1,33 @@
+// The renderer-web stylesheet references its IBM Plex woff2 files by absolute
+// same-origin URL. Relative url() would 404: the CSS is compiled into a temp
+// dir (dev) or hashed into dist/assets (prod), away from the source fonts.
+// data: URIs are out because apps run with `font-src 'self'`.
+
+import { dirname, join } from "node:path";
+
+export const RENDERER_WEB_FONTS_URL_PREFIX = "/assets/kumiko/fonts/";
+
+/** dist-relative folder the prod build copies the fonts into. */
+export const RENDERER_WEB_FONTS_DIST_DIR = "assets/kumiko/fonts";
+
+/** Allowlist for servable font file names; also rules out path segments. */
+export const RENDERER_WEB_FONT_FILE_PATTERN = /^[a-z0-9-]+\.woff2$/;
+
+const hasBun = typeof (globalThis as { Bun?: unknown }).Bun !== "undefined";
+
+/** Directory of the woff2 files next to renderer-web's styles.css, or
+ *  undefined when the package can't be resolved from any `searchFrom` dir
+ *  (or outside Bun, which does the package-exports resolution). */
+export function resolveRendererWebFontsDir(searchFrom: readonly string[]): string | undefined {
+  if (!hasBun) return undefined;
+  const bun = (globalThis as { Bun: { resolveSync: (id: string, from: string) => string } }).Bun;
+  for (const from of searchFrom) {
+    try {
+      const stylesheet = bun.resolveSync("@cosmicdrift/kumiko-renderer-web/styles.css", from);
+      return join(dirname(stylesheet), "fonts");
+    } catch {
+      // try the next search root
+    }
+  }
+  return undefined;
+}

package/src/run-prod-app-static-files.ts

@@ -110,6 +110,8 @@ export function mimeTypeFor(filePath: string): string {
       return "application/xml; charset=utf-8";
     case "webmanifest":
       return "application/manifest+json";
+    case "woff2":
+      return "font/woff2";
     default:
       return "application/octet-stream";
   }

package/src/run-prod-app.ts

@@ -149,6 +149,7 @@ import Redis from "ioredis";
 import { applyBootSeeds } from "./boot/apply-boot-seeds";
 import { resolveBootCrypto } from "./boot/boot-crypto";
 import { jobRunLoggerCallbacks } from "./boot/job-run-logger";
+import { startPiiEventBackfillOnBoot } from "./boot/pii-event-backfill-on-boot";
 import { buildBunServeOptions, resolveDerivedMaxRequestBodySize } from "./bun-serve-options";
 import { buildComposeAuthOptions, composeFeatures } from "./compose-features";
 import { makeDispatchSystemWrite, type SystemWireDeps } from "./extra-routes-deps";
@@ -1301,6 +1302,12 @@ export async function runProdApp(options: RunProdAppOptions): Promise<ProdAppHan
   }
 
   await entrypoint.start();
+  startPiiEventBackfillOnBoot({
+    db,
+    registry,
+    lifecycle: entrypoint.lifecycle,
+    envSource,
+  });
 
   // 11. Build the fetch-handler. Static-fallback for non-/api/ paths
   //     wired via a wrapper so Hono owns /api/* + extraRoutes and disk

package/src/run-worker-app.ts

@@ -60,6 +60,7 @@ import { warnIfNonUtcServerTimeZone } from "@cosmicdrift/kumiko-framework/time";
 import Redis from "ioredis";
 import { resolveBootCrypto } from "./boot/boot-crypto";
 import { jobRunLoggerCallbacks } from "./boot/job-run-logger";
+import { startPiiEventBackfillOnBoot } from "./boot/pii-event-backfill-on-boot";
 import { composeFeatures } from "./compose-features";
 import { makeDispatchSystemWrite, type SystemWireDeps } from "./extra-routes-deps";
 import { assertPiiBootInvariants } from "./pii-boot-gate";
@@ -320,6 +321,12 @@ export async function runWorkerApp(options: RunWorkerAppOptions): Promise<Worker
   };
 
   await entrypoint.start();
+  startPiiEventBackfillOnBoot({
+    db,
+    registry,
+    lifecycle: entrypoint.lifecycle,
+    envSource,
+  });
 
   if (options.wireComponents) {
     await options.wireComponents({