@cosmicdrift/kumiko-server-runtime 0.329.0 → 0.330.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-server-runtime",
-  "version": "0.329.0",
+  "version": "0.330.2",
   "description": "Production server-boot runtime for Kumiko apps: connections, schema-drift-gate, seeds, lifecycle, graceful shutdown. Symmetric to kumiko-dev-server's runDevApp, without dev/scaffold/codegen tooling.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -19,78 +19,144 @@
   },
   "exports": {
     ".": {
-      "types": "./src/index.ts",
-      "default": "./src/index.ts"
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
     },
     "./compose-features": {
-      "types": "./src/compose-features.ts",
-      "default": "./src/compose-features.ts"
+      "types": "./dist/compose-features.d.ts",
+      "default": "./dist/compose-features.js"
     },
     "./run-prod-app": {
-      "types": "./src/run-prod-app.ts",
-      "default": "./src/run-prod-app.ts"
+      "types": "./dist/run-prod-app.d.ts",
+      "default": "./dist/run-prod-app.js"
     },
     "./run-worker-app": {
-      "types": "./src/run-worker-app.ts",
-      "default": "./src/run-worker-app.ts"
+      "types": "./dist/run-worker-app.d.ts",
+      "default": "./dist/run-worker-app.js"
     },
     "./bun-serve-options": {
-      "types": "./src/bun-serve-options.ts",
-      "default": "./src/bun-serve-options.ts"
+      "types": "./dist/bun-serve-options.d.ts",
+      "default": "./dist/bun-serve-options.js"
     },
     "./pii-boot-gate": {
-      "types": "./src/pii-boot-gate.ts",
-      "default": "./src/pii-boot-gate.ts"
+      "types": "./dist/pii-boot-gate.d.ts",
+      "default": "./dist/pii-boot-gate.js"
     },
     "./session-boot-gate": {
-      "types": "./src/session-boot-gate.ts",
-      "default": "./src/session-boot-gate.ts"
+      "types": "./dist/session-boot-gate.d.ts",
+      "default": "./dist/session-boot-gate.js"
     },
     "./boot/apply-boot-seeds": {
-      "types": "./src/boot/apply-boot-seeds.ts",
-      "default": "./src/boot/apply-boot-seeds.ts"
+      "types": "./dist/boot/apply-boot-seeds.d.ts",
+      "default": "./dist/boot/apply-boot-seeds.js"
     },
     "./boot/boot-crypto": {
-      "types": "./src/boot/boot-crypto.ts",
-      "default": "./src/boot/boot-crypto.ts"
+      "types": "./dist/boot/boot-crypto.d.ts",
+      "default": "./dist/boot/boot-crypto.js"
     },
     "./boot/job-run-logger": {
-      "types": "./src/boot/job-run-logger.ts",
-      "default": "./src/boot/job-run-logger.ts"
+      "types": "./dist/boot/job-run-logger.d.ts",
+      "default": "./dist/boot/job-run-logger.js"
     },
     "./extra-routes-deps": {
-      "types": "./src/extra-routes-deps.ts",
-      "default": "./src/extra-routes-deps.ts"
+      "types": "./dist/extra-routes-deps.d.ts",
+      "default": "./dist/extra-routes-deps.js"
     },
     "./renderer-web-fonts": {
-      "types": "./src/renderer-web-fonts.ts",
-      "default": "./src/renderer-web-fonts.ts"
+      "types": "./dist/renderer-web-fonts.d.ts",
+      "default": "./dist/renderer-web-fonts.js"
     },
     "./resolve-tailwind-cli": {
-      "types": "./src/resolve-tailwind-cli.ts",
-      "default": "./src/resolve-tailwind-cli.ts"
+      "types": "./dist/resolve-tailwind-cli.d.ts",
+      "default": "./dist/resolve-tailwind-cli.js"
     },
     "./try-hono-first": {
-      "types": "./src/try-hono-first.ts",
-      "default": "./src/try-hono-first.ts"
+      "types": "./dist/try-hono-first.d.ts",
+      "default": "./dist/try-hono-first.js"
     },
     "./build-prod-bundle": {
-      "types": "./src/build-prod-bundle.ts",
-      "default": "./src/build-prod-bundle.ts"
+      "types": "./dist/build-prod-bundle.d.ts",
+      "default": "./dist/build-prod-bundle.js"
     }
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-bundled-features": "0.329.0",
-    "@cosmicdrift/kumiko-framework": "0.329.0",
-    "@cosmicdrift/kumiko-headless": "0.329.0",
+    "@cosmicdrift/kumiko-bundled-features": "0.330.2",
+    "@cosmicdrift/kumiko-framework": "0.330.2",
+    "@cosmicdrift/kumiko-headless": "0.330.2",
+    "@cosmicdrift/kumiko-renderer-web": "0.330.2",
+    "bun-types": "^1.3.13",
+    "ioredis": "^5.10.1",
     "temporal-polyfill": "^0.3.2"
   },
   "publishConfig": {
     "registry": "https://registry.npmjs.org",
-    "access": "public"
+    "access": "public",
+    "exports": {
+      ".": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.js"
+      },
+      "./compose-features": {
+        "types": "./dist/compose-features.d.ts",
+        "default": "./dist/compose-features.js"
+      },
+      "./run-prod-app": {
+        "types": "./dist/run-prod-app.d.ts",
+        "default": "./dist/run-prod-app.js"
+      },
+      "./run-worker-app": {
+        "types": "./dist/run-worker-app.d.ts",
+        "default": "./dist/run-worker-app.js"
+      },
+      "./bun-serve-options": {
+        "types": "./dist/bun-serve-options.d.ts",
+        "default": "./dist/bun-serve-options.js"
+      },
+      "./pii-boot-gate": {
+        "types": "./dist/pii-boot-gate.d.ts",
+        "default": "./dist/pii-boot-gate.js"
+      },
+      "./session-boot-gate": {
+        "types": "./dist/session-boot-gate.d.ts",
+        "default": "./dist/session-boot-gate.js"
+      },
+      "./boot/apply-boot-seeds": {
+        "types": "./dist/boot/apply-boot-seeds.d.ts",
+        "default": "./dist/boot/apply-boot-seeds.js"
+      },
+      "./boot/boot-crypto": {
+        "types": "./dist/boot/boot-crypto.d.ts",
+        "default": "./dist/boot/boot-crypto.js"
+      },
+      "./boot/job-run-logger": {
+        "types": "./dist/boot/job-run-logger.d.ts",
+        "default": "./dist/boot/job-run-logger.js"
+      },
+      "./extra-routes-deps": {
+        "types": "./dist/extra-routes-deps.d.ts",
+        "default": "./dist/extra-routes-deps.js"
+      },
+      "./renderer-web-fonts": {
+        "types": "./dist/renderer-web-fonts.d.ts",
+        "default": "./dist/renderer-web-fonts.js"
+      },
+      "./resolve-tailwind-cli": {
+        "types": "./dist/resolve-tailwind-cli.d.ts",
+        "default": "./dist/resolve-tailwind-cli.js"
+      },
+      "./try-hono-first": {
+        "types": "./dist/try-hono-first.d.ts",
+        "default": "./dist/try-hono-first.js"
+      },
+      "./build-prod-bundle": {
+        "types": "./dist/build-prod-bundle.d.ts",
+        "default": "./dist/build-prod-bundle.js"
+      }
+    }
   },
   "files": [
-    "src",
+    "dist",
+    "src/changes.json",
     "README.md",
     "LICENSE"
   ]

package/src/changes.json

@@ -1,4 +1,10 @@
 [
+  {
+    "version": "0.330.0",
+    "type": "fix",
+    "title": "server-runtime and dev-server declare their renderer-web dependency and their .d.ts resolve Bun and Temporal types without consumer setup",
+    "detail": "The emitted declarations that mention `Temporal` or `Bun` now carry a preserved `/// <reference types>` for `temporal-polyfill/global` and `bun-types`, so a consumer without `bun-types` in its tsconfig no longer gets unresolved `Temporal`/`Bun` errors from our declarations. `kumiko-server-runtime` and `kumiko-dev-server` declare `@cosmicdrift/kumiko-renderer-web` as a dependency (they resolve its `styles.css`; it was already installed through bundled-features) and `bun-types` as a dependency. `bundled-features`, `server-runtime`, `dev-server`, `dispatcher-live`, `headless`, `renderer`, `renderer-web` and `cli` ship the README.md their `files` list already named. `bun run check:dist` now typechecks the packed install, checks README shipping, runtime-resolved package declarations and the `styles.css` resolve."
+  },
   {
     "version": "0.328.0",
     "type": "improvement",

package/src/__tests__/boot-extra-context.test.ts

@@ -1,163 +0,0 @@
-import { describe, expect, test } from "bun:test";
-import { createAuditFeature } from "@cosmicdrift/kumiko-bundled-features/audit";
-import { createDeliveryFeature } from "@cosmicdrift/kumiko-bundled-features/delivery";
-import { createSecretsFeature } from "@cosmicdrift/kumiko-bundled-features/secrets";
-import type { DbConnection } from "@cosmicdrift/kumiko-framework/db";
-import { createRegistry, defineFeature } from "@cosmicdrift/kumiko-framework/engine";
-import type { MasterKeyProvider } from "@cosmicdrift/kumiko-framework/secrets";
-import { buildBootExtraContext } from "../run-prod-app";
-
-// Pins runProdApp's framework-default-provider autowire (buildBootExtraContext):
-// textContent unconditional, secrets feature-gated, KEK-env trap avoided, the
-// money-horse regression (no secrets feature → no forced KEK → no throw), and
-// the delivery _notifyFactory wiring that makes ctx.notify work in prod (only
-// test-wired before — runProdApp/runDevApp call THIS, not createDeliveryTestContext).
-
-// db is never touched at construction time — createTextContentApi /
-// createSecretsContext only store the handle and query lazily. A bare stub
-// keeps this a fast unit test (no Postgres) instead of a full boot.
-const fakeDb = {} as unknown as DbConnection;
-const registry = createRegistry([]);
-const KEK = Buffer.alloc(32, 7).toString("base64");
-
-const otherFeature = defineFeature("widgets", () => {});
-
-describe("buildBootExtraContext — framework-default provider autowire", () => {
-  test("templateResolver is wired unconditionally (no secrets feature, no auth)", () => {
-    const ctx = buildBootExtraContext({
-      db: fakeDb,
-      features: [otherFeature],
-      envSource: {},
-      registry,
-      hasAuth: false,
-    });
-    expect(typeof (ctx["templateResolver"] as { findExact?: unknown }).findExact).toBe("function");
-    expect(ctx["secrets"]).toBeUndefined();
-    expect(ctx["configResolver"]).toBeUndefined();
-    expect(ctx["_notifyFactory"]).toBeUndefined();
-  });
-
-  test("delivery feature mounted → _notifyFactory wired (ctx.notify works in prod)", () => {
-    const ctx = buildBootExtraContext({
-      db: fakeDb,
-      features: [createDeliveryFeature()],
-      envSource: {},
-      registry,
-      hasAuth: false,
-    });
-    expect(typeof ctx["_notifyFactory"]).toBe("function");
-  });
-
-  test("no delivery feature → _notifyFactory not wired", () => {
-    const ctx = buildBootExtraContext({
-      db: fakeDb,
-      features: [otherFeature],
-      envSource: {},
-      registry,
-      hasAuth: false,
-    });
-    expect(ctx["_notifyFactory"]).toBeUndefined();
-  });
-
-  test("secrets feature mounted + valid KEK env → ctx.secrets wired", () => {
-    const ctx = buildBootExtraContext({
-      db: fakeDb,
-      features: [createSecretsFeature()],
-      envSource: {
-        KUMIKO_SECRETS_MASTER_KEY_V1: KEK,
-        KUMIKO_SECRETS_MASTER_KEY_CURRENT_VERSION: "1",
-      },
-      registry,
-      hasAuth: false,
-    });
-    const secrets = ctx["secrets"] as {
-      get?: unknown;
-      set?: unknown;
-      has?: unknown;
-      delete?: unknown;
-    };
-    expect(typeof secrets.get).toBe("function");
-    expect(typeof secrets.set).toBe("function");
-  });
-
-  test("secrets feature mounted, only V1 set (no CURRENT_VERSION) → wired (default '1')", () => {
-    const ctx = buildBootExtraContext({
-      db: fakeDb,
-      features: [createSecretsFeature()],
-      envSource: { KUMIKO_SECRETS_MASTER_KEY_V1: KEK },
-      registry,
-      hasAuth: false,
-    });
-    expect(ctx["secrets"]).toBeDefined();
-  });
-
-  test("secrets feature mounted but NO KEK + no override → skipped, no throw (dev DEV_KEY path)", () => {
-    // dev wires its own DEV_KEY secrets explicitly; the auto-wire must not
-    // eagerly construct an env-provider and crash the boot when no env KEK
-    // exists. ctx.secrets stays unset so the app's explicit wiring wins.
-    let ctx: Record<string, unknown> | undefined;
-    expect(() => {
-      ctx = buildBootExtraContext({
-        db: fakeDb,
-        features: [createSecretsFeature()],
-        envSource: {},
-        registry,
-        hasAuth: false,
-      });
-    }).not.toThrow();
-    expect(ctx?.["secrets"]).toBeUndefined();
-  });
-
-  test("no secrets feature → no KEK ever read, boots green (money-horse regression)", () => {
-    const ctx = buildBootExtraContext({
-      db: fakeDb,
-      features: [otherFeature],
-      envSource: {}, // no KEK — must NOT matter when secrets isn't mounted
-      registry,
-      hasAuth: false,
-    });
-    expect(ctx["secrets"]).toBeUndefined();
-  });
-
-  test("masterKey override is used verbatim — no env-provider built", () => {
-    const override: MasterKeyProvider = {
-      wrapDek: async () => ({ encryptedDek: Buffer.alloc(0), kekVersion: 1 }),
-      unwrapDek: async () => Buffer.alloc(0),
-      currentVersion: () => 1,
-      isAvailable: async () => true,
-    };
-    // envSource is empty: if the override weren't honoured, createEnvMasterKeyProvider
-    // would throw "no KEK". It doesn't → the override path is taken.
-    const ctx = buildBootExtraContext({
-      db: fakeDb,
-      features: [createSecretsFeature()],
-      envSource: {},
-      registry,
-      hasAuth: false,
-      masterKey: override,
-    });
-    expect(ctx["secrets"]).toBeDefined();
-  });
-
-  test("audit feature mounted → _escapeHatchAuditSink wired", () => {
-    const ctx = buildBootExtraContext({
-      db: fakeDb,
-      features: [createAuditFeature()],
-      envSource: {},
-      registry,
-      hasAuth: false,
-    });
-    expect(typeof ctx["_escapeHatchAuditSink"]).toBe("function");
-  });
-
-  test("no audit feature → _escapeHatchAuditSink not wired", () => {
-    const ctx = buildBootExtraContext({
-      db: fakeDb,
-      features: [otherFeature],
-      envSource: {},
-      registry,
-      hasAuth: false,
-    });
-    expect(ctx["_escapeHatchAuditSink"]).toBeUndefined();
-  });
-});

package/src/__tests__/boot-probe-fixture.ts

@@ -1,64 +0,0 @@
-// Shared fixture for run-prod-app-{dry-run,env-source}.test.ts — both boot
-// runProdApp against a minimal probe feature with process.env cleared so the
-// test fully controls config via envSource. Table/feature name stay
-// parametrized (never collapsed to one shared fixture): a table clash
-// between the two test files' entities would surface as flaky cross-file
-// DB state, not a compile error.
-import { afterEach, beforeEach } from "bun:test";
-import {
-  createBooleanField,
-  createEntity,
-  createTextField,
-  defineFeature,
-  type FeatureDefinition,
-  type FeatureRegistrar,
-} from "@cosmicdrift/kumiko-framework/engine";
-import * as z from "zod";
-
-export function makeProbeFeature(opts: {
-  readonly name: string;
-  readonly table: string;
-  readonly extraSetup?: (r: FeatureRegistrar<string>) => void;
-}): FeatureDefinition {
-  const probeEntity = createEntity({
-    fields: {
-      name: createTextField({ personal: false, reason: "test_fixture", required: true }),
-      active: createBooleanField({ default: true }),
-    },
-    table: opts.table,
-  });
-  return defineFeature(opts.name, (r) => {
-    r.entity("widget", probeEntity);
-    opts.extraSetup?.(r);
-    r.queryHandler({
-      name: "ping",
-      schema: z.object({}),
-      access: { roles: ["anonymous"] },
-      rateLimit: { per: "ip", limit: 60, windowSeconds: 60 },
-      handler: async () => ({ pong: true }),
-    });
-  });
-}
-
-// DATABASE_URL/REDIS_URL/JWT_SECRET are required (their read throws
-// pre-#1441-fix boot bugs); PORT is non-throwing, cleared only so ambient
-// PORT can't mask an "envSource wins" assertion.
-export const CLEARED_BOOT_VARS = ["DATABASE_URL", "REDIS_URL", "JWT_SECRET", "PORT"] as const;
-
-// Registers beforeEach/afterEach for the current describe block — call this
-// at the top of a `describe(...)` body, same as calling beforeEach directly.
-export function withClearedBootEnv(): void {
-  const saved: Record<string, string | undefined> = {};
-  beforeEach(() => {
-    for (const k of CLEARED_BOOT_VARS) {
-      saved[k] = process.env[k];
-      delete process.env[k];
-    }
-  });
-  afterEach(() => {
-    for (const k of CLEARED_BOOT_VARS) {
-      if (saved[k] === undefined) delete process.env[k];
-      else process.env[k] = saved[k];
-    }
-  });
-}

package/src/__tests__/build-prod-bundle.inprocess.test.ts

@@ -1,233 +0,0 @@
-// In-process buildProdBundle — covers Bun.build + HTML render + build-info
-// in the same process (CLI subprocess tests do not contribute to lcov).
-
-import { afterEach, beforeEach, describe, expect, test } from "bun:test";
-import { existsSync, readdirSync } from "node:fs";
-import { mkdir, mkdtemp, readFile, rm, writeFile } from "node:fs/promises";
-import { tmpdir } from "node:os";
-import { join, resolve } from "node:path";
-import { buildProdBundle } from "../build-prod-bundle";
-
-const REPO_ROOT = resolve(import.meta.dir, "../../../..");
-
-describe("buildProdBundle in-process (Bun.build)", () => {
-  let tmp = "";
-
-  beforeEach(async () => {
-    tmp = await mkdtemp(join(tmpdir(), "kumiko-build-inproc-"));
-  });
-
-  afterEach(async () => {
-    await rm(tmp, { recursive: true, force: true });
-  });
-
-  async function writeMinimalClientApp(opts?: { html?: string; client?: string }) {
-    await mkdir(join(tmp, "src"), { recursive: true });
-    await writeFile(
-      join(tmp, "src/client.ts"),
-      opts?.client ??
-        `const root = document.getElementById("root"); if (root) root.textContent = "hi";`,
-    );
-    await mkdir(join(tmp, "public"), { recursive: true });
-    await writeFile(
-      join(tmp, "public/index.html"),
-      opts?.html ??
-        `<!doctype html><html><head></head><body><div id="root"></div><script type="module" src="/client.js"></script></body></html>`,
-    );
-    await writeFile(join(tmp, "package.json"), `{"name":"inproc-fixture","private":true}`);
-  }
-
-  test("client.ts → hashed bundle, manifest, build-info, injected script", async () => {
-    await writeMinimalClientApp();
-
-    const result = await buildProdBundle({ cwd: tmp, stylesheet: false });
-
-    expect(result.manifest["client.js"]).toMatch(/^\/assets\/client-[a-z0-9]+\.js$/);
-    expect(result.buildInfo?.id).toMatch(/^[0-9a-f]{12}$/);
-    expect(existsSync(join(tmp, "dist/build-info.json"))).toBe(true);
-
-    const html = await readFile(join(tmp, "dist/index.html"), "utf8");
-    expect(html).toContain(`src="${result.manifest["client.js"]}"`);
-    expect(html).toContain("__KUMIKO_BUILD__");
-
-    const assetPath = join(tmp, "dist", result.manifest["client.js"] ?? "");
-    expect(existsSync(assetPath)).toBe(true);
-    expect(await readFile(assetPath, "utf8")).toContain('"hi"');
-  });
-
-  test("missing index.html → error with template snippet", async () => {
-    await mkdir(join(tmp, "src"), { recursive: true });
-    await writeFile(join(tmp, "src/client.ts"), `console.log("hi");`);
-    await writeFile(join(tmp, "package.json"), `{"name":"no-html","private":true}`);
-
-    await expect(buildProdBundle({ cwd: tmp, stylesheet: false })).rejects.toThrow(
-      /kein index\.html gefunden/,
-    );
-  });
-
-  test("index.html without /client.js placeholder → error with snippet", async () => {
-    await writeMinimalClientApp({
-      html: `<!doctype html><html><body>no script</body></html>`,
-    });
-
-    await expect(buildProdBundle({ cwd: tmp, stylesheet: false })).rejects.toThrow(
-      /keinen Entry-Tag für \/client\.js/,
-    );
-  });
-
-  test("syntax-broken client → Bun.build rejects", async () => {
-    await writeMinimalClientApp({ client: `const x = {{{` });
-
-    // Bun may throw "Bundle failed" before returning `{ success: false }`.
-    await expect(buildProdBundle({ cwd: tmp, stylesheet: false })).rejects.toThrow(
-      /Bundle failed|Bun\.build failed/,
-    );
-  });
-
-  test("stylesheet override src/styles.css → hashed styles.css in manifest", async () => {
-    // Temp under REPO_ROOT so @tailwindcss/cli + tailwindcss peer resolve
-    // (same constraint as renderer-web-css-relocation.integration.test.ts).
-    const dir = await mkdtemp(join(REPO_ROOT, ".inproc-styles-"));
-    const cwd = join(dir, "app");
-    try {
-      await mkdir(join(cwd, "src"), { recursive: true });
-      await writeFile(
-        join(cwd, "src/client.ts"),
-        `const root = document.getElementById("root"); if (root) root.textContent = "hi";`,
-      );
-      await writeFile(join(cwd, "src/styles.css"), "body { margin: 0; }\n");
-      await mkdir(join(cwd, "public"), { recursive: true });
-      await writeFile(
-        join(cwd, "public/index.html"),
-        `<!doctype html><html><head><link rel="stylesheet" href="/styles.css" /></head><body><div id="root"></div><script type="module" src="/client.js"></script></body></html>`,
-      );
-      await writeFile(join(cwd, "package.json"), `{"name":"inproc-styles","private":true}`);
-
-      const result = await buildProdBundle({ cwd, stylesheet: "src/styles.css" });
-
-      expect(result.manifest["styles.css"]).toMatch(/^\/assets\/styles-[a-z0-9]+\.css$/);
-      const cssPath = join(cwd, "dist", result.manifest["styles.css"] ?? "");
-      expect(existsSync(cssPath)).toBe(true);
-      expect(await readFile(cssPath, "utf8")).toMatch(/margin:\s*0/);
-
-      const html = await readFile(join(cwd, "dist/index.html"), "utf8");
-      expect(html).toContain(`href="${result.manifest["styles.css"]}"`);
-      expect(html).not.toContain('href="/styles.css"');
-    } finally {
-      await rm(dir, { recursive: true, force: true });
-    }
-  });
-
-  test("renderer-web stylesheet → woff2 files land where the CSS points, no external font URL", async () => {
-    const dir = await mkdtemp(join(REPO_ROOT, ".inproc-fonts-"));
-    const cwd = join(dir, "app");
-    try {
-      await mkdir(join(cwd, "src"), { recursive: true });
-      await writeFile(
-        join(cwd, "src/client.ts"),
-        `const root = document.getElementById("root"); if (root) root.textContent = "hi";`,
-      );
-      await writeFile(
-        join(cwd, "src/styles.css"),
-        `@import "@cosmicdrift/kumiko-renderer-web/styles.css";\n`,
-      );
-      await mkdir(join(cwd, "public"), { recursive: true });
-      await writeFile(
-        join(cwd, "public/index.html"),
-        `<!doctype html><html><head><link rel="stylesheet" href="/styles.css" /></head><body><div id="root"></div><script type="module" src="/client.js"></script></body></html>`,
-      );
-      await writeFile(join(cwd, "package.json"), `{"name":"inproc-fonts","private":true}`);
-
-      const result = await buildProdBundle({ cwd, stylesheet: "src/styles.css" });
-
-      const css = await readFile(join(cwd, "dist", result.manifest["styles.css"] ?? ""), "utf8");
-      const referenced = [
-        ...css.matchAll(/url\("?(\/assets\/kumiko\/fonts\/[a-z0-9-]+\.woff2)"?\)/g),
-      ].map((m) => m[1] ?? "");
-      expect(referenced.length).toBeGreaterThanOrEqual(10);
-      for (const url of referenced) {
-        const file = join(cwd, "dist", url);
-        expect(existsSync(file)).toBe(true);
-        // woff2 magic number
-        expect((await readFile(file)).subarray(0, 4).toString("latin1")).toBe("wOF2");
-      }
-      expect(css).not.toMatch(/url\(\s*["']?(https?:)?\/\//);
-      expect(css).not.toContain("data:font");
-    } finally {
-      await rm(dir, { recursive: true, force: true });
-    }
-  });
-
-  test("missing stylesheet override → tailwind rejects", async () => {
-    const dir = await mkdtemp(join(REPO_ROOT, ".inproc-styles-miss-"));
-    const cwd = join(dir, "app");
-    try {
-      await mkdir(join(cwd, "src"), { recursive: true });
-      await writeFile(join(cwd, "src/client.ts"), `console.log("hi");`);
-      await mkdir(join(cwd, "public"), { recursive: true });
-      await writeFile(
-        join(cwd, "public/index.html"),
-        `<!doctype html><html><body><div id="root"></div><script type="module" src="/client.js"></script></body></html>`,
-      );
-      await writeFile(join(cwd, "package.json"), `{"name":"inproc-styles-miss","private":true}`);
-
-      await expect(buildProdBundle({ cwd, stylesheet: "src/missing-theme.css" })).rejects.toThrow(
-        /tailwind|Bundle failed|tailwindcss/i,
-      );
-    } finally {
-      await rm(dir, { recursive: true, force: true });
-    }
-  });
-
-  test("multi-entry client-admin + client-public via kumiko.clientEntries → two hashed bundles", async () => {
-    await mkdir(join(tmp, "src"), { recursive: true });
-    await writeFile(join(tmp, "src/client-admin.ts"), `console.log("admin");`);
-    await writeFile(join(tmp, "src/client-public.ts"), `console.log("public");`);
-    await mkdir(join(tmp, "public"), { recursive: true });
-    await writeFile(
-      join(tmp, "public/index.html"),
-      `<!doctype html><html><body><script type="module" src="/client-public.js"></script></body></html>`,
-    );
-    await writeFile(
-      join(tmp, "admin.html"),
-      `<!doctype html><html><body><script type="module" src="/client-admin.js"></script></body></html>`,
-    );
-    await writeFile(join(tmp, "package.json"), `{"name":"multi-inproc","private":true}`);
-
-    const result = await buildProdBundle({
-      cwd: tmp,
-      stylesheet: false,
-      clientEntries: [
-        { name: "admin", sourceFile: "./src/client-admin.ts" },
-        { name: "public", sourceFile: "./src/client-public.ts" },
-      ],
-    });
-
-    expect(result.manifest["client-admin.js"]).toMatch(/^\/assets\/client-admin-/);
-    expect(result.manifest["client-public.js"]).toMatch(/^\/assets\/client-public-/);
-    expect(existsSync(join(tmp, "dist/admin.html"))).toBe(true);
-    expect(existsSync(join(tmp, "dist/index.html"))).toBe(true);
-  });
-
-  test("undeclared helper next to declared entries produces no bundle for it", async () => {
-    await mkdir(join(tmp, "src"), { recursive: true });
-    await writeFile(join(tmp, "src/client-public.ts"), `console.log("public");`);
-    await writeFile(join(tmp, "src/client-helper.ts"), `export const helper = "unused";`);
-    await mkdir(join(tmp, "public"), { recursive: true });
-    await writeFile(
-      join(tmp, "public/index.html"),
-      `<!doctype html><html><body><script type="module" src="/client-public.js"></script></body></html>`,
-    );
-    await writeFile(join(tmp, "package.json"), `{"name":"undeclared-helper","private":true}`);
-
-    const result = await buildProdBundle({
-      cwd: tmp,
-      stylesheet: false,
-      clientEntries: [{ name: "public", sourceFile: "./src/client-public.ts" }],
-    });
-
-    expect(Object.keys(result.manifest)).toEqual(["client-public.js"]);
-    const assetFiles = readdirSync(join(tmp, "dist/assets"));
-    expect(assetFiles.some((f) => f.startsWith("client-helper-"))).toBe(false);
-  });
-});