@cosmicdrift/kumiko-server-runtime 0.333.0 → 0.335.0

package/dist/build-prod-bundle.d.ts

@@ -93,6 +93,7 @@ type ResolvedStylesheet = {
 export declare function assertRendererWebShellPresent(css: string, stylesheet: ResolvedStylesheet): void;
 export declare function discoverHtmlTemplate(cwd: string): string | undefined;
 export declare function runTailwindOnce(entry: string, cwd: string): Promise<string>;
+export declare function isEntryOutputFor(outName: string, baseName: string): boolean;
 export declare function buildMissingTemplateError(manifest: BuildManifest, entry: ClientEntry): string;
 export declare function injectAssetTags(html: string, manifest: BuildManifest, entry: ClientEntry, buildInfo?: BuildInfo): string;
 export declare function computeBuildId(manifest: BuildManifest): string;

package/dist/build-prod-bundle.js

@@ -524,6 +524,15 @@ export async function runTailwindOnce(entry, cwd) {
     await rm(tmpDir, { recursive: true, force: true });
     return css;
 }
+// Exact `<base>-<hash>.js` match: a plain prefix check would let
+// `client-admin-legacy-<hash>.js` satisfy the `client-admin` entry. The hash is
+// alphanumeric, so any further `-` in the remainder means another entry's base.
+export function isEntryOutputFor(outName, baseName) {
+    const prefix = `${baseName}-`;
+    if (!outName.startsWith(prefix) || !outName.endsWith(".js"))
+        return false;
+    return /^[A-Za-z0-9]+$/.test(outName.slice(prefix.length, -".js".length));
+}
 /** Multi-entry-build: ein Bun.build-Call mit allen entrypoints — shared
  *  chunks werden dedupliziert, hashes deterministisch. Returns map
  *  manifestKey → hashed-filename (basename, ohne /assets/-Prefix). */
@@ -565,10 +574,7 @@ async function buildClientBundles(entries, outDir) {
     const result = {};
     for (const entry of entries) {
         const baseName = (entry.sourceFile.split("/").pop() ?? "").replace(SOURCE_EXTENSION_PATTERN, "");
-        const match = entryOutputs.find((o) => {
-            const outName = o.path.split("/").pop() ?? "";
-            return outName.startsWith(`${baseName}-`);
-        });
+        const match = entryOutputs.find((o) => isEntryOutputFor(o.path.split("/").pop() ?? "", baseName));
         if (!match) {
             throw new Error(`[kumiko build] no entry-point output for "${entry.sourceFile}" (looked for "${baseName}-*.js")`);
         }

package/dist/run-prod-app-static-files.js

@@ -123,7 +123,7 @@ trustedProxyHops = 0) {
             etag: html.etag,
             cache: staticCachePolicy(pathname),
             headers: { "content-type": html.mime, ...extraHeaders },
-            lastModified: new Date(html.mtimeMs),
+            lastModified: html.mtimeMs === undefined ? undefined : new Date(html.mtimeMs),
         });
     }
     // Injects resolved head metadata into an already-read HTML payload, right
@@ -158,7 +158,6 @@ trustedProxyHops = 0) {
             bytes: encoded.buffer,
             mime: html.mime,
             etag: computeStrongEtag(encoded),
-            mtimeMs: html.mtimeMs,
         };
     }
     // hostDispatch konsultieren wenn gesetzt UND der Request auf den

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-server-runtime",
-  "version": "0.333.0",
+  "version": "0.335.0",
   "description": "Production server-boot runtime for Kumiko apps: connections, schema-drift-gate, seeds, lifecycle, graceful shutdown. Symmetric to kumiko-dev-server's runDevApp, without dev/scaffold/codegen tooling.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -80,10 +80,10 @@
     }
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-bundled-features": "0.333.0",
-    "@cosmicdrift/kumiko-framework": "0.333.0",
-    "@cosmicdrift/kumiko-headless": "0.333.0",
-    "@cosmicdrift/kumiko-renderer-web": "0.333.0",
+    "@cosmicdrift/kumiko-bundled-features": "0.335.0",
+    "@cosmicdrift/kumiko-framework": "0.335.0",
+    "@cosmicdrift/kumiko-headless": "0.335.0",
+    "@cosmicdrift/kumiko-renderer-web": "0.335.0",
     "bun-types": "^1.3.13",
     "ioredis": "^5.10.1",
     "temporal-polyfill": "^0.3.2"

package/src/changes.json

@@ -1,4 +1,10 @@
 [
+  {
+    "version": "0.335.0",
+    "type": "fix",
+    "title": "Client bundle mapping matches exact entry names; page-head HTML is validated by ETag only",
+    "detail": "Multi-entry client builds map each Bun output to its entry by exact `<base>-<hash>.js` name, so `client-admin` and `client-admin-legacy` can no longer receive each other's bundle. Static HTML with injected page head no longer sends `Last-Modified`, so a crawler sending only `If-Modified-Since` gets the fresh metadata instead of a stale 304."
+  },
   {
     "version": "0.330.0",
     "type": "fix",