@cosmicdrift/kumiko-server-runtime 0.343.0 → 0.345.0

package/dist/boot/record-app-started-on-boot.d.ts

@@ -0,0 +1,18 @@
+import type { DbConnection } from "@cosmicdrift/kumiko-framework/db";
+export declare const APP_VERSION_ENV = "KUMIKO_APP_VERSION";
+export declare const GIT_COMMIT_ENV = "KUMIKO_GIT_COMMIT";
+export declare const INSTANCE_ID_ENV = "HOSTNAME";
+export declare const UNKNOWN_APP_VERSION = "unknown";
+type EnvSource = Readonly<Record<string, string | undefined>>;
+export type AppStartedPayload = {
+    readonly version: string;
+    readonly commit?: string;
+    readonly instanceId: string;
+    readonly startedAt: string;
+};
+export declare function resolveAppStartedPayload(envSource: EnvSource, fallbackHostname: string, startedAt: string): AppStartedPayload;
+export declare function recordAppStartedOnBoot(opts: {
+    readonly db: DbConnection;
+    readonly envSource: EnvSource;
+}): Promise<void>;
+export {};

package/dist/boot/record-app-started-on-boot.js

@@ -0,0 +1,42 @@
+import { hostname } from "node:os";
+import { APP_INSTANCE_STREAM_TYPE, APP_STARTED_EVENT_TYPE, append, } from "@cosmicdrift/kumiko-framework/event-store";
+import { createFallbackLogger } from "@cosmicdrift/kumiko-framework/logging";
+import { generateId } from "@cosmicdrift/kumiko-framework/utils";
+import { SYSTEM_TENANT_ID, SYSTEM_USER_ID } from "@cosmicdrift/kumiko-types/identifiers";
+export const APP_VERSION_ENV = "KUMIKO_APP_VERSION";
+export const GIT_COMMIT_ENV = "KUMIKO_GIT_COMMIT";
+export const INSTANCE_ID_ENV = "HOSTNAME";
+export const UNKNOWN_APP_VERSION = "unknown";
+function nonEmpty(value) {
+    return value === undefined || value === "" ? undefined : value;
+}
+export function resolveAppStartedPayload(envSource, fallbackHostname, startedAt) {
+    const commit = nonEmpty(envSource[GIT_COMMIT_ENV]);
+    return {
+        version: nonEmpty(envSource[APP_VERSION_ENV]) ?? UNKNOWN_APP_VERSION,
+        ...(commit !== undefined ? { commit } : {}),
+        instanceId: nonEmpty(envSource[INSTANCE_ID_ENV]) ?? fallbackHostname,
+        startedAt,
+    };
+}
+// Audit trail only: a failed append must never keep the app from booting.
+export async function recordAppStartedOnBoot(opts) {
+    const payload = resolveAppStartedPayload(opts.envSource, hostname(), Temporal.Now.instant().toString());
+    try {
+        await append(opts.db, {
+            aggregateId: generateId(),
+            aggregateType: APP_INSTANCE_STREAM_TYPE,
+            tenantId: SYSTEM_TENANT_ID,
+            expectedVersion: 0,
+            type: APP_STARTED_EVENT_TYPE,
+            payload,
+            metadata: { userId: SYSTEM_USER_ID },
+        });
+    }
+    catch (e) {
+        createFallbackLogger("app-started").warn("Could not record app.started event; continuing boot", {
+            version: payload.version,
+            error: e instanceof Error ? e.message : String(e),
+        });
+    }
+}

package/dist/run-prod-app.js

@@ -65,6 +65,7 @@ import { applyBootSeeds } from "./boot/apply-boot-seeds.js";
 import { resolveBootCrypto } from "./boot/boot-crypto.js";
 import { jobRunLoggerCallbacks } from "./boot/job-run-logger.js";
 import { startPiiEventBackfillOnBoot } from "./boot/pii-event-backfill-on-boot.js";
+import { recordAppStartedOnBoot } from "./boot/record-app-started-on-boot.js";
 import { buildBunServeOptions, resolveDerivedMaxRequestBodySize } from "./bun-serve-options.js";
 import { buildComposeAuthOptions, composeFeatures } from "./compose-features.js";
 import { makeDispatchSystemWrite } from "./extra-routes-deps.js";
@@ -527,6 +528,7 @@ export async function runProdApp(options) {
                 ...patAuthFragment,
                 ...(mfaFeature && {
                     mfaVerifyHandler: AuthMfaHandlers.verify,
+                    switchTenantMfaGateHandler: AuthHandlers.switchTenantMfaGate,
                     mfaPreauthEnableStartHandler: AuthMfaHandlers.enableStartPreauth,
                     mfaPreauthConfirmHandler: AuthMfaHandlers.enableConfirmPreauth,
                     mfaVerifyRateLimit: createRedisLoginRateLimiter(redis, undefined, undefined, "mfa-verify"),
@@ -679,6 +681,7 @@ export async function runProdApp(options) {
         });
     }
     await entrypoint.start();
+    await recordAppStartedOnBoot({ db, envSource });
     startPiiEventBackfillOnBoot({
         db,
         registry,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-server-runtime",
-  "version": "0.343.0",
+  "version": "0.345.0",
   "description": "Production server-boot runtime for Kumiko apps: connections, schema-drift-gate, seeds, lifecycle, graceful shutdown. Symmetric to kumiko-dev-server's runDevApp, without dev/scaffold/codegen tooling.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -80,10 +80,10 @@
     }
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-bundled-features": "0.343.0",
-    "@cosmicdrift/kumiko-framework": "0.343.0",
-    "@cosmicdrift/kumiko-headless": "0.343.0",
-    "@cosmicdrift/kumiko-renderer-web": "0.343.0",
+    "@cosmicdrift/kumiko-bundled-features": "0.345.0",
+    "@cosmicdrift/kumiko-framework": "0.345.0",
+    "@cosmicdrift/kumiko-headless": "0.345.0",
+    "@cosmicdrift/kumiko-renderer-web": "0.345.0",
     "bun-types": "^1.3.13",
     "ioredis": "^5.10.1",
     "temporal-polyfill": "^0.3.2"

package/src/changes.json

@@ -1,4 +1,10 @@
 [
+  {
+    "version": "0.345.0",
+    "type": "improvement",
+    "title": "runProdApp records an app.started system event with version and instance on every boot",
+    "detail": "runProdApp records a `kumiko:system:app.started` event on every boot\nEach start appends one event under the system tenant (stream type `app-instance`) with the app version, the instance id (`HOSTNAME`, else the OS hostname) and the start time. Set `KUMIKO_APP_VERSION` and optionally `KUMIKO_GIT_COMMIT` in the deployment; without a version the event records `\"unknown\"`. A failed write is logged and does not stop the boot. The framework exports `APP_STARTED_EVENT_TYPE` and `APP_INSTANCE_STREAM_TYPE` from `event-store`."
+  },
   {
     "version": "0.343.0",
     "type": "fix",