@cosmicdrift/kumiko-server-runtime 0.345.0 → 0.347.0

package/dist/boot/record-app-started-on-boot.d.ts

@@ -1,7 +1,8 @@
 import type { DbConnection } from "@cosmicdrift/kumiko-framework/db";
 export declare const APP_VERSION_ENV = "KUMIKO_APP_VERSION";
 export declare const GIT_COMMIT_ENV = "KUMIKO_GIT_COMMIT";
-export declare const INSTANCE_ID_ENV = "HOSTNAME";
+export declare const INSTANCE_ID_ENV = "KUMIKO_INSTANCE_ID";
+export declare const HOSTNAME_ENV = "HOSTNAME";
 export declare const UNKNOWN_APP_VERSION = "unknown";
 type EnvSource = Readonly<Record<string, string | undefined>>;
 export type AppStartedPayload = {

package/dist/boot/record-app-started-on-boot.js

@@ -5,7 +5,8 @@ import { generateId } from "@cosmicdrift/kumiko-framework/utils";
 import { SYSTEM_TENANT_ID, SYSTEM_USER_ID } from "@cosmicdrift/kumiko-types/identifiers";
 export const APP_VERSION_ENV = "KUMIKO_APP_VERSION";
 export const GIT_COMMIT_ENV = "KUMIKO_GIT_COMMIT";
-export const INSTANCE_ID_ENV = "HOSTNAME";
+export const INSTANCE_ID_ENV = "KUMIKO_INSTANCE_ID";
+export const HOSTNAME_ENV = "HOSTNAME";
 export const UNKNOWN_APP_VERSION = "unknown";
 function nonEmpty(value) {
     return value === undefined || value === "" ? undefined : value;
@@ -15,7 +16,7 @@ export function resolveAppStartedPayload(envSource, fallbackHostname, startedAt)
     return {
         version: nonEmpty(envSource[APP_VERSION_ENV]) ?? UNKNOWN_APP_VERSION,
         ...(commit !== undefined ? { commit } : {}),
-        instanceId: nonEmpty(envSource[INSTANCE_ID_ENV]) ?? fallbackHostname,
+        instanceId: nonEmpty(envSource[INSTANCE_ID_ENV]) ?? nonEmpty(envSource[HOSTNAME_ENV]) ?? fallbackHostname,
         startedAt,
     };
 }

package/dist/run-prod-app.d.ts

@@ -132,6 +132,9 @@ export type RunProdAppAuthOptions = {
      *  AuthRoutesConfig.cookieDomain). Set to the registrable parent
      *  domain when login and app live on different subdomains. */
     readonly cookieDomain?: string;
+    /** Former cookie domains cleared on login/logout (see
+     *  AuthRoutesConfig.retiredCookieDomains). */
+    readonly retiredCookieDomains?: readonly string[];
     /** Server-side Origin allowlist for the CSRF guard (see
      *  AuthRoutesConfig.allowedOrigins). REQUIRED once `cookieDomain` is set —
      *  buildServer fails closed otherwise. Apex + admin host, never tenant

package/dist/run-prod-app.js

@@ -514,6 +514,9 @@ export async function runProdApp(options) {
                 ...(effectiveAuth.cookieDomain !== undefined && {
                     cookieDomain: effectiveAuth.cookieDomain,
                 }),
+                ...(effectiveAuth.retiredCookieDomains !== undefined && {
+                    retiredCookieDomains: effectiveAuth.retiredCookieDomains,
+                }),
                 ...(effectiveAuth.allowedOrigins !== undefined && {
                     allowedOrigins: effectiveAuth.allowedOrigins,
                 }),

package/dist/run-worker-app.js

@@ -15,6 +15,7 @@
 // Container/Coolify sets the same env vars as runProdApp:
 //   DATABASE_URL, REDIS_URL, JWT_SECRET — PORT is not needed.
 import { startPiiEventBackfillOnBoot } from "./boot/pii-event-backfill-on-boot.js";
+import { recordAppStartedOnBoot } from "./boot/record-app-started-on-boot.js";
 import { bootWorkerProcess, resolveWorkerEnvSource } from "./boot/worker-boot-core.js";
 import { startWorkerMetricsServer, } from "./boot/worker-metrics-server.js";
 import { makeDispatchSystemWrite } from "./extra-routes-deps.js";
@@ -55,6 +56,7 @@ export async function runWorkerApp(options) {
         stop: boot.close,
         ...(metricsServer && { metricsServer }),
     };
+    await recordAppStartedOnBoot({ db, envSource });
     startPiiEventBackfillOnBoot({
         db,
         registry,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-server-runtime",
-  "version": "0.345.0",
+  "version": "0.347.0",
   "description": "Production server-boot runtime for Kumiko apps: connections, schema-drift-gate, seeds, lifecycle, graceful shutdown. Symmetric to kumiko-dev-server's runDevApp, without dev/scaffold/codegen tooling.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -80,10 +80,10 @@
     }
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-bundled-features": "0.345.0",
-    "@cosmicdrift/kumiko-framework": "0.345.0",
-    "@cosmicdrift/kumiko-headless": "0.345.0",
-    "@cosmicdrift/kumiko-renderer-web": "0.345.0",
+    "@cosmicdrift/kumiko-bundled-features": "0.347.0",
+    "@cosmicdrift/kumiko-framework": "0.347.0",
+    "@cosmicdrift/kumiko-headless": "0.347.0",
+    "@cosmicdrift/kumiko-renderer-web": "0.347.0",
     "bun-types": "^1.3.13",
     "ioredis": "^5.10.1",
     "temporal-polyfill": "^0.3.2"

package/src/changes.json

@@ -1,4 +1,16 @@
 [
+  {
+    "version": "0.347.0",
+    "type": "fix",
+    "title": "runProdApp and runDevApp forward auth.retiredCookieDomains to the auth routes",
+    "detail": "runProdApp and runDevApp pass retiredCookieDomains through\n`auth.retiredCookieDomains` is now accepted by both runners and reaches the auth routes. Before, the option existed only on the lower-level route config, so apps starting through the runners could not clear a retired cookie domain."
+  },
+  {
+    "version": "0.346.0",
+    "type": "improvement",
+    "title": "runWorkerApp records app.started; instance id prefers KUMIKO_INSTANCE_ID over HOSTNAME",
+    "detail": "runWorkerApp records app.started too\nThe worker now appends the same `kumiko:system:app.started` event as `runProdApp`. The instance id prefers `KUMIKO_INSTANCE_ID` and falls back to `HOSTNAME`, then the OS hostname."
+  },
   {
     "version": "0.345.0",
     "type": "improvement",