@cosmicdrift/kumiko-server-runtime 0.346.0 → 0.347.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -132,6 +132,9 @@ export type RunProdAppAuthOptions = {
132
132
  * AuthRoutesConfig.cookieDomain). Set to the registrable parent
133
133
  * domain when login and app live on different subdomains. */
134
134
  readonly cookieDomain?: string;
135
+ /** Former cookie domains cleared on login/logout (see
136
+ * AuthRoutesConfig.retiredCookieDomains). */
137
+ readonly retiredCookieDomains?: readonly string[];
135
138
  /** Server-side Origin allowlist for the CSRF guard (see
136
139
  * AuthRoutesConfig.allowedOrigins). REQUIRED once `cookieDomain` is set —
137
140
  * buildServer fails closed otherwise. Apex + admin host, never tenant
@@ -514,6 +514,9 @@ export async function runProdApp(options) {
514
514
  ...(effectiveAuth.cookieDomain !== undefined && {
515
515
  cookieDomain: effectiveAuth.cookieDomain,
516
516
  }),
517
+ ...(effectiveAuth.retiredCookieDomains !== undefined && {
518
+ retiredCookieDomains: effectiveAuth.retiredCookieDomains,
519
+ }),
517
520
  ...(effectiveAuth.allowedOrigins !== undefined && {
518
521
  allowedOrigins: effectiveAuth.allowedOrigins,
519
522
  }),
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@cosmicdrift/kumiko-server-runtime",
3
- "version": "0.346.0",
3
+ "version": "0.347.0",
4
4
  "description": "Production server-boot runtime for Kumiko apps: connections, schema-drift-gate, seeds, lifecycle, graceful shutdown. Symmetric to kumiko-dev-server's runDevApp, without dev/scaffold/codegen tooling.",
5
5
  "license": "BUSL-1.1",
6
6
  "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -80,10 +80,10 @@
80
80
  }
81
81
  },
82
82
  "dependencies": {
83
- "@cosmicdrift/kumiko-bundled-features": "0.346.0",
84
- "@cosmicdrift/kumiko-framework": "0.346.0",
85
- "@cosmicdrift/kumiko-headless": "0.346.0",
86
- "@cosmicdrift/kumiko-renderer-web": "0.346.0",
83
+ "@cosmicdrift/kumiko-bundled-features": "0.347.0",
84
+ "@cosmicdrift/kumiko-framework": "0.347.0",
85
+ "@cosmicdrift/kumiko-headless": "0.347.0",
86
+ "@cosmicdrift/kumiko-renderer-web": "0.347.0",
87
87
  "bun-types": "^1.3.13",
88
88
  "ioredis": "^5.10.1",
89
89
  "temporal-polyfill": "^0.3.2"
package/src/changes.json CHANGED
@@ -1,4 +1,10 @@
1
1
  [
2
+ {
3
+ "version": "0.347.0",
4
+ "type": "fix",
5
+ "title": "runProdApp and runDevApp forward auth.retiredCookieDomains to the auth routes",
6
+ "detail": "runProdApp and runDevApp pass retiredCookieDomains through\n`auth.retiredCookieDomains` is now accepted by both runners and reaches the auth routes. Before, the option existed only on the lower-level route config, so apps starting through the runners could not clear a retired cookie domain."
7
+ },
2
8
  {
3
9
  "version": "0.346.0",
4
10
  "type": "improvement",