@cosmicdrift/kumiko-server-runtime 0.346.0 → 0.348.0

package/dist/run-prod-app.d.ts

@@ -132,6 +132,9 @@ export type RunProdAppAuthOptions = {
      *  AuthRoutesConfig.cookieDomain). Set to the registrable parent
      *  domain when login and app live on different subdomains. */
     readonly cookieDomain?: string;
+    /** Former cookie domains cleared on login/logout (see
+     *  AuthRoutesConfig.retiredCookieDomains). */
+    readonly retiredCookieDomains?: readonly string[];
     /** Server-side Origin allowlist for the CSRF guard (see
      *  AuthRoutesConfig.allowedOrigins). REQUIRED once `cookieDomain` is set —
      *  buildServer fails closed otherwise. Apex + admin host, never tenant

package/dist/run-prod-app.js

@@ -56,6 +56,7 @@ import { createAllInOneEntrypoint, createApiEntrypoint, } from "@cosmicdrift/kum
 import { KumikoBootError, kmsSlotsOf, parseEnv, withOptionalEnvKeys, } from "@cosmicdrift/kumiko-framework/env";
 import { renderDryRun } from "@cosmicdrift/kumiko-framework/env/dry-run";
 import { createEsOperationsTable, createSeedMigrationContext, runPendingSeedMigrations, } from "@cosmicdrift/kumiko-framework/es-ops";
+import { assertSeedModeNotInProduction } from "@cosmicdrift/kumiko-framework/event-store";
 import { assertKumikoSchemaCurrent, SchemaDriftError, } from "@cosmicdrift/kumiko-framework/migrations";
 import { createDispatcher, createEntityCache, createEventDedup, createIdempotencyGuard, } from "@cosmicdrift/kumiko-framework/pipeline";
 import { createRedisCacheSyncBus, redisClientOptionsFromEnv, } from "@cosmicdrift/kumiko-framework/redis";
@@ -155,6 +156,7 @@ function warnLegacyJwtSecretOnce() {
         "loadJwtSecretOrKeyring).");
 }
 export async function runProdApp(options) {
+    assertSeedModeNotInProduction();
     // 0. Env-Schema validation + dry-run modes. Runs FIRST so:
     //    - operators can introspect env-requirements without a real boot
     //      (no DB connection needed, KUMIKO_DRY_RUN_ENV=… → render + exit)
@@ -514,6 +516,9 @@ export async function runProdApp(options) {
                 ...(effectiveAuth.cookieDomain !== undefined && {
                     cookieDomain: effectiveAuth.cookieDomain,
                 }),
+                ...(effectiveAuth.retiredCookieDomains !== undefined && {
+                    retiredCookieDomains: effectiveAuth.retiredCookieDomains,
+                }),
                 ...(effectiveAuth.allowedOrigins !== undefined && {
                     allowedOrigins: effectiveAuth.allowedOrigins,
                 }),

package/dist/run-worker-app.js

@@ -14,6 +14,7 @@
 //
 // Container/Coolify sets the same env vars as runProdApp:
 //   DATABASE_URL, REDIS_URL, JWT_SECRET — PORT is not needed.
+import { assertSeedModeNotInProduction } from "@cosmicdrift/kumiko-framework/event-store";
 import { startPiiEventBackfillOnBoot } from "./boot/pii-event-backfill-on-boot.js";
 import { recordAppStartedOnBoot } from "./boot/record-app-started-on-boot.js";
 import { bootWorkerProcess, resolveWorkerEnvSource } from "./boot/worker-boot-core.js";
@@ -28,6 +29,7 @@ function makeBootModeHandle() {
     };
 }
 export async function runWorkerApp(options) {
+    assertSeedModeNotInProduction();
     const envSource = await resolveWorkerEnvSource(options, "runWorkerApp");
     // biome-ignore lint/suspicious/noConsole: boot-time progress hint, no logger configured this early
     console.log("[runWorkerApp] booting Kumiko worker…");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-server-runtime",
-  "version": "0.346.0",
+  "version": "0.348.0",
   "description": "Production server-boot runtime for Kumiko apps: connections, schema-drift-gate, seeds, lifecycle, graceful shutdown. Symmetric to kumiko-dev-server's runDevApp, without dev/scaffold/codegen tooling.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -80,10 +80,10 @@
     }
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-bundled-features": "0.346.0",
-    "@cosmicdrift/kumiko-framework": "0.346.0",
-    "@cosmicdrift/kumiko-headless": "0.346.0",
-    "@cosmicdrift/kumiko-renderer-web": "0.346.0",
+    "@cosmicdrift/kumiko-bundled-features": "0.348.0",
+    "@cosmicdrift/kumiko-framework": "0.348.0",
+    "@cosmicdrift/kumiko-headless": "0.348.0",
+    "@cosmicdrift/kumiko-renderer-web": "0.348.0",
     "bun-types": "^1.3.13",
     "ioredis": "^5.10.1",
     "temporal-polyfill": "^0.3.2"

package/src/changes.json

@@ -1,4 +1,10 @@
 [
+  {
+    "version": "0.347.0",
+    "type": "fix",
+    "title": "runProdApp and runDevApp forward auth.retiredCookieDomains to the auth routes",
+    "detail": "runProdApp and runDevApp pass retiredCookieDomains through\n`auth.retiredCookieDomains` is now accepted by both runners and reaches the auth routes. Before, the option existed only on the lower-level route config, so apps starting through the runners could not clear a retired cookie domain."
+  },
   {
     "version": "0.346.0",
     "type": "improvement",