@cosmicdrift/kumiko-server-runtime 0.353.0 → 0.354.1

package/dist/boot/worker-boot-core.js

@@ -139,6 +139,7 @@ export async function bootWorkerProcess(options, envSource, profile) {
         envSource,
         registry,
         hasAuth: includeBundled,
+        redis,
         crypto: bootCrypto,
         ...(options.kms && { kms: options.kms }),
         ...(profile.deliverQueuedInline === true && { deliverQueuedInline: true }),

package/dist/build-prod-bundle.d.ts

@@ -43,6 +43,7 @@ export type BuildInfo = {
     /** ISO-Zeitstempel des Builds, lesbare Anzeige-Version (ersetzt den rohen sha). */
     readonly builtAt: string;
 };
+export declare const DEFAULT_HTML = "<!doctype html>\n<html lang=\"en\">\n  <head>\n    <meta charset=\"utf-8\" />\n    <meta name=\"viewport\" content=\"width=device-width,initial-scale=1,interactive-widget=resizes-content\" />\n    <title>Kumiko</title>\n  </head>\n  <body>\n    <div id=\"root\"></div>\n  </body>\n</html>\n";
 /** Folder name relative to dist/ for hashed assets (JS, CSS, file-loader
  *  outputs). Exported damit runProdApp dieselbe Konvention für Cache-
  *  Header nutzt — Drift verhindern. */

package/dist/build-prod-bundle.js

@@ -67,7 +67,7 @@ const hasBun = typeof globalThis.Bun !== "undefined";
 // index.html mit den richtigen Placeholder-Tags.
 // interactive-widget=resizes-content (fw#1918): keeps `position: fixed`
 // bottom bars anchored above a mobile keyboard instead of behind it.
-const DEFAULT_HTML = `<!doctype html>
+export const DEFAULT_HTML = `<!doctype html>
 <html lang="en">
   <head>
     <meta charset="utf-8" />

package/dist/request-bound-system-query.js

@@ -1,9 +1,15 @@
-import { buildRequestContextDataFromRequest, requestContext, } from "@cosmicdrift/kumiko-framework/api";
+import { buildRequestContextDataFromRequest, } from "@cosmicdrift/kumiko-framework/api";
 import { createAnonymousUser } from "@cosmicdrift/kumiko-framework/engine";
+import { requestContext } from "@cosmicdrift/kumiko-framework/internal/request-context";
 // Single wiring for the anonymous-role systemQuery that page-head and
 // hostDispatch resolvers receive, shared by runProdApp and the dev server so
 // the anonymous role / request-context / client-IP resolution can't drift.
 export function buildRequestBoundSystemQuery(params) {
     const { req, dispatcher, resolver, socketAddress } = params;
-    return (type, payload, tenantId) => requestContext.run(requestContext.get() ?? buildRequestContextDataFromRequest(req, { resolver, socketAddress }), () => dispatcher.query(type, payload, createAnonymousUser(tenantId)));
+    return (type, payload, tenantId, options) => {
+        const base = requestContext.get() ?? buildRequestContextDataFromRequest(req, { resolver, socketAddress });
+        // The caller's signal replaces the request's: it already folds the request signal in.
+        const data = options?.signal ? { ...base, signal: options.signal } : base;
+        return requestContext.run(data, () => dispatcher.query(type, payload, createAnonymousUser(tenantId)));
+    };
 }

package/dist/run-prod-app-boot-context.d.ts

@@ -6,6 +6,7 @@ import type { DbConnection } from "@cosmicdrift/kumiko-framework/db";
 import type { ConfigResolver, FeatureDefinition, Registry } from "@cosmicdrift/kumiko-framework/engine";
 import type { Logger } from "@cosmicdrift/kumiko-framework/logging";
 import type { MasterKeyProvider } from "@cosmicdrift/kumiko-framework/secrets";
+import type { Redis } from "ioredis";
 import { type BootCrypto } from "./boot/boot-crypto.js";
 import type { AuthMailOptions, EmailVerificationSetup, InviteSetup, PasswordResetSetup, SignupSetup } from "./run-prod-app.js";
 export declare function addConfigAccessorFactory<T extends {
@@ -21,6 +22,8 @@ export declare function buildBootExtraContext(opts: {
     readonly crypto?: BootCrypto;
     readonly masterKey?: MasterKeyProvider;
     readonly sseBroker?: SseBroker;
+    /** Backs notify's idempotencyKey dedup; without it such a notify throws. */
+    readonly redis?: Redis;
     readonly kms?: KmsAdapter;
     /** One-shot process (runBootstrap): nothing drains its job queue once it
      *  exits, so queued channels must send inline instead of enqueueing. */

package/dist/run-prod-app-boot-context.js

@@ -49,6 +49,7 @@ function buildDeliveryNotifyFactory(opts) {
         db: opts.db,
         registry: opts.registry,
         channels: collectChannels(opts.registry),
+        ...(opts.redis && { idempotencyRedis: opts.redis }),
         ...(opts.secrets && { secrets: opts.secrets }),
         ...(opts.sseBroker && { sseBroker: opts.sseBroker }),
         ...(opts.escapeHatchAuditSink && { escapeHatchAuditSink: opts.escapeHatchAuditSink }),
@@ -83,6 +84,15 @@ function resolveBootSecrets(db, features, crypto, registry) {
         dekCache: crypto.dekCache,
     });
 }
+function bootCryptoContext(crypto) {
+    return {
+        ...(crypto.masterKeyProvider && { masterKeyProvider: crypto.masterKeyProvider }),
+        // Encrypt/decrypt partner for `encrypted: true` config keys. Wired
+        // whenever a master key exists — NOT gated on the secrets feature,
+        // config encryption must work without mounting ctx.secrets.
+        ...(crypto.configCipher && { configEncryption: crypto.configCipher }),
+    };
+}
 export function buildBootExtraContext(opts) {
     const crypto = opts.crypto ?? resolveBootCrypto(opts.envSource, opts.masterKey);
     const hasDeliveryFeature = opts.features.some((f) => f.name === DELIVERY_FEATURE);
@@ -98,6 +108,7 @@ export function buildBootExtraContext(opts) {
                 registry: opts.registry,
                 ...(secrets && { secrets }),
                 ...(opts.sseBroker && { sseBroker: opts.sseBroker }),
+                ...(opts.redis && { redis: opts.redis }),
                 ...(escapeHatchAuditSink && { escapeHatchAuditSink }),
                 ...(opts.log && { log: opts.log }),
                 deliverQueuedInline: opts.deliverQueuedInline,
@@ -105,11 +116,7 @@ export function buildBootExtraContext(opts) {
         }),
         // Top-level provider so feature jobs (secrets rotate, config reencrypt)
         // reach it via ctx — previously only test-stack wired it.
-        ...(crypto.masterKeyProvider && { masterKeyProvider: crypto.masterKeyProvider }),
-        // Encrypt/decrypt partner for `encrypted: true` config keys. Wired
-        // whenever a master key exists — NOT gated on the secrets feature,
-        // config encryption must work without mounting ctx.secrets.
-        ...(crypto.configCipher && { configEncryption: crypto.configCipher }),
+        ...bootCryptoContext(crypto),
         ...(secrets && { secrets }),
         ...(opts.hasAuth && {
             configResolver: createConfigResolver({

package/dist/run-prod-app-static-files.js

@@ -173,6 +173,7 @@ trustedProxyHops = 0) {
             path: url.pathname,
             host,
             systemQuery,
+            requestSignal: req.signal,
         });
         if (injected === text)
             return html;

package/dist/run-prod-app.js

@@ -431,6 +431,7 @@ export async function runProdApp(options) {
         registry,
         hasAuth: !!effectiveAuth,
         sseBroker,
+        redis,
         crypto: bootCrypto,
         ...(options.kms && { kms: options.kms }),
         ...(bootLogger && { log: bootLogger }),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-server-runtime",
-  "version": "0.353.0",
+  "version": "0.354.1",
   "description": "Production server-boot runtime for Kumiko apps: connections, schema-drift-gate, seeds, lifecycle, graceful shutdown. Symmetric to kumiko-dev-server's runDevApp, without dev/scaffold/codegen tooling.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -84,11 +84,11 @@
     }
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-bundled-features": "0.353.0",
-    "@cosmicdrift/kumiko-framework": "0.353.0",
-    "@cosmicdrift/kumiko-headless": "0.353.0",
-    "@cosmicdrift/kumiko-renderer-web": "0.353.0",
-    "@cosmicdrift/kumiko-types": "0.353.0",
+    "@cosmicdrift/kumiko-bundled-features": "0.354.1",
+    "@cosmicdrift/kumiko-framework": "0.354.1",
+    "@cosmicdrift/kumiko-headless": "0.354.1",
+    "@cosmicdrift/kumiko-renderer-web": "0.354.1",
+    "@cosmicdrift/kumiko-types": "0.354.1",
     "bun-types": "^1.3.13",
     "ioredis": "^5.10.1",
     "temporal-polyfill": "^0.3.2"

package/src/changes.json

@@ -1,4 +1,11 @@
 [
+  {
+    "version": "0.354.0",
+    "type": "fix",
+    "title": "Boot context passes Redis to the delivery service",
+    "detail": "notify with an idempotencyKey used to throw because the delivery service had no idempotencyRedis. Production boot, dev boot and the worker boot now hand over the existing Redis.",
+    "migration": "No action needed."
+  },
   {
     "version": "0.353.0",
     "type": "fix",