@cosmicdrift/kumiko-server-runtime 0.362.0 → 0.363.0

package/dist/boot/apply-boot-seeds.js

@@ -8,4 +8,11 @@ import { seedAllConfigValues } from "@cosmicdrift/kumiko-bundled-features/config
 // @wrapper-known semantic-alias
 export async function applyBootSeeds(deps) {
     await seedAllConfigValues(deps.registry, deps.db, deps.cipher);
+    // Loaded lazily: the seeding module pulls the document sanitizer (happy-dom),
+    // which apps without notification templates must not pay for at boot.
+    const hasNotificationTemplates = Array.from(deps.registry.getAllNotifications().values()).some((notification) => notification.template !== undefined);
+    if (hasNotificationTemplates) {
+        const { seedNotificationTemplates } = await import("@cosmicdrift/kumiko-bundled-features/template-resolver/seeding");
+        await seedNotificationTemplates(deps.db, deps.registry);
+    }
 }

package/dist/boot/worker-boot-core.js

@@ -6,12 +6,13 @@
 import { loadJwtSecretOrKeyring } from "@cosmicdrift/kumiko-framework/api";
 import { configureBlindIndexKey, configurePiiSubjectKms, resolvePlatformKeks, } from "@cosmicdrift/kumiko-framework/crypto";
 import { configureEntityFieldEncryption, createDbConnection, dbConnectionOptionsFromEnv, outsideTransactionPoolOptionsFromEnv, } from "@cosmicdrift/kumiko-framework/db";
-import { createRegistry, findTierResolverUsage, validateBoot, } from "@cosmicdrift/kumiko-framework/engine";
+import { createRegistry, findTierResolverUsage, isTierResolverPlugin, validateBoot, } from "@cosmicdrift/kumiko-framework/engine";
 import { createWorkerEntrypoint, } from "@cosmicdrift/kumiko-framework/entrypoint";
 import { assertKumikoSchemaCurrent, SchemaDriftError, } from "@cosmicdrift/kumiko-framework/migrations";
 import { createEntityCache, createEventDedup, createIdempotencyGuard, } from "@cosmicdrift/kumiko-framework/pipeline";
 import { createRedisCacheSyncBus, redisClientOptionsFromEnv, } from "@cosmicdrift/kumiko-framework/redis";
 import { warnIfNonUtcServerTimeZone } from "@cosmicdrift/kumiko-framework/time";
+import { propertyOf } from "@cosmicdrift/kumiko-types/type-guards";
 import { Redis } from "ioredis";
 import { composeFeatures } from "../compose-features.js";
 import { assertPiiBootInvariants } from "../pii-boot-gate.js";
@@ -23,7 +24,7 @@ import { assertWorkerMetricsOptions } from "./worker-metrics-server.js";
 function isSecretsContext(value) {
     if (typeof value !== "object" || value === null)
         return false;
-    return ["get", "has", "set", "delete"].every((method) => typeof value[method] === "function");
+    return ["get", "has", "set", "delete"].every((method) => typeof propertyOf(value, method) === "function");
 }
 export async function resolveWorkerEnvSource(options, processName) {
     const rawEnvSource = options.envSource ?? process.env;
@@ -39,6 +40,9 @@ async function buildTierEffectiveFeatures(features, db, registry, cacheSync) {
     if (!tierResolverUsage)
         return undefined;
     const plugin = tierResolverUsage.options;
+    if (!isTierResolverPlugin(plugin)) {
+        throw new Error("tier-resolver registration options must provide a build() factory");
+    }
     return plugin.build({ db, registry, cacheSync });
 }
 async function assertWorkerSchemaCurrent(db, migrationsDir, processName) {

package/dist/build-prod-bundle.js

@@ -60,7 +60,7 @@ import { canResolveTailwindStylesheet, resolveTailwindCli } from "./resolve-tail
 // (Tailwind via Bun.spawn, Client-Bundle via Bun.build, Stylesheet-
 // Resolution via Bun.resolveSync) sind Bun-only. Pro-Funktions-Inline-
 // Checks driften sonst — eine Konstante hier hält das konsistent.
-const hasBun = typeof globalThis.Bun !== "undefined";
+const hasBun = typeof Bun !== "undefined";
 // Default-HTML wird nur genutzt wenn der App-Author KEIN index.html liefert.
 // Hat keine Asset-Placeholder, weil der Default-Pfad für vanilla apps
 // (nur public/) gedacht ist — wer JS/CSS will, schreibt ein eigenes
@@ -444,9 +444,8 @@ function resolveStylesheetEntry(cwd, clientEntry, override) {
     if (!hasBun)
         return undefined;
     try {
-        const resolved = globalThis.Bun.resolveSync("@cosmicdrift/kumiko-renderer-web/styles.css", cwd);
-        const bun = globalThis.Bun;
-        if (!canResolveTailwindStylesheet(resolved, { bun, cwd })) {
+        const resolved = Bun.resolveSync("@cosmicdrift/kumiko-renderer-web/styles.css", cwd);
+        if (!canResolveTailwindStylesheet(resolved, { bun: Bun, cwd })) {
             return undefined;
         }
         return { path: resolved, isRendererWebFallback: true };
@@ -521,16 +520,14 @@ export async function runTailwindOnce(entry, cwd) {
     if (!hasBun) {
         throw new Error("[kumiko build] Tailwind one-shot requires Bun (Bun.spawn) — run via `bun run …` or `bun kumiko build`.");
     }
-    const bunResolver = globalThis
-        .Bun;
-    const cliPath = resolveTailwindCli({ bun: bunResolver, cwd });
+    const cliPath = resolveTailwindCli({ bun: Bun, cwd });
     if (cliPath === undefined) {
         throw new Error("[kumiko build] @tailwindcss/cli nicht auflösbar — `bun install` im App-Root ausführen.");
     }
-    if (!canResolveTailwindStylesheet(entry, { bun: bunResolver, cwd })) {
+    if (!canResolveTailwindStylesheet(entry, { bun: Bun, cwd })) {
         throw new Error(`[kumiko build] tailwindcss nicht auflösbar für ${entry} — peer dependency fehlt am Stylesheet-Ort.`);
     }
-    const { compile, optimize, Scanner } = await loadTailwindEngine(cliPath, bunResolver);
+    const { compile, optimize, Scanner } = await loadTailwindEngine(cliPath, Bun);
     const input = resolve(cwd, entry);
     if (!existsSync(input)) {
         throw new Error(`[kumiko build] tailwind: stylesheet not found: ${input}`);

package/dist/compose-features.js

@@ -16,10 +16,13 @@ import { AUTH_SELF_REGISTRATION_FEATURE, createAuthEmailPasswordFeature, createA
 import { AUTH_MFA_FEATURE, mfaStatusCheckerFromFeature, } from "@cosmicdrift/kumiko-bundled-features/auth-mfa";
 import { createConfigFeature } from "@cosmicdrift/kumiko-bundled-features/config";
 import { createFilesTenantDataFeature } from "@cosmicdrift/kumiko-bundled-features/files-tenant-data";
+import { createRendererFoundationFeature } from "@cosmicdrift/kumiko-bundled-features/renderer-foundation";
+import { createTemplateResolverFeature } from "@cosmicdrift/kumiko-bundled-features/template-resolver";
 import { collectAssignableAppRoles, createTenantFeature, } from "@cosmicdrift/kumiko-bundled-features/tenant";
 import { TENANT_LIFECYCLE_FEATURE } from "@cosmicdrift/kumiko-bundled-features/tenant-lifecycle";
 import { createUserFeature } from "@cosmicdrift/kumiko-bundled-features/user";
 import { dedupeFeatures } from "@cosmicdrift/kumiko-framework/engine";
+import { createRendererMailHtmlFeature } from "@cosmicdrift/kumiko-renderer-mail-html";
 const FILES_FEATURE = "files";
 const FILES_TENANT_DATA_FEATURE = "files-tenant-data";
 export function composeFeatures(appFeatures, options) {
@@ -92,10 +95,22 @@ export function composeFeatures(appFeatures, options) {
         !names.has(FILES_TENANT_DATA_FEATURE);
     return [
         ...bundled,
+        ...missingAuthMailStack(names),
         ...filteredApp,
         ...(needsFilesTenantData ? [createFilesTenantDataFeature()] : []),
     ];
 }
+// auth-email-password declares its mails as stored templates, and the boot seed
+// fails without the template-resolver and a mail renderer. Mounting the missing
+// ones here keeps every includeBundled app bootable (also scaffolds); features
+// the app already mounts are skipped because createRegistry rejects duplicates.
+function missingAuthMailStack(mountedNames) {
+    return [
+        createTemplateResolverFeature(),
+        createRendererFoundationFeature(),
+        createRendererMailHtmlFeature(),
+    ].filter((feature) => !mountedNames.has(feature.name));
+}
 // The magic-link mail fields shared by all five flows. Conditional spreads omit
 // undefined keys (exactOptionalPropertyTypes) and avoid the property-write that
 // trips noPropertyAccessFromIndexSignature on the type-aliased option shapes.

package/dist/renderer-web-fonts.js

@@ -8,17 +8,16 @@ export const RENDERER_WEB_FONTS_URL_PREFIX = "/assets/kumiko/fonts/";
 export const RENDERER_WEB_FONTS_DIST_DIR = "assets/kumiko/fonts";
 /** Allowlist for servable font file names; also rules out path segments. */
 export const RENDERER_WEB_FONT_FILE_PATTERN = /^[a-z0-9-]+\.woff2$/;
-const hasBun = typeof globalThis.Bun !== "undefined";
+const hasBun = typeof Bun !== "undefined";
 /** Directory of the woff2 files next to renderer-web's styles.css, or
  *  undefined when the package can't be resolved from any `searchFrom` dir
  *  (or outside Bun, which does the package-exports resolution). */
 export function resolveRendererWebFontsDir(searchFrom) {
     if (!hasBun)
         return undefined;
-    const bun = globalThis.Bun;
     for (const from of searchFrom) {
         try {
-            const stylesheet = bun.resolveSync("@cosmicdrift/kumiko-renderer-web/styles.css", from);
+            const stylesheet = Bun.resolveSync("@cosmicdrift/kumiko-renderer-web/styles.css", from);
             return join(dirname(stylesheet), "fonts");
         }
         catch {

package/dist/run-prod-app-boot-context.d.ts

@@ -2,8 +2,8 @@ import { type EmailVerificationOptions, type PasswordResetOptions } from "@cosmi
 import { resolveSessionStore } from "@cosmicdrift/kumiko-bundled-features/auth-foundation";
 import type { SseBroker } from "@cosmicdrift/kumiko-framework/api";
 import type { KmsAdapter } from "@cosmicdrift/kumiko-framework/crypto";
-import type { DbConnection } from "@cosmicdrift/kumiko-framework/db";
-import type { ConfigResolver, FeatureDefinition, Registry } from "@cosmicdrift/kumiko-framework/engine";
+import { type DbConnection } from "@cosmicdrift/kumiko-framework/db";
+import { type ConfigResolver, type FeatureDefinition, type Registry } from "@cosmicdrift/kumiko-framework/engine";
 import type { Logger } from "@cosmicdrift/kumiko-framework/logging";
 import type { MasterKeyProvider } from "@cosmicdrift/kumiko-framework/secrets";
 import type { Redis } from "ioredis";

package/dist/run-prod-app-boot-context.js

@@ -9,6 +9,9 @@ import { bindPatAutoRevokeOnPasswordChangeFromFeature, revokeAllPatTokensForUser
 import { createSecretsContext, SECRETS_FEATURE_NAME, } from "@cosmicdrift/kumiko-bundled-features/secrets";
 import { bindAutoRevokeFromFeature } from "@cosmicdrift/kumiko-bundled-features/sessions";
 import { createTemplateResolverApi } from "@cosmicdrift/kumiko-bundled-features/template-resolver";
+import { TENANT_FEATURE, TenantQueries } from "@cosmicdrift/kumiko-bundled-features/tenant";
+import { createTenantDb } from "@cosmicdrift/kumiko-framework/db";
+import { createSystemUser, } from "@cosmicdrift/kumiko-framework/engine";
 import { resolveBootCrypto } from "./boot/boot-crypto.js";
 // Boot-time context helpers for runProdApp: ctx-extra-context wiring
 // (templateResolver/delivery/secrets/config-resolver), auth-mail convenience
@@ -43,8 +46,10 @@ export function addConfigAccessorFactory(resolved, registry) {
 // and every notification silently skips. sseBroker optional (email/push don't
 // need it, in-app SSE does). Queued channels go through the delivery jobs of
 // the calling context's job runner (3rd factory arg); without one they send
-// inline, with `secrets` for chat-channel credentials.
+// inline, with `secrets` for chat-channel credentials. `to: { tenant }` resolves
+// through tenantUserIdsQuery, which the caller sets when the tenant feature is mounted.
 function buildDeliveryNotifyFactory(opts) {
+    const configAccessorFactory = opts.configResolver && createConfigAccessorFactory(opts.registry, opts.configResolver);
     const deliveryService = createDeliveryService({
         db: opts.db,
         registry: opts.registry,
@@ -54,6 +59,17 @@ function buildDeliveryNotifyFactory(opts) {
         ...(opts.sseBroker && { sseBroker: opts.sseBroker }),
         ...(opts.escapeHatchAuditSink && { escapeHatchAuditSink: opts.escapeHatchAuditSink }),
         ...(opts.log && { log: opts.log }),
+        ...(opts.tenantUserIdsQuery && { tenantUserIdsQuery: opts.tenantUserIdsQuery }),
+        ...(configAccessorFactory && {
+            tenantConfigFor: (tenantId) => {
+                const systemUser = createSystemUser(tenantId);
+                return configAccessorFactory({
+                    user: { id: systemUser.id, tenantId },
+                    db: createTenantDb(opts.db, tenantId),
+                    ...(opts.secrets && { secrets: opts.secrets }),
+                });
+            },
+        }),
     });
     return createDeliveryNotifyFactory(deliveryService, {
         deliverQueuedInline: opts.deliverQueuedInline === true,
@@ -93,11 +109,21 @@ function bootCryptoContext(crypto) {
         ...(crypto.configCipher && { configEncryption: crypto.configCipher }),
     };
 }
+function createBootConfigResolver(registry, envSource, crypto) {
+    return createConfigResolver({
+        appOverrides: buildEnvConfigOverrides(registry, envSource),
+        ...(crypto.configCipher && { cipher: crypto.configCipher }),
+    });
+}
 export function buildBootExtraContext(opts) {
     const crypto = opts.crypto ?? resolveBootCrypto(opts.envSource, opts.masterKey);
     const hasDeliveryFeature = opts.features.some((f) => f.name === DELIVERY_FEATURE);
+    const hasTenantFeature = opts.features.some((f) => f.name === TENANT_FEATURE);
     const escapeHatchAuditSink = resolveEscapeHatchAuditSink(opts.features, opts.db);
     const secrets = resolveBootSecrets(opts.db, opts.features, crypto, opts.registry);
+    const configResolver = opts.hasAuth
+        ? createBootConfigResolver(opts.registry, opts.envSource, crypto)
+        : undefined;
     return {
         templateResolver: createTemplateResolverApi(opts.db),
         ...(opts.kms && { kms: opts.kms }),
@@ -111,6 +137,8 @@ export function buildBootExtraContext(opts) {
                 ...(opts.redis && { redis: opts.redis }),
                 ...(escapeHatchAuditSink && { escapeHatchAuditSink }),
                 ...(opts.log && { log: opts.log }),
+                ...(hasTenantFeature && { tenantUserIdsQuery: TenantQueries.resolveUserIds }),
+                configResolver,
                 deliverQueuedInline: opts.deliverQueuedInline,
             }),
         }),
@@ -118,12 +146,7 @@ export function buildBootExtraContext(opts) {
         // reach it via ctx — previously only test-stack wired it.
         ...bootCryptoContext(crypto),
         ...(secrets && { secrets }),
-        ...(opts.hasAuth && {
-            configResolver: createConfigResolver({
-                appOverrides: buildEnvConfigOverrides(opts.registry, opts.envSource),
-                ...(crypto.configCipher && { cipher: crypto.configCipher }),
-            }),
-        }),
+        ...(configResolver && { configResolver }),
     };
 }
 function buildAuthPathAppUrl(baseUrl, path) {

package/dist/run-prod-app-static-files.js

@@ -1,6 +1,7 @@
 import { resolve, sep } from "node:path";
 import { cachedResponse, computeStrongEtag, computeWeakEtag, createClientIpResolver, } from "@cosmicdrift/kumiko-framework/api";
 import { resolveAndInjectPageHead } from "@cosmicdrift/kumiko-headless/apex";
+import { errorCodeOf } from "@cosmicdrift/kumiko-types/type-guards";
 import { ASSETS_DIR } from "./build-prod-bundle.js";
 import { BUNDLED_ASSETS_DIST_DIR } from "./bundled-assets.js";
 import { buildRequestBoundSystemQuery, } from "./request-bound-system-query.js";
@@ -35,7 +36,7 @@ export async function readStaticFile(filePath) {
         return { bytes, mime: mimeTypeFor(filePath), mtimeMs: fileStat.mtimeMs };
     }
     catch (err) {
-        const code = err.code;
+        const code = errorCodeOf(err);
         // ENOENT: no such path. EISDIR: readFile() on a directory (e.g. GET
         // /assets where "assets" is a subfolder copied verbatim from public/).
         // ENOTDIR: a path segment that isn't a directory is used as one (e.g.
@@ -121,7 +122,7 @@ trustedProxyHops = 0) {
         if (!file)
             return null;
         return {
-            bytes: file.bytes.buffer.slice(file.bytes.byteOffset, file.bytes.byteOffset + file.bytes.byteLength),
+            bytes: new Uint8Array(file.bytes).buffer,
             mime: file.mime,
             etag: computeWeakEtag(file.mtimeMs, file.bytes.byteLength),
             mtimeMs: file.mtimeMs,

package/dist/run-prod-app.js

@@ -51,7 +51,7 @@ import { UserQueries } from "@cosmicdrift/kumiko-bundled-features/user";
 import { createDefaultSseBroker, createRedisLoginRateLimiter, loadJwtSecretOrKeyring, parseTrustedProxyHopsEnv, TRUSTED_PROXY_HOPS_ENV, } from "@cosmicdrift/kumiko-framework/api";
 import { configureBlindIndexKey, configurePiiSubjectKms, resolvePlatformKeks, } from "@cosmicdrift/kumiko-framework/crypto";
 import { configureEntityFieldEncryption, createDbConnection, dbConnectionOptionsFromEnv, outsideTransactionPoolOptionsFromEnv, } from "@cosmicdrift/kumiko-framework/db";
-import { collectWriteHandlerQns, createRegistry, findTierResolverUsage, validateAppCustomScreenWriteQns, validateBoot, } from "@cosmicdrift/kumiko-framework/engine";
+import { collectWriteHandlerQns, createRegistry, findTierResolverUsage, isTierResolverPlugin, validateAppCustomScreenWriteQns, validateBoot, } from "@cosmicdrift/kumiko-framework/engine";
 import { createAllInOneEntrypoint, createApiEntrypoint, } from "@cosmicdrift/kumiko-framework/entrypoint";
 import { KumikoBootError, kmsSlotsOf, parseEnv, withOptionalEnvKeys, } from "@cosmicdrift/kumiko-framework/env";
 import { renderDryRun } from "@cosmicdrift/kumiko-framework/env/dry-run";
@@ -360,6 +360,9 @@ export async function runProdApp(options) {
         const tierResolverUsage = findTierResolverUsage(features);
         if (tierResolverUsage) {
             const plugin = tierResolverUsage.options;
+            if (!isTierResolverPlugin(plugin)) {
+                throw new Error("tier-resolver registration options must provide a build() factory");
+            }
             resolvedEffectiveFeatures = await plugin.build({ db, registry, cacheSync });
         }
     }
@@ -749,7 +752,7 @@ export async function runProdApp(options) {
             // Options-Shape (inkl. idleTimeout: 0 für SSE) liegt in der
             // exportierten buildBunServeOptions-Funktion — siehe ihren
             // Header für die Begründung.
-            if (typeof globalThis.Bun === "undefined") {
+            if (typeof Bun === "undefined") {
                 // Klare Fehlermeldung statt nackter ReferenceError. Trifft wenn
                 // jemand listen() unter Node/vitest aufruft ohne autoListen:false
                 // — hilft beim Debug, statt sich an "Bun is not defined" abzumühen.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-server-runtime",
-  "version": "0.362.0",
+  "version": "0.363.0",
   "description": "Production server-boot runtime for Kumiko apps: connections, schema-drift-gate, seeds, lifecycle, graceful shutdown. Symmetric to kumiko-dev-server's runDevApp, without dev/scaffold/codegen tooling.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -84,11 +84,12 @@
     }
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-bundled-features": "0.362.0",
-    "@cosmicdrift/kumiko-framework": "0.362.0",
-    "@cosmicdrift/kumiko-headless": "0.362.0",
-    "@cosmicdrift/kumiko-renderer-web": "0.362.0",
-    "@cosmicdrift/kumiko-types": "0.362.0",
+    "@cosmicdrift/kumiko-bundled-features": "0.363.0",
+    "@cosmicdrift/kumiko-framework": "0.363.0",
+    "@cosmicdrift/kumiko-headless": "0.363.0",
+    "@cosmicdrift/kumiko-renderer-mail-html": "0.363.0",
+    "@cosmicdrift/kumiko-renderer-web": "0.363.0",
+    "@cosmicdrift/kumiko-types": "0.363.0",
     "bun-types": "^1.3.13",
     "ioredis": "^5.10.1",
     "temporal-polyfill": "^0.3.2"

package/src/changes.json

@@ -1,4 +1,16 @@
 [
+  {
+    "version": "0.363.0",
+    "type": "improvement",
+    "title": "composeFeatures adds template-resolver, renderer-foundation and renderer-mail-html for auth apps",
+    "detail": "With includeBundled, the auth mails are stored templates and the boot seed needs the template-resolver and a mail renderer. composeFeatures adds whichever of template-resolver, renderer-foundation and renderer-mail-html the app does not mount itself, so runDevApp, runProdApp and scaffolds keep booting. Apps without the template tables need a schema migration (`kumiko schema generate`)."
+  },
+  {
+    "version": "0.363.0",
+    "type": "improvement",
+    "title": "Immediate notify renders with the tenant config in runProdApp",
+    "detail": "The boot delivery notify factory passes tenantConfigFor, built from the boot config resolver, to the delivery service, so immediate notifications render the tenant name in the mail layout like the delivery.render job does."
+  },
   {
     "version": "0.357.0",
     "type": "fix",