@cosmicdrift/kumiko-server-runtime 0.363.0 → 0.364.0

package/dist/boot/worker-boot-core.d.ts

@@ -2,7 +2,7 @@ import type { AuthEmailPasswordOptions } from "@cosmicdrift/kumiko-bundled-featu
 import { type DbConnection } from "@cosmicdrift/kumiko-framework/db";
 import { type FeatureDefinition, type Registry } from "@cosmicdrift/kumiko-framework/engine";
 import { type WorkerEntrypoint } from "@cosmicdrift/kumiko-framework/entrypoint";
-import type { SecretsContext } from "@cosmicdrift/kumiko-framework/secrets";
+import type { EnvelopeCipher, SecretsContext } from "@cosmicdrift/kumiko-framework/secrets";
 import { Redis } from "ioredis";
 import type { RunWorkerAppOptions } from "../run-worker-app.js";
 export type WorkerBootCoreOptions = Omit<RunWorkerAppOptions, "wireComponents">;
@@ -26,6 +26,8 @@ export type BootedWorkerProcess = {
     /** ctx.secrets as wired into the entrypoint (auto-wired when the secrets
      *  feature is mounted and a master key exists, or from `extraContext`). */
     readonly secrets?: SecretsContext;
+    /** Envelope cipher for `encrypted` config keys, when a master key is wired. */
+    readonly configCipher?: EnvelopeCipher;
     readonly close: () => Promise<void>;
 };
 export type WorkerBootResult = {

package/dist/boot/worker-boot-core.js

@@ -188,6 +188,7 @@ export async function bootWorkerProcess(options, envSource, profile) {
         envSource,
         entrypoint,
         ...(isSecretsContext(extraContext["secrets"]) && { secrets: extraContext["secrets"] }),
+        ...(bootCrypto.configCipher && { configCipher: bootCrypto.configCipher }),
         close: async () => {
             await entrypoint.stop();
             await closeDb();

package/dist/run-bootstrap.js

@@ -52,7 +52,13 @@ export async function runBootstrap(options) {
         return undefined;
     let report;
     try {
-        report = await bootstrapTenants({ db: boot.db, redis: boot.redis, dispatcher: boot.entrypoint.dispatcher }, {
+        report = await bootstrapTenants({
+            db: boot.db,
+            redis: boot.redis,
+            dispatcher: boot.entrypoint.dispatcher,
+            registry: boot.registry,
+            ...(boot.configCipher && { configCipher: boot.configCipher }),
+        }, {
             tenants: options.tenants,
             ...(options.systemAdmins && { systemAdmins: options.systemAdmins }),
             ...(options.seed && { seed: options.seed }),

package/dist/run-prod-app.js

@@ -425,9 +425,9 @@ export async function runProdApp(options) {
     // it lazily, entities without encrypted fields never touch it.
     configureEntityFieldEncryption(bootCrypto.entityFieldCipher);
     // Subject-key KMS for pii-annotated fields (crypto-shredding, #724).
-    // No adapter = engine off, plaintext as before — the warning keeps the gap
-    // visible until the prod-grade PgKmsAdapter (phase E) makes a hard boot
-    // gate viable (InMemory in prod would lose every DEK on restart).
+    // No adapter only gets this far when assertPiiBootInvariants above let it
+    // through: no PII carriers, or an explicit allowPlaintextPii opt-out. The
+    // engine then stays off and those fields are stored in plaintext.
     configurePiiSubjectKms(options.kms);
     // Blind-Index-Key (#818) — Boot-Gate: mit aktivem KMS würden lookupable-
     // Felder als Ciphertext gespeichert, ohne Key gäbe es keinen bidx-Arm und

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-server-runtime",
-  "version": "0.363.0",
+  "version": "0.364.0",
   "description": "Production server-boot runtime for Kumiko apps: connections, schema-drift-gate, seeds, lifecycle, graceful shutdown. Symmetric to kumiko-dev-server's runDevApp, without dev/scaffold/codegen tooling.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -84,12 +84,12 @@
     }
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-bundled-features": "0.363.0",
-    "@cosmicdrift/kumiko-framework": "0.363.0",
-    "@cosmicdrift/kumiko-headless": "0.363.0",
-    "@cosmicdrift/kumiko-renderer-mail-html": "0.363.0",
-    "@cosmicdrift/kumiko-renderer-web": "0.363.0",
-    "@cosmicdrift/kumiko-types": "0.363.0",
+    "@cosmicdrift/kumiko-bundled-features": "0.364.0",
+    "@cosmicdrift/kumiko-framework": "0.364.0",
+    "@cosmicdrift/kumiko-headless": "0.364.0",
+    "@cosmicdrift/kumiko-renderer-mail-html": "0.364.0",
+    "@cosmicdrift/kumiko-renderer-web": "0.364.0",
+    "@cosmicdrift/kumiko-types": "0.364.0",
     "bun-types": "^1.3.13",
     "ioredis": "^5.10.1",
     "temporal-polyfill": "^0.3.2"