@cosmicdrift/kumiko-server-runtime 0.368.0 → 0.369.0

package/dist/resolve-unsubscribe-wiring.d.ts

@@ -0,0 +1,17 @@
+import { type UnsubscribeLinkConfig } from "@cosmicdrift/kumiko-bundled-features/delivery";
+import { type ExtraRouteDefinition } from "@cosmicdrift/kumiko-framework/api";
+export type UnsubscribeOption = {
+    readonly secret: string;
+    readonly tenantOrigin?: UnsubscribeLinkConfig["tenantOrigin"];
+};
+export type UnsubscribeWiring = {
+    readonly unsubscribeLinks: UnsubscribeLinkConfig | undefined;
+    readonly unsubscribeRoutes: readonly ExtraRouteDefinition[];
+};
+export declare function resolveUnsubscribeWiring(opts: {
+    readonly unsubscribe: UnsubscribeOption | undefined;
+    readonly publicOrigin: string | undefined;
+    readonly mailBaseUrl: string | undefined;
+    readonly envSource: Record<string, string | undefined>;
+    readonly warn: (message: string) => void;
+}): UnsubscribeWiring;

package/dist/resolve-unsubscribe-wiring.js

@@ -0,0 +1,24 @@
+import { createUnsubscribeRoutes, } from "@cosmicdrift/kumiko-bundled-features/delivery";
+import { publicOriginOf } from "@cosmicdrift/kumiko-framework/api";
+import { APP_BASE_URL_ENV } from "./resolve-auth-public-origin.js";
+export function resolveUnsubscribeWiring(opts) {
+    const { unsubscribe } = opts;
+    if (unsubscribe === undefined)
+        return { unsubscribeLinks: undefined, unsubscribeRoutes: [] };
+    const baseUrl = publicOriginOf(opts.publicOrigin ?? opts.mailBaseUrl ?? opts.envSource[APP_BASE_URL_ENV] ?? "");
+    if (baseUrl === undefined) {
+        opts.warn(`unsubscribe is enabled but no valid public app URL is known (auth.publicOrigin, auth.mail.baseUrl or ${APP_BASE_URL_ENV}), so mails get no unsubscribe link.`);
+    }
+    return {
+        unsubscribeLinks: baseUrl === undefined
+            ? undefined
+            : {
+                secret: unsubscribe.secret,
+                baseUrl,
+                ...(unsubscribe.tenantOrigin !== undefined && {
+                    tenantOrigin: unsubscribe.tenantOrigin,
+                }),
+            },
+        unsubscribeRoutes: createUnsubscribeRoutes({ secret: unsubscribe.secret }),
+    };
+}

package/dist/run-prod-app.d.ts

@@ -1,7 +1,6 @@
 /// <reference types="bun-types" preserve="true" />
 import { type AccountLockoutOptions, type AccountUnlockOptions, type AuthMailLocale, type AuthPaths, type EmailVerificationOptions, type InviteOptions, type PasswordResetOptions, type SignupOptions } from "@cosmicdrift/kumiko-bundled-features/auth-email-password";
 import { type SeedAdminOptions } from "@cosmicdrift/kumiko-bundled-features/auth-email-password/seeding";
-import { type UnsubscribeLinkConfig } from "@cosmicdrift/kumiko-bundled-features/delivery";
 import { type ExtraRouteDefinition, type KumikoServeEnv, type PostAuthLandingResolver, type SseBroker } from "@cosmicdrift/kumiko-framework/api";
 import { type KmsAdapter } from "@cosmicdrift/kumiko-framework/crypto";
 import { type EffectiveFeaturesResolver, type FeatureDefinition, type ValidateBootOptions } from "@cosmicdrift/kumiko-framework/engine";
@@ -14,9 +13,11 @@ import type { MasterKeyProvider } from "@cosmicdrift/kumiko-framework/secrets";
 import type { PageHeadMeta, PageHeadResolver, PageHeadSystemQuery } from "@cosmicdrift/kumiko-headless/apex";
 import { Redis } from "ioredis";
 import { type SystemWireDeps } from "./extra-routes-deps.js";
+import { type UnsubscribeOption } from "./resolve-unsubscribe-wiring.js";
 import { type SecurityHeadersOption } from "./security-headers.js";
 import { type SeedCreateFileRef } from "./seed-dispatcher.js";
 export { buildBunServeOptions } from "./bun-serve-options.js";
+export { resolveUnsubscribeWiring, type UnsubscribeOption, } from "./resolve-unsubscribe-wiring.js";
 export { addConfigAccessorFactory, buildBootExtraContext, loggerFromExtraContext, resolveAuthMail, } from "./run-prod-app-boot-context.js";
 export { staticCachePolicy } from "./run-prod-app-static-files.js";
 export declare function requireEnv(name: string, src?: Record<string, string | undefined>, context?: string): string;
@@ -409,10 +410,7 @@ export type RunProdAppOptions = {
      *  a throw or a non-https value fall back to the app origin. The link carries the mail's
      *  locale, so the confirmation pages speak the mail's language. An app reacts to an address
      *  opt-out with an `r.job` triggered on `DeliveryHandlers.unsubscribeAddress`. */
-    readonly unsubscribe?: {
-        readonly secret: string;
-        readonly tenantOrigin?: UnsubscribeLinkConfig["tenantOrigin"];
-    };
+    readonly unsubscribe?: UnsubscribeOption;
     /** Hook for app-wired co-running components that need the system-write
      *  dispatcher (e.g. wiring a webhook plugin's system-scoped secrets, or
      *  starting a co-running supervisor) — runs after buildServer, before

package/dist/run-prod-app.js

@@ -43,13 +43,12 @@ import { AuthErrors, AuthHandlers, AuthQueries, } from "@cosmicdrift/kumiko-bund
 import { seedAdminGuarded, } from "@cosmicdrift/kumiko-bundled-features/auth-email-password/seeding";
 import { EXT_SESSION_STORE, EXT_TOKEN_VERIFIER, resolveAnonymousAccessFromRegistry, resolveTokenVerifier, } from "@cosmicdrift/kumiko-bundled-features/auth-foundation";
 import { AUTH_MFA_FEATURE, AuthMfaHandlers } from "@cosmicdrift/kumiko-bundled-features/auth-mfa";
-import { createUnsubscribeRoutes, } from "@cosmicdrift/kumiko-bundled-features/delivery";
 import { PAT_FEATURE, patRateLimitFromFeature, } from "@cosmicdrift/kumiko-bundled-features/personal-access-tokens";
 import { SECRETS_MASTER_KEK_ENV_KEYS } from "@cosmicdrift/kumiko-bundled-features/secrets";
 import { SESSIONS_FEATURE } from "@cosmicdrift/kumiko-bundled-features/sessions";
 import { TenantQueries } from "@cosmicdrift/kumiko-bundled-features/tenant";
 import { UserQueries } from "@cosmicdrift/kumiko-bundled-features/user";
-import { createDefaultSseBroker, createRedisLoginRateLimiter, loadJwtSecretOrKeyring, parseTrustedProxyHopsEnv, publicOriginOf, TRUSTED_PROXY_HOPS_ENV, withFileProviderResolver, } from "@cosmicdrift/kumiko-framework/api";
+import { createDefaultSseBroker, createRedisLoginRateLimiter, loadJwtSecretOrKeyring, parseTrustedProxyHopsEnv, TRUSTED_PROXY_HOPS_ENV, withFileProviderResolver, } from "@cosmicdrift/kumiko-framework/api";
 import { configureBlindIndexKey, configurePiiSubjectKms, resolvePlatformKeks, } from "@cosmicdrift/kumiko-framework/crypto";
 import { configureEntityFieldEncryption, createDbConnection, dbConnectionOptionsFromEnv, outsideTransactionPoolOptionsFromEnv, } from "@cosmicdrift/kumiko-framework/db";
 import { collectWriteHandlerQns, createRegistry, findTierResolverUsage, requireTierResolverPlugin, validateAppCustomScreenWriteQns, validateBoot, } from "@cosmicdrift/kumiko-framework/engine";
@@ -75,7 +74,8 @@ import { buildBunServeOptions, resolveDerivedMaxRequestBodySize } from "./bun-se
 import { buildComposeAuthOptions, composeFeatures } from "./compose-features.js";
 import { makeDispatchSystemWrite } from "./extra-routes-deps.js";
 import { assertPiiBootInvariants } from "./pii-boot-gate.js";
-import { APP_BASE_URL_ENV, resolveAuthPublicOrigin } from "./resolve-auth-public-origin.js";
+import { resolveAuthPublicOrigin } from "./resolve-auth-public-origin.js";
+import { resolveUnsubscribeWiring } from "./resolve-unsubscribe-wiring.js";
 import { addConfigAccessorFactory, buildBootExtraContext, buildProdSessionAuth, loggerFromExtraContext, resolveAuthMail, wireProdPatAutoRevoke, } from "./run-prod-app-boot-context.js";
 import { buildStaticFallback } from "./run-prod-app-static-files.js";
 import { withSecurityHeaders } from "./security-headers.js";
@@ -84,6 +84,7 @@ import { assertSessionBootInvariants } from "./session-boot-gate.js";
 import { shouldWireProdSessions } from "./session-wiring.js";
 import { stripNoRouteMatchHeader } from "./try-hono-first.js";
 export { buildBunServeOptions } from "./bun-serve-options.js";
+export { resolveUnsubscribeWiring, } from "./resolve-unsubscribe-wiring.js";
 export { addConfigAccessorFactory, buildBootExtraContext, loggerFromExtraContext, resolveAuthMail, } from "./run-prod-app-boot-context.js";
 export { staticCachePolicy } from "./run-prod-app-static-files.js";
 // Strict env-var read. Throws with a clear hint when missing — better
@@ -291,27 +292,13 @@ export async function runProdApp(options) {
             console.warn(message);
         })
         : undefined;
-    const unsubscribeBaseUrl = options.unsubscribe
-        ? publicOriginOf(effectiveAuth?.publicOrigin ??
-            effectiveAuth?.mail?.baseUrl ??
-            envSource[APP_BASE_URL_ENV] ??
-            "")
-        : undefined;
-    if (options.unsubscribe && unsubscribeBaseUrl === undefined) {
-        createFallbackLogger("runProdApp").warn(`unsubscribe is enabled but no valid public app URL is known (auth.publicOrigin, auth.mail.baseUrl or ${APP_BASE_URL_ENV}), so mails get no unsubscribe link.`);
-    }
-    const unsubscribeLinks = options.unsubscribe && unsubscribeBaseUrl !== undefined
-        ? {
-            secret: options.unsubscribe.secret,
-            baseUrl: unsubscribeBaseUrl,
-            ...(options.unsubscribe.tenantOrigin !== undefined && {
-                tenantOrigin: options.unsubscribe.tenantOrigin,
-            }),
-        }
-        : undefined;
-    const unsubscribeRoutes = options.unsubscribe
-        ? createUnsubscribeRoutes({ secret: options.unsubscribe.secret })
-        : [];
+    const { unsubscribeLinks, unsubscribeRoutes } = resolveUnsubscribeWiring({
+        unsubscribe: options.unsubscribe,
+        publicOrigin: effectiveAuth?.publicOrigin,
+        mailBaseUrl: effectiveAuth?.mail?.baseUrl,
+        envSource,
+        warn: (message) => createFallbackLogger("runProdApp").warn(message),
+    });
     // 3. Feature registry. Auth-mode auto-mixes config/user/tenant/auth-email-
     //    password via composeFeatures — same source-of-truth as runDevApp
     //    AND the per-app drizzle-Schema-Generator, so Migration und Runtime

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-server-runtime",
-  "version": "0.368.0",
+  "version": "0.369.0",
   "description": "Production server-boot runtime for Kumiko apps: connections, schema-drift-gate, seeds, lifecycle, graceful shutdown. Symmetric to kumiko-dev-server's runDevApp, without dev/scaffold tooling.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -84,18 +84,18 @@
     }
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-bundled-features": "0.368.0",
-    "@cosmicdrift/kumiko-framework": "0.368.0",
-    "@cosmicdrift/kumiko-headless": "0.368.0",
-    "@cosmicdrift/kumiko-renderer-mail-html": "0.368.0",
-    "@cosmicdrift/kumiko-renderer-web": "0.368.0",
-    "@cosmicdrift/kumiko-types": "0.368.0",
+    "@cosmicdrift/kumiko-bundled-features": "0.369.0",
+    "@cosmicdrift/kumiko-framework": "0.369.0",
+    "@cosmicdrift/kumiko-headless": "0.369.0",
+    "@cosmicdrift/kumiko-renderer-mail-html": "0.369.0",
+    "@cosmicdrift/kumiko-renderer-web": "0.369.0",
+    "@cosmicdrift/kumiko-types": "0.369.0",
     "bun-types": "^1.3.13",
     "ioredis": "^5.10.1",
     "temporal-polyfill": "^0.3.2"
   },
   "devDependencies": {
-    "@cosmicdrift/kumiko-testing": "0.368.0"
+    "@cosmicdrift/kumiko-testing": "0.369.0"
   },
   "publishConfig": {
     "registry": "https://registry.npmjs.org",