@cosmicdrift/kumiko-server-runtime 0.370.0 → 0.371.0

package/dist/boot-options/billing-option.d.ts

@@ -1,3 +1,4 @@
+import { type TierSyncResult } from "@cosmicdrift/kumiko-bundled-features/billing-foundation";
 import { type SubscriptionStripeOptions } from "@cosmicdrift/kumiko-bundled-features/subscription-stripe";
 import type { ExtraRouteDefinition } from "@cosmicdrift/kumiko-framework/api";
 import type { FeatureDefinition } from "@cosmicdrift/kumiko-framework/engine";
@@ -27,6 +28,8 @@ export type BillingBootOption = {
     readonly tierNames?: readonly string[];
     /** Default `"fail-webhook"`: Stripe retries, so a failed tier sync gets another attempt. */
     readonly onTierSyncError?: "log" | "fail-webhook";
+    /** Runs after every webhook whose tier sync succeeded, also when the tier stayed the same (`changed: false`). */
+    readonly afterSync?: (result: TierSyncResult<string>) => Promise<void>;
 };
 export declare function resolveBillingOption(billing: BillingBootOption, envSource: Record<string, string | undefined>): {
     readonly feature: FeatureDefinition;

package/dist/boot-options/billing-option.js

@@ -30,6 +30,7 @@ export function resolveBillingOption(billing, envSource) {
         isTierName: (value) => tierNames.has(value),
         defaultTier: billing.defaultTier,
         onSyncError: billing.onTierSyncError ?? "fail-webhook",
+        ...(billing.afterSync && { afterSync: billing.afterSync }),
     });
     return { feature, route: tierSync.createWebhookRoute({ path: webhookPath }) };
 }

package/dist/boot-options/mail-option.d.ts

@@ -14,12 +14,13 @@ export type MailBootOption = {
     readonly transport: "smtp-env" | "inmemory" | EmailTransport;
     /** Sender when `SMTP_FROM` is unset (`"smtp-env"` only). Default `auth.mail.from`, then `noreply@localhost`. */
     readonly from?: string;
-    /** Maps a user id to the stored email. Default: the `user` row of that tenant. */
+    /** Maps a user id to the stored email. Default: the `user` row with that id (any tenant). */
     readonly resolveEmail?: EmailChannelOptions["resolveEmail"];
     /** Per-tenant transport, see `createChannelEmailFeature`. */
     readonly tenantTransport?: TenantTransportResolver;
 };
 export declare const CHANNEL_EMAIL_FEATURE = "channel-email";
+export declare function resolveStoredUserEmail(userId: string, ctx: Parameters<EmailChannelOptions["resolveEmail"]>[1]): Promise<string | null>;
 export declare function resolveMailOption(mail: MailBootOption, deps: {
     readonly envSource: Record<string, string | undefined>;
     readonly isProduction: boolean;

package/dist/boot-options/mail-option.js

@@ -4,10 +4,9 @@ import { selectMany } from "@cosmicdrift/kumiko-framework/db";
 export const CHANNEL_EMAIL_FEATURE = "channel-email";
 // channel-email decrypts the returned value itself, so the raw stored column
 // (ciphertext under an active KMS) is the right thing to hand back.
-async function resolveStoredUserEmail(userId, ctx) {
+export async function resolveStoredUserEmail(userId, ctx) {
     const rows = await selectMany(ctx.db, userTable, {
         id: userId,
-        tenantId: ctx.tenantId,
     });
     return rows[0]?.email ?? null;
 }

package/dist/index.d.ts

@@ -1,5 +1,6 @@
-export type { BillingBootOption } from "./boot-options/billing-option.ts";
+export { type BillingBootOption, resolveBillingOption } from "./boot-options/billing-option.ts";
 export type { DemoAccountRole, DemoModeNotice, DemoModeOption, } from "./boot-options/demo-mode.ts";
+export { buildDemoModeRoute, withDemoReadOnlyFetch, } from "./boot-options/demo-mode.ts";
 export type { FileStorageBootOption, FileStorageProviderName, } from "./boot-options/file-storage-option.ts";
 export type { KmsMode } from "./boot-options/kms-mode.ts";
 export type { MailBootOption } from "./boot-options/mail-option.ts";
@@ -10,8 +11,8 @@ export { type ComposeFeaturesOptions, composeFeatures } from "./compose-features
 export type { RateLimitOption } from "./rate-limit-defaults.ts";
 export type { RunBootstrapOptions } from "./run-bootstrap.ts";
 export { runBootstrap } from "./run-bootstrap.ts";
-export type { AccountUnlockSetup, EmailVerificationSetup, InviteSetup, PageHeadMeta, PageHeadResolver, PageHeadSystemQuery, PasswordResetSetup, ProdAppHandle, ProdSeedFn, RunProdAppAuthOptions, RunProdAppOptions, SignupSetup, } from "./run-prod-app.ts";
-export { requireEnv, runProdApp } from "./run-prod-app.ts";
+export type { AccountUnlockSetup, EmailVerificationSetup, HostDispatchFn, InviteSetup, PageHeadMeta, PageHeadResolver, PageHeadSystemQuery, PasswordResetSetup, ProdAppHandle, ProdSeedFn, RunProdAppAuthOptions, RunProdAppOptions, SignupSetup, } from "./run-prod-app.ts";
+export { parseRunMode, requireEnv, runProdApp } from "./run-prod-app.ts";
 export type { RunWorkerAppOptions, WorkerAppHandle, WorkerWireDeps, } from "./run-worker-app.ts";
 export { runWorkerApp } from "./run-worker-app.ts";
 export type { CspExtension, CspOption, SecurityHeadersOption } from "./security-headers.ts";

package/dist/index.js

@@ -2,9 +2,11 @@
 // runDevApp (kumiko-dev-server), aber ohne Dev-/Scaffold-/Codegen-
 // Tooling (ts-morph) als Dependency — Prod-Apps ziehen so kein
 // Dev-Tooling mehr in ihre node_modules.
+export { resolveBillingOption } from "./boot-options/billing-option.js";
+export { buildDemoModeRoute, withDemoReadOnlyFetch, } from "./boot-options/demo-mode.js";
 export { readBundledAsset, resolveBundledAsset, } from "./bundled-assets.js";
 export { composeFeatures } from "./compose-features.js";
 export { runBootstrap } from "./run-bootstrap.js";
-export { requireEnv, runProdApp } from "./run-prod-app.js";
+export { parseRunMode, requireEnv, runProdApp } from "./run-prod-app.js";
 export { runWorkerApp } from "./run-worker-app.js";
 export { makeSeedCreateFileRef } from "./seed-dispatcher.js";

package/dist/run-prod-app.d.ts

@@ -6,6 +6,7 @@ import { type KmsAdapter } from "@cosmicdrift/kumiko-framework/crypto";
 import { type EffectiveFeaturesResolver, type FeatureDefinition, type ValidateBootOptions } from "@cosmicdrift/kumiko-framework/engine";
 import { type AllInOneEntrypoint, type ApiEntrypoint } from "@cosmicdrift/kumiko-framework/entrypoint";
 import { type ComposedEnvSchema, KumikoBootError } from "@cosmicdrift/kumiko-framework/env";
+import { type DryRunEnvMode } from "@cosmicdrift/kumiko-framework/env/dry-run";
 import type { ErrorDocsConfig } from "@cosmicdrift/kumiko-framework/errors";
 import type { JobRunnerOptions } from "@cosmicdrift/kumiko-framework/jobs";
 import { type ObservabilityOptions, type ObservabilityProvider } from "@cosmicdrift/kumiko-framework/observability";
@@ -29,6 +30,8 @@ export { resolveUnsubscribeWiring, type UnsubscribeOption, } from "./resolve-uns
 export { addConfigAccessorFactory, buildBootExtraContext, loggerFromExtraContext, resolveAuthMail, } from "./run-prod-app-boot-context.ts";
 export { staticCachePolicy } from "./run-prod-app-static-files.ts";
 export declare function requireEnv(name: string, src?: Record<string, string | undefined>, context?: string): string;
+type RunMode = DryRunEnvMode;
+export declare function parseRunMode(raw: string | undefined): RunMode | null;
 /** Wrapper API for the password-reset flow.
  *
  *  Since the delivery migration PasswordResetOptions carries `appUrl`
@@ -201,6 +204,8 @@ export type RunProdAppDeps = {
     readonly redis: Redis;
     readonly registry: import("@cosmicdrift/kumiko-framework/engine").Registry;
     readonly sseBroker: SseBroker;
+    /** The env the boot runs on: process env or `envSource`, with the boot-option defaults (e.g. `fileStorage`) underneath. */
+    readonly env: Readonly<Record<string, string | undefined>>;
 };
 export type AnonymousAccessOption = import("@cosmicdrift/kumiko-framework/api").AnonymousAccessConfig | ((deps: RunProdAppDeps) => import("@cosmicdrift/kumiko-framework/api").AnonymousAccessConfig);
 export type ExtraContextOption = Record<string, unknown> | ((deps: RunProdAppDeps) => Record<string, unknown>);

package/dist/run-prod-app.js

@@ -124,7 +124,7 @@ function readEnv(name, src = process.env) {
     const value = src[name];
     return value === undefined || value === "" ? undefined : value;
 }
-function parseRunMode(raw) {
+export function parseRunMode(raw) {
     const mode = parseDryRunEnvMode(raw);
     if (mode !== undefined)
         return mode;
@@ -502,7 +502,7 @@ export async function runProdApp(options) {
     // wins), which is exactly how fw#2630's cross-replica fanout fix shipped
     // without ever taking effect in production.
     const { sseBroker, ownedRedisSseBroker } = createDefaultSseBroker(envSource);
-    const deps = { db, redis, registry, sseBroker };
+    const deps = { db, redis, registry, sseBroker, env: envSource };
     const resolvedExtraContext = typeof options.extraContext === "function"
         ? options.extraContext(deps)
         : (options.extraContext ?? {});
@@ -546,6 +546,7 @@ export async function runProdApp(options) {
     const resolvedAnonymousAccess = await resolveAnonymousAccessFromRegistry(baseAnonymousAccess, {
         db,
         registry,
+        warn: (message) => createFallbackLogger("runProdApp").warn(message),
     });
     // Sessions opt-in: db ist hier schon konkret (createDbConnection oben),
     // also direkt verdrahten — kein late-bound nötig wie bei runDevApp.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-server-runtime",
-  "version": "0.370.0",
+  "version": "0.371.0",
   "description": "Production server-boot runtime for Kumiko apps: connections, schema-drift-gate, seeds, lifecycle, graceful shutdown. Symmetric to kumiko-dev-server's runDevApp, without dev/scaffold tooling.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -88,19 +88,19 @@
     }
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-bundled-features": "0.370.0",
-    "@cosmicdrift/kumiko-framework": "0.370.0",
-    "@cosmicdrift/kumiko-headless": "0.370.0",
-    "@cosmicdrift/kumiko-renderer-mail-html": "0.370.0",
-    "@cosmicdrift/kumiko-renderer-web": "0.370.0",
-    "@cosmicdrift/kumiko-types": "0.370.0",
+    "@cosmicdrift/kumiko-bundled-features": "0.371.0",
+    "@cosmicdrift/kumiko-framework": "0.371.0",
+    "@cosmicdrift/kumiko-headless": "0.371.0",
+    "@cosmicdrift/kumiko-renderer-mail-html": "0.371.0",
+    "@cosmicdrift/kumiko-renderer-web": "0.371.0",
+    "@cosmicdrift/kumiko-types": "0.371.0",
     "bun-types": "^1.3.13",
     "ioredis": "^5.10.1",
     "temporal-polyfill": "^0.3.2",
     "zod": "^4.4.3"
   },
   "devDependencies": {
-    "@cosmicdrift/kumiko-testing": "0.370.0"
+    "@cosmicdrift/kumiko-testing": "0.371.0"
   },
   "publishConfig": {
     "registry": "https://registry.npmjs.org",

package/src/changes.json

@@ -1,4 +1,16 @@
 [
+  {
+    "version": "0.371.0",
+    "type": "improvement",
+    "title": "Default mail resolveEmail finds users of any tenant",
+    "detail": "The default resolveEmail of the mail boot option loads the user by id only. Rows in read_users carry the system tenant, so the former tenantId filter returned null for every real tenant."
+  },
+  {
+    "version": "0.371.0",
+    "type": "improvement",
+    "title": "extraContext factories see the boot env, billing hook and new exports",
+    "detail": "The merged env, including the defaults of declarative boot options such as FILE_STORAGE_PROVIDER from fileStorage, is passed to extraContext factories as env. resolveBillingOption, parseRunMode, HostDispatchFn, buildDemoModeRoute and withDemoReadOnlyFetch are exported from the package index. The billing boot option accepts afterSync."
+  },
   {
     "version": "0.370.0",
     "type": "breaking",