@cosmicdrift/kumiko-server-runtime 0.386.0 → 0.387.0

package/LICENSE

@@ -1,57 +1,21 @@
-Business Source License 1.1
-
-Parameters
-
-Licensor:             Marc Frost
-
-Licensed Work:        @cosmicdrift/kumiko-framework
-                      The Licensed Work is © 2026 Marc Frost.
-
-Additional Use Grant: 
-You may use the Licensed Work in production for any purpose, including 
-commercially, EXCEPT for the Restricted Use. 
-
-"Restricted Use" is defined as using the Licensed Work to provide a platform 
-or service to third parties that allows them to host, deploy, or run their 
-own applications built with the Licensed Work. This includes, but is not 
-limited to: managed hosting services, software-as-a-service (SaaS) platforms, 
-platform-as-a-service (PaaS), developer platforms, or any multi-tenant 
-managed offering of the Licensed Work.
-
-This restriction does not apply to the Licensor, any entity controlled by, 
-controlling, or under common control with the Licensor ("Affiliates"), or 
-contractors acting on their behalf. The Licensor remains free to use the 
-Licensed Work for any purpose, including for the operation of kumiko.rocks.
-
-Change Date:          2030-05-05
-Change License:       Apache License, Version 2.0
-
-
-Terms
-
-The Licensor hereby grants you the right to copy, modify, create derivative works, 
-redistribute, and make non-production use of the Licensed Work. The Licensor may 
-make an Additional Use Grant, above, permitting limited production use.
-
-Effective on the Change Date, or the fourth anniversary of the first publicly 
-available distribution of the Licensed Work under this License, whichever comes 
-first, this License will convert to the Change License.
-
-This Business Source License governs use of the Licensed Work in all cases, except 
-as to any use that is explicitly granted in the Additional Use Grant above or 
-under the Change License after the Change Date.
-
-If your use of the Licensed Work does not comply with the requirements of this 
-License, you must cease use of the Licensed Work immediately.
-
-All copies of the Licensed Work, and all derivative works thereof, must include 
-this License.
-
-This License does not grant you any right, title, or interest in any trademark, 
-logo, or branding of the Licensor, except as required to comply with this License.
-
-TO THE EXTENT PERMITTED BY APPLICABLE LAW, THE LICENSED WORK IS PROVIDED ON AN 
-“AS IS” BASIS. LICENSOR DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING 
-WITHOUT LIMITATION WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, 
-TITLE, AND NON-INFRINGEMENT. IN NO EVENT WILL LICENSOR BE LIABLE FOR ANY DAMAGES 
-ARISING OUT OF OR RELATED TO THIS LICENSE OR THE USE OF THE LICENSED WORK.
+MIT License
+
+Copyright (c) 2026 Marc Frost
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/boot/boot-crypto.js

@@ -31,8 +31,7 @@ function envMasterKeyProviderIfConfigured(envSource) {
     if (!envHasMasterKek(envSource))
         return undefined;
     const provider = createEnvMasterKeyProvider({
-        // CURRENT_VERSION default "1" spiegelt secretsEnvSchema — ohne
-        // ihn wirft der raw-env-Provider, obwohl V1 gesetzt ist.
+        // CURRENT_VERSION defaults to "1" in secretsEnvSchema; without it, the raw-env provider throws even when V1 is set.
         env: {
             ...envSource,
             KUMIKO_SECRETS_MASTER_KEY_CURRENT_VERSION: envSource["KUMIKO_SECRETS_MASTER_KEY_CURRENT_VERSION"] ?? "1",

package/dist/boot/worker-boot-core.js

@@ -59,7 +59,7 @@ async function assertWorkerSchemaCurrent(db, migrationsDir, processName) {
 }
 export async function bootWorkerProcess(options, envSource, profile) {
     const { processName } = profile;
-    // Polyfill before anything else (fw#1725): without it every job fails with
+    // Polyfill before anything else: without it every job fails with
     // "Temporal is not defined" in a retry loop, with no boot-time signal.
     const { ensureTemporalPolyfill } = await import("@cosmicdrift/kumiko-framework/time");
     await ensureTemporalPolyfill();
@@ -155,7 +155,7 @@ export async function bootWorkerProcess(options, envSource, profile) {
     const idempotency = createIdempotencyGuard(redis, { ttlSeconds: 60 });
     const eventDedup = createEventDedup(redis, { ttlSeconds: 60 });
     const entityCache = createEntityCache(redis, { ttlSeconds: 60 });
-    // Same crypto wiring as the API (fw#1725), otherwise this process writes
+    // Same crypto wiring as the API, otherwise this process writes
     // rows the API can no longer read (different cipher, missing blind index).
     const deps = { db, redis, registry };
     const resolvedExtraContext = typeof options.extraContext === "function"

package/dist/build-prod-bundle.d.ts

@@ -26,28 +26,29 @@ export type ClientEntriesConfig = {
 export type BuildManifest = Readonly<Record<string, string>>;
 export type BuildResult = {
     readonly outDir: string;
-    /** Logical → hashed-URL mapping. Beispiel:
+    /** Logical → hashed-URL mapping. Example:
      *    { "client.js": "/assets/client-a3f2.js",
      *      "styles.css": "/assets/styles-9b4c.css" } */
     readonly manifest: BuildManifest;
-    /** Build-Identität (Hash über die Asset-URLs) + lesbarer Zeitstempel.
-     *  undefined bei vanilla public-only-Builds (kein Bundle). */
+    /** Build identity (hash of the asset URLs) plus a human-readable timestamp.
+     *  undefined for vanilla public-only builds (no bundle). */
     readonly buildInfo?: BuildInfo;
 };
 /** Baked into index.html (`<meta name="kumiko-build">`) AND written as
  *  dist/build-info.json. The UpdateChecker polls build-info.json and compares
  *  `id` with the loaded build, showing a reload banner on drift. */
 export type BuildInfo = {
-    /** Hash über die sortierten (content-gehashten) Asset-URLs. Ändert sich
-     *  gdw. sich ein Asset ändert — selbsttragend, kein Env-Var/Dockerfile. */
+    /** Hash of the sorted, content-hashed asset URLs. Changes exactly when an
+     *  asset changes — self-contained, with no environment variable or Dockerfile. */
     readonly id: string;
-    /** ISO-Zeitstempel des Builds, lesbare Anzeige-Version (ersetzt den rohen sha). */
+    /** ISO timestamp of the build, used as the human-readable display version
+     *  instead of the raw hash. */
     readonly builtAt: string;
 };
 export declare const DEFAULT_HTML = "<!doctype html>\n<html lang=\"en\">\n  <head>\n    <meta charset=\"utf-8\" />\n    <meta name=\"viewport\" content=\"width=device-width,initial-scale=1,interactive-widget=resizes-content\" />\n    <title>Kumiko</title>\n  </head>\n  <body>\n    <div id=\"root\"></div>\n  </body>\n</html>\n";
 /** Folder name relative to dist/ for hashed assets (JS, CSS, file-loader
- *  outputs). Exported damit runProdApp dieselbe Konvention für Cache-
- *  Header nutzt — Drift verhindern. */
+ *  outputs). Exported so runProdApp uses the same convention for cache headers
+ *  and cannot drift. */
 export declare const ASSETS_DIR = "assets";
 export declare function buildProdBundle(options?: BuildProdBundleOptions): Promise<BuildResult>;
 export type ClientEntry = {
@@ -71,7 +72,7 @@ export type ClientEntry = {
  *  `kumiko-build`/`kumiko build` via `@cosmicdrift/kumiko-dev-server/build`,
  *  not just from unit tests.
  *
- * Precedence (fw#2320 — explicit declaration, no filename inference):
+ * Precedence (explicit declaration, no filename inference):
  *   1. `declared.clientEntry` and `declared.clientEntries` both set → throw.
  *   2. `declared.clientEntries` (non-empty) → one entry per declaration.
  *   3. `declared.clientEntry` → single entry, name "client".
@@ -87,9 +88,9 @@ export declare function resolveClientEntries(cwd: string, declared: ClientEntrie
 export declare function readClientEntriesConfig(cwd: string): ClientEntriesConfig;
 type ResolvedStylesheet = {
     readonly path: string;
-    /** True nur wenn wir auf das gepackte renderer-web-styles.css zurückfallen
-     *  (App hat clientEntry + renderer-web-Dep, aber kein eigenes src/styles.css).
-     *  Steuert den Shell-Klassen-Sentinel im Build. */
+    /** True only when falling back to the packaged renderer-web-styles.css
+     *  (the app has clientEntry and a renderer-web dependency, but no
+     *  src/styles.css). Controls the shell-class sentinel check during the build. */
     readonly isRendererWebFallback: boolean;
 };
 export declare function assertRendererWebShellPresent(css: string, stylesheet: ResolvedStylesheet): void;
@@ -98,9 +99,9 @@ export declare function runTailwindOnce(entry: string, cwd: string): Promise<str
 export declare function isEntryOutputFor(outName: string, baseName: string): boolean;
 export declare function injectAssetTags(html: string, manifest: BuildManifest, entry: ClientEntry, buildInfo?: BuildInfo): string;
 export declare function computeBuildId(manifest: BuildManifest): string;
-/** Formatiert ein BuildResult als CLI-freundliche Mehrzeilen-Zusammenfassung
- *  mit ANSI-Farben. Wird sowohl von `kumiko build` als auch von dem
- *  hoisted `kumiko-build`-Bin verwendet, damit das Output konsistent ist. */
+/** Formats a BuildResult as a CLI-friendly, multi-line summary with ANSI
+ *  colors. Used by both `kumiko build` and the hoisted `kumiko-build` binary
+ *  so their output remains consistent. */
 export declare function formatBuildResult(result: BuildResult, durationMs: number): string;
 /** Hashes every inline script in the HTML files of a finished build output, so the
  *  CSP only ever allows code that shipped in the artefact. */