@cosmicdrift/kumiko-server-runtime 0.398.0 → 0.400.0

package/dist/boot/worker-boot-core.js

@@ -3,7 +3,7 @@
 // dry-run exit, KMS health gate, connections, schema-drift gate, boot-crypto
 // and extraContext. Both processes must write rows the API can read, so they
 // share every step that decides ciphers, blind indexes and config encryption.
-import { loadJwtSecretOrKeyring } from "@cosmicdrift/kumiko-framework/api";
+import { createDefaultSseBroker, loadJwtSecretOrKeyring } from "@cosmicdrift/kumiko-framework/api";
 import { configureBlindIndexKey, configurePiiSubjectKms, resolvePlatformKeks, } from "@cosmicdrift/kumiko-framework/crypto";
 import { assertRowLevelSecurityBootState, configureEntityFieldEncryption, knownTablesOf, } from "@cosmicdrift/kumiko-framework/db";
 import { createRegistry, validateBoot, } from "@cosmicdrift/kumiko-framework/engine";
@@ -179,7 +179,9 @@ export async function bootWorkerProcess(options, envSource, profile) {
     });
     const extraContext = addConfigAccessorFactory({ ...autoExtraContext, ...resolvedExtraContext }, registry);
     const jobLogger = jobRunLoggerCallbacks(registry, db);
+    const { sseBroker, ownedRedisSseBroker } = createDefaultSseBroker(envSource);
     const entrypoint = createWorkerEntrypoint({
+        sseBroker,
         registry,
         rowLevelSecurity,
         context: { db, redis, entityCache, registry, ...extraContext },
@@ -206,6 +208,11 @@ export async function bootWorkerProcess(options, envSource, profile) {
     entrypoint.lifecycle.registerShutdownHook("workerCacheSync", async () => {
         await cacheSync.close();
     });
+    if (ownedRedisSseBroker) {
+        entrypoint.lifecycle.registerShutdownHook("workerRedisSseBroker", async () => {
+            await ownedRedisSseBroker.close();
+        });
+    }
     return {
         kind: "booted",
         db,

package/dist/run-worker-app.d.ts

@@ -63,8 +63,8 @@ export type RunWorkerAppOptions = {
         readonly dir: string;
     } | false;
     /** Extra AppContext keys — same factory-union pattern as
-     *  RunProdAppOptions["extraContext"], without sseBroker (the worker
-     *  has none — see entrypoint/index.ts's documented SSE limitation). */
+     *  RunProdAppOptions["extraContext"], without sseBroker (the worker builds its own: with
+     *  REDIS_URL in the env it publishes its SSE signals over Redis to the API's clients). */
     readonly extraContext?: WorkerContextOption;
     /** MasterKeyProvider replacing the env KEK for ctx.services.secrets, encrypted
      *  config keys and `encrypted: true` entity fields; with it set,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-server-runtime",
-  "version": "0.398.0",
+  "version": "0.400.0",
   "description": "Production server-boot runtime for Kumiko apps: connections, schema-drift-gate, seeds, lifecycle, graceful shutdown. Symmetric to kumiko-dev-server's runDevApp, without dev/scaffold tooling.",
   "license": "MIT",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -96,11 +96,11 @@
     }
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-bundled-features": "0.398.0",
-    "@cosmicdrift/kumiko-framework": "0.398.0",
-    "@cosmicdrift/kumiko-renderer": "0.398.0",
-    "@cosmicdrift/kumiko-renderer-mail-html": "0.398.0",
-    "@cosmicdrift/kumiko-types": "0.398.0",
+    "@cosmicdrift/kumiko-bundled-features": "0.400.0",
+    "@cosmicdrift/kumiko-framework": "0.400.0",
+    "@cosmicdrift/kumiko-renderer": "0.400.0",
+    "@cosmicdrift/kumiko-renderer-mail-html": "0.400.0",
+    "@cosmicdrift/kumiko-types": "0.400.0",
     "ioredis": "^5.10.1",
     "temporal-polyfill": "^0.3.2",
     "zod": "^4.6.7"
@@ -109,7 +109,7 @@
     "bun-types": "^1.4.4"
   },
   "devDependencies": {
-    "@cosmicdrift/kumiko-testing": "0.398.0",
+    "@cosmicdrift/kumiko-testing": "0.400.0",
     "bun-types": "^1.4.4"
   },
   "publishConfig": {

package/src/changes.json

@@ -1,4 +1,10 @@
 [
+  {
+    "version": "0.399.0",
+    "type": "fix",
+    "title": "Worker SSE signals reach the API clients when the env comes from envSource",
+    "detail": "The worker built its SSE broker from process.env only. A worker started with `runWorkerApp({ envSource })` and no REDIS_URL in process.env kept an in-memory broker, so signals from jobs and consumers never reached the SSE clients connected to the API process. The worker boot now builds the broker from the same env source as the API and closes it on shutdown. `WorkerEntrypointOptions` gets an optional `sseBroker`."
+  },
   {
     "version": "0.390.0",
     "type": "fix",