@cosmicdrift/kumiko-server-runtime 0.414.0 → 0.416.0

package/dist/boot/worker-boot-core.js

@@ -20,6 +20,7 @@ import { readShutdownDrainTimeoutMs } from "../boot-options/process-signals.js";
 import { composeFeatures } from "../compose-features.js";
 import { assertPiiBootInvariants } from "../pii-boot-gate.js";
 import { readEnv, requireEnv } from "../require-env.js";
+import { resolveUnsubscribeWiring } from "../resolve-unsubscribe-wiring.js";
 import { addConfigAccessorFactory, buildBootExtraContext, loggerFromExtraContext, } from "../run-prod-app-boot-context.js";
 import { resolveBootCrypto } from "./boot-crypto.js";
 import { jobRunLoggerCallbacks } from "./job-run-logger.js";
@@ -184,6 +185,13 @@ export async function bootWorkerProcess(options, envSource, profile) {
     configureBlindIndexKey(options.blindIndexKey);
     const bootLogger = loggerFromExtraContext(resolvedExtraContext);
     warnIfRowLevelSecurityOff(rowLevelSecurity, bootLogger ?? createFallbackLogger(processName));
+    const { unsubscribeLinks } = resolveUnsubscribeWiring({
+        unsubscribe: options.unsubscribe,
+        publicOrigin: undefined,
+        mailBaseUrl: undefined,
+        envSource,
+        warn: (message) => (bootLogger ?? createFallbackLogger(processName)).warn(message),
+    });
     const autoExtraContext = buildBootExtraContext({
         db,
         features,
@@ -196,6 +204,7 @@ export async function bootWorkerProcess(options, envSource, profile) {
         ...(options.kms && { kms: options.kms }),
         ...(profile.deliverQueuedInline === true && { deliverQueuedInline: true }),
         ...(bootLogger && { log: bootLogger }),
+        ...(unsubscribeLinks && { unsubscribeLinks }),
     });
     const extraContext = addConfigAccessorFactory({ ...autoExtraContext, ...resolvedExtraContext }, registry);
     const jobLogger = jobRunLoggerCallbacks(registry, db);

package/dist/pwa-service-worker-script.d.ts

@@ -1,4 +1,5 @@
-export declare const PWA_CACHE_NAME_PREFIX = "kumiko-pwa-";
+import { PWA_CACHE_NAME_PREFIX } from "@cosmicdrift/kumiko-renderer/headless";
+export { PWA_CACHE_NAME_PREFIX };
 export type PwaServiceWorkerScriptInput = {
     readonly cacheName: string;
     readonly cacheScopePrefix: string;

package/dist/pwa-service-worker-script.js

@@ -1,8 +1,11 @@
 // The worker is plain JS in a string because the server hands it out as is: no bundler step,
 // no workbox, nothing loaded from outside the app's own origin.
-// CacheStorage is shared by the whole origin, so each base path gets its own prefix to keep one
-// app's activation from deleting the precache of another app on the same origin.
-export const PWA_CACHE_NAME_PREFIX = "kumiko-pwa-";
+import { PWA_CACHE_NAME_PREFIX } from "@cosmicdrift/kumiko-renderer/headless";
+export { PWA_CACHE_NAME_PREFIX };
+// Cache names before scoping were `kumiko-pwa-<16hex>`; kept only so an update drops those precaches once.
+// The pattern also matches the precache of another app on the same origin that still runs an old
+// framework version; accepted, because that app only has to precache again.
+const UNSCOPED_CACHE_NAME_PATTERN = /^kumiko-pwa-[0-9a-f]{16}$/;
 const SERVICE_WORKER_BODY = `
 const PASS_THROUGH_PATHS = ["/api", "/sse", "/auth", "/health", "/build-info.json", SERVICE_WORKER_PATH, "/_reload"];
 const PASS_THROUGH_PREFIXES = ["/api/", "/sse/", "/auth/"];
@@ -49,7 +52,11 @@ async function deleteOldCaches() {
   const names = await caches.keys();
   await Promise.all(
     names
-      .filter((name) => name.startsWith(CACHE_SCOPE_PREFIX) && name !== CACHE_NAME)
+      .filter(
+        (name) =>
+          (name.startsWith(CACHE_SCOPE_PREFIX) || UNSCOPED_CACHE_NAME_PATTERN.test(name)) &&
+          name !== CACHE_NAME,
+      )
       .map((name) => caches.delete(name)),
   );
 }
@@ -111,6 +118,7 @@ export function buildPwaServiceWorkerScript(input) {
     return [
         `const CACHE_SCOPE_PREFIX = ${JSON.stringify(input.cacheScopePrefix)};`,
         `const CACHE_NAME = ${JSON.stringify(input.cacheName)};`,
+        `const UNSCOPED_CACHE_NAME_PATTERN = ${UNSCOPED_CACHE_NAME_PATTERN.toString()};`,
         `const SHELL_URL = ${JSON.stringify(input.shellUrl)};`,
         `const SERVICE_WORKER_PATH = ${JSON.stringify(input.serviceWorkerPath)};`,
         `const PRECACHE_URLS = ${JSON.stringify(input.precacheUrls)};`,

package/dist/pwa.js

@@ -1,5 +1,5 @@
 import { createHash } from "node:crypto";
-import { escapeHtmlAttr, PWA_SERVICE_WORKER_META_NAME, } from "@cosmicdrift/kumiko-renderer/headless";
+import { escapeHtmlAttr, PWA_CACHE_SCOPE_HASH_LENGTH, PWA_SERVICE_WORKER_META_NAME, } from "@cosmicdrift/kumiko-renderer/headless";
 import { buildPwaServiceWorkerScript, PWA_CACHE_NAME_PREFIX } from "./pwa-service-worker-script.js";
 const DEFAULT_PWA_BASE_PATH = "/";
 const MANIFEST_FILE = "manifest.webmanifest";
@@ -93,7 +93,7 @@ function fileResponse(req, body, contentType) {
 export function createPwaShell(options, build) {
     assertValidPwaOptions(options);
     const paths = pwaPathsOf(options);
-    const cacheScopePrefix = `${PWA_CACHE_NAME_PREFIX}${createHash("sha256").update(paths.shellUrl).digest("hex").slice(0, 8)}-`;
+    const cacheScopePrefix = `${PWA_CACHE_NAME_PREFIX}${createHash("sha256").update(paths.shellUrl).digest("hex").slice(0, PWA_CACHE_SCOPE_HASH_LENGTH)}-`;
     const cacheName = `${cacheScopePrefix}${computeCacheVersion(options, build)}`;
     const precacheUrls = [
         ...new Set([

package/dist/run-worker-app.d.ts

@@ -16,6 +16,7 @@ import type { FileStorageBootOption } from "./boot-options/file-storage-option.t
 import type { KmsMode } from "./boot-options/kms-mode.ts";
 import type { MailBootOption } from "./boot-options/mail-option.ts";
 import { type SystemWireDeps } from "./extra-routes-deps.ts";
+import type { UnsubscribeOption } from "./resolve-unsubscribe-wiring.ts";
 import type { ConfigOverridesInput } from "./run-prod-app-boot-context.ts";
 export type WorkerContextOption = Record<string, unknown> | ((deps: WorkerDeps) => Record<string, unknown>);
 export type WorkerDeps = {
@@ -112,6 +113,10 @@ export type RunWorkerAppOptions = {
     readonly billing?: BillingBootOption;
     /** Same as RunProdAppOptions["featureToggles"]: mounts feature-toggles and layers the operator switches over the tier resolver. */
     readonly featureToggles?: boolean;
+    /** Signs the unsubscribe links of `unsubscribe: true` mails that jobs in this process trigger, as
+     *  RunProdAppOptions["unsubscribe"] does. The unsubscribe routes stay in the API process; `secret`
+     *  must be the same there. The public URL comes from `APP_BASE_URL`. */
+    readonly unsubscribe?: UnsubscribeOption;
     /** Composed env schema (see RunProdAppOptions["envSchema"]). With it the worker validates its env,
      *  derives the KMS slots from it (`kmsSlots` is ignored) and understands every `KUMIKO_DRY_RUN_ENV`
      *  mode. Without it only `KUMIKO_DRY_RUN_ENV=boot` is available. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-server-runtime",
-  "version": "0.414.0",
+  "version": "0.416.0",
   "description": "Production server-boot runtime for Kumiko apps: connections, schema-drift-gate, seeds, lifecycle, graceful shutdown. Symmetric to kumiko-dev-server's runDevApp, without dev/scaffold tooling.",
   "license": "MIT",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -100,11 +100,11 @@
     }
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-bundled-features": "0.414.0",
-    "@cosmicdrift/kumiko-framework": "0.414.0",
-    "@cosmicdrift/kumiko-renderer": "0.414.0",
-    "@cosmicdrift/kumiko-renderer-mail-html": "0.414.0",
-    "@cosmicdrift/kumiko-types": "0.414.0",
+    "@cosmicdrift/kumiko-bundled-features": "0.416.0",
+    "@cosmicdrift/kumiko-framework": "0.416.0",
+    "@cosmicdrift/kumiko-renderer": "0.416.0",
+    "@cosmicdrift/kumiko-renderer-mail-html": "0.416.0",
+    "@cosmicdrift/kumiko-types": "0.416.0",
     "ioredis": "^5.11.1",
     "temporal-polyfill": "^0.3.2",
     "zod": "^4.6.7"
@@ -113,7 +113,7 @@
     "bun-types": "^1.4.4"
   },
   "devDependencies": {
-    "@cosmicdrift/kumiko-testing": "0.414.0",
+    "@cosmicdrift/kumiko-testing": "0.416.0",
     "bun-types": "^1.4.4"
   },
   "publishConfig": {

package/src/changes.json

@@ -1,4 +1,16 @@
 [
+  {
+    "version": "0.415.0",
+    "type": "fix",
+    "title": "PWA update removes the precache of the unscoped cache name format",
+    "detail": "Caches named kumiko-pwa-<16hex> from before the per-scope prefix were never deleted after an update. The service worker now drops them once, and keeps caches of other scopes and foreign libraries."
+  },
+  {
+    "version": "0.415.0",
+    "type": "improvement",
+    "title": "runWorkerApp accepts the unsubscribe option",
+    "detail": "Pass the same `unsubscribe: { secret }` to runWorkerApp as to runProdApp; a job in the worker (e.g. a cron digest) that sends an `unsubscribe: true` notification then gets a signed link from `APP_BASE_URL`. The unsubscribe routes stay in the API process, which must use the same secret. Before, such mails went out without a link."
+  },
   {
     "version": "0.414.0",
     "type": "improvement",