@k2b/cloud 0.47.0 → 0.49.0

package/src/services/settings/index.ts

@@ -9,8 +9,8 @@
  * env-backed entries into Postgres. Startup never replaces an existing row;
  * env bootstrap only fills missing keys.
  */
+import { redis, sql } from "../../runtime/clients";
 
-import { redis, sql } from "bun";
 import { bindSettingValue, replaceSettingValue, unwrapSettingValue } from "./binding";
 import { decryptValue, encryptValue, getAppSecret } from "./crypto";
 import { resolveSettingPresentation, SETTINGS, SETTINGS_MAP, type SettingDef, validateSettingValue } from "./defaults";

package/src/services/settings/store.ts

@@ -13,9 +13,10 @@
  * snapshot exposed via `c.get("settings")` (built by snapshot.ts middleware).
  */
 
-import { sql } from "bun";
 import { HTTPException } from "hono/http-exception";
 import { hasRole, type User } from "../../contracts/shared";
+import { sql } from "../../runtime/clients";
+import { connections } from "../../runtime/connections";
 import { claimCacheFill, completeCacheFill, MISSING_SETTING } from "../cache-fill";
 import { stripImageDataUrlMetadata } from "../image-metadata";
 import { toPgTextArray } from "../postgres";
@@ -89,6 +90,8 @@ export const readKeyState = async (key: string, db: SqlClient = sql): Promise<Se
 export const bulkRead = async (keys: readonly string[]): Promise<Map<string, unknown>> => {
   const result = new Map<string, unknown>();
   if (keys.length === 0) return result;
+  // Missing startup is a programming error, never a cache outage or unreadable row.
+  connections();
   // Bound access is read with its endpoint in one database snapshot. Never
   // resolve it from an independently cached secret.
   const boundKeys = keys.filter((key) => settingOwners(key).length > 0);
@@ -163,6 +166,7 @@ export const bulkRead = async (keys: readonly string[]): Promise<Map<string, unk
 export const readStates = async (keys: readonly string[], db: SqlClient = sql): Promise<Map<string, SettingRead>> => {
   const result = new Map<string, SettingRead>();
   if (keys.length === 0) return result;
+  connections();
   const snapshotKeys = [...new Set(keys.flatMap((key) => [key, ...settingOwners(key).map((owner) => owner.key)]))];
   const rows = await db<StoredRow[]>`SELECT key, value FROM settings.entries WHERE key = ANY(${toPgTextArray(snapshotKeys)}::text[])`;
   const byKey = new Map(rows.map((row) => [row.key, row]));
@@ -206,6 +210,7 @@ const knownKeysWith = (extraKnownKeys: readonly string[]) =>
   Array.from(new Set([...allKnownKeys(), ...retainedLegacyKeys, ...extraKnownKeys]));
 
 export const listLegacyKeys = async (extraKnownKeys: readonly string[] = []): Promise<LegacySettingRow[]> => {
+  connections();
   const knownKeys = knownKeysWith(extraKnownKeys);
   const rows = await sql<LegacyStoredRow[]>`
     SELECT key, value, updated_at

package/src/services/settings/versions.ts

@@ -1,4 +1,5 @@
-import { sql } from "bun";
+import { sql } from "../../runtime/clients";
+
 import { ConfigConflict } from "../config-conflict";
 import { SETTINGS_MAP } from "./defaults";
 import { readKeyState } from "./store";

package/src/services/weather/forecast.ts

@@ -1,4 +1,5 @@
-import { redis } from "bun";
+import { redis } from "../../runtime/clients";
+
 import { logger } from "../logging";
 import { coreSettings } from "../settings/api";
 import type { CurrentWeather, DailyForecast, HourlyForecast, WeatherData, WeatherIcon } from "./types";

package/src/services/weather/locations.ts

@@ -1,6 +1,6 @@
 import { err, fail, ok, type PageParams, type Paginated, paginate, type Result } from "@k2b/stdlib";
-import { sql } from "bun";
 import type { GeoProvenance } from "../../contracts/geo";
+import { sql } from "../../runtime/clients";
 import { logger } from "../logging";
 import { withWeatherLocationShortId } from "./short-id";
 

package/src/services/weather/migrate.ts

@@ -1,4 +1,5 @@
-import { sql } from "bun";
+import { sql } from "../../runtime/clients";
+
 import { backfillWeatherLocationShortIds } from "./short-id";
 
 export const migrate = async (): Promise<void> => {

package/src/services/weather/short-id.ts

@@ -1,5 +1,6 @@
 import { crypto } from "@k2b/stdlib";
-import { sql } from "bun";
+import { sql } from "../../runtime/clients";
+
 import { isUniqueViolation } from "../postgres";
 
 export const WEATHER_LOCATION_SHORT_ID_PATTERN = /^[0-9A-Za-z]{6}$/;

package/src/services/webauthn.ts

@@ -10,8 +10,8 @@ import {
   verifyRegistrationResponse,
   type WebAuthnCredential,
 } from "@simplewebauthn/server";
-import { redis, sql } from "bun";
 import type { User, WebAuthnPasskey } from "../contracts/shared";
+import { redis, sql } from "../runtime/clients";
 import { accounts } from "./accounts";
 import { audit } from "./audit";
 import { logger } from "./logging";

package/src/ssr/admin-navigation.ts

@@ -70,7 +70,6 @@ export const buildAdminGroups = (apps: readonly RuntimeContext["apps"][number][]
       links: [
         { href: "/admin", icon: "ti-dashboard", label: t.overview },
         { href: "/admin/apps", icon: "ti-apps", label: t.apps },
-        { href: "/admin/app-credentials", icon: "ti-key", label: t.appCredentials },
         { href: "/admin/rail", icon: "ti-layout-sidebar", label: t.rail },
         { href: "/admin/announcements", icon: "ti-speakerphone", label: t.announcements },
       ],

package/src/ssr/compact-shell.browser-harness.ts

@@ -23,6 +23,7 @@ const { defineApp } = await import("../_internal/define-app");
 const { person } = await import("../_internal/define-app.test-fixture");
 const railSnapshot = await import("../services/rail-snapshot");
 const settingsMiddleware = await import("../server/middleware/settings");
+const help = await import("./help");
 const { defaultRailPreferences } = await import("../contracts/rail-preferences");
 const { default: WorkspaceNavigation } = await import("./WorkspaceNavigation.island");
 const { default: Layout } = await import("./Layout");
@@ -367,6 +368,7 @@ export function installCompactShellHarness(launch: typeof launchBrowser) {
     spies.push(
       spyOn(railSnapshot, "readRailSnapshot").mockResolvedValue(defaultRailPreferences()),
       spyOn(settingsMiddleware, "preloadLayoutAnnouncements").mockResolvedValue(undefined),
+      spyOn(help, "preloadLayoutHelp").mockResolvedValue(null),
     );
     const build = await Bun.build({ entrypoints: [resolve(import.meta.dir, "../../../../styles.css")], plugins: [tailwind] });
     if (!build.success) throw new AggregateError(build.logs, "Could not compile the global stylesheet.");

package/src/ssr/platform-messages.ts

@@ -40,7 +40,6 @@ export const platformMessages = i18n.define({
       general: "General",
       rail: "App bar",
       announcements: "Announcements",
-      appCredentials: "App credentials",
       ai: "AI",
       observability: "Observability",
       baseSettings: "Base settings",
@@ -147,7 +146,6 @@ export const platformMessages = i18n.define({
       general: "Allgemein",
       rail: "App-Leiste",
       announcements: "Ankündigungen",
-      appCredentials: "App-Schlüssel",
       ai: "KI",
       observability: "Observability",
       baseSettings: "Grundeinstellungen",

package/src/start.ts

@@ -1,4 +1,8 @@
 // Keep this entry independent of the platform barrel and application modules.
+import { parseAppKey } from "./app-key";
+import { env } from "./config/env";
+import { bootstrapConnections } from "./runtime/bootstrap-client";
+import type { BootstrapResponse } from "./runtime/bootstrap-protocol";
 import { initializeClients } from "./runtime/clients";
 import { bindConnections, hasConnections } from "./runtime/connections";
 import { resolveConnections } from "./runtime/resolve-connections";
@@ -9,24 +13,41 @@ export type PlatformStartOptions = {
   source?: "env";
 };
 
+let initializing = false;
+
 /** Initialize before importing any application module, also in dev and data workers. */
 export const initializePlatform = async ({ appId, source }: PlatformStartOptions): Promise<void> => {
   if (!/^[a-z][a-z0-9-]{0,79}$/.test(appId)) throw new Error("Platform start requires a valid appId");
-  if (hasConnections()) throw new Error("Platform has already started");
-  if (appId === "core" || appId === "gateway") source = "env";
-  // Slice 6b seam: validate the app key and fetch missing values from Core here,
-  // then pass the typed response to resolveConnections({ appId, core }).
-  // A present key must never silently fall back to the legacy env mode.
-  if (source !== "env" && (process.env.CLOUD_APP_KEY?.trim() || process.env.CLOUD_APP_KEY_FILE?.trim())) {
-    throw new Error("Core connection bootstrap is not available yet");
-  }
-  const resolved = resolveConnections({ appId });
-  bindConnections(resolved);
+  if (initializing || hasConnections()) throw new Error("Platform has already started");
+  initializing = true;
   try {
-    await initializeClients();
-  } catch (error) {
-    bindConnections(undefined);
-    throw error;
+    const keyValue = env.CLOUD_APP_KEY;
+    const envOnly = source === "env" || appId === "core" || appId === "gateway";
+    if (keyValue && envOnly) throw new Error("App keys are forbidden in forced env mode (including Core and Gateway)");
+    let bootstrap: BootstrapResponse | undefined;
+    if (keyValue) {
+      // Parsing never prints the private value. A present invalid key cannot fall back to env.
+      const key = parseAppKey(keyValue);
+      if (key.appId !== appId) throw new Error("App-key appId does not match the declared application");
+      bootstrap = await bootstrapConnections(key, env.CLOUD_CORE_INTERNAL_ORIGIN);
+    }
+    const resolved = resolveConnections({ appId, core: bootstrap?.connections });
+    resolved.bootstrap = {
+      mode: bootstrap ? "core" : "env",
+      ...(bootstrap ? { keyId: bootstrap.identity.keyId } : {}),
+      sources: resolved.sources,
+      keyFormat: "cloud-app-key-v1",
+      protocol: 1,
+    };
+    bindConnections(resolved);
+    try {
+      await initializeClients();
+    } catch (error) {
+      bindConnections(undefined);
+      throw error;
+    }
+  } finally {
+    initializing = false;
   }
 };
 

package/src/workflows/ai/store.ts

@@ -1,5 +1,6 @@
-import { type SQL, sql } from "bun";
+import type { SQL } from "bun";
 import { AI_TASK_REQUEST_MAX_BYTES, AiTaskInputTooLargeError, assertAiTaskRequestSize } from "../../ai/task-contracts";
+import { sql } from "../../runtime/clients";
 import type { AccessSubject } from "../../server/services/access";
 import { type AiResolvedModelRef, AiResolvedModelRefSchema } from "../../shared/ai-models";
 import type { WorkflowJsonValue } from "../contracts";

package/src/workflows/store/budget.ts

@@ -16,7 +16,8 @@
  * rather than something a hash has to detect — whatever the plan turns out to
  * do, it still cannot exceed what was approved.
  */
-import { type SQL, sql } from "bun";
+import type { SQL } from "bun";
+import { sql } from "../../runtime/clients";
 import { withTransaction } from "./transaction";
 
 /** Caps keyed by dimension — `{ emails: 100, httpRequests: 50 }`. */

package/src/workflows/store/definitions.ts

@@ -9,7 +9,8 @@
  * edit, and an activation that pins one cannot be left pointing at a plan that
  * no longer exists.
  */
-import { type SQL, sql } from "bun";
+import type { SQL } from "bun";
+import { sql } from "../../runtime/clients";
 import type { WorkflowBoundPlan, WorkflowDiagnostic, WorkflowJsonValue } from "../contracts";
 import { validateWorkflowEffectBudget } from "./budget";
 import { withTransaction } from "./transaction";

package/src/workflows/store/events.ts

@@ -11,7 +11,8 @@
  * is an event. Nothing needs its own registration path.
  */
 import { Buffer } from "node:buffer";
-import { type SQL, sql } from "bun";
+import type { SQL } from "bun";
+import { sql } from "../../runtime/clients";
 import type { WorkflowJsonValue } from "../contracts";
 import { createWorkflowRun } from "./runs";
 import { withTransaction } from "./transaction";

package/src/workflows/store/observability.ts

@@ -11,7 +11,8 @@
  * matched nothing and said nothing, and a run that started long after the
  * occurrence that caused it.
  */
-import { type SQL, sql } from "bun";
+import type { SQL } from "bun";
+import { sql } from "../../runtime/clients";
 import type { WorkflowInvocationMode, WorkflowJsonValue, WorkflowRunState } from "../contracts";
 import type { WorkflowEffectBudget } from "./budget";
 

package/src/workflows/store/retention.ts

@@ -1,4 +1,5 @@
-import { type SQL, sql } from "bun";
+import type { SQL } from "bun";
+import { sql } from "../../runtime/clients";
 import { logger } from "../../services/logging";
 import { toPgUuidArray } from "../../services/postgres";
 import { withTransaction } from "./transaction";

package/src/workflows/store/runs.ts

@@ -16,7 +16,8 @@
  * that lost its lease writes with a stale generation and every one of its
  * updates matches zero rows. Nothing here trusts wall-clock ordering.
  */
-import { type SQL, sql } from "bun";
+import type { SQL } from "bun";
+import { sql } from "../../runtime/clients";
 import type { WorkflowBoundPlan, WorkflowDependency, WorkflowInvocationMode, WorkflowJsonValue, WorkflowRunState } from "../contracts";
 import type {
   WorkflowCoordinatorFinishState,

package/src/workflows/store/transaction.ts

@@ -10,7 +10,8 @@
  * handle only has `savepoint` when it *is* a transaction, which is what makes
  * this reliable rather than a convention callers have to remember.
  */
-import { type SQL, sql } from "bun";
+import type { SQL } from "bun";
+import { sql } from "../../runtime/clients";
 
 type Savepointed = SQL & { savepoint: <T>(fn: (tx: SQL) => Promise<T>) => Promise<T> };
 

package/src/workflows/store/worker.ts

@@ -11,7 +11,8 @@
  * about *when* something runs, *which* plan it runs, and what happens if the
  * process dies belongs here.
  */
-import { type SQL, sql } from "bun";
+import type { SQL } from "bun";
+import { sql } from "../../runtime/clients";
 import type { WorkflowActor, WorkflowInvocationMode, WorkflowJsonValue } from "../contracts";
 import { hashWorkflowJson } from "../language/canonical";
 import type { DefinedWorkflowModule } from "../module";