create-kumiko-app 0.4.140 → 0.4.142

package/feature-manifest.json

@@ -106,7 +106,7 @@
     },
     {
       "name": "auth-foundation",
-      "description": "Declares the `tokenVerifier` (Bearer-token auth) and `sessionStore` extension points. Provider-features register a static `shape` plus a `build()` for tokenVerifier — mount together with at least one auth-provider-* feature (e.g. personal-access-tokens) and call `resolveTokenVerifier(deps, rawToken)` to find the matching one; sessions self-registers as the single sessionStore provider.",
+      "description": "Declares auth-middleware extension points: `tokenVerifier` (Bearer), `sessionStore` (revocable JWT sid), optional `tenantResolver` + `tenantExistence` for anonymous multi-tenant. Provider-features register via r.useExtension; mount auth-foundation with the matching provider features.",
       "toggleableDefault": null,
       "requires": [],
       "optionalRequires": [],
@@ -1371,7 +1371,7 @@
       "uiHints": {
         "displayLabel": "Personal Access Tokens",
         "category": "identity",
-        "recommended": false
+        "recommended": true
       }
     },
     {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-kumiko-app",
-  "version": "0.4.140",
+  "version": "0.4.142",
   "description": "`bun create kumiko-app <name>` — scaffold a new Kumiko app with an interactive feature picker.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -30,9 +30,9 @@
     "vendor:manifest": "bun run scripts/vendor-manifest.ts"
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-dev-server": "0.159.1",
-    "@cosmicdrift/kumiko-framework": "0.159.1",
-    "@cosmicdrift/kumiko-server-runtime": "0.159.1",
+    "@cosmicdrift/kumiko-dev-server": "0.161.0",
+    "@cosmicdrift/kumiko-framework": "0.161.0",
+    "@cosmicdrift/kumiko-server-runtime": "0.161.0",
     "@inquirer/core": "^10.0.0",
     "@inquirer/prompts": "^7.4.0"
   },

package/src/__tests__/yes-scaffold-boot.test.ts

@@ -7,7 +7,6 @@
 // only actually booting the resolved set through validateBoot can.
 
 import { describe, expect, test } from "bun:test";
-import { createPersonalAccessTokensFeature } from "@cosmicdrift/kumiko-bundled-features/personal-access-tokens";
 import {
   createRegistry,
   type FeatureDefinition,
@@ -31,11 +30,11 @@ async function instantiateResolved(names: readonly string[]): Promise<FeatureDef
     if (!entry) continue; // mirrors index.ts:47-49 — auto-mounted core deps have no entry
     const mod = (await import(entry.importPath)) as Record<string, unknown>;
     const exp = mod[entry.exportName];
-    instances.push(
-      entry.callExpression.endsWith("()")
-        ? (exp as () => FeatureDefinition)()
-        : (exp as FeatureDefinition),
-    );
+    if (typeof exp === "function") {
+      instances.push((exp as (...args: unknown[]) => FeatureDefinition)(...(entry.callArgs ?? [])));
+    } else {
+      instances.push(exp as FeatureDefinition);
+    }
   }
   return instances;
 }
@@ -56,9 +55,8 @@ describe("--yes resolved set boots (issue-1174 regression)", () => {
     const instances = await instantiateResolved(resolved.featureNames);
     // sessions (auto-included, session-list/detail screens are recommended)
     // requires auth-foundation, which the dep-resolver already pulls in
-    // transitively — it just needs a tokenVerifier provider mounted too.
-    // PAT is what publicstatus/money-horse mount for this today.
-    instances.push(createPersonalAccessTokensFeature({ scopes: {} }));
+    // transitively — personal-access-tokens (recommended, satisfies the
+    // tokenVerifier boot invariant) is resolved into the set too.
     const composed = composeFeatures(instances, { includeBundled: true });
     expect(() => validateBoot(composed)).not.toThrow();
     expect(() => createRegistry(composed)).not.toThrow();

package/src/feature-constructors.ts

@@ -35,6 +35,13 @@ export const FEATURE_CONSTRUCTORS: Readonly<Record<string, ScaffoldFeatureEntry>
     exportName: "authFoundationFeature",
     callExpression: "authFoundationFeature",
   },
+  "personal-access-tokens": {
+    name: "personal-access-tokens",
+    importPath: "@cosmicdrift/kumiko-bundled-features/personal-access-tokens",
+    exportName: "createPersonalAccessTokensFeature",
+    callExpression: "createPersonalAccessTokensFeature({ scopes: {} })",
+    callArgs: [{ scopes: {} }],
+  },
   sessions: {
     name: "sessions",
     importPath: "@cosmicdrift/kumiko-bundled-features/sessions",