create-kumiko-app 0.4.195 → 0.4.197

package/README.md

@@ -40,5 +40,5 @@ bun run boot
 
 The picker reads a vendored copy of `feature-manifest.json` from the
 framework's `samples/apps/use-all-bundled` workspace. A CI drift-test
-fails if the vendored copy goes stale — run `bun run vendor:manifest`
-inside this package to refresh.
+fails if the vendored copy goes stale — run `bun run gen:manifest`
+inside `samples/apps/use-all-bundled` to refresh both copies.

package/feature-manifest.json

@@ -1,6 +1,6 @@
 {
   "source": "samples/apps/use-all-bundled APP_FEATURES (composeFeatures includeBundled + signup)",
-  "featureCount": 65,
+  "featureCount": 66,
   "features": [
     {
       "name": "admin-shell",
@@ -502,6 +502,32 @@
         "recommended": true
       }
     },
+    {
+      "name": "derivatives-sharp",
+      "description": "Registers an `image/*` renderer against the `derivativeRenderer` extension point declared by `file-derivatives`, backed by sharp. Supports resize/fit (cover, inside, contain), format conversion with quality (webp, avif, jpeg), whole-image blur, and blurring individual regions burned in before resize (see BlurRegion). EXIF orientation is applied and then normalized away, and all other EXIF (including GPS) is dropped. Server-only: sharp is a native binding — never import this from client code.",
+      "toggleableDefault": null,
+      "requires": [
+        "file-derivatives"
+      ],
+      "optionalRequires": [],
+      "configReads": [],
+      "exposesApis": [],
+      "usesApis": [],
+      "extensionsUsed": [
+        {
+          "extensionName": "derivativeRenderer",
+          "entityName": "image/*"
+        }
+      ],
+      "configKeys": [],
+      "secrets": [],
+      "writeHandlers": [],
+      "uiHints": {
+        "displayLabel": "File Derivatives · Sharp",
+        "category": "storage",
+        "recommended": false
+      }
+    },
     {
       "name": "document-ingest-foundation",
       "description": "Shared PDF/Scan/Image → normalized-text ingest primitive. Owns the `documentExtract` entity (fileRefId, storageKey, per-page text + metadata) as an implicit entity-projection, the per-tenant `ocrLanguage`/`maxPagesPerFile` config keys, and a fileRef.created trigger that validates mime/size and requests ingest via `documentIngest.requested`. LiteParse provider wiring lands in follow-up features.",
@@ -600,7 +626,7 @@
     },
     {
       "name": "file-derivatives",
-      "description": "Declares the `derivativeRenderer` extension point. `ctx.derivatives.variant(fileRefId, spec, name)` derives a variant of a tracked FileRef the first time it's requested and reuses the stored result afterwards (derive-on-first-use, keyed by a hash of the spec). Mount at least one `derivatives-*` renderer feature alongside this one — without a registered renderer for the FileRef's MIME type, every `variant(...)` call throws.",
+      "description": "Declares the `derivativeRenderer` extension point. `ctx.derivatives.variant(fileRefId, spec, name)` derives a variant of a tracked FileRef the first time it's requested and reuses the stored result afterwards (derive-on-first-use, keyed by a hash of the spec). Mount at least one `derivatives-*` renderer feature alongside this one — without a registered renderer for the FileRef's MIME type, every `variant(...)` call throws. Also declares the `derivativePublicPredicate` extension point (`r.useExtension(EXT_DERIVATIVE_PUBLIC_PREDICATE, '<entityType>', { isPublic })`) and, when `createFileDerivativesFeature({resolveApexTenant})` is passed a host-resolver, mounts an anonymous `GET {basePath}/:fileRefId/:variant` route that serves ONE of the 4 fixed presets (thumb/card/hero/full) for a FileRef whose entityType has a registered predicate returning true — default-deny (404) otherwise, same as an unknown FileRef.",
       "toggleableDefault": null,
       "requires": [
         "file-foundation"
@@ -924,10 +950,10 @@
       "name": "form-draft",
       "description": "Per-user, per-tenant working copy of an in-progress form, saved BEFORE the real domain entity exists. Owns one event-sourced entity, `form-draft` (`read_form_drafts`), keyed by a caller-assigned draftKey (typically screenId + optional hostEntityId), unique per (tenant, owner, draftKey). `save` upserts the draft blob ({ values, stepIndex, savedAt } — savedAt stamped server-side), `discard` deletes it (called once the real submit succeeds), `get` resumes it, `list` finds a user's open drafts for a given screenId (draftKey prefix match) — the fallback when a client-generated draftId is lost. Ownership is enforced by a per-row owner filter in every handler, not by roles — a foreign user's save/discard/get/list for someone else's draftKey never sees or touches that row. Never holds anything that already lives in a domain stream; the consuming app is responsible for discarding once the domain write succeeds. A daily cron job hard-deletes drafts past a configurable retention window (`form-draft:config:retention-days`, SystemAdmin-writable, default 30 days).",
       "toggleableDefault": null,
-      "requires": [
+      "requires": [],
+      "optionalRequires": [
         "config"
       ],
-      "optionalRequires": [],
       "configReads": [],
       "exposesApis": [],
       "usesApis": [],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-kumiko-app",
-  "version": "0.4.195",
+  "version": "0.4.197",
   "description": "`bun create kumiko-app <name>` — scaffold a new Kumiko app with an interactive feature picker.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -26,13 +26,10 @@
       "default": "./src/index.ts"
     }
   },
-  "scripts": {
-    "vendor:manifest": "bun run scripts/vendor-manifest.ts"
-  },
   "dependencies": {
-    "@cosmicdrift/kumiko-dev-server": "0.191.0",
-    "@cosmicdrift/kumiko-framework": "0.191.0",
-    "@cosmicdrift/kumiko-server-runtime": "0.191.0",
+    "@cosmicdrift/kumiko-dev-server": "0.193.0",
+    "@cosmicdrift/kumiko-framework": "0.193.0",
+    "@cosmicdrift/kumiko-server-runtime": "0.193.0",
     "@inquirer/core": "^10.0.0",
     "@inquirer/prompts": "^7.4.0"
   },

package/src/__tests__/manifest-drift.test.ts

@@ -1,7 +1,8 @@
 // Vendored manifest.json must match the source-of-truth in
 // samples/apps/use-all-bundled/feature-manifest.json. The picker reads
 // the vendored copy at runtime; a stale copy lets the picker show old
-// features or miss new ones. Refresh with `bun run vendor:manifest`.
+// features or miss new ones. Refresh by running `bun run gen:manifest`
+// inside samples/apps/use-all-bundled (writes both copies at once).
 
 import { describe, expect, test } from "bun:test";
 import { readFileSync } from "node:fs";

package/src/manifest.ts

@@ -1,8 +1,9 @@
-// Loads the vendored feature-manifest.json (copied from
-// samples/apps/use-all-bundled by scripts/vendor-manifest.ts) at runtime.
-// The published package ships the JSON next to package.json so the picker
-// works without network access — the source-of-truth at build time is the
-// sample-app's manifest, kept in sync via a CI drift-test.
+// Loads the vendored feature-manifest.json (written alongside
+// samples/apps/use-all-bundled/feature-manifest.json by that package's
+// scripts/gen-feature-manifest.ts) at runtime. The published package
+// ships the JSON next to package.json so the picker works without
+// network access — the source-of-truth at build time is the sample-app's
+// manifest, kept in sync via a CI drift-test.
 
 import { readFileSync } from "node:fs";
 import { dirname, resolve } from "node:path";