@apolitical/server 4.3.0-pla-471.0 → 4.3.0-pla-471.2

package/package.json

@@ -1,13 +1,12 @@
 {
   "name": "@apolitical/server",
-  "version": "4.3.0-pla-471.0",
+  "version": "4.3.0-pla-471.2",
   "description": "Node.js module to encapsulate Apolitical's express server setup",
   "author": "Apolitical Group Limited <engineering@apolitical.co>",
   "license": "MIT",
   "main": "src/index.js",
   "exports": {
-    ".": "./src/index.js",
-    "./secrets": "./src/services/secret-manager.service.js"
+    ".": "./src/index.js"
   },
   "files": [
     "src"

package/src/index.js

@@ -1,8 +1,12 @@
 'use strict';
 
 const { resolve } = require('./container');
+const { SecretManagerService } = require('./services/secret-manager.service');
 
 // OTel must load before the Express server is started
 resolve('otelLoader')();
 
-module.exports = resolve('serverService');
+const serverService = resolve('serverService');
+serverService.SecretManagerService = SecretManagerService;
+
+module.exports = serverService;

package/src/services/secret-manager.service.js

@@ -5,29 +5,30 @@ const { SecretManagerServiceClient } = require('@google-cloud/secret-manager');
 /**
  * Thin wrapper around Google Cloud Secret Manager.
  *
- * Every method is static because the class is consumed before the Awilix DI
- * container is available (e.g. inside app.js at startup).
+ * Every method is static because the class is consumed before the DI
+ * container is available (e.g. inside config loading at startup).
  * The underlying client is lazily created and reused across all calls.
+ *
+ * Ported from the backend/v2 implementation at:
+ * backend/v2/libs/externals/cloud/secrets/src/gcp-secret-manager.accessor.ts
  */
 class SecretManagerService {
   /**
    * Derive the secret name prefix from the PLATFORM_BASE_URL subdomain.
-   * - https://apolitical.co                      -> "live"
-   * - https://[beta|rc].apolitical.co            -> "[beta|rc]"
-   * - https://[beta|rc]-[e1|a1].apolitical.co    -> "[beta|rc]"
-   * - https://localhost                           -> "tilt" (Local Tilt)
-   * - http://localhost                            -> "pnpm" (Local standalone)
+   * - https://apolitical.co                      → "live"
+   * - https://[beta|rc].apolitical.co            → "[beta|rc]"
+   * - https://[beta|rc]-[e1|a1].apolitical.co    → "[beta|rc]"
+   * - https://localhost                          → "tilt" (Local Tilt)
+   * - http://localhost                           → "pnpm" (Local standalone)
    */
   static getSecretPrefix(useLocal) {
     const baseURL = String(process.env.PLATFORM_BASE_URL ?? '');
     try {
       const hostname = new URL(baseURL).hostname;
       if (hostname === 'apolitical.co') return 'live';
-      if (hostname === 'localhost' && useLocal)
-        return baseURL.startsWith('https') ? 'tilt' : 'pnpm';
+      if (hostname === 'localhost' && useLocal) return baseURL.startsWith('https') ? 'tilt' : 'pnpm';
       const parts = hostname.split('.');
-      if (parts.length > 2 && hostname.endsWith('.apolitical.co'))
-        return parts[0].replace(/-[a-z]\d+$/, '');
+      if (parts.length > 2 && hostname.endsWith('.apolitical.co')) return parts[0].replace(/-[a-z]\d+$/, '');
     } catch {
       /* fall through */
     }
@@ -37,7 +38,6 @@ class SecretManagerService {
   static async _getClient() {
     if (!this._clientPromise) {
       this._clientPromise = (async () => {
-        // eslint-disable-next-line no-console
         console.log('[SecretManager] Initialising client.');
         return new SecretManagerServiceClient();
       })();
@@ -58,7 +58,6 @@ class SecretManagerService {
     const prefix = this.getSecretPrefix(options?.useLocal);
     const secretName = `${prefix}_${secretBaseName}`;
     const version = options?.version ?? 'latest';
-
     const name = `projects/${projectId}/secrets/${secretName}/versions/${version}`;
     const [response] = await client.accessSecretVersion({ name });