@dooer/dooer-test-env 1.4.0 → 1.4.1

package/lib/command/service.js

@@ -89,7 +89,10 @@ module.exports = {
           if (fs.existsSync(rt.OVERRIDE_FILE))
             ov = yaml.safeLoad(fs.readFileSync(rt.OVERRIDE_FILE, 'utf8')) || { services: {} }
           ov.services = ov.services || {}
-          ov.services[a.name] = { image }
+          // Keep DOOER_SERVICE_VERSION in sync with the tag: the logging library stamps it on every log
+          // line (and the applicationChain), so a bare image bump leaves logs reporting the manifest's
+          // stale version — the same drift deploy-staging.sh exists to prevent.
+          ov.services[a.name] = { image, environment: { DOOER_SERVICE_VERSION: a.tag } }
           rt.ensureRunDir()
           fs.writeFileSync(rt.OVERRIDE_FILE, yaml.safeDump(ov))
           const st = rt.readState()

package/lib/compose/generate.js

@@ -38,6 +38,11 @@ const DEV = {
   sqlPassword: 'dooer',
   minioUser: 'minioadmin',
   minioPassword: 'minioadmin',
+  // Redis MUST have a password locally, like staging (the redis-password secret). service-graphql's
+  // pubsub.js does `password ? createRedisClient(...).then(c => new RedisPubSub(...)) : async () => null`
+  // — with no password it exports a FUNCTION, and `await fn` yields the function itself, so every GraphQL
+  // subscription dies on `pubsubInstance.asyncIterator is not a function`. (Jimmy 2026-09-03.)
+  redisPassword: 'dooer',
 }
 
 // Applied to EVERY dooer service, last, so they win over the manifest values.
@@ -138,7 +143,7 @@ const OMIT = Symbol('omit-env')
 function secretDefault(name) {
   if (name === 'DOOER_SQL_APPLICATION_PASSWORD') return DEV.sqlPassword
   if (name === 'DOOER_SQL_MIGRATION_PASSWORD') return DEV.sqlPassword
-  if (name === 'SECRET_DOOER_REDIS_PASSWORD') return '' // local redis has no auth; empty is the correct value
+  if (name === 'SECRET_DOOER_REDIS_PASSWORD') return DEV.redisPassword // local redis runs with --requirepass
   if (/ACCESS_KEY_ID$/.test(name)) return DEV.minioUser
   if (/SECRET_ACCESS_KEY$/.test(name)) return DEV.minioPassword
   return OMIT
@@ -231,6 +236,8 @@ function infraServices() {
     },
     redis: {
       image: 'redis:7-alpine',
+      // password-protected like staging — see DEV.redisPassword for why it matters (GraphQL subscriptions).
+      command: ['redis-server', '--requirepass', DEV.redisPassword],
       ports: ['6379:6379'],
       restart: 'unless-stopped',
     },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dooer/dooer-test-env",
-  "version": "1.4.0",
+  "version": "1.4.1",
   "description": "Run the whole Dooer backend locally (staging DB minus customers), copy/purge customers between environments, and shred — one CLI.",
   "license": "UNLICENSED",
   "repository": "Dooer/cli-dooer-test-env",