@ductape/sdk 0.1.154 → 0.1.156

package/dist/index.js

@@ -66,8 +66,10 @@ const runtime_defaults_1 = require("./runtime/runtime-defaults");
 const healthcheck_cache_key_1 = require("./resilience/healthcheck-cache-key");
 const enums_1 = require("./types/enums");
 const productsApi_service_1 = require("./api/services/productsApi.service");
+const bootstrap_cache_1 = require("./products/bootstrap-cache");
 const imports_service_1 = __importDefault(require("./imports/imports.service"));
 const processor_service_1 = __importDefault(require("./processor/services/processor.service"));
+const processor_utils_1 = require("./processor/utils/processor.utils");
 const logs_service_1 = __importDefault(require("./logs/logs.service"));
 const mime = __importStar(require("mime-types"));
 const database_1 = require("./database");
@@ -500,7 +502,8 @@ class Ductape {
             console.warn(`[Ductape] Redis unavailable (${reason}); using in-memory bootstrap cache.`);
         }
     }
-    constructor({ accessKey, redis_url, product, env, local, ip_address, language }) {
+    constructor({ accessKey, redis_url, product, env, local, ip_address, language, runtime_sync }) {
+        var _a, _b, _c;
         this.productBuilders = new Map();
         this.appBuilders = new Map();
         // Cached service instances (lazily initialized after auth)
@@ -523,6 +526,11 @@ class Ductape {
         this._brokersService = null;
         /** Prevent every lazy service factory from retrying a Redis URL that already failed. */
         this.redisCacheUnavailable = false;
+        this.runtimeSyncEnabled = true;
+        this.runtimePollIntervalMs = 30000;
+        this.runtimePollJitter = 0.2;
+        this.runtimeMaxBackoffMs = 300000;
+        this.runtimeClosed = false;
         /** Register and inspect portable application functions used by Feature JSON. */
         this.functions = {
             register: (contract) => functions_1.portableFunctions.register(contract),
@@ -5440,8 +5448,20 @@ class Ductape {
         this.workspaceApi = new workspaceApi_service_1.WorkspaceApiService(this.environment);
         this.productsApi = new productsApi_service_1.ProductsApiService(this.environment);
         this.redis_url = redis_url;
+        this.runtimeSyncEnabled = runtime_sync !== false && Boolean(productTag && envSlug);
+        if (runtime_sync && typeof runtime_sync === 'object') {
+            this.runtimePollIntervalMs = Math.max(5000, (_a = runtime_sync.interval_ms) !== null && _a !== void 0 ? _a : 30000);
+            this.runtimePollJitter = Math.max(0, Math.min(1, (_b = runtime_sync.jitter) !== null && _b !== void 0 ? _b : 0.2));
+            this.runtimeMaxBackoffMs = Math.max(this.runtimePollIntervalMs, (_c = runtime_sync.max_backoff_ms) !== null && _c !== void 0 ? _c : 300000);
+        }
         // Services are lazily initialized via factory methods (createNewDatabaseService, etc.)
         // This ensures initUserAuth() is called before service creation
+        if (this.runtimeSyncEnabled) {
+            this.authInFlight = this.performUserAuth(false).finally(() => { this.authInFlight = undefined; });
+            this.authInFlight.catch((error) => {
+                this.runtimeLastError = error instanceof Error ? error.message : String(error);
+            });
+        }
         return this; //createDeepProxy(this, this.environment) as this;
     }
     async loadBullMQ() {
@@ -5709,9 +5729,17 @@ class Ductape {
         return this.api;
     }
     async initUserAuth(subCheck = true) {
+        if (this.authInFlight)
+            return await this.authInFlight;
+        this.authInFlight = this.performUserAuth(subCheck).finally(() => { this.authInFlight = undefined; });
+        return await this.authInFlight;
+    }
+    async performUserAuth(subCheck = true) {
         var _a, _b;
         // Skip if already authenticated with valid credentials
         if (this.token && this.public_key) {
+            if (this.runtimeSyncEnabled && !this.runtimeManifest)
+                await this.refreshRuntimeSnapshot(true);
             return;
         }
         // Only reset if we need to re-authenticate
@@ -5742,6 +5770,15 @@ class Ductape {
                     // Don't throw - private key is only needed for secrets encryption
                 }
             }
+            if (this.runtimeSyncEnabled && !this.runtimeClosed) {
+                try {
+                    await this.refreshRuntimeSnapshot(true);
+                }
+                catch (error) {
+                    this.runtimeLastError = error instanceof Error ? error.message : String(error);
+                    this.scheduleRuntimePoll(1);
+                }
+            }
         }
         catch (e) {
             const error = ((_b = (_a = e.response) === null || _a === void 0 ? void 0 : _a.data) === null || _b === void 0 ? void 0 : _b.errors) || e.message || 'Unknown error';
@@ -5749,6 +5786,161 @@ class Ductape {
             throw new Error(error);
         }
     }
+    runtimeAuth() {
+        return {
+            token: this.token,
+            public_key: this.public_key,
+            user_id: this.user_id,
+            workspace_id: this.workspace_id,
+            access_key: this.accessKey,
+        };
+    }
+    applyRuntimeSnapshot(response) {
+        var _a, _b, _c, _d, _e, _f, _g;
+        if (!(response === null || response === void 0 ? void 0 : response.snapshot))
+            return;
+        const scope = `${this.workspace_id}:${response.snapshot.product_tag}:${response.snapshot.env_slug}`;
+        (0, bootstrap_cache_1.primeRuntimeBootstrapCache)(this.workspace_id, scope, response.snapshot.entries);
+        const runtimeCredentials = new Map();
+        for (const entry of response.snapshot.entries) {
+            if ((entry === null || entry === void 0 ? void 0 : entry.domain) !== 'action')
+                continue;
+            const app = String(((_a = entry.parts) === null || _a === void 0 ? void 0 : _a[1]) || '');
+            const mapping = (_b = entry.data) === null || _b === void 0 ? void 0 : _b.product_env_mapping;
+            if (!app || !mapping)
+                continue;
+            const credentials = (_c = runtimeCredentials.get(app)) !== null && _c !== void 0 ? _c : {};
+            for (const variable of (_d = mapping.variables) !== null && _d !== void 0 ? _d : []) {
+                if ((variable === null || variable === void 0 ? void 0 : variable.key) && variable.value !== undefined)
+                    credentials[String(variable.key)] = variable.value;
+            }
+            // token_access data is the reusable request credential itself. credential_access
+            // data contains login secrets and must only be sent to its dedicated auth action.
+            if (((_f = (_e = entry.data) === null || _e === void 0 ? void 0 : _e.app_auth) === null || _f === void 0 ? void 0 : _f.setup_type) === 'token_access' && ((_g = mapping.auth) === null || _g === void 0 ? void 0 : _g.data)) {
+                let authData = mapping.auth.data;
+                if (typeof authData === 'string') {
+                    try {
+                        authData = JSON.parse((0, processor_utils_1.decrypt)(authData, String(entry.data.private_key)));
+                    }
+                    catch (_h) {
+                        authData = undefined;
+                    }
+                }
+                if (authData && typeof authData === 'object') {
+                    for (const location of ['headers', 'query', 'params', 'body']) {
+                        const values = authData[location];
+                        if (!values || typeof values !== 'object' || Array.isArray(values))
+                            continue;
+                        for (const [key, value] of Object.entries(values)) {
+                            credentials[`${location}:${key}`] = value;
+                        }
+                    }
+                }
+            }
+            runtimeCredentials.set(app, credentials);
+        }
+        credential_manager_1.credentialManager.replaceRuntimeScope(response.snapshot.product_tag, response.snapshot.env_slug, [...runtimeCredentials].map(([app, credentials]) => ({ app, credentials })));
+        this.runtimeManifest = response.manifest;
+        this.runtimeLastRefreshAt = Date.now();
+        this.runtimeLastError = undefined;
+    }
+    scheduleRuntimePoll(failureCount = 0) {
+        var _a, _b;
+        if (!this.runtimeSyncEnabled || this.runtimeClosed)
+            return;
+        if (this.runtimePollTimer)
+            clearTimeout(this.runtimePollTimer);
+        const exponential = Math.min(this.runtimeMaxBackoffMs, this.runtimePollIntervalMs * Math.pow(2, failureCount));
+        const jitter = exponential * this.runtimePollJitter * ((Math.random() * 2) - 1);
+        this.runtimePollTimer = setTimeout(() => {
+            this.pollRuntimeManifest(failureCount).catch(() => undefined);
+        }, Math.max(1000, Math.round(exponential + jitter)));
+        (_b = (_a = this.runtimePollTimer).unref) === null || _b === void 0 ? void 0 : _b.call(_a);
+    }
+    async pollRuntimeManifest(failureCount) {
+        var _a, _b;
+        if (!this.defaultProduct || !this.defaultEnv || this.runtimeClosed)
+            return;
+        try {
+            const manifestResponse = await this.productsApi.bootstrapRuntime({
+                product_tag: this.defaultProduct,
+                env_slug: this.defaultEnv,
+                manifest_only: true,
+                etag: (_a = this.runtimeManifest) === null || _a === void 0 ? void 0 : _a.runtimeRevision,
+            }, this.runtimeAuth());
+            if (manifestResponse && manifestResponse.manifest.runtimeRevision !== ((_b = this.runtimeManifest) === null || _b === void 0 ? void 0 : _b.runtimeRevision)) {
+                await this.refreshRuntimeSnapshot(true);
+            }
+            else if (this.defaultProduct && this.defaultEnv) {
+                (0, bootstrap_cache_1.touchRuntimeBootstrapCache)(`${this.workspace_id}:${this.defaultProduct}:${this.defaultEnv}`);
+            }
+            this.runtimeLastError = undefined;
+            this.scheduleRuntimePoll(0);
+        }
+        catch (error) {
+            this.runtimeLastError = error instanceof Error ? error.message : String(error);
+            this.scheduleRuntimePoll(Math.min(failureCount + 1, 8));
+        }
+    }
+    async refreshRuntimeSnapshot(force = false) {
+        if (!this.runtimeSyncEnabled || !this.defaultProduct || !this.defaultEnv || this.runtimeClosed)
+            return;
+        if (this.runtimeRefreshInFlight)
+            return await this.runtimeRefreshInFlight;
+        this.runtimeRefreshInFlight = (async () => {
+            var _a;
+            const response = await this.productsApi.bootstrapRuntime(Object.assign({ product_tag: this.defaultProduct, env_slug: this.defaultEnv }, (force ? {} : { etag: (_a = this.runtimeManifest) === null || _a === void 0 ? void 0 : _a.runtimeRevision })), this.runtimeAuth());
+            if (response)
+                this.applyRuntimeSnapshot(response);
+            this.scheduleRuntimePoll(0);
+        })().finally(() => { this.runtimeRefreshInFlight = undefined; });
+        return await this.runtimeRefreshInFlight;
+    }
+    /** Force a full product runtime refresh and atomically replace bootstrap cache entries. */
+    async ready() {
+        await this.initUserAuth(false);
+    }
+    /** Force a full product runtime refresh and atomically replace bootstrap cache entries. */
+    async refreshRuntime() {
+        await this.initUserAuth(false);
+        await this.refreshRuntimeSnapshot(true);
+    }
+    /** Observe the local product runtime snapshot without exposing cached configuration or secrets. */
+    runtimeSnapshotStatus() {
+        return {
+            enabled: this.runtimeSyncEnabled,
+            product: this.defaultProduct,
+            env: this.defaultEnv,
+            manifest: this.runtimeManifest ? Object.assign({}, this.runtimeManifest) : undefined,
+            lastRefreshAt: this.runtimeLastRefreshAt,
+            lastError: this.runtimeLastError,
+            refreshing: Boolean(this.runtimeRefreshInFlight),
+        };
+    }
+    /** Stop background synchronization and release SDK-owned background resources. */
+    async close() {
+        var _a;
+        this.runtimeClosed = true;
+        if (this.runtimePollTimer)
+            clearTimeout(this.runtimePollTimer);
+        this.runtimePollTimer = undefined;
+        await ((_a = this.runtimeRefreshInFlight) === null || _a === void 0 ? void 0 : _a.catch(() => undefined));
+        const resources = [this.jobsWorker, this.healthCheckWorker, this.healthCheckUpdaterWorker,
+            this.jobsQueue, this.healthCheckQueue, this.healthCheckUpdaterQueue];
+        await Promise.all(resources.filter(Boolean).map((resource) => { var _a; return Promise.resolve((_a = resource.close) === null || _a === void 0 ? void 0 : _a.call(resource)).catch(() => undefined); }));
+        if (this.redisClient) {
+            try {
+                await this.redisClient.quit();
+            }
+            catch (_b) {
+                try {
+                    this.redisClient.disconnect(false);
+                }
+                catch ( /* best effort */_c) { /* best effort */ }
+            }
+            this.redisClient = undefined;
+        }
+    }
     createNewLogger(product_id, app_id) {
         return new logs_service_1.default(Object.assign(Object.assign({}, this.builderInit()), { product_id,
             app_id }));