@ductape/sdk 0.2.7 → 0.2.8

package/dist/index.d.ts

@@ -4383,7 +4383,7 @@ export default class Ductape implements IDuctape {
                 refreshedAt?: number;
                 error?: string;
             };
-            connections: "degraded" | "ready" | "warming";
+            connections: "ready" | "warming" | "degraded";
         };
         warmup: {
             databases: {
@@ -4465,6 +4465,7 @@ export default class Ductape implements IDuctape {
     private createNewJobsService;
     private createNewSecretsService;
     private applyRuntimeCredentialBundle;
+    private prepareRuntimeCredentials;
     private createNewCloudService;
     /**
      * Create a new SessionsService instance with authenticated config

package/dist/index.js

@@ -5806,7 +5806,12 @@ class Ductape {
         const scope = `${this.workspace_id}:${response.snapshot.product_tag}:${response.snapshot.env_slug}`;
         (0, bootstrap_cache_1.primeRuntimeBootstrapCache)(this.workspace_id, scope, response.snapshot.entries);
         this.runtimeManifest = response.manifest;
-        this.runtimeCredentialBundle = (_a = response.snapshot.credentials) !== null && _a !== void 0 ? _a : { referenced_keys: [], encrypted_secrets: [] };
+        const derivedReferences = (0, secrets_1.findAllSecretReferences)(response.snapshot.entries.map((entry) => entry.data)).sort();
+        this.runtimeCredentialBundle = response.snapshot.credentials
+            ? Object.assign(Object.assign({}, response.snapshot.credentials), { referenced_keys: [...new Set([
+                        ...((_a = response.snapshot.credentials.referenced_keys) !== null && _a !== void 0 ? _a : []),
+                        ...derivedReferences,
+                    ])].sort() }) : { referenced_keys: derivedReferences, encrypted_secrets: [] };
         const referenced = (_c = (_b = this.runtimeCredentialBundle.referenced_keys) === null || _b === void 0 ? void 0 : _b.length) !== null && _c !== void 0 ? _c : this.runtimeCredentialBundle.encrypted_secrets.length;
         const cached = this.runtimeCredentialBundle.encrypted_secrets.length;
         this.runtimeCredentialState = {
@@ -5951,7 +5956,7 @@ class Ductape {
             if (response) {
                 this.applyRuntimeSnapshot(response);
                 const secrets = await this.createNewSecretsService();
-                this.applyRuntimeCredentialBundle(secrets);
+                await this.prepareRuntimeCredentials(secrets);
             }
             this.scheduleRuntimePoll(0);
         })().finally(() => { this.runtimeRefreshInFlight = undefined; });
@@ -6299,6 +6304,27 @@ class Ductape {
             throw error;
         }
     }
+    async prepareRuntimeCredentials(service) {
+        var _a, _b;
+        this.applyRuntimeCredentialBundle(service);
+        if (!this.runtimeCredentialBundle)
+            return;
+        const bundled = new Set(this.runtimeCredentialBundle.encrypted_secrets.map((secret) => secret.key));
+        const missingKeys = ((_a = this.runtimeCredentialBundle.referenced_keys) !== null && _a !== void 0 ? _a : []).filter((key) => !bundled.has(key));
+        if (!missingKeys.length)
+            return;
+        this.runtimeCredentialState = Object.assign(Object.assign({}, this.runtimeCredentialState), { status: 'loading', missing: missingKeys.length });
+        const results = await Promise.allSettled(missingKeys.map((key) => service.fetch(key)));
+        const failed = results.filter((result) => result.status === 'rejected').length;
+        const cached = bundled.size + results.length - failed;
+        this.runtimeCredentialState = {
+            status: failed ? 'incomplete' : 'ready',
+            referenced: ((_b = this.runtimeCredentialBundle.referenced_keys) !== null && _b !== void 0 ? _b : []).length,
+            cached,
+            missing: failed,
+            refreshedAt: Date.now(),
+        };
+    }
     async createNewCloudService() {
         const subCheck = false;
         if (!this.token || !this.public_key) {