@enterprisestandard/redis 0.0.19 → 0.0.20-beta.20260521.2

package/README.md

@@ -10,7 +10,7 @@ bun add @enterprisestandard/redis
 
 ## Secret-backed reactive Redis
 
-Use **`esRedis(source, path, options?)`** when the Redis connection details arrive from `es.secrets` and may rotate over time.
+Use **`esRedis(source, path, options?)`** when Redis connection details arrive from the default config-backed secret client or a named `es.secrets` provider and may rotate over time.
 
 ```ts
 import { enterpriseStandard, envConfig } from '@enterprisestandard/server';
@@ -19,12 +19,9 @@ import { esRedis, RedisSessionStore, RedisUserStore } from '@enterprisestandard/
 
 export const es = enterpriseStandard(envConfig(), {
   validators: createValidators(),
-  secrets: {
-    redis: {},
-  },
 });
 
-const redis = esRedis(es.secrets.redis, 'examples:sso:redis');
+const redis = esRedis(es.secret, `${process.env.ES_VAULT_PATH}/redis`);
 es.setStores({
   sessionStore: new RedisSessionStore({ redis }),
   userStore: new RedisUserStore({ redis }),
@@ -33,7 +30,7 @@ es.setStores({
 
 Notes:
 
-- The first argument is a stable `SecretsSource` handle (for example `es.secrets.redis`) and the second is the **secret path**. By default the log label is **`redis`**; override that with `{ sourceName }` when needed.
+- The first argument is a stable `SecretsSource` handle (for example `es.secret` or `es.secrets.redis`) and the second is the **secret path**. By default the log label is **`redis`**; override that with `{ sourceName }` when needed.
 - The secret payload should be a node-redis client options object. A top-level **`url`** or **`redisUrl`** field is the simplest shape.
 - The adapter subscribes with async get-then-watch semantics and defaults to fail-fast: a missing Redis secret rejects `ready()` and store operations instead of waiting silently forever. Pass `{ subscription: { mode: 'wait', timeout: 30_000 } }` only when waiting for the secret to appear is intentional.
 - The adapter is source-bound at creation time. Store operations wait for the first configured connection, so you can construct stores synchronously and use `ready()` only when you want an explicit startup or health-check barrier. If the named source is replaced during reconfigure, the adapter creates the next Redis client first and keeps the old client when refresh fails.
@@ -102,3 +99,5 @@ const redis = createRedisAdapterV4(client);
 Prefer **createRedisAdapter** (v5) when you can upgrade.
 
 Pass these stores into `enterpriseStandard` (from `@enterprisestandard/server`) the same way you would in-memory stores. Optional: `keyPrefix` and `logger` in store options (see `@enterprisestandard/redis-core` for the adapter interface and key layout). Use one shared `RedisSessionStore` namespace for opaque browser auth sessions so `SessionStore.get(sid)` can resolve the session without tenant-specific lookup context.
+
+`RedisTenantStore` keeps user-to-tenant membership sets so tenant-directory lookups do not scan every tenant. It then materializes the matching candidate tenants and applies `ListOptions` in memory. That is appropriate when each user or discovery lookup maps to a bounded tenant set; use a SQL/search-backed custom `TenantStore` when directories need high-cardinality paging or arbitrary indexed sort/filter behavior.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@enterprisestandard/redis",
-  "version": "0.0.19",
+  "version": "0.0.20-beta.20260521.2",
   "description": "redis (node-redis) adapter and Redis stores for Enterprise Standard. Includes createRedisAdapter (v5) and createRedisAdapterV4 (v4). Install this; redis is included.",
   "private": false,
   "author": "enterprisestandard",
@@ -21,7 +21,7 @@
     "./package.json": "./package.json"
   },
   "dependencies": {
-    "@enterprisestandard/redis-core": "^0.0.19",
+    "@enterprisestandard/redis-core": "0.0.20-beta.20260521.2",
     "redis": "^5.10.0"
   },
   "peerDependencies": {