@luckystack/core 0.2.7 → 0.3.1

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { a6 as ErrorParam, a7 as ErrorResponseInput, a8 as NormalizedErrorResponse, a9 as HealthHashConfig, aa as DeepPartial, B as BaseSessionLayout, b as AuthProps } from './pageRouteValidation-B2YF7g3A.js';
-export { ab as ApiConfig, A as ApiMethodMap, a as AppConfig, ac as AuthConfig, ad as AuthRateLimitConfig, ae as CorsConfig, D as DEFAULT_PAGE_ROUTE_RULES, af as DEFAULT_PROJECT_CONFIG, ag as DevConfig, ah as HttpConfig, H as HttpMethodLiteral, ai as HttpStreamConfig, aj as INVALID_ERROR_RESPONSE_CODE, L as Logger, c as LoggerContext, d as LoggingConfig, N as Notifier, e as NotifyInput, f as NotifyParam, ak as OfflineQueueConfig, P as PagePathValidationResult, g as PageRouteRules, al as PasswordPolicyConfig, am as PathsConfig, h as ProjectConfig, an as ProjectConfigInput, ao as QueueDropReason, ap as RateLimitIdentity, aq as RateLimitIdentityParams, R as RateLimitingConfig, S as SOCKETSTATUS, ar as SecurityHeadersConfig, as as ServiceRouteParseError, at as ServiceRouteParseResult, au as ServiceRouteParseSuccess, i as SessionConfig, j as SessionLocation, av as SocketConfig, aw as SyncConfig, ax as SyncFlushPressureConfig, ay as SyncStreamThrottleConfig, az as TransportRouteParseError, aA as TransportRouteParseResult, aB as TransportRouteParseSuccess, aC as ValidationConfig, k as buildApiResponseEventName, l as buildApiStreamEventName, m as buildGetJoinedRoomsResponseEventName, n as buildJoinRoomResponseEventName, o as buildLeaveRoomResponseEventName, p as buildSyncProgressEventName, q as buildSyncResponseEventName, r as clearCsrfToken, aD as createDevLogger, aE as deepMerge, aF as defaultHttpStatusForResponse, s as enqueueApiRequest, t as enqueueSyncRequest, u as flushApiQueue, v as flushSyncQueue, w as getApiQueueSize, x as getCsrfToken, y as getLogger, z as getNotifier, C as getProjectConfig, aG as getProjectName, E as getRegisteredApiMethod, F as getSyncQueueSize, G as httpFetch, I as incrementResponseIndex, J as isApiMethodMapRegistered, aH as isErrorParamArray, aI as isLoggerRegistered, K as isOnline, aJ as isPlainObject, M as isProjectConfigRegistered, O as normalizeErrorResponseCore, Q as notify, T as parseServiceRouteName, aK as parseTransportRouteName, U as registerApiMethodMap, V as registerLogger, W as registerNotifier, X as registerProjectConfig, Y as removeApiQueueItem, Z as removeApiQueueItemsByKey, _ as removeSyncQueueItem, aL as resetLoggerForTests, $ as setSocket, a0 as sleep, a1 as socket, a2 as socketEventNames, a3 as statusContent, a4 as validatePagePath, a5 as waitForSocket } from './pageRouteValidation-B2YF7g3A.js';
+import { a6 as ErrorParam, a7 as ErrorResponseInput, a8 as NormalizedErrorResponse, a9 as HealthHashConfig, aa as DeepPartial, B as BaseSessionLayout, b as AuthProps } from './pageRouteValidation-BwSFuQL9.js';
+export { ab as ApiConfig, A as ApiMethodMap, a as AppConfig, ac as AuthConfig, ad as AuthRateLimitConfig, ae as CorsConfig, D as DEFAULT_PAGE_ROUTE_RULES, af as DEFAULT_PROJECT_CONFIG, ag as DevConfig, ah as HttpConfig, H as HttpMethodLiteral, ai as HttpStreamConfig, aj as INVALID_ERROR_RESPONSE_CODE, L as Logger, c as LoggerContext, d as LoggingConfig, N as Notifier, e as NotifyInput, f as NotifyParam, ak as OfflineQueueConfig, P as PagePathValidationResult, g as PageRouteRules, al as PasswordPolicyConfig, am as PathsConfig, h as ProjectConfig, an as ProjectConfigInput, ao as QueueDropReason, ap as RateLimitIdentity, aq as RateLimitIdentityParams, R as RateLimitingConfig, S as SOCKETSTATUS, ar as SecurityHeadersConfig, as as ServiceRouteParseError, at as ServiceRouteParseResult, au as ServiceRouteParseSuccess, i as SessionConfig, j as SessionLocation, av as SocketConfig, aw as SyncConfig, ax as SyncFlushPressureConfig, ay as SyncStreamThrottleConfig, az as TransportRouteParseError, aA as TransportRouteParseResult, aB as TransportRouteParseSuccess, aC as ValidationConfig, k as buildApiResponseEventName, l as buildApiStreamEventName, m as buildGetJoinedRoomsResponseEventName, n as buildJoinRoomResponseEventName, o as buildLeaveRoomResponseEventName, p as buildSyncProgressEventName, q as buildSyncResponseEventName, r as clearCsrfToken, aD as createDevLogger, aE as deepMerge, aF as defaultHttpStatusForResponse, s as enqueueApiRequest, t as enqueueSyncRequest, u as flushApiQueue, v as flushSyncQueue, w as getApiQueueSize, x as getCsrfToken, y as getLogger, z as getNotifier, C as getProjectConfig, aG as getProjectName, E as getRegisteredApiMethod, F as getSyncQueueSize, G as httpFetch, I as incrementResponseIndex, J as isApiMethodMapRegistered, aH as isErrorParamArray, aI as isLoggerRegistered, K as isOnline, aJ as isPlainObject, M as isProjectConfigRegistered, O as normalizeErrorResponseCore, Q as notify, T as parseServiceRouteName, aK as parseTransportRouteName, U as registerApiMethodMap, V as registerLogger, W as registerNotifier, X as registerProjectConfig, Y as removeApiQueueItem, Z as removeApiQueueItemsByKey, _ as removeSyncQueueItem, aL as resetLoggerForTests, $ as setSocket, a0 as sleep, a1 as socket, a2 as socketEventNames, a3 as statusContent, a4 as validatePagePath, a5 as waitForSocket } from './pageRouteValidation-BwSFuQL9.js';
 export { ApiTypeMap, StreamPayload, SyncTypeMap } from './apiTypeStubs.js';
 import { Server, Socket } from 'socket.io';
 import { z } from 'zod';
@@ -379,6 +379,15 @@ interface DeployRoutingShape {
     missingServiceErrorCode?: string;
     enableUnhealthyFallback?: boolean;
     strictBootHandshake?: boolean;
+    /**
+     * Opt INTO the boot-handshake's synchronized-env (cookie/session secret) drift
+     * check. DEFAULT false — the router stays a dumb proxy that holds NO backend
+     * secrets. Comparing synchronized-env hashes requires the router process to
+     * carry the same SESSION_SECRET etc. as the backends, which most deployments
+     * deliberately avoid; the always-on shared-Redis handshake is unaffected. Set
+     * true only when you intentionally give the router the synchronized secrets.
+     */
+    verifySynchronizedEnv?: boolean;
     /** Default port the router listens on when ROUTER_PORT env var is unset (default 4000). */
     defaultRouterPort?: number;
     /** Default ms between health polls when not specified per-call (default 5000). */
@@ -412,6 +421,30 @@ interface DeployRoutingShape {
      * rejecting with 413. DEFAULT undefined → router uses its built-in default.
      */
     maxRequestBodyBytes?: number;
+    /**
+     * Max size (bytes) of the upgrade `head` buffer the WS proxy forwards to the
+     * upstream during a WebSocket handshake. An over-cap head is rejected (the
+     * client socket is destroyed) BEFORE the upstream leg opens, so a client
+     * cannot push an unbounded pre-upgrade buffer through the router. DEFAULT
+     * undefined → router uses its built-in default (64 KiB).
+     */
+    wsMaxHeadBytes?: number;
+    /**
+     * Idle-timeout (ms) for an UPGRADED WebSocket pipe: when no bytes flow in
+     * either direction for this long, the router tears the proxied pair down.
+     * Bounds an otherwise-unbounded pre/post-auth pipe a client could hold open
+     * against the router. The timer resets on any activity. DEFAULT undefined →
+     * router uses its built-in default (120000 ms = 2 min). Set `0` to disable.
+     */
+    wsIdleTimeoutMs?: number;
+    /**
+     * Per-connection byte budget for an UPGRADED WebSocket pipe: when the total
+     * bytes piped across both legs exceed this cap, the router tears the proxied
+     * pair down. Bounds how much a single connection can stream through the
+     * router. DEFAULT undefined → router uses its built-in default (100 MiB). Set
+     * `false` to disable the cap (unbounded).
+     */
+    wsMaxBytesPerConnection?: number | false;
 }
 interface DeployDevelopmentShape {
     enableFallbackRouting?: boolean;
@@ -497,6 +530,18 @@ interface ErrorTracker {
     setUser: (user: ErrorTrackerUser | null) => void;
     setContext?: (key: string, context: ErrorTrackerContext | null) => void;
     startSpan?: <T>(name: string, op: string, fn: () => T) => T;
+    /**
+     * Optional handle-style span (#62): open a span NOW and close it later via the
+     * returned handle's `finish()`. Unlike {@link startSpan} (which wraps a single
+     * synchronous `fn`), this fits an open-at-preExecute / close-at-postExecute
+     * request lifecycle that spans awaits. When present, the registry-level
+     * {@link startSpanHandle} delegates to the FIRST registered adapter that
+     * implements it so the request span reaches an adapter-only backend
+     * (Datadog/PostHog/custom), not just the legacy Sentry SDK path.
+     */
+    startSpanHandle?: (name: string, op: string) => {
+        finish: () => void;
+    };
     recordMetric?: (name: string, value: number, tags?: Record<string, string>) => void;
     beforeSend?: (event: ErrorTrackerEvent) => ErrorTrackerEvent | null;
     /**
@@ -567,7 +612,7 @@ interface SpanHandle {
     /** Milliseconds elapsed at the moment `finish()` first ran (0 before). */
     readonly durationMs: number;
 }
-declare const startSpanHandle: (_name: string, _op: string) => SpanHandle;
+declare const startSpanHandle: (name: string, op: string) => SpanHandle;
 
 declare const EnvSchema: z.ZodObject<{
     NODE_ENV: z.ZodDefault<z.ZodEnum<{

package/dist/index.js

@@ -49,7 +49,7 @@ import {
   tryCatchSync,
   validatePagePath,
   waitForSocket
-} from "./chunk-6YKLU3ZR.js";
+} from "./chunk-H64EC7Q6.js";
 import {
   DEFAULT_PROJECT_CONFIG,
   deepMerge,
@@ -58,7 +58,7 @@ import {
   isPlainObject,
   isProjectConfigRegistered,
   registerProjectConfig
-} from "./chunk-7FGFIIBD.js";
+} from "./chunk-6BBJ2Q6I.js";
 import {
   DEFAULT_REDACTED_LOG_KEYS,
   DEPTH_TRUNCATED_PLACEHOLDER,
@@ -96,7 +96,7 @@ import {
   startSpan,
   startSpanAcrossTrackers,
   startSpanHandle
-} from "./chunk-OHGJSQZE.js";
+} from "./chunk-TGYBUT4N.js";
 import {
   createRegistry
 } from "./chunk-USQA6QTX.js";
@@ -1520,7 +1520,7 @@ var getRateLimitStatus = async (key, limit) => {
 };
 var clearRateLimit = async (key) => strategyRegistry.get().clear(key);
 var clearAllRateLimits = async () => {
-  if (process.env.NODE_ENV === "production") {
+  if (resolveEnvKey() === "production") {
     throw new Error("[RateLimiter] clearAllRateLimits() is not allowed in production. Use clearRateLimit(key) for scoped resets.");
   }
   return strategyRegistry.get().clearAll();
@@ -1885,8 +1885,8 @@ var validateInputByType = async ({
   if (!typeText || typeText.trim() === "" || typeText.trim() === "any") {
     return { status: "success" };
   }
-  if (process.env.NODE_ENV === "production") {
-    const { getProjectConfig: getProjectConfig2 } = await import("./projectConfig-BVO7PJRO.js");
+  if (resolveEnvKey() === "production") {
+    const { getProjectConfig: getProjectConfig2 } = await import("./projectConfig-FITPOAMC.js");
     if (getProjectConfig2().validation.runtimeMode === "off") {
       return { status: "success" };
     }