@luckystack/core 0.6.2 → 0.6.4

package/dist/index.js

@@ -49,16 +49,7 @@ import {
   tryCatchSync,
   validatePagePath,
   waitForSocket
-} from "./chunk-O457EZZQ.js";
-import {
-  DEFAULT_PROJECT_CONFIG,
-  deepMerge,
-  getProjectConfig,
-  getProjectName,
-  isPlainObject,
-  isProjectConfigRegistered,
-  registerProjectConfig
-} from "./chunk-3HQDGXMX.js";
+} from "./chunk-WBKHSJID.js";
 import {
   DEFAULT_REDACTED_LOG_KEYS,
   DEPTH_TRUNCATED_PLACEHOLDER,
@@ -96,10 +87,17 @@ import {
   startSpan,
   startSpanAcrossTrackers,
   startSpanHandle
-} from "./chunk-KPQX46TT.js";
+} from "./chunk-PIUX2DOF.js";
 import {
-  createRegistry
-} from "./chunk-USQA6QTX.js";
+  DEFAULT_PROJECT_CONFIG,
+  createRegistry,
+  deepMerge,
+  getProjectConfig,
+  getProjectName,
+  isPlainObject,
+  isProjectConfigRegistered,
+  registerProjectConfig
+} from "./chunk-ZHNQOQBR.js";
 
 // src/escapeHtml.ts
 var HTML_ESCAPE_MAP = {
@@ -599,6 +597,23 @@ var resetRedisKeyFormatterForTests = () => {
 var formatKey = (namespace, suffix = "") => getRedisKeyFormatter()(namespace, suffix);
 var applyStrayKeyPrefix = (key) => key.includes(":") ? key : `${getProjectName()}:${key}`;
 
+// src/secretsResolved.ts
+var listeners = /* @__PURE__ */ new Set();
+var registerSecretsResolvedListener = (listener) => {
+  listeners.add(listener);
+  return () => {
+    listeners.delete(listener);
+  };
+};
+var notifySecretsResolved = (changedKeys) => {
+  for (const listener of listeners) {
+    try {
+      listener(changedKeys);
+    } catch {
+    }
+  }
+};
+
 // src/redis.ts
 var cachedDefault = null;
 var DEFAULT_MAX_REDIS_RECONNECT_ATTEMPTS = 50;
@@ -609,11 +624,10 @@ var readPositiveIntEnv = (name, fallback) => {
   const parsed = Number.parseInt(raw, 10);
   return Number.isFinite(parsed) && parsed > 0 ? parsed : fallback;
 };
-var buildDefaultRedisClient = () => {
-  if (cachedDefault) return cachedDefault;
+var constructRedisClient = () => {
   const maxReconnectAttempts = readPositiveIntEnv("LUCKYSTACK_REDIS_MAX_RECONNECTS", DEFAULT_MAX_REDIS_RECONNECT_ATTEMPTS);
   const maxBackoffMs = readPositiveIntEnv("LUCKYSTACK_REDIS_MAX_BACKOFF_MS", DEFAULT_MAX_REDIS_BACKOFF_MS);
-  cachedDefault = new Redis({
+  const client = new Redis({
     host: env.REDIS_HOST,
     port: Number.parseInt(env.REDIS_PORT, 10),
     ...process.env.REDIS_USER && { username: process.env.REDIS_USER },
@@ -628,21 +642,26 @@ var buildDefaultRedisClient = () => {
       return Math.min(times * 50, maxBackoffMs);
     }
   });
-  cachedDefault.on("ready", async () => {
+  client.on("ready", async () => {
     getLogger().info("Connected to Redis");
   });
-  cachedDefault.on("error", (err) => {
+  client.on("error", (err) => {
     const message = String(err?.message ?? err);
     const password = process.env.REDIS_PASSWORD ?? "";
     if (/WRONGPASS|NOAUTH|invalid username-password/i.test(message) && /_V\d+$/i.test(password)) {
       getLogger().error(
-        `Redis auth failed and REDIS_PASSWORD ("${password}") looks like an UNRESOLVED secret-manager pointer. The default Redis client was likely built before secret-manager init ran. Resolve secrets first, then call \`resetDefaultRedisClient()\` (or \`registerRedisClient(new Redis(getRedisConnectionOptions()))\`) after init so the client is rebuilt with the resolved value. See docs/luckystack/ARCHITECTURE_SECRET_MANAGER.md.`,
+        `Redis auth failed and REDIS_PASSWORD ("${password}") looks like an UNRESOLVED secret-manager pointer. The default Redis client was likely built before secret-manager init ran. The framework now EAGERLY REBUILDS + registers a fresh client automatically when \`config.secretManager.url\` is set (server boot) and when \`initSecretManager\` is wired with \`onApplied: notifySecretsResolved\`; if you resolve secrets by other means, call \`rebuildDefaultRedisClient()\` (or \`registerRedisClient(new Redis(getRedisConnectionOptions()))\`) after resolution. Also confirm \`REDIS_PASSWORD\` is listed in the secret-manager \`envNames\` allowlist (unset resolves nothing). See docs/luckystack/ARCHITECTURE_SECRET_MANAGER.md.`,
         err
       );
       return;
     }
     getLogger().error("Error connecting to Redis", err);
   });
+  return client;
+};
+var buildDefaultRedisClient = () => {
+  if (cachedDefault) return cachedDefault;
+  cachedDefault = constructRedisClient();
   return cachedDefault;
 };
 var resetDefaultRedisClient = () => {
@@ -654,7 +673,25 @@ var resetDefaultRedisClient = () => {
   } catch {
   }
 };
+var rebuildDefaultRedisClient = () => {
+  const previousRegistered = isRedisClientRegistered() ? getRedisClient() : null;
+  resetDefaultRedisClient();
+  const client = constructRedisClient();
+  registerRedisClient(client);
+  if (previousRegistered && previousRegistered !== client) {
+    try {
+      previousRegistered.disconnect();
+    } catch {
+    }
+  }
+  return client;
+};
 setDefaultRedisResolver(buildDefaultRedisClient);
+registerSecretsResolvedListener((changedKeys) => {
+  if (changedKeys === void 0 || changedKeys.some((key) => /^REDIS_/i.test(key))) {
+    rebuildDefaultRedisClient();
+  }
+});
 var getRedisConnectionOptions = () => ({
   host: env.REDIS_HOST,
   port: Number.parseInt(env.REDIS_PORT, 10),
@@ -1932,7 +1969,7 @@ var validateInputByType = async ({
     return { status: "success" };
   }
   if (resolveEnvKey() === "production") {
-    const { getProjectConfig: getProjectConfig2 } = await import("./projectConfig-USHD3PRE.js");
+    const { getProjectConfig: getProjectConfig2 } = await import("./projectConfig-FC544PY2.js");
     if (getProjectConfig2().validation.runtimeMode === "off") {
       return { status: "success" };
     }
@@ -2266,6 +2303,7 @@ export {
   normalizeErrorResponseCore,
   normalizeOrigin,
   notify,
+  notifySecretsResolved,
   oneTimeTokenKey,
   parseServiceRouteName,
   parseTransportRouteName,
@@ -2274,6 +2312,7 @@ export {
   processUpload,
   readBootUuid,
   readSession,
+  rebuildDefaultRedisClient,
   recordMetricAcrossTrackers,
   redis,
   registerApiAbortController,
@@ -2302,6 +2341,7 @@ export {
   registerRedisKeyFormatter,
   registerRoomNameFormatter,
   registerRuntimeMapsProvider,
+  registerSecretsResolvedListener,
   registerServicesConfig,
   registerSessionProvider,
   registerSocketMiddleware,