@luckystack/core 0.9.2 → 0.10.1

package/dist/index.js

@@ -2,11 +2,13 @@ import {
   DEFAULT_CSRF_CONFIG,
   DEFAULT_PAGE_ROUTE_RULES,
   INVALID_ERROR_RESPONSE_CODE,
+  ROUTED_DATA_QUERY_KEY,
   buildApiResponseEventName,
   buildApiStreamEventName,
   buildGetJoinedRoomsResponseEventName,
   buildJoinRoomResponseEventName,
   buildLeaveRoomResponseEventName,
+  buildRoutedGetUrl,
   buildSyncProgressEventName,
   buildSyncResponseEventName,
   clearCsrfToken,
@@ -49,7 +51,7 @@ import {
   tryCatchSync,
   validatePagePath,
   waitForSocket
-} from "./chunk-VRKJHE7E.js";
+} from "./chunk-5FXBTGYL.js";
 import {
   getDeployConfig,
   getPortOverride,
@@ -335,68 +337,6 @@ var applyErrorFormatter = (input) => {
   return response;
 };
 
-// src/socketTypes.ts
-var _ioInstance = null;
-var setIoInstance = (io) => {
-  _ioInstance = io;
-};
-var getIoInstance = () => _ioInstance;
-
-// src/runtimeMapsRegistry.ts
-var emptyApi = { apisObject: {}, functionsObject: {} };
-var emptySync = { syncObject: {}, functionsObject: {} };
-var registry3 = createRegistry({
-  getRuntimeApiMaps: () => Promise.resolve(emptyApi),
-  getRuntimeSyncMaps: () => Promise.resolve(emptySync)
-});
-var registerRuntimeMapsProvider = (provider2) => {
-  registry3.register(provider2);
-};
-var isRuntimeMapsProviderRegistered = () => registry3.isRegistered();
-var getRuntimeApiMaps = async () => registry3.get().getRuntimeApiMaps();
-var getRuntimeSyncMaps = async () => registry3.get().getRuntimeSyncMaps();
-
-// src/emailRegistry.ts
-var activeSender = null;
-var registry4 = {};
-var registerEmailSender = (sender) => {
-  activeSender = sender;
-  registry4 = { ...registry4, default: sender };
-};
-var registerEmailSenders = (senders) => {
-  registry4 = { ...senders };
-  if (senders.default) {
-    activeSender = senders.default;
-  }
-};
-var getEmailSender = () => activeSender ?? registry4.default ?? null;
-var getEmailSenderByName = (name) => {
-  if (registry4[name]) return registry4[name];
-  if (name === "default" && activeSender) return activeSender;
-  return null;
-};
-var listEmailSenderNames = () => Object.keys(registry4);
-var isEmailSenderRegistered = () => activeSender !== null || Object.keys(registry4).length > 0;
-
-// src/localeReloader.ts
-var registry5 = createRegistry(null);
-var registerLocaleReloader = (reloader) => {
-  registry5.register(reloader);
-  return reloader;
-};
-var getLocaleReloader = () => registry5.get();
-
-// src/errorTrackerIdentity.ts
-import { AsyncLocalStorage } from "async_hooks";
-var identityStore = new AsyncLocalStorage();
-var runWithErrorTrackerIdentityScope = (fn) => identityStore.run({ user: null }, fn);
-var runWithErrorTrackerIdentity = (user, fn) => identityStore.run({ user }, fn);
-var setCurrentErrorTrackerIdentity = (user) => {
-  const box = identityStore.getStore();
-  if (box) box.user = user;
-};
-var getCurrentErrorTrackerIdentity = () => identityStore.getStore()?.user ?? null;
-
 // src/env.ts
 import { existsSync, readFileSync } from "fs";
 import path from "path";
@@ -510,6 +450,142 @@ var resolveRuntimeMode = () => {
 var isProductionRuntime = () => resolveRuntimeMode() === "production";
 var isTestRuntime = () => resolveRuntimeMode() === "test";
 
+// src/localSocketEnumerationGuard.ts
+var ENUMERATING_MAP_MEMBERS = /* @__PURE__ */ new Set([
+  "values",
+  "keys",
+  "entries",
+  "forEach",
+  "size",
+  Symbol.iterator
+]);
+var PER_INSTANCE_ADAPTER_MEMBERS = /* @__PURE__ */ new Set(["rooms", "sids"]);
+var LocalSocketEnumerationError = class extends Error {
+  constructor(surface) {
+    super(
+      `${surface} only sees the sockets connected to THIS instance. With the Redis adapter every other instance is invisible here, so a fan-out or membership check built on it silently misses them. Use \`getRoomSockets(room, { userId })\` from \`@luckystack/core\` or \`io.in(room).fetchSockets()\` for a cross-instance view, or \`getIoInstance({ raw: true })\` when you deliberately want the local one. (Thrown outside production only.)`
+    );
+    this.name = "LocalSocketEnumerationError";
+  }
+};
+var readBound = (target, prop) => {
+  const value = Reflect.get(target, prop);
+  return typeof value === "function" ? value.bind(target) : value;
+};
+var guardSocketsMap = (map) => new Proxy(map, {
+  get(target, prop) {
+    if (ENUMERATING_MAP_MEMBERS.has(prop)) {
+      throw new LocalSocketEnumerationError("Enumerating `io.sockets.sockets`");
+    }
+    return readBound(target, prop);
+  }
+});
+var guardAdapter = (adapter) => new Proxy(adapter, {
+  get(target, prop) {
+    if (PER_INSTANCE_ADAPTER_MEMBERS.has(prop)) {
+      throw new LocalSocketEnumerationError(`\`io.sockets.adapter.${String(prop)}\``);
+    }
+    return readBound(target, prop);
+  }
+});
+var guardNamespace = (namespace) => new Proxy(namespace, {
+  get(target, prop) {
+    if (prop === "adapter") return guardAdapter(target.adapter);
+    if (prop === "sockets") return guardSocketsMap(target.sockets);
+    return readBound(target, prop);
+  }
+});
+var guardLocalSocketEnumeration = (io) => new Proxy(io, {
+  get(target, prop) {
+    if (prop === "sockets") return guardNamespace(target.sockets);
+    return readBound(target, prop);
+  }
+});
+
+// src/socketTypes.ts
+var _ioInstance = null;
+var _guardedIoInstance = null;
+var setIoInstance = (io) => {
+  _ioInstance = io;
+  _guardedIoInstance = null;
+};
+var getIoInstance = (options) => {
+  if (_ioInstance === null) return null;
+  if (options?.raw === true || isProductionRuntime()) return _ioInstance;
+  _guardedIoInstance ??= guardLocalSocketEnumeration(_ioInstance);
+  return _guardedIoInstance;
+};
+
+// src/roomSockets.ts
+var getRoomSockets = async (room, options = {}) => {
+  const io = getIoInstance({ raw: true });
+  if (io === null) {
+    throw new Error("getRoomSockets: no Socket.io server is registered (setIoInstance was never called), so the sockets of a room cannot be resolved.");
+  }
+  const logicalRoom = room.trim();
+  if (logicalRoom === "") {
+    throw new Error("getRoomSockets: `room` must be a non-empty room code.");
+  }
+  if (logicalRoom === "all") return io.fetchSockets();
+  const physicalRoom = formatRoomName(logicalRoom, { purpose: "broadcast", userId: options.userId ?? null });
+  return io.in(physicalRoom).fetchSockets();
+};
+
+// src/runtimeMapsRegistry.ts
+var emptyApi = { apisObject: {}, functionsObject: {} };
+var emptySync = { syncObject: {}, functionsObject: {} };
+var registry3 = createRegistry({
+  getRuntimeApiMaps: () => Promise.resolve(emptyApi),
+  getRuntimeSyncMaps: () => Promise.resolve(emptySync)
+});
+var registerRuntimeMapsProvider = (provider2) => {
+  registry3.register(provider2);
+};
+var isRuntimeMapsProviderRegistered = () => registry3.isRegistered();
+var getRuntimeApiMaps = async () => registry3.get().getRuntimeApiMaps();
+var getRuntimeSyncMaps = async () => registry3.get().getRuntimeSyncMaps();
+
+// src/emailRegistry.ts
+var activeSender = null;
+var registry4 = {};
+var registerEmailSender = (sender) => {
+  activeSender = sender;
+  registry4 = { ...registry4, default: sender };
+};
+var registerEmailSenders = (senders) => {
+  registry4 = { ...senders };
+  if (senders.default) {
+    activeSender = senders.default;
+  }
+};
+var getEmailSender = () => activeSender ?? registry4.default ?? null;
+var getEmailSenderByName = (name) => {
+  if (registry4[name]) return registry4[name];
+  if (name === "default" && activeSender) return activeSender;
+  return null;
+};
+var listEmailSenderNames = () => Object.keys(registry4);
+var isEmailSenderRegistered = () => activeSender !== null || Object.keys(registry4).length > 0;
+
+// src/localeReloader.ts
+var registry5 = createRegistry(null);
+var registerLocaleReloader = (reloader) => {
+  registry5.register(reloader);
+  return reloader;
+};
+var getLocaleReloader = () => registry5.get();
+
+// src/errorTrackerIdentity.ts
+import { AsyncLocalStorage } from "async_hooks";
+var identityStore = new AsyncLocalStorage();
+var runWithErrorTrackerIdentityScope = (fn) => identityStore.run({ user: null }, fn);
+var runWithErrorTrackerIdentity = (user, fn) => identityStore.run({ user }, fn);
+var setCurrentErrorTrackerIdentity = (user) => {
+  const box = identityStore.getStore();
+  if (box) box.user = user;
+};
+var getCurrentErrorTrackerIdentity = () => identityStore.getStore()?.user ?? null;
+
 // src/db.ts
 import { createRequire as createRequire2 } from "module";
 
@@ -865,17 +941,6 @@ var releaseLease = async (name, token) => {
 
 // src/socketRedisAdapter.ts
 import { createAdapter } from "@socket.io/redis-adapter";
-var attachSocketRedisAdapter = (io, options = {}) => {
-  const pubClient = options.pubClient ?? redis.duplicate();
-  const subClient = options.subClient ?? redis.duplicate();
-  pubClient.on("error", (err) => {
-    getLogger().error("[socket-redis-adapter] pub client error", err);
-  });
-  subClient.on("error", (err) => {
-    getLogger().error("[socket-redis-adapter] sub client error", err);
-  });
-  io.adapter(createAdapter(pubClient, subClient, options.adapterOptions));
-};
 
 // src/bootUuid.ts
 import { randomUUID } from "crypto";
@@ -936,6 +1001,23 @@ var startBootUuidHeartbeat = (envKey) => {
   };
 };
 
+// src/socketRedisAdapter.ts
+var resolveSocketAdapterKey = () => `${getProjectName()}:${resolveEnvKey()}:socket.io`;
+var attachSocketRedisAdapter = (io, options = {}) => {
+  const pubClient = options.pubClient ?? redis.duplicate();
+  const subClient = options.subClient ?? redis.duplicate();
+  pubClient.on("error", (err) => {
+    getLogger().error("[socket-redis-adapter] pub client error", err);
+  });
+  subClient.on("error", (err) => {
+    getLogger().error("[socket-redis-adapter] sub client error", err);
+  });
+  io.adapter(createAdapter(pubClient, subClient, {
+    ...options.adapterOptions,
+    key: options.adapterOptions?.key ?? resolveSocketAdapterKey()
+  }));
+};
+
 // src/synchronizedEnvHashes.ts
 import { createHash, createHmac } from "crypto";
 var plainHash = (value) => createHash("sha256").update(value).digest("hex");
@@ -2257,9 +2339,11 @@ export {
   GENERATED_API_SCHEMAS_PATH,
   GENERATED_SOCKET_TYPES_PATH,
   INVALID_ERROR_RESPONSE_CODE,
+  LocalSocketEnumerationError,
   PUBLIC_DIR,
   REDACTED_PLACEHOLDER,
   ROOT_DIR,
+  ROUTED_DATA_QUERY_KEY,
   SERVER_DIR,
   SERVER_FUNCTIONS_DIR,
   SHARED_DIR,
@@ -2286,6 +2370,7 @@ export {
   buildGetJoinedRoomsResponseEventName,
   buildJoinRoomResponseEventName,
   buildLeaveRoomResponseEventName,
+  buildRoutedGetUrl,
   buildSyncProgressEventName,
   buildSyncResponseEventName,
   captureException,
@@ -2370,6 +2455,7 @@ export {
   getRegisteredApiMethod,
   getRegisteredSessionProvider,
   getRoomNameFormatter,
+  getRoomSockets,
   getRuntimeApiMaps,
   getRuntimeSyncMaps,
   getServerDir,
@@ -2494,6 +2580,7 @@ export {
   resolveHealthHashConfig,
   resolveHealthHashConfigFromDescriptor,
   resolveRuntimeMode,
+  resolveSocketAdapterKey,
   runWithErrorTrackerIdentity,
   runWithErrorTrackerIdentityScope,
   sanitizeErrorString,