@luckystack/server 0.7.6 → 0.8.1

package/CHANGELOG.md

@@ -7,6 +7,18 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.8.1] - 2026-07-27
+
+### Fixed
+
+- Production route maps, dev-tool startup, cookie security, bootstrap checks and port auto-increment now follow `NODE_ENV`; named topology environments remain available for health and routing identity.
+
+## [0.8.0] - 2026-07-27
+
+### Added
+
+- Routed GET API calls can carry a lossless typed payload through the reserved `__luckystack_data` query value while public key-per-query callers remain compatible.
+
 ## [0.7.6] - 2026-07-23
 
 ### Fixed

package/dist/index.d.ts

@@ -110,7 +110,7 @@ interface CreateLuckyStackServerOptions {
     customRoutes?: CustomRouteHandler;
     /**
      * Enable dev-mode tooling (devkit hot reload, REPL, console init).
-     * Defaults to `resolveEnvKey() !== 'production'`.
+     * Defaults to `resolveRuntimeMode() !== 'production'` (NODE_ENV-based).
      */
     enableDevTools?: boolean;
     /**

package/dist/index.js

@@ -9,7 +9,7 @@ import {
 
 // src/createServer.ts
 import http from "http";
-import { registerBindAddress, registerBoundAddress, writeBootUuid, startBootUuidHeartbeat, getLogger as getLogger13, getProjectConfig as getProjectConfig15, tryCatch as tryCatch10, tryCatchSync as tryCatchSync2, resolveEnvKey as resolveEnvKey5, dispatchHook as dispatchHook8 } from "@luckystack/core";
+import { registerBindAddress, registerBoundAddress, writeBootUuid, startBootUuidHeartbeat, getLogger as getLogger13, getProjectConfig as getProjectConfig15, tryCatch as tryCatch10, tryCatchSync as tryCatchSync3, resolveRuntimeMode, dispatchHook as dispatchHook8 } from "@luckystack/core";
 
 // src/httpHandler.ts
 import { randomUUID } from "crypto";
@@ -24,7 +24,7 @@ import {
   normalizeOrigin,
   readSession as readSession3,
   tryCatch as tryCatch7,
-  tryCatchSync
+  tryCatchSync as tryCatchSync2
 } from "@luckystack/core";
 
 // src/logSanitize.ts
@@ -475,11 +475,11 @@ import {
 } from "@luckystack/core";
 
 // src/httpRoutes/sessionCookie.ts
-import { resolveEnvKey as resolveEnvKey2 } from "@luckystack/core";
+import { isProductionRuntime } from "@luckystack/core";
 var resolveCookieSecure = (sessionCookieSecure, secureEnv) => {
   if (sessionCookieSecure !== void 0) return sessionCookieSecure;
   if (secureEnv === "true") return true;
-  return resolveEnvKey2() === "production";
+  return isProductionRuntime();
 };
 
 // src/httpRoutes/authApiRoute.ts
@@ -921,7 +921,8 @@ import {
   dispatchHook as dispatchHook3,
   extractTokenFromRequest,
   getLogger as getLogger4,
-  tryCatch as tryCatch4
+  tryCatch as tryCatch4,
+  tryCatchSync
 } from "@luckystack/core";
 import { handleHttpApiRequest } from "@luckystack/api";
 
@@ -1038,8 +1039,25 @@ var handleApiRoute = async ({
       res.end(JSON.stringify(response));
       return true;
     }
-    const apiData = typeof params === "object" ? { ...params } : {};
+    let apiData = typeof params === "object" ? { ...params } : {};
     delete apiData.stream;
+    const routedData = apiData.__luckystack_data;
+    if (typeof routedData === "string") {
+      const [parseError, parsed] = tryCatchSync(() => JSON.parse(routedData));
+      if (parseError || parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
+        const response = {
+          status: "error",
+          httpStatus: 400,
+          message: "api.invalidRequestFormat",
+          errorCode: "api.invalidRequestFormat"
+        };
+        res.setHeader("Content-Type", "application/json");
+        res.writeHead(400);
+        res.end(JSON.stringify(response));
+        return true;
+      }
+      apiData = { ...parsed };
+    }
     const requesterIp = resolveRequesterIp(req);
     const result = await handleHttpApiRequest({
       name: apiName,
@@ -1390,7 +1408,7 @@ var setSecurityHeaders = (req, res, origin) => {
   res.setHeader("X-Content-Type-Options", securityHeaders.contentTypeOptions);
   const builder = getSecurityHeadersBuilder();
   if (builder) {
-    const [error] = tryCatchSync(() => {
+    const [error] = tryCatchSync2(() => {
       const custom = builder(req);
       if (custom) {
         for (const [name, value] of Object.entries(custom)) {
@@ -1509,7 +1527,7 @@ var handleHttpRequestInner = async (req, res, options) => {
   );
   const url = req.url ?? "/";
   const [routePathRaw, queryStringRaw] = url.split("?");
-  const [decodeError, decodedPath] = tryCatchSync(() => decodeURIComponent(routePathRaw ?? "/"));
+  const [decodeError, decodedPath] = tryCatchSync2(() => decodeURIComponent(routePathRaw ?? "/"));
   if (decodeError || decodedPath === null) {
     res.statusCode = 400;
     res.setHeader("Content-Type", "text/plain");
@@ -2002,7 +2020,7 @@ import {
   isLocalizedNormalizerRegistered,
   isProjectConfigRegistered,
   isRuntimeMapsProviderRegistered,
-  resolveEnvKey as resolveEnvKey3
+  isProductionRuntime as isProductionRuntime2
 } from "@luckystack/core";
 var verifyBootstrap = async (requirements = {}) => {
   const missing = [];
@@ -2041,7 +2059,7 @@ var verifyBootstrap = async (requirements = {}) => {
     }
   }
   if (!isRuntimeMapsProviderRegistered()) {
-    if (resolveEnvKey3() === "production") {
+    if (isProductionRuntime2()) {
       missing.push(
         "RuntimeMapsProvider \u2014 call `registerRuntimeMapsProvider({...})` from `server/prod/runtimeMaps.ts`. Without it, every api/sync request returns notFound."
       );
@@ -2052,7 +2070,7 @@ var verifyBootstrap = async (requirements = {}) => {
     }
   }
   if (!isLocalizedNormalizerRegistered()) {
-    if (resolveEnvKey3() === "production") {
+    if (isProductionRuntime2()) {
       missing.push(
         "LocalizedNormalizer \u2014 call `registerLocalizedNormalizer({...})` from your bootstrap. Without it, error response messages will be the raw errorCode (no i18n)."
       );
@@ -2095,7 +2113,7 @@ var verifyBootstrap = async (requirements = {}) => {
 import {
   getLogger as getLogger10,
   registerRuntimeMapsProvider,
-  resolveEnvKey as resolveEnvKey4
+  isProductionRuntime as isProductionRuntime3
 } from "@luckystack/core";
 var emptyRuntimeMaps = {
   apisObject: {},
@@ -2145,7 +2163,7 @@ var mergeInto = (target, source, kind, fromPreset, keyOrigin) => {
     target[key] = source[key];
   }
 };
-var isProduction = () => resolveEnvKey4() === "production";
+var isProduction = () => isProductionRuntime3();
 var createProdRuntimeMapsProvider = (options) => {
   let prodMapsPromise = null;
   let devkitModulePromise = null;
@@ -2353,9 +2371,9 @@ var initDevTools = async () => {
 };
 var listenLuckyStackServer = (httpServer, ip, port, callback) => new Promise((resolve, reject) => {
   const startPort = normalizeServerPort(port);
-  const environmentKey = resolveEnvKey5();
-  const production = environmentKey === "production";
-  const test = environmentKey === "test";
+  const runtimeMode = resolveRuntimeMode();
+  const production = runtimeMode === "production";
+  const test = runtimeMode === "test";
   const autoIncrementEnv = (process.env.SERVER_PORT_AUTO_INCREMENT ?? "").toLowerCase();
   let autoIncrement;
   if (["0", "false"].includes(autoIncrementEnv)) autoIncrement = false;
@@ -2398,8 +2416,8 @@ var listenLuckyStackServer = (httpServer, ip, port, callback) => new Promise((re
         process.once("exit", clearDevServerInfo);
       }
       if (attemptPort !== startPort && !production) {
-        const configuredCallbackBase = tryCatchSync2(() => getProjectConfig15().oauthCallbackBase)[1] ?? "";
-        const callbackPort = tryCatchSync2(() => {
+        const configuredCallbackBase = tryCatchSync3(() => getProjectConfig15().oauthCallbackBase)[1] ?? "";
+        const callbackPort = tryCatchSync3(() => {
           const callbackUrl = new URL(configuredCallbackBase);
           return callbackUrl.port || (callbackUrl.protocol === "https:" ? "443" : "80");
         })[1] ?? "";
@@ -2438,7 +2456,7 @@ var createLuckyStackServer = async (options = {}) => {
     envPort: process.env.SERVER_PORT
   });
   const ip = options.ip ?? process.env.SERVER_IP ?? "127.0.0.1";
-  const enableDevTools = options.enableDevTools ?? resolveEnvKey5() !== "production";
+  const enableDevTools = options.enableDevTools ?? resolveRuntimeMode() !== "production";
   registerBindAddress({ ip, port });
   if (enableDevTools) {
     await initDevTools();