@apifuse/provider-sdk 2.2.0-beta.62 → 2.2.0-beta.63

package/src/server/index.ts

@@ -1,3 +1,5 @@
+export type { ProviderLocaleCatalogMap } from "../i18n/catalog.js";
+export type { ProviderLocale, ProviderLocaleCatalog } from "../i18n/keys.js";
 export type {
 	ProxyCacheStatus,
 	ProxyProtocol,
@@ -23,6 +25,19 @@ export {
 	type TelemetryKey,
 	type TenantNeutral,
 } from "../runtime/request-telemetry.js";
+export {
+	OcrTelemetryCollector,
+	bindOcrTelemetry,
+	type OcrTelemetryBackend,
+	type OcrTelemetryEngine,
+	type OcrTelemetryErrorCode,
+	type OcrTelemetryEvent,
+	type OcrTelemetryModel,
+	type OcrTelemetryFinishReason,
+	type OcrTelemetryHeaderPayload,
+	type OcrTelemetryLogPayload,
+	type OcrTelemetrySink,
+} from "../runtime/ocr-telemetry.js";
 export {
 	ResolverTelemetryCollector,
 	type ResolverAttemptSample,
@@ -43,8 +58,46 @@ export {
 	type ResolverTelemetrySink,
 	type ResolverVendorAttemptTelemetryEvent,
 } from "../runtime/resolver-telemetry.js";
+export {
+	StealthTelemetryCollector,
+	type StealthTelemetryAttemptEvent,
+	type StealthTelemetryAttemptKind,
+	type StealthTelemetryAttemptSample,
+	type StealthTelemetryDiagnostics,
+	type StealthTelemetryErrorCode,
+	type StealthTelemetryHeaderPayload,
+	type StealthTelemetryLogPayload,
+	type StealthTelemetryRequestClass,
+	type StealthTelemetrySbsdEvent,
+	type StealthTelemetrySbsdOutcome,
+	type StealthTelemetrySink,
+} from "../runtime/stealth-telemetry.js";
+export {
+	SttTelemetryCollector,
+	bindSttTelemetry,
+	type SttTelemetryBackend,
+	type SttTelemetryEngine,
+	type SttTelemetryErrorCode,
+	type SttTelemetryEvent,
+	type SttTelemetryModel,
+	type SttTelemetryHeaderPayload,
+	type SttTelemetryLogPayload,
+	type SttTelemetrySink,
+} from "../runtime/stt-telemetry.js";
+
+export {
+	BrowserTelemetryCollector,
+	type BrowserTelemetryErrorCode,
+	type BrowserTelemetryHeaderPayload,
+	type BrowserTelemetryLogPayload,
+	type BrowserTelemetryPoolAcquireOutcome,
+	type BrowserTelemetrySink,
+	type BrowserTelemetrySampleName,
+	type BrowserTelemetryEngine,
+} from "../runtime/browser-telemetry.js";
 export type { ResolverVendorUnavailableReason } from "../runtime/resolver-vendors/types.js";
 export type { Span, TraceContext } from "../runtime/trace.js";
+export type { StealthBrowser, StealthOS, StealthProfileDescriptor } from "../types.js";
 export {
 	createServerApp,
 	createServerAppAsync,

package/src/server/sdk-version.ts

@@ -0,0 +1,22 @@
+import { readFileSync } from "node:fs";
+
+/** Published @apifuse/provider-sdk version, read from the package manifest; "unknown" when unreadable. */
+export function resolveSdkVersion(): string {
+	try {
+		const packageJsonUrl = new URL("../../package.json", import.meta.url);
+		const parsed: unknown = JSON.parse(readFileSync(packageJsonUrl, "utf8"));
+		if (
+			parsed &&
+			typeof parsed === "object" &&
+			"version" in parsed &&
+			typeof (parsed as { version: unknown }).version === "string"
+		) {
+			return (parsed as { version: string }).version;
+		}
+	} catch {
+		// fall through to unknown
+	}
+	return "unknown";
+}
+
+export const SDK_VERSION = resolveSdkVersion();

package/src/server/self-test.ts

@@ -1,7 +1,7 @@
 import { createHash, randomUUID } from "node:crypto";
-import { readFileSync } from "node:fs";
 
 import { TURN_KINDS } from "../auth-turn/index.js";
+import { SDK_VERSION } from "./sdk-version.js";
 
 import { type Context, Hono } from "hono";
 import { z } from "zod";
@@ -183,26 +183,6 @@ export interface SelfTestAppOptions {
 	logger?: (event: SelfTestCancellationLogEvent) => void;
 }
 
-function resolveSdkVersion(): string {
-	try {
-		const packageJsonUrl = new URL("../../package.json", import.meta.url);
-		const parsed: unknown = JSON.parse(readFileSync(packageJsonUrl, "utf8"));
-		if (
-			parsed &&
-			typeof parsed === "object" &&
-			"version" in parsed &&
-			typeof (parsed as { version: unknown }).version === "string"
-		) {
-			return (parsed as { version: string }).version;
-		}
-	} catch {
-		// fall through to unknown
-	}
-	return "unknown";
-}
-
-const SDK_VERSION = resolveSdkVersion();
-
 type AnyHealthCheckSuite = HealthCheckSuite<unknown, unknown>;
 type AnyHealthCheckCase = HealthCheckCase<unknown, unknown>;
 

package/src/server/sensitive-values.ts

@@ -12,6 +12,10 @@ import {
 	ENGINE_OWNED_PROXY_CREDENTIAL_ENV_NAMES,
 	ENGINE_OWNED_RESOLVER_CREDENTIAL_ENV_NAMES,
 } from "../engine.js";
+import {
+	REMOTE_ENGINE_CLIENT_API_KEY_ENV,
+	REMOTE_ENGINE_CLIENT_URL_ENV,
+} from "../runtime/engine-mode.js";
 import { APIFUSE__CACHE__KEY_PEPPER_ENV } from "../runtime/cache.js";
 import { APIFUSE__ENGINE__CEREMONY_LEASE_KEY } from "../runtime/egress-lease.js";
 import {
@@ -45,6 +49,7 @@ export const DIAGNOSTIC_SENSITIVE_SOURCE_KINDS = [
 	"engineProxyCredentials",
 	"engineSolverKeys",
 	"engineCeremonyLeaseCredentials",
+	"engineClientCredentials",
 	"ocrCredentials",
 	"sttCredentials",
 	"cdpCredentials",
@@ -120,6 +125,15 @@ export function collectDiagnosticSensitiveValues(
 		// These are the resolver-config API keys after #251's engine credential projection.
 		engineSolverKeys: () => resolvedEnvValues(ENGINE_OWNED_RESOLVER_CREDENTIAL_ENV_NAMES),
 		engineCeremonyLeaseCredentials: () => resolvedEnvValues([APIFUSE__ENGINE__CEREMONY_LEASE_KEY]),
+		// Remote engine client credential (projected before the ADR-0011 flip). The
+		// endpoint itself is an internal service URL, so only credentials embedded
+		// in it are inventoried, not the whole URL.
+		engineClientCredentials: () => [
+			...resolvedEnvValues([REMOTE_ENGINE_CLIENT_API_KEY_ENV]),
+			...resolvedStringVariants(env[REMOTE_ENGINE_CLIENT_URL_ENV]).flatMap((url) =>
+				urlCredentialComponents(url, { includePathAndQuery: false }),
+			),
+		],
 		ocrCredentials: () =>
 			resolvedEnvValues([APIFUSE__OCR__CLOUDFLARE_API_TOKEN_ENV, APIFUSE__OCR__API_KEY_ENV]),
 		sttCredentials: () => resolvedEnvValues([APIFUSE__STT__CLOUDFLARE_API_TOKEN_ENV]),