@camstack/addon-import-alexa 0.2.167 → 0.2.168

package/CHANGELOG.md

@@ -7,6 +7,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.2.168] - 2026-10-29
+
+### Changed
+
+- Alexa sign-in trace now records the proxy's first request to Amazon (parameter names and whether OAuth parameters are present) and the browser family, to diagnose logins that end without an authorization code.
+
 ## [0.2.167] - 2026-10-29
 
 ### Changed

package/dist/addon.js

@@ -55191,11 +55191,13 @@ var ImageContractSchema = object({
 * The shell verdict (see {@link WrapperKindSchema}) with the proofs that
 * produced it.
 *
-* There is deliberately NO `canSelfUpdate` and no apply action: a wrapper
-* update is an ANNOUNCEMENT. The notification body carries the exact command
-* for a `docker` shell and says the app restarts into the new build for
-* `electron`, and that sentence is chosen from `kind` alone — a boolean
-* nothing reads is the defect this repo keeps paying for.
+* There is deliberately NO `canSelfUpdate` boolean: a wrapper update is an
+* ANNOUNCEMENT. The notification body carries the exact command for a `docker`
+* shell and says the app restarts into the new build for `electron`, and that
+* sentence is chosen from `kind` alone — a boolean nothing reads is the defect
+* this repo keeps paying for. The one shell that CAN be acted on is the
+* Electron app, and only through `installDesktopUpdate` (see
+* {@link DesktopAppStatusSchema} for what the node reads from the app first).
 */
 var WrapperIdentitySchema = object({
 	kind: _enum([
@@ -55243,6 +55245,49 @@ var ServerRollbackInfoSchema = object({
 	reason: string()
 });
 /**
+* What the native desktop app (Electron) that hosts this node says about
+* itself, read from `<dataDir>/server-root/desktop-app-state.json` (ADR-0971).
+* Absent on the status = no desktop app, or it never wrote the file.
+*
+* `stale` is the honest answer to an app that stopped writing (closed, hung,
+* crashed): the update facts are then the LAST ones known, not current ones,
+* and a consumer must not read `update.available: false` from a stale record
+* as "no update". `stateAtMs` is when the app last wrote.
+*/
+var DesktopAppStatusSchema = object({
+	/** The Electron app's own version (not the node closure's). */
+	version: string(),
+	update: object({
+		available: boolean(),
+		/** The new build is downloaded and `installDesktopUpdate` can apply it. */
+		downloaded: boolean(),
+		version: string().nullable(),
+		checking: boolean(),
+		/** Why the app's last update check produced no answer; `null` when it did. */
+		error: string().nullable()
+	}),
+	stateAtMs: number(),
+	stale: boolean()
+});
+/**
+* Why `installDesktopUpdate` did nothing. Stable names a UI maps to a sentence:
+*  - `not-electron`   — this node does not run inside the desktop app.
+*  - `no-app-state`   — the app never published its state (or the file is unreadable).
+*  - `app-state-stale` — the app stopped writing; it is probably not running.
+*  - `not-downloaded` — no update is downloaded yet; nothing to install.
+*/
+var InstallDesktopUpdateReasonSchema = _enum([
+	"not-electron",
+	"no-app-state",
+	"app-state-stale",
+	"not-downloaded"
+]);
+var InstallDesktopUpdateResultSchema = object({
+	accepted: boolean(),
+	/** Non-null exactly when `accepted` is false. */
+	reason: InstallDesktopUpdateReasonSchema.nullable()
+});
+/**
 * The runner boot check (D877): the runners this node PLANNED (hub: one per
 * `resolveRunnerId` over its forked addons; agent: the runners its process
 * service holds, because only the hub plans) against the states the process
@@ -55346,7 +55391,12 @@ var ServerPackageStatusSchema = object({
 	* on a provider that predates it. Absent is "not checked yet", never "all
 	* well": a consumer that needs the answer treats it as pending.
 	*/
-	runners: RunnerBootCheckSchema.optional()
+	runners: RunnerBootCheckSchema.optional(),
+	/**
+	* The desktop app hosting this node (see {@link DesktopAppStatusSchema}).
+	* Optional for version skew AND because most nodes have no desktop app.
+	*/
+	desktopApp: DesktopAppStatusSchema.optional()
 });
 var ServerUpdateCheckResultSchema = object({
 	packageName: string(),
@@ -55451,6 +55501,9 @@ method(_void(), ServerPackageStatusSchema, { auth: "admin" }), method(_void(), S
 	kind: "mutation",
 	auth: "admin",
 	timeoutMs: 16 * 6e4
+}), method(_void(), InstallDesktopUpdateResultSchema, {
+	kind: "mutation",
+	auth: "admin"
 }), method(_void(), ServerUpdateActionResultSchema, {
 	kind: "mutation",
 	auth: "admin"
@@ -81212,6 +81265,13 @@ Object.freeze({
 		access: "view",
 		role: "admin"
 	},
+	"serverManagement.installDesktopUpdate": {
+		capName: "server-management",
+		capScope: "system",
+		addonId: null,
+		access: "create",
+		role: "admin"
+	},
 	"serverManagement.restartServer": {
 		capName: "server-management",
 		capScope: "system",
@@ -134100,7 +134160,9 @@ function formatUrlParams(url) {
 * redirect target — always WITHOUT a query string or fragment. Any line that is
 * not one of the known step lines yields `null` and is never traced.
 */
-var ROUTER_RE = /^Router: (\S+) \/ ([A-Z]+) \//;
+var ROUTER_RE = /^Router: (\S+) \/ ([A-Z]+) \/ (.*)$/;
+var INITIAL_REQUEST_RE = /^Alexa-Cookie: Initial Page Request: (\S+)$/;
+var USER_AGENT_RE = /"user-agent":"([^"]*)"/i;
 var PROXY_REQUEST_RE = /^Alexa-Cookie: Proxy-Request: ([A-Z]+) (\S+)$/;
 var PROXY_RESPONSE_RE = /^Alexa-Cookie: Proxy Response from Host: (\S+)$/;
 var REDIRECT_ORIGINAL_RE = /^Redirect: Original Location ----> (\S+)$/;
@@ -134114,9 +134176,20 @@ function stripQuery(target) {
 function withParams(target) {
 	return `${stripQuery(target)} ${formatUrlParams(target)}`;
 }
+/** Browser family of the header block's user-agent; the string itself is never kept. */
+function userAgentFamily(headers) {
+	const ua = USER_AGENT_RE.exec(headers)?.[1];
+	if (ua === void 0) return "none";
+	if (/CriOS|Chrome|Chromium|Edg\//.test(ua)) return "chrome";
+	if (/Firefox|FxiOS/.test(ua)) return "firefox";
+	if (/Safari/.test(ua)) return "safari";
+	return "other";
+}
 function sanitizeProxyTraceLine(line) {
 	const router = ROUTER_RE.exec(line);
-	if (router !== null) return `router ${router[2]} ${withParams(router[1] ?? "")}`;
+	if (router !== null) return `router ${router[2]} ${withParams(router[1] ?? "")} ua=${userAgentFamily(router[3] ?? "")}`;
+	const initial = INITIAL_REQUEST_RE.exec(line);
+	if (initial !== null) return `initial-request ${withParams(initial[1] ?? "")}`;
 	const request = PROXY_REQUEST_RE.exec(line);
 	if (request !== null) return `proxy-request ${request[1]} ${withParams(request[2] ?? "")}`;
 	const response = PROXY_RESPONSE_RE.exec(line);

package/dist/addon.mjs

@@ -55190,11 +55190,13 @@ var ImageContractSchema = object({
 * The shell verdict (see {@link WrapperKindSchema}) with the proofs that
 * produced it.
 *
-* There is deliberately NO `canSelfUpdate` and no apply action: a wrapper
-* update is an ANNOUNCEMENT. The notification body carries the exact command
-* for a `docker` shell and says the app restarts into the new build for
-* `electron`, and that sentence is chosen from `kind` alone — a boolean
-* nothing reads is the defect this repo keeps paying for.
+* There is deliberately NO `canSelfUpdate` boolean: a wrapper update is an
+* ANNOUNCEMENT. The notification body carries the exact command for a `docker`
+* shell and says the app restarts into the new build for `electron`, and that
+* sentence is chosen from `kind` alone — a boolean nothing reads is the defect
+* this repo keeps paying for. The one shell that CAN be acted on is the
+* Electron app, and only through `installDesktopUpdate` (see
+* {@link DesktopAppStatusSchema} for what the node reads from the app first).
 */
 var WrapperIdentitySchema = object({
 	kind: _enum([
@@ -55242,6 +55244,49 @@ var ServerRollbackInfoSchema = object({
 	reason: string()
 });
 /**
+* What the native desktop app (Electron) that hosts this node says about
+* itself, read from `<dataDir>/server-root/desktop-app-state.json` (ADR-0971).
+* Absent on the status = no desktop app, or it never wrote the file.
+*
+* `stale` is the honest answer to an app that stopped writing (closed, hung,
+* crashed): the update facts are then the LAST ones known, not current ones,
+* and a consumer must not read `update.available: false` from a stale record
+* as "no update". `stateAtMs` is when the app last wrote.
+*/
+var DesktopAppStatusSchema = object({
+	/** The Electron app's own version (not the node closure's). */
+	version: string(),
+	update: object({
+		available: boolean(),
+		/** The new build is downloaded and `installDesktopUpdate` can apply it. */
+		downloaded: boolean(),
+		version: string().nullable(),
+		checking: boolean(),
+		/** Why the app's last update check produced no answer; `null` when it did. */
+		error: string().nullable()
+	}),
+	stateAtMs: number(),
+	stale: boolean()
+});
+/**
+* Why `installDesktopUpdate` did nothing. Stable names a UI maps to a sentence:
+*  - `not-electron`   — this node does not run inside the desktop app.
+*  - `no-app-state`   — the app never published its state (or the file is unreadable).
+*  - `app-state-stale` — the app stopped writing; it is probably not running.
+*  - `not-downloaded` — no update is downloaded yet; nothing to install.
+*/
+var InstallDesktopUpdateReasonSchema = _enum([
+	"not-electron",
+	"no-app-state",
+	"app-state-stale",
+	"not-downloaded"
+]);
+var InstallDesktopUpdateResultSchema = object({
+	accepted: boolean(),
+	/** Non-null exactly when `accepted` is false. */
+	reason: InstallDesktopUpdateReasonSchema.nullable()
+});
+/**
 * The runner boot check (D877): the runners this node PLANNED (hub: one per
 * `resolveRunnerId` over its forked addons; agent: the runners its process
 * service holds, because only the hub plans) against the states the process
@@ -55345,7 +55390,12 @@ var ServerPackageStatusSchema = object({
 	* on a provider that predates it. Absent is "not checked yet", never "all
 	* well": a consumer that needs the answer treats it as pending.
 	*/
-	runners: RunnerBootCheckSchema.optional()
+	runners: RunnerBootCheckSchema.optional(),
+	/**
+	* The desktop app hosting this node (see {@link DesktopAppStatusSchema}).
+	* Optional for version skew AND because most nodes have no desktop app.
+	*/
+	desktopApp: DesktopAppStatusSchema.optional()
 });
 var ServerUpdateCheckResultSchema = object({
 	packageName: string(),
@@ -55450,6 +55500,9 @@ method(_void(), ServerPackageStatusSchema, { auth: "admin" }), method(_void(), S
 	kind: "mutation",
 	auth: "admin",
 	timeoutMs: 16 * 6e4
+}), method(_void(), InstallDesktopUpdateResultSchema, {
+	kind: "mutation",
+	auth: "admin"
 }), method(_void(), ServerUpdateActionResultSchema, {
 	kind: "mutation",
 	auth: "admin"
@@ -81211,6 +81264,13 @@ Object.freeze({
 		access: "view",
 		role: "admin"
 	},
+	"serverManagement.installDesktopUpdate": {
+		capName: "server-management",
+		capScope: "system",
+		addonId: null,
+		access: "create",
+		role: "admin"
+	},
 	"serverManagement.restartServer": {
 		capName: "server-management",
 		capScope: "system",
@@ -134099,7 +134159,9 @@ function formatUrlParams(url) {
 * redirect target — always WITHOUT a query string or fragment. Any line that is
 * not one of the known step lines yields `null` and is never traced.
 */
-var ROUTER_RE = /^Router: (\S+) \/ ([A-Z]+) \//;
+var ROUTER_RE = /^Router: (\S+) \/ ([A-Z]+) \/ (.*)$/;
+var INITIAL_REQUEST_RE = /^Alexa-Cookie: Initial Page Request: (\S+)$/;
+var USER_AGENT_RE = /"user-agent":"([^"]*)"/i;
 var PROXY_REQUEST_RE = /^Alexa-Cookie: Proxy-Request: ([A-Z]+) (\S+)$/;
 var PROXY_RESPONSE_RE = /^Alexa-Cookie: Proxy Response from Host: (\S+)$/;
 var REDIRECT_ORIGINAL_RE = /^Redirect: Original Location ----> (\S+)$/;
@@ -134113,9 +134175,20 @@ function stripQuery(target) {
 function withParams(target) {
 	return `${stripQuery(target)} ${formatUrlParams(target)}`;
 }
+/** Browser family of the header block's user-agent; the string itself is never kept. */
+function userAgentFamily(headers) {
+	const ua = USER_AGENT_RE.exec(headers)?.[1];
+	if (ua === void 0) return "none";
+	if (/CriOS|Chrome|Chromium|Edg\//.test(ua)) return "chrome";
+	if (/Firefox|FxiOS/.test(ua)) return "firefox";
+	if (/Safari/.test(ua)) return "safari";
+	return "other";
+}
 function sanitizeProxyTraceLine(line) {
 	const router = ROUTER_RE.exec(line);
-	if (router !== null) return `router ${router[2]} ${withParams(router[1] ?? "")}`;
+	if (router !== null) return `router ${router[2]} ${withParams(router[1] ?? "")} ua=${userAgentFamily(router[3] ?? "")}`;
+	const initial = INITIAL_REQUEST_RE.exec(line);
+	if (initial !== null) return `initial-request ${withParams(initial[1] ?? "")}`;
 	const request = PROXY_REQUEST_RE.exec(line);
 	if (request !== null) return `proxy-request ${request[1]} ${withParams(request[2] ?? "")}`;
 	const response = PROXY_RESPONSE_RE.exec(line);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/addon-import-alexa",
-  "version": "0.2.167",
+  "version": "0.2.168",
   "description": "Alexa device-import provider for CamStack — imports the smart-home devices in a user's Alexa account via the unofficial alexa-remote2 cookie/token client (the inverse of the Alexa exporter)",
   "keywords": [
     "camstack",